Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB198982073011F1B72F50B52E3D8C67.roa
File: FB198982073011F1B72F50B52E3D8C67.roa (raw, json)
Hash identifier: 8REk7Cky/wjgP9BJ0Y1PUXxi0p6xyXsdtzACqTq3dwc=
Subject key identifier: CC:D1:3F:DF:2C:A5:B7:1F:FB:D4:4C:53:98:ED:B7:0D:B8:97:74:7C
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EA6D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB198982073011F1B72F50B52E3D8C67.roa
Signing time: Sun 31 May 2026 17:44:04 +0000
ROA not before: Sun 31 May 2026 17:44:04 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 153252
IP address blocks: 45.115.252.0/24 maxlen: 24
45.115.253.0/24 maxlen: 24
45.115.254.0/24 maxlen: 24
45.115.255.0/24 maxlen: 24
45.116.68.0/24 maxlen: 24
45.116.69.0/24 maxlen: 24
45.116.70.0/24 maxlen: 24
45.116.71.0/24 maxlen: 24
103.38.70.0/24 maxlen: 24
103.50.4.0/24 maxlen: 24
103.50.5.0/24 maxlen: 24
103.50.6.0/24 maxlen: 24
103.50.7.0/24 maxlen: 24
103.55.6.0/24 maxlen: 24
103.55.7.0/24 maxlen: 24
103.61.102.0/24 maxlen: 24
103.61.103.0/24 maxlen: 24
103.69.216.0/24 maxlen: 24
103.69.217.0/24 maxlen: 24
103.69.218.0/24 maxlen: 24
103.69.219.0/24 maxlen: 24
103.70.144.0/24 maxlen: 24
103.70.145.0/24 maxlen: 24
103.70.146.0/24 maxlen: 24
103.70.147.0/24 maxlen: 24
103.70.176.0/24 maxlen: 24
103.70.177.0/24 maxlen: 24
103.79.112.0/24 maxlen: 24
103.79.113.0/24 maxlen: 24
103.79.114.0/24 maxlen: 24
103.79.115.0/24 maxlen: 24
103.90.204.0/24 maxlen: 24
103.93.176.0/24 maxlen: 24
103.93.177.0/24 maxlen: 24
103.93.178.0/24 maxlen: 24
103.93.179.0/24 maxlen: 24
103.109.72.0/24 maxlen: 24
103.109.73.0/24 maxlen: 24
103.122.84.0/24 maxlen: 24
103.122.85.0/24 maxlen: 24
103.156.168.0/24 maxlen: 24
103.156.169.0/24 maxlen: 24
103.157.160.0/24 maxlen: 24
103.157.161.0/24 maxlen: 24
103.159.154.0/24 maxlen: 24
103.159.155.0/24 maxlen: 24
103.161.230.0/24 maxlen: 24
103.161.231.0/24 maxlen: 24
103.161.232.0/24 maxlen: 24
103.161.233.0/24 maxlen: 24
103.174.105.0/24 maxlen: 24
103.175.76.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.176.71.0/24 maxlen: 24
103.220.28.0/24 maxlen: 24
103.220.29.0/24 maxlen: 24
103.220.30.0/24 maxlen: 24
103.220.31.0/24 maxlen: 24
103.237.172.0/24 maxlen: 24
103.237.173.0/24 maxlen: 24
103.237.174.0/24 maxlen: 24
103.237.175.0/24 maxlen: 24
175.111.180.0/24 maxlen: 24
175.111.182.0/24 maxlen: 24
175.111.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60013 (0xea6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:44:04 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c7363-85d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:f3:c0:ad:91:59:9a:46:38:9f:0e:fd:0f:
dd:09:a4:17:e2:e0:cf:b3:31:0c:ac:1e:b1:70:4b:
2d:8a:7d:72:62:09:25:cc:3d:f3:0a:4c:d6:07:48:
46:0f:c2:3d:ae:3f:09:a7:6c:39:b2:c7:20:69:97:
4f:7b:b3:8b:58:8f:dc:68:bf:1e:36:26:02:4c:1c:
4e:d3:47:f7:56:f5:cc:91:fe:1e:b4:28:76:c1:79:
14:db:d1:e8:61:80:c0:ba:4a:d7:e5:ee:9f:e0:b0:
03:95:98:35:ad:07:1a:51:b8:4e:90:e8:34:47:90:
72:c0:2b:5c:75:a3:91:fd:e2:e1:5c:b9:07:e5:a3:
13:01:d2:78:c0:27:4e:5e:32:3e:82:45:8d:54:25:
3a:1d:d0:dd:94:4b:f9:18:ea:bf:1d:4b:89:b4:46:
4a:5d:3c:6c:cf:96:85:88:3d:54:eb:5c:df:b7:b9:
34:2f:a2:61:0a:98:7f:96:b6:a6:01:d7:13:1b:99:
