Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB8EA3244B4911F082AB047EC4F9AE02.roa
File: EB8EA3244B4911F082AB047EC4F9AE02.roa (raw, json)
Hash identifier: KGLfGBKjzpexN0Wh/l6+vgfi5BxbDjLmtDhinYmYfvc=
Subject key identifier: 80:59:92:E0:03:3F:E9:05:7A:2E:E4:3F:69:71:26:DB:95:BC:F5:4E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FAFA
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB8EA3244B4911F082AB047EC4F9AE02.roa
Signing time: Sat 22 Aug 2026 06:26:12 +0000
ROA not before: Sat 22 Aug 2026 06:26:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45582
IP address blocks: 27.116.16.0/21 maxlen: 24
45.112.184.0/24 maxlen: 24
45.112.185.0/24 maxlen: 24
45.112.186.0/24 maxlen: 24
45.112.187.0/24 maxlen: 24
45.118.72.0/22 maxlen: 24
45.249.48.0/24 maxlen: 24
45.249.50.0/24 maxlen: 24
103.10.132.0/22 maxlen: 24
103.22.172.0/22 maxlen: 24
103.52.36.0/22 maxlen: 24
103.124.28.0/23 maxlen: 24
103.126.42.0/23 maxlen: 24
103.178.208.0/23 maxlen: 24
103.196.4.0/22 maxlen: 24
103.211.168.0/23 maxlen: 23
103.211.168.0/24 maxlen: 24
103.211.169.0/24 maxlen: 24
103.217.212.0/22 maxlen: 24
119.235.48.0/21 maxlen: 24
182.48.214.0/24 maxlen: 24
182.48.219.0/24 maxlen: 24
182.48.254.0/24 maxlen: 24
202.131.131.0/24 maxlen: 24
202.140.56.0/24 maxlen: 24
202.140.57.0/24 maxlen: 24
2400:3680::/32 maxlen: 32
2400:3680::/40 maxlen: 40
2400:3680:100::/40 maxlen: 40
2400:3680:10c::/48 maxlen: 48
2400:3680:200::/40 maxlen: 40
2400:3680:300::/40 maxlen: 40
2400:3680:400::/40 maxlen: 40
2400:3680:500::/40 maxlen: 40
2400:3680:600::/40 maxlen: 40
2400:3680:700::/40 maxlen: 40
2400:3680:800::/40 maxlen: 40
2400:3680:900::/40 maxlen: 40
2400:3680:1000::/40 maxlen: 40
2400:3680:ff00::/40 maxlen: 40
2400:f1e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64250 (0xfafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 22 06:26:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a894104-d4f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bc:20:4d:79:b0:e6:57:07:45:61:ea:1b:c6:
77:8d:26:1f:58:b8:33:bc:e8:de:cc:fc:15:27:2f:
23:3e:cb:d1:10:f8:30:bf:52:a5:fd:e8:e0:4b:bb:
7b:da:28:d8:96:c7:ed:57:91:ff:e4:42:c6:ca:03:
15:62:64:2b:24:3a:4e:27:f0:fe:a5:b9:b1:d1:99:
46:fc:08:0a:ad:61:48:df:19:67:5a:7a:45:9d:33:
29:9c:3c:54:87:ab:39:11:06:ab:7e:15:9f:12:93:
b2:50:61:93:65:66:be:86:9d:2f:56:a6:bd:fa:4e:
4f:de:0e:7b:cf:fb:f9:de:34:1d:cb:1b:33:9e:81:
07:34:77:f4:15:9d:54:f0:aa:7f:06:08:b4:b7:3d:
3b:83:bf:41:f3:5a:f4:92:86:43:0c:4e:b2:9b:17:
ca:23:37:68:43:fc:3c:f0:b0:19:ae:16:7f:14:b0:
20:20:b4:99:ba:92:2b:31:b8:32:4e:4f:8b:ee:20:
84:a4:fe:47:17:ed:63:3c:f0:ab:d3:c6:76:ed:9f:
a2:c0:67:6c:4e:4b:fd:ac:aa:d1:c6:05:93:30:68:
76:b5:29:cf:bb:ba:09:00:8c:ac:c4:0e:76:de:6e:
3a:f2:59:8b:a5:90:57:9c:38:2f:95:d5:35:82:3e:
41:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:59:92:E0:03:3F:E9:05:7A:2E:E4:3F:69:71:26:DB:95:BC:F5:4E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB8EA3244B4911F082AB047EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.116.16.0/21
45.112.184.0/22
45.118.72.0/22
45.249.48.0/24
45.249.50.0/24
103.10.132.0/22
103.22.172.0/22
103.52.36.0/22
103.124.28.0/23
103.126.42.0/23
103.178.208.0/23
103.196.4.0/22
103.211.168.0/23
103.217.212.0/22
119.235.48.0/21
182.48.214.0/24
182.48.219.0/24
182.48.254.0/24
202.131.131.0/24
202.140.56.0/23
IPv6:
2400:3680::/32
2400:f1e0::/32
Signature Algorithm: sha256WithRSAEncryption
2b:b9:dd:de:7a:c1:2b:51:36:43:50:2f:f1:28:a6:c2:d2:61:
65:98:2a:e5:e6:c5:86:46:38:d6:cf:9b:2b:c1:06:12:7c:67:
88:b2:d0:af:fb:87:6d:50:a3:5f:6f:0d:03:f7:e4:c2:d0:67:
9b:c4:92:f2:07:b2:5a:86:08:27:3a:92:d1:9e:18:d4:6a:3a:
5a:75:a6:6b:cb:97:2b:a4:c3:75:ab:5f:bd:5b:db:f3:6e:82:
0c:f7:86:0a:0d:34:fa:41:14:0a:db:ea:c5:4b:63:66:6b:71:
c9:5d:29:4e:b7:48:24:89:17:04:a0:85:88:7b:18:89:2e:ac:
d5:bd:c4:12:a4:11:90:a4:f5:16:34:af:8f:10:fe:00:fa:64:
04:43:b1:04:e2:ea:a8:99:ec:6d:65:8d:84:a4:ab:9f:99:04:
80:91:91:d0:5d:79:4c:ed:30:b9:63:03:ea:28:df:5a:8e:18:
da:b0:5d:9d:57:50:50:e6:f0:c3:57:40:f2:2b:c7:b9:54:50:
7c:3d:3c:73:a8:b8:96:fe:ce:29:76:9a:14:f8:06:87:5c:20:
02:a0:09:4c:dd:58:c9:8a:8d:f9:01:75:57:29:d1:62:8e:16:
6f:01:61:82:51:83:c6:75:26:7d:1c:b5:6c:c5:99:58:35:b7:
b2:39:82:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:31:52 2026 by rpki-client