Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAE25CA4510511F1978D8DE6CC833773.roa
File: FAE25CA4510511F1978D8DE6CC833773.roa (raw, json)
Hash identifier: 5XFHPcv7iFr4jiHKcLDB1zVNpSbpeni7wIvMkPAegBw=
Subject key identifier: 64:77:FC:CE:27:EA:9C:94:90:96:C5:46:EB:7A:9C:CB:1E:1E:88:44
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: E1DC
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAE25CA4510511F1978D8DE6CC833773.roa
Signing time: Sun 31 May 2026 16:32:27 +0000
ROA not before: Sun 31 May 2026 16:32:27 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 132556
IP address blocks: 45.123.0.0/22 maxlen: 24
103.16.12.0/23 maxlen: 24
103.16.14.0/24 maxlen: 24
103.38.240.0/22 maxlen: 24
103.94.100.0/24 maxlen: 24
103.94.101.0/24 maxlen: 24
103.212.95.0/24 maxlen: 24
103.242.236.0/22 maxlen: 24
103.245.188.0/23 maxlen: 23
103.245.188.0/24 maxlen: 24
103.245.189.0/24 maxlen: 24
137.59.76.0/22 maxlen: 24
157.119.208.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2001:df0:45d::/48 maxlen: 48
2404:7a40::/32 maxlen: 32
2404:7a40::/36 maxlen: 36
2404:7a40::/46 maxlen: 46
2404:7a40::/48 maxlen: 48
2404:7a40:1::/48 maxlen: 48
2404:7a40:2::/48 maxlen: 48
2404:7a40:3::/48 maxlen: 48
2404:7a40:4::/46 maxlen: 46
2404:7a40:4::/48 maxlen: 48
2404:7a40:5::/48 maxlen: 48
2404:7a40:6::/48 maxlen: 48
2404:7a40:7::/48 maxlen: 48
2404:7a40:8::/46 maxlen: 46
2404:7a40:8::/48 maxlen: 48
2404:7a40:9::/48 maxlen: 48
2404:7a40:a::/48 maxlen: 48
2404:7a40:b::/48 maxlen: 48
2404:7a40:c::/46 maxlen: 46
2404:7a40:c::/48 maxlen: 48
2404:7a40:d::/48 maxlen: 48
2404:7a40:e::/48 maxlen: 48
2404:7a40:f::/48 maxlen: 48
2404:7a40:10::/46 maxlen: 46
2404:7a40:10::/48 maxlen: 48
2404:7a40:11::/48 maxlen: 48
2404:7a40:12::/48 maxlen: 48
2404:7a40:13::/48 maxlen: 48
2404:7a40:14::/46 maxlen: 46
2404:7a40:14::/48 maxlen: 48
2404:7a40:15::/48 maxlen: 48
2404:7a40:18::/46 maxlen: 46
2404:7a40:1c::/46 maxlen: 46
2404:7a40:20::/46 maxlen: 46
2404:7a40:24::/46 maxlen: 46
2404:7a40:1000::/36 maxlen: 36
2404:7a40:1000::/48 maxlen: 48
2404:7a40:1001::/48 maxlen: 48
2404:7a40:1002::/48 maxlen: 48
2404:7a40:1003::/48 maxlen: 48
2404:7a40:1004::/48 maxlen: 48
2404:7a40:1005::/48 maxlen: 48
2404:7a40:2000::/36 maxlen: 36
2404:7a40:2000::/48 maxlen: 48
2404:7a40:2001::/48 maxlen: 48
2404:7a40:2002::/48 maxlen: 48
2404:7a40:2003::/48 maxlen: 48
2404:7a40:2004::/48 maxlen: 48
2404:7a40:2005::/48 maxlen: 48
2404:7a40:2006::/48 maxlen: 48