33:87:80:67:01:16:5d:30:f3:f3:12:6a:9f:f1:c0:
cc:4e:69:a6:49:ba:77:cf:e1:2c:b3:b2:a7:d8:0c:
04:51:d9:fa:13:9c:1a:de:1b:ac:18:37:e8:83:36:
e7:ff:94:32:eb:15:18:2e:22:a4:00:a0:84:f9:ce:
b5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D1:3F:DF:2C:A5:B7:1F:FB:D4:4C:53:98:ED:B7:0D:B8:97:74:7C
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FB198982073011F1B72F50B52E3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
45.115.252.0/22
45.116.68.0/22
103.38.70.0/24
103.50.4.0/22
103.55.6.0/23
103.61.102.0/23
103.69.216.0/22
103.70.144.0/22
103.70.176.0/23
103.79.112.0/22
103.90.204.0/24
103.93.176.0/22
103.109.72.0/23
103.122.84.0/23
103.156.168.0/23
103.157.160.0/23
103.159.154.0/23
103.161.230.0-103.161.233.255
103.174.105.0/24
103.175.76.0/23
103.176.71.0/24
103.220.28.0/22
103.237.172.0/22
175.111.180.0/24
175.111.182.0/23
Signature Algorithm: sha256WithRSAEncryption
68:b9:45:76:33:2f:4e:c2:04:69:19:e8:fa:be:bf:2d:1c:48:
45:37:2e:90:5e:de:81:57:9d:f6:34:1b:9e:6d:c4:aa:ed:93:
f6:e1:67:b0:7a:33:6f:7e:17:2c:e4:b7:54:ad:00:3b:9d:2b:
39:ec:47:1e:6d:de:8f:c8:84:a6:1b:e0:2f:75:d7:54:d8:20:
8a:3c:24:50:ad:5a:cc:98:e5:59:5a:6e:f8:20:d0:5d:c7:36:
f4:f2:73:73:0b:ee:a1:46:0c:6c:05:d5:7d:c1:d6:06:07:0c:
d8:e9:1a:fc:4a:45:bd:87:44:43:41:95:0e:04:07:86:5e:59:
af:04:41:48:82:ee:a5:cf:9a:2e:1d:c4:b8:e7:5e:ef:1f:35:
0b:da:a6:55:6e:3d:c1:0a:7d:f2:ab:46:a9:de:4b:39:24:53:
4c:13:af:d3:88:18:28:03:3f:5e:92:2e:36:50:87:30:1e:58:
29:28:42:b5:10:76:9d:52:c9:88:f1:0e:f7:07:8a:a6:73:41:
bf:b5:cd:43:d9:a0:87:d6:9c:8d:b6:63:f7:63:cd:1c:d8:46:
60:c6:f8:ee:32:ec:bc:65:74:b7:d2:83:76:1a:38:59:22:df:
49:82:92:47:7f:f5:d5:b6:d8:0d:1f:5e:20:b6:77:6e:de:b0:
e7:ad:2c:46
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIDAOptMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3NDQwNFoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzczNjMtODVkNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALeE88CtkVmaRjifDv0P3QmkF+Lgz7MxDKwesXBLLYp9cmIJJcw98wpM1gdI
Rg/CPa4/CadsObLHIGmXT3uzi1iP3Gi/HjYmAkwcTtNH91b1zJH+HrQodsF5FNvR
6GGAwLpK1+Xun+CwA5WYNa0HGlG4TpDoNEeQcsArXHWjkf3i4Vy5B+WjEwHSeMAn
Tl4yPoJFjVQlOh3Q3ZRL+Rjqvx1LibRGSl08bM+WhYg9VOtc37e5NC+iYQqYf5a2
pgHXExuZM4eAZwEWXTDz8xJqn/HAzE5ppkm6d8/hLLOyp9gMBFHZ+hOcGt4brBg3
6IM25/+UMusVGC4ipACghPnOte0CAwEAAaOCAv0wggL5MB0GA1UdDgQWBBTM0T/f
LKW3H/vUTFOY7bcNuJd0fDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZCMTk4OTgy
MDczMDExRjFCNzJGNTBCNTJFM0Q4QzY3LnJvYTCBuwYIKwYBBQUHAQcBAf8Egasw
gagwgaUEAgABMIGeAwQCLXP8AwQCLXREAwQAZyZGAwQCZzIEAwQBZzcGAwQBZz1m
AwQCZ0XYAwQCZ0aQAwQBZ0awAwQCZ09wAwQAZ1rMAwQCZ12wAwQBZ21IAwQBZ3pU
AwQBZ5yoAwQBZ52gAwQBZ5+aMAwDBAFnoeYDBAFnoegDBABnrmkDBAFnr0wDBABn
sEcDBAJn3BwDBAJn7awDBACvb7QDBAGvb7YwDQYJKoZIhvcNAQELBQADggEBAGi5
RXYzL07CBGkZ6Pq+vy0cSEU3LpBe3oFXnfY0G55txKrtk/bhZ7B6M29+Fyzkt1St
ADudKznsRx5t3o/IhKYb4C9111TYIIo8JFCtWsyY5Vlabvgg0F3HNvTyc3ML7qFG
DGwF1X3B1gYHDNjpGvxKRb2HRENBlQ4EB4ZeWa8EQUiC7qXPmi4dxLjnXu8fNQva
plVuPcEKffKrRqneSzkkU0wTr9OIGCgDP16SLjZQhzAeWCkoQrUQdp1SyYjxDvcH
iqZzQb+1zUPZoIfWnI22Y/djzRzYRmDG+O4y7LxldLfSg3YaOFki30mCkkd/9dW2
2A0fXiC2d27esOetLEY=
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:09:28 2026 by rpki-client