Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAE25CA4510511F1978D8DE6CC833773.roa
File: FAE25CA4510511F1978D8DE6CC833773.roa (raw, json)
Hash identifier: U6gVZiDmVmku7s5vsvGh6/a7yAv7KR3PK5qNvsgDqIY=
Subject key identifier: 37:52:F5:5F:4B:0E:52:8B:5E:8E:FD:AB:9F:CD:76:3D:16:7D:F0:EB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EDF7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAE25CA4510511F1978D8DE6CC833773.roa
Signing time: Mon 06 Jul 2026 16:30:23 +0000
ROA not before: Mon 06 Jul 2026 16:30:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132556
IP address blocks: 45.123.0.0/22 maxlen: 24
103.16.12.0/23 maxlen: 24
103.16.14.0/24 maxlen: 24
103.38.240.0/22 maxlen: 24
103.94.100.0/24 maxlen: 24
103.94.101.0/24 maxlen: 24
103.212.95.0/24 maxlen: 24
103.242.236.0/22 maxlen: 24
103.245.188.0/23 maxlen: 23
103.245.188.0/24 maxlen: 24
103.245.189.0/24 maxlen: 24
137.59.76.0/22 maxlen: 24
157.119.208.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2001:df0:45d::/48 maxlen: 48
2404:7a40::/32 maxlen: 32
2404:7a40::/36 maxlen: 36
2404:7a40::/46 maxlen: 46
2404:7a40::/48 maxlen: 48
2404:7a40:1::/48 maxlen: 48
2404:7a40:2::/48 maxlen: 48
2404:7a40:3::/48 maxlen: 48
2404:7a40:4::/46 maxlen: 46
2404:7a40:4::/48 maxlen: 48
2404:7a40:5::/48 maxlen: 48
2404:7a40:6::/48 maxlen: 48
2404:7a40:7::/48 maxlen: 48
2404:7a40:8::/46 maxlen: 46
2404:7a40:8::/48 maxlen: 48
2404:7a40:9::/48 maxlen: 48
2404:7a40:a::/48 maxlen: 48
2404:7a40:b::/48 maxlen: 48
2404:7a40:c::/46 maxlen: 46
2404:7a40:c::/48 maxlen: 48
2404:7a40:d::/48 maxlen: 48
2404:7a40:e::/48 maxlen: 48
2404:7a40:f::/48 maxlen: 48
2404:7a40:10::/46 maxlen: 46
2404:7a40:10::/48 maxlen: 48
2404:7a40:11::/48 maxlen: 48
2404:7a40:12::/48 maxlen: 48
2404:7a40:13::/48 maxlen: 48
2404:7a40:14::/46 maxlen: 46
2404:7a40:14::/48 maxlen: 48
2404:7a40:15::/48 maxlen: 48
2404:7a40:18::/46 maxlen: 46
2404:7a40:1c::/46 maxlen: 46
2404:7a40:20::/46 maxlen: 46
2404:7a40:24::/46 maxlen: 46
2404:7a40:1000::/36 maxlen: 36
2404:7a40:1000::/48 maxlen: 48
2404:7a40:1001::/48 maxlen: 48
2404:7a40:1002::/48 maxlen: 48
2404:7a40:1003::/48 maxlen: 48
2404:7a40:1004::/48 maxlen: 48
2404:7a40:1005::/48 maxlen: 48
2404:7a40:2000::/36 maxlen: 36
2404:7a40:2000::/48 maxlen: 48
2404:7a40:2001::/48 maxlen: 48
2404:7a40:2002::/48 maxlen: 48
2404:7a40:2003::/48 maxlen: 48
2404:7a40:2004::/48 maxlen: 48
2404:7a40:2005::/48 maxlen: 48
2404:7a40:2006::/48 maxlen: 48
