Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB8EA3244B4911F082AB047EC4F9AE02.roa
File: EB8EA3244B4911F082AB047EC4F9AE02.roa (raw, json)
Hash identifier: 1qVmXAnpRBB4tEpaaf3tlizu62hgPwf4iTAnm3WqsDI=
Subject key identifier: F5:BB:59:0B:28:A6:6D:63:6E:1D:C0:96:CC:CD:A8:1C:CE:FC:BE:B6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EB4B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB8EA3244B4911F082AB047EC4F9AE02.roa
Signing time: Sun 31 May 2026 17:51:03 +0000
ROA not before: Sun 31 May 2026 17:51:03 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 45582
IP address blocks: 27.116.16.0/21 maxlen: 24
45.112.184.0/24 maxlen: 24
45.112.185.0/24 maxlen: 24
45.112.186.0/24 maxlen: 24
45.112.187.0/24 maxlen: 24
45.118.72.0/22 maxlen: 24
45.249.48.0/24 maxlen: 24
45.249.50.0/24 maxlen: 24
103.10.132.0/22 maxlen: 24
103.22.172.0/22 maxlen: 24
103.52.36.0/22 maxlen: 24
103.124.28.0/23 maxlen: 24
103.126.42.0/23 maxlen: 24
103.178.208.0/23 maxlen: 24
103.196.4.0/22 maxlen: 24
103.217.212.0/22 maxlen: 24
119.235.48.0/21 maxlen: 24
182.48.214.0/24 maxlen: 24
182.48.219.0/24 maxlen: 24
182.48.254.0/24 maxlen: 24
202.131.131.0/24 maxlen: 24
202.140.56.0/24 maxlen: 24
202.140.57.0/24 maxlen: 24
2400:3680::/32 maxlen: 32
2400:3680::/40 maxlen: 40
2400:3680:100::/40 maxlen: 40
2400:3680:10c::/48 maxlen: 48
2400:3680:200::/40 maxlen: 40
2400:3680:700::/40 maxlen: 40
2400:3680:800::/40 maxlen: 40
2400:3680:900::/40 maxlen: 40
2400:3680:1000::/40 maxlen: 40
2400:3680:ff00::/40 maxlen: 40
2400:f1e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60235 (0xeb4b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:51:03 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7507-0408
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:69:8f:3a:83:a0:18:1a:34:85:56:22:88:
69:19:31:37:f3:36:17:22:af:61:b3:2e:81:3a:16:
e4:d9:71:c7:56:a6:fa:60:fc:5c:83:39:0a:d3:71:
59:9c:f6:9b:37:49:ea:ee:9e:73:9d:93:dc:a7:f0:
8e:10:06:ab:9b:cd:65:9e:ec:4f:99:28:90:2c:e2:
7c:03:47:df:d4:3b:1d:5f:9a:da:13:a7:6b:8e:68:
90:eb:9b:45:bd:8e:aa:d3:63:1f:03:4d:fa:97:cd:
71:04:58:25:7f:2e:4c:ea:c9:6b:36:79:43:c7:40:
12:e1:bc:78:3a:4c:60:8d:c5:c1:58:d8:65:75:7b:
2d:b1:5e:d8:4b:e6:79:cc:bc:00:a2:47:2e:89:03:
16:0f:21:c6:9d:27:ca:67:af:93:cb:f4:e1:d6:a8:
09:0c:cf:b0:a9:a3:21:7f:f0:03:cb:43:9d:b4:30:
5c:ff:a9:71:cc:8c:c5:e9:c6:c9:d3:a2:c9:40:c7:
43:b4:6a:dd:93:dc:32:95:9f:d7:38:c3:08:78:8d:
a7:09:0d:82:a6:84:67:8b:d0:a2:ad:be:b5:d1:6a:
26:62:ab:58:75:6b:92:5d:de:20:83:95:ca:67:2e:
42:b0:bb:f9:c5:f7:af:42:91:1b:00:ec:60:1e:81:
c4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BB:59:0B:28:A6:6D:63:6E:1D:C0:96:CC:CD:A8:1C:CE:FC:BE:B6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB8EA3244B4911F082AB047EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.116.16.0/21
45.112.184.0/22
45.118.72.0/22
45.249.48.0/24
45.249.50.0/24
103.10.132.0/22
103.22.172.0/22
103.52.36.0/22
103.124.28.0/23
103.126.42.0/23
103.178.208.0/23
103.196.4.0/22
103.217.212.0/22
119.235.48.0/21
182.48.214.0/24
182.48.219.0/24
182.48.254.0/24
202.131.131.0/24
202.140.56.0/23
IPv6:
2400:3680::/32
2400:f1e0::/32
Signature Algorithm: sha256WithRSAEncryption
90:d2:46:25:80:5b:cd:b3:a6:8e:71:b9:a2:9c:ee:af:ae:c8:
02:04:a4:f7:73:28:c5:99:1d:e6:4c:1b:c6:b1:e3:11:5d:c9:
03:56:dc:47:ed:42:22:5b:12:f1:6b:c6:a3:c4:bb:5c:b4:da:
1a:86:02:21:b5:31:69:a3:8b:58:38:3d:1e:11:79:06:fd:44:
d0:ba:60:a4:37:90:16:a4:ec:c5:f6:3c:56:28:be:41:4a:c8:
8d:d6:cf:ff:5c:1f:86:38:d3:97:39:ed:7a:86:d1:b6:87:8b:
ba:86:82:57:53:ad:b3:b5:0c:c0:18:96:ad:dd:9e:9f:21:87:
78:7f:bc:30:e0:c7:6a:9c:7b:5b:cd:1c:c5:9e:9c:71:a7:fb:
90:a7:d5:f2:f9:aa:d5:ab:76:0d:2b:cd:78:96:70:31:c0:dc:
24:95:fa:8f:96:53:ec:8e:90:17:dd:5d:73:26:55:39:be:41:
67:1a:85:55:e1:97:82:17:7a:80:bf:1f:a5:23:4e:90:63:b4:
26:00:18:c0:81:c3:d2:b0:6a:f7:8e:90:d1:e5:87:44:0c:fa:
f8:53:28:b4:27:7d:16:0d:c4:1d:1a:ba:a3:71:39:d1:08:27:
48:43:5d:24:ee:3f:67:51:0b:01:b5:98:06:6b:4f:17:d5:c8:
f8:7e:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:05:24 2026 by rpki-client