Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDCC0FBC830311F0869A7246C4F9AE02.roa
File: FDCC0FBC830311F0869A7246C4F9AE02.roa (raw, json)
Hash identifier: VHhdXZfV3zoKL18/hFJypBpOPbpoapzTQLNSdPzLuIY=
Subject key identifier: 3B:66:2C:26:11:2C:81:85:B4:5A:10:0F:59:F8:BF:34:D0:1E:92:2E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F5C7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDCC0FBC830311F0869A7246C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:36:23 +0000
ROA not before: Mon 06 Jul 2026 17:36:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151106
IP address blocks: 43.243.76.0/24 maxlen: 24
103.52.48.0/22 maxlen: 24
103.55.84.0/22 maxlen: 24
103.61.148.0/23 maxlen: 24
103.91.248.0/22 maxlen: 24
103.157.50.0/23 maxlen: 24
103.161.26.0/23 maxlen: 24
103.166.214.0/24 maxlen: 24
103.168.22.0/24 maxlen: 24
103.168.23.0/24 maxlen: 24
103.168.32.0/24 maxlen: 24
103.171.109.0/24 maxlen: 24
103.174.93.0/24 maxlen: 24
103.177.226.0/23 maxlen: 24
103.179.96.0/23 maxlen: 24
103.179.118.0/23 maxlen: 24
103.179.121.0/24 maxlen: 24
103.180.175.0/24 maxlen: 24
103.181.84.0/23 maxlen: 24
103.181.87.0/24 maxlen: 24
103.183.216.0/23 maxlen: 24
103.187.92.0/23 maxlen: 24
103.189.82.0/23 maxlen: 24
103.212.132.0/22 maxlen: 24
103.214.230.0/23 maxlen: 24
103.215.96.0/23 maxlen: 24
103.243.232.0/24 maxlen: 24
125.62.80.0/22 maxlen: 24
2001:df2:bec0::/47 maxlen: 47
2001:df2:bec0::/48 maxlen: 48
2001:df2:bec1::/48 maxlen: 48
2001:df5:4980::/48 maxlen: 48
2001:df5:a7c0::/48 maxlen: 48
2001:df5:af40::/48 maxlen: 48
2001:df5:b340::/48 maxlen: 48
2402:7a0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 62919 (0xf5c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:36:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be797-14ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:33:a4:05:cb:c2:9c:5c:c5:33:f7:58:fd:
13:08:ec:69:d5:0f:43:9d:6b:72:dd:dc:e6:97:44:
e1:a2:e4:ca:0f:36:35:58:00:7c:28:f8:f0:ef:f2:
57:3c:fd:5c:e2:7d:0b:54:0c:f8:77:e9:f6:4b:ad:
c6:ea:72:a8:83:42:84:ef:5a:4f:1a:b4:21:72:7e:
cb:d3:bc:ff:d1:80:3f:dc:22:a5:86:58:f1:c4:d5:
1f:60:bd:d8:12:67:29:2a:30:1f:75:fa:09:57:7f:
8b:e0:3a:9c:62:3b:ae:6f:c3:17:1e:2a:62:2e:af:
a5:66:8f:11:3a:fc:68:f3:c1:78:1b:df:23:29:61:
6d:83:cc:b2:9d:48:07:a0:fe:34:68:da:35:3c:1f:
c4:34:b1:8b:cd:3a:bc:ed:19:bb:ce:f4:66:c6:14:
52:a2:5e:c2:d9:18:fa:b3:e6:61:4d:fc:74:1e:29:
c3:eb:5e:42:e5:27:07:d2:7e:87:3a:00:43:d6:e0:
22:b5:83:94:31:5b:57:44:6a:dd:1e:e3:fd:d2:cc:
70:cb:29:4a:1b:84:77:70:9c:04:2f:17:46:40:0b:
cd:a2:80:46:2b:3b:da:bc:17:e0:bb:c1:6f:3a:4f:
f3:a6:40:93:9f:32:03:80:ee:af:81:66:ca:00:1d:
74:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:66:2C:26:11:2C:81:85:B4:5A:10:0F:59:F8:BF:34:D0:1E:92:2E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FDCC0FBC830311F0869A7246C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.243.76.0/24
103.52.48.0/22
103.55.84.0/22
103.61.148.0/23
103.91.248.0/22
103.157.50.0/23
103.161.26.0/23
103.166.214.0/24
103.168.22.0/23
103.168.32.0/24
103.171.109.0/24
103.174.93.0/24
103.177.226.0/23
103.179.96.0/23
103.179.118.0/23
103.179.121.0/24
103.180.175.0/24
103.181.84.0/23
103.181.87.0/24
103.183.216.0/23
103.187.92.0/23
103.189.82.0/23
103.212.132.0/22
103.214.230.0/23
103.215.96.0/23
103.243.232.0/24
125.62.80.0/22
IPv6:
2001:df2:bec0::/47
2001:df5:4980::/48
2001:df5:a7c0::/48
2001:df5:af40::/48
2001:df5:b340::/48
2402:7a0::/32
Signature Algorithm: sha256WithRSAEncryption
9f:17:c6:87:0c:c3:4d:4c:db:39:29:db:da:98:e2:5e:cf:17:
12:b6:05:f1:33:5b:f6:db:72:0e:4b:65:f5:a5:4f:09:6c:07:
13:c5:47:14:f6:d6:63:3d:2d:63:1d:64:1a:bb:05:64:e7:f7:
a2:f1:c0:df:1f:bc:4c:cf:45:bf:e7:9d:6a:6e:18:25:13:49:
2e:b6:44:d0:5b:a3:03:47:34:f6:84:77:18:09:d1:e5:44:d1:
32:83:63:9d:3c:95:4d:ad:85:c6:1f:bb:f8:0f:6d:cd:61:93:
70:a7:32:7e:78:25:45:ff:6e:4c:5a:c6:77:b5:84:93:d0:42:
5e:0d:df:e7:5c:5b:c4:2e:87:6d:45:24:59:5d:71:23:94:a4:
1d:f4:2f:79:77:20:20:82:96:24:8e:68:31:c1:73:47:b4:70:
14:aa:53:e2:18:bb:92:1c:20:e5:71:ce:9c:9d:1c:58:b3:51:
2c:ec:0f:4b:ad:18:74:5b:f1:55:15:5a:02:02:8b:3e:28:13:
10:8b:21:d5:4c:c3:a6:66:de:ec:cf:f6:d2:fd:7c:dc:cd:ed:
4d:4c:da:7c:16:f9:9d:32:2a:cb:9f:83:cc:0b:5a:a4:9e:bf:
9f:9b:02:f6:9b:37:15:4d:07:52:1f:9b:bc:30:a8:d2:19:97:
89:d3:8c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:14:10 2026 by rpki-client