Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB198982073011F1B72F50B52E3D8C67.roa
File: FB198982073011F1B72F50B52E3D8C67.roa (raw, json)
Hash identifier: YUkboKiQwS+stqbOdJB0YrBk9r5t/s3B35cfWVOoAyk=
Subject key identifier: B1:E9:3D:E6:97:CE:93:49:10:C5:3E:2A:46:F8:9A:C8:6F:4C:CE:13
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FB8C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB198982073011F1B72F50B52E3D8C67.roa
Signing time: Wed 02 Sep 2026 07:11:56 +0000
ROA not before: Wed 02 Sep 2026 07:11:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153252
IP address blocks: 45.115.252.0/24 maxlen: 24
45.115.253.0/24 maxlen: 24
45.115.254.0/24 maxlen: 24
45.115.255.0/24 maxlen: 24
45.116.68.0/24 maxlen: 24
45.116.69.0/24 maxlen: 24
45.116.70.0/24 maxlen: 24
45.116.71.0/24 maxlen: 24
103.38.70.0/24 maxlen: 24
103.43.5.0/24 maxlen: 24
103.50.4.0/24 maxlen: 24
103.50.5.0/24 maxlen: 24
103.50.6.0/24 maxlen: 24
103.50.7.0/24 maxlen: 24
103.55.6.0/24 maxlen: 24
103.55.7.0/24 maxlen: 24
103.61.102.0/24 maxlen: 24
103.61.103.0/24 maxlen: 24
103.69.216.0/24 maxlen: 24
103.69.217.0/24 maxlen: 24
103.69.218.0/24 maxlen: 24
103.69.219.0/24 maxlen: 24
103.70.144.0/24 maxlen: 24
103.70.145.0/24 maxlen: 24
103.70.146.0/24 maxlen: 24
103.70.147.0/24 maxlen: 24
103.70.176.0/24 maxlen: 24
103.70.177.0/24 maxlen: 24
103.79.112.0/24 maxlen: 24
103.79.113.0/24 maxlen: 24
103.79.114.0/24 maxlen: 24
103.79.115.0/24 maxlen: 24
103.90.204.0/24 maxlen: 24
103.93.176.0/24 maxlen: 24
103.93.177.0/24 maxlen: 24
103.93.178.0/24 maxlen: 24
103.93.179.0/24 maxlen: 24
103.109.72.0/24 maxlen: 24
103.109.73.0/24 maxlen: 24
103.122.84.0/24 maxlen: 24
103.122.85.0/24 maxlen: 24
103.156.168.0/24 maxlen: 24
103.156.169.0/24 maxlen: 24
103.157.160.0/24 maxlen: 24
103.157.161.0/24 maxlen: 24
103.159.154.0/24 maxlen: 24
103.159.155.0/24 maxlen: 24
103.161.230.0/24 maxlen: 24
103.161.231.0/24 maxlen: 24
103.161.232.0/24 maxlen: 24
103.161.233.0/24 maxlen: 24
103.174.105.0/24 maxlen: 24
103.175.76.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.176.71.0/24 maxlen: 24
103.220.28.0/24 maxlen: 24
103.220.29.0/24 maxlen: 24
103.220.30.0/24 maxlen: 24
103.220.31.0/24 maxlen: 24
103.237.172.0/24 maxlen: 24
103.237.173.0/24 maxlen: 24
103.237.174.0/24 maxlen: 24
103.237.175.0/24 maxlen: 24
175.111.180.0/24 maxlen: 24
175.111.182.0/24 maxlen: 24
175.111.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64396 (0xfb8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 2 07:11:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a97cc3c-7e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:c3:16:19:df:b9:01:14:a4:71:4f:5c:4f:
4d:4a:5f:7e:75:2b:1c:bc:90:30:cd:c7:a5:bb:03:
82:ed:87:9c:d0:5c:dd:5c:c1:ac:7a:8f:81:fe:74:
9d:1a:76:93:86:0d:6a:f4:d0:84:28:e6:8d:38:46:
93:dc:df:58:e8:6d:5c:54:de:d5:bd:47:81:52:84:
0e:a0:18:03:84:03:22:7f:8c:3a:da:75:b5:5b:bf:
b0:f5:f7:ab:bb:79:8c:db:da:dc:bc:72:8b:c2:45:
fd:d2:d1:84:0a:8c:95:dd:31:af:35:7d:15:28:50:
67:34:06:c7:09:60:bb:c4:eb:c3:9c:17:74:fb:0d:
24:b5:21:e7:96:6a:d1:65:ff:1a:e2:68:5c:48:40:
31:1e:6b:23:35:ad:ff:2b:70:3d:85:76:cd:a4:91:
c8:2d:90:b7:6a:7a:b3:80:35:15:ca:01:84:af:d0:
da:97:2f:e7:5f:c6:98:53:95:60:fb:e9:05:97:f2:
bd:cd:e8:cd:48:5e:fb:f3:e2:24:d9:8f:9d:e5:7c:
a0:d4:23:c3:4d:eb:57:60:4d:29:6f:ac:b7:ea:73:
bd:3f:77:2a:09:05:26:6a:cd:94:45:62:dc:12:b5:
27:a8:0d:76:d3:ae:cb:37:22:d0:a7:fb:c8:04:fc:
2a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:E9:3D:E6:97:CE:93:49:10:C5:3E:2A:46:F8:9A:C8:6F:4C:CE:13
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB198982073011F1B72F50B52E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
45.115.252.0/22
45.116.68.0/22
103.38.70.0/24
103.43.5.0/24
103.50.4.0/22
103.55.6.0/23
103.61.102.0/23
103.69.216.0/22
103.70.144.0/22
103.70.176.0/23
103.79.112.0/22
103.90.204.0/24
103.93.176.0/22
103.109.72.0/23
103.122.84.0/23
103.156.168.0/23
103.157.160.0/23
103.159.154.0/23
103.161.230.0-103.161.233.255
103.174.105.0/24
103.175.76.0/23
103.176.71.0/24
103.220.28.0/22
103.237.172.0/22
175.111.180.0/24
175.111.182.0/23
Signature Algorithm: sha256WithRSAEncryption
23:28:57:ae:7f:9d:b1:6c:1f:86:f4:72:b8:48:0b:c9:2b:08:
e1:af:55:d6:90:05:4a:59:5f:5a:41:35:b3:be:4b:33:4d:15:
f1:80:b1:97:cb:a3:ca:ae:ce:43:f5:4a:84:93:84:80:a2:13:
43:91:b3:16:f2:9b:86:b0:a1:fe:3a:1c:4d:0a:21:05:0c:68:
63:31:e6:18:50:39:79:dd:ed:43:44:39:29:8a:87:56:67:8e:
ec:13:a5:3d:6a:1b:1a:a2:00:6a:d6:13:7a:e6:f3:a9:4a:5c:
f7:6c:cc:45:24:2f:eb:a0:ed:8d:03:43:13:9f:06:5f:f5:be:
a1:7b:31:dc:69:48:df:d6:f4:bb:38:c4:91:3a:a7:f6:dc:7a:
77:7b:44:d3:ff:7c:a7:6b:21:ac:c4:39:65:90:01:84:56:79:
6b:33:a7:2e:8c:42:dd:22:fe:c0:3e:6a:10:52:77:d2:11:51:
73:83:6e:70:58:3a:83:51:67:02:d1:9b:1e:1d:1a:db:53:16:
34:f4:38:95:af:63:09:bd:97:97:68:54:28:0b:23:80:12:f2:
0a:c9:04:80:de:7d:76:d5:86:53:15:8b:08:04:c0:1d:9f:37:
47:f0:1a:85:a5:6a:49:75:b7:ca:26:82:46:76:ba:25:74:84:
06:cd:ee:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:47:37 2026 by rpki-client