2404:7a40:2007::/48 maxlen: 48
2404:7a40:3000::/36 maxlen: 36
2404:7a40:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57820 (0xe1dc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 16:32:27 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c629b-485d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bf:75:73:19:e7:15:28:fe:bb:c5:46:ff:84:
e4:34:de:d0:91:52:db:89:54:81:79:f9:a7:53:bb:
e3:40:43:4b:b4:45:a0:a8:15:95:66:4f:8e:26:05:
5a:51:71:db:9a:96:1e:4d:82:56:cb:8c:bd:d6:53:
bb:5e:22:f4:b2:94:1c:86:33:72:74:fd:82:3c:d4:
fb:31:5b:a6:22:e7:4e:9d:f5:a1:40:65:48:42:40:
0e:b2:b9:63:37:8c:01:cf:5d:59:74:ab:55:38:46:
ee:5a:95:16:e2:eb:35:10:92:40:66:01:bb:b3:96:
7b:0a:60:24:92:f4:9a:82:8a:ba:0a:58:f8:6e:e3:
c4:9e:49:8b:be:f3:9e:d2:3f:ba:96:23:1d:cf:cf:
f6:ff:4c:8d:c1:3e:a3:e1:b2:1e:2a:5c:be:4e:41:
f6:3e:23:c6:c8:28:7a:82:80:81:96:e8:51:a8:cc:
d5:4e:85:a7:02:ca:c5:42:a7:86:a1:c9:74:9f:8c:
46:69:bc:23:73:9f:55:72:a5:43:9d:57:31:c1:1e:
6c:c5:87:8a:44:cf:78:8c:ca:95:85:be:3c:c8:f6:
00:89:3b:93:3e:ff:f7:aa:c7:69:4a:7c:e1:b6:68:
4a:af:7e:09:4d:f1:39:96:9b:11:6d:07:1d:47:10:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:77:FC:CE:27:EA:9C:94:90:96:C5:46:EB:7A:9C:CB:1E:1E:88:44
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FAE25CA4510511F1978D8DE6CC833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.123.0.0/22
103.16.12.0-103.16.14.255
103.38.240.0/22
103.94.100.0/23
103.212.95.0/24
103.242.236.0/22
103.245.188.0/23
137.59.76.0/22
157.119.208.0/22
220.158.140.0/22
IPv6:
2001:df0:45d::/48
2404:7a40::/32
Signature Algorithm: sha256WithRSAEncryption
7e:a5:c6:3a:da:1f:0e:c3:fd:82:31:2f:22:29:b3:e2:95:fc:
ed:26:a5:7e:c8:b2:0f:7f:2c:bd:ca:9f:23:25:65:79:65:fb:
94:27:36:50:e0:42:a5:be:e7:ad:21:ba:98:c0:a2:e7:85:82:
7a:69:2b:ef:95:a5:cc:3b:23:d0:ce:e8:bc:1b:04:83:8f:39:
1c:b8:40:e1:c5:70:c1:13:bc:c4:89:8d:ea:30:b3:9b:23:43:
42:cb:ae:59:2c:1e:d3:61:2c:b0:d6:be:b5:b8:e8:d6:fa:4c:
ef:ec:55:92:08:f8:5b:93:9c:d0:d1:0d:af:2c:6f:6b:98:80:
fb:7a:ca:5e:01:f0:28:81:26:cb:64:53:86:ff:36:9e:84:84:
00:24:57:30:d7:5f:e6:a1:60:49:29:5b:f2:47:52:45:41:9a:
2c:16:2d:3a:86:b3:27:33:34:1a:27:26:be:9a:79:68:ee:94:
86:25:fc:3f:ee:60:86:d8:02:a1:e1:30:b7:64:2a:ca:bb:5f:
a1:2f:16:82:fc:1e:34:60:4e:62:f0:b5:eb:fb:ce:5a:ce:7a:
81:05:fe:1b:91:b4:cf:4e:af:63:d0:be:57:42:f5:27:19:80:
da:35:fa:5d:49:01:95:bd:45:9c:3a:bd:57:92:1a:e8:f1:87:
c5:a6:c9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:00:31 2026 by rpki-client