2404:7a40:2007::/48 maxlen: 48
2404:7a40:3000::/36 maxlen: 36
2404:7a40:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60919 (0xedf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 16:30:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bd81f-adea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:44:fa:78:4a:a7:7f:ab:2d:62:1b:6c:1d:
ec:33:42:d1:fd:58:d8:68:e8:cc:51:c4:a7:92:0b:
97:da:6c:63:a1:85:f3:24:ee:ad:3e:32:f5:8b:10:
00:a2:72:60:84:b9:86:52:44:86:8b:9a:5b:72:8c:
12:83:3e:5e:3a:a2:8d:6f:06:4e:a7:0e:0f:73:e6:
3c:8c:3f:c1:18:66:a7:ef:13:c6:23:47:7a:7c:e9:
a8:fa:0a:64:0f:99:3a:61:3e:e8:8e:24:b8:8b:e5:
2a:7b:c0:ec:6a:52:3d:60:6f:6e:c0:01:6a:0e:d8:
d6:63:48:e7:29:a2:e5:1d:9f:6b:b3:1e:58:84:50:
28:d8:dc:99:de:ea:a2:2e:10:31:36:48:13:fb:37:
ce:70:c5:33:25:5e:bd:48:3c:3f:72:28:89:c5:19:
3a:80:3f:53:db:62:d2:7e:32:70:76:2e:1c:f1:07:
a6:c1:52:4f:9f:40:bf:9d:56:d0:53:df:33:4f:c6:
f4:50:ea:b6:34:5c:cc:f0:89:e4:d0:14:8f:b3:72:
fc:82:39:89:1d:74:37:6e:55:d1:ad:e8:5c:a5:8a:
5b:79:cb:b0:fc:74:e3:41:1a:b4:6e:57:7e:5f:0b:
cf:73:97:57:89:82:b0:55:f5:8f:64:b6:af:9d:c8:
54:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:52:F5:5F:4B:0E:52:8B:5E:8E:FD:AB:9F:CD:76:3D:16:7D:F0:EB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAE25CA4510511F1978D8DE6CC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.123.0.0/22
103.16.12.0-103.16.14.255
103.38.240.0/22
103.94.100.0/23
103.212.95.0/24
103.242.236.0/22
103.245.188.0/23
137.59.76.0/22
157.119.208.0/22
220.158.140.0/22
IPv6:
2001:df0:45d::/48
2404:7a40::/32
Signature Algorithm: sha256WithRSAEncryption
8e:e3:34:0e:3f:92:8c:d0:e5:cc:15:87:94:93:12:f1:35:e6:
9c:88:d8:a8:91:75:58:0a:43:29:fe:da:17:16:82:3a:bb:ab:
77:e6:71:ca:be:fa:11:ba:22:d1:86:0d:bb:14:5f:bc:77:3f:
d8:75:bb:a1:02:cb:ca:a6:ae:9b:51:f2:c5:f8:b8:ef:18:16:
dd:91:53:ca:7a:7d:d1:a1:53:8e:47:a8:5c:17:2c:0c:29:1d:
37:74:75:62:e4:80:e2:4a:86:2e:f7:ed:2c:a9:c3:d2:a4:22:
ca:63:d9:47:41:f0:46:4e:9c:8f:85:d2:4e:63:e1:e0:6e:a7:
d6:3f:d9:bd:88:b0:c3:78:ff:4c:04:13:48:a5:84:60:5a:0f:
da:9c:e4:a1:48:bf:46:fc:68:45:f0:e8:17:27:b5:40:1e:ee:
d5:9c:51:47:4b:58:34:5f:9d:a8:4b:ed:ac:7b:7c:3b:99:7c:
c8:4b:a4:22:9f:b6:79:f2:aa:ad:e8:f2:cf:f4:a7:79:62:ce:
d2:ae:75:eb:9c:8f:5a:fe:47:2b:c6:cf:3a:ed:fc:3e:bb:ed:
c8:7a:e2:d0:61:65:1b:89:21:68:67:79:3b:2f:cb:32:d1:f7:
af:9d:c3:5b:34:b3:2d:05:2f:01:75:19:3f:81:ec:c8:79:97:
2c:20:d7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:04 2026 by rpki-client