Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/103C3FCAE4AF11F0B84F3FCD4D6F56BC.roa
File: 103C3FCAE4AF11F0B84F3FCD4D6F56BC.roa (raw, json)
Hash identifier: WN9jNLUDVkScc2VwyjVRjxoYh5SYPgH/o4+1aUQoPPY=
Subject key identifier: F6:27:02:5F:94:B2:D0:F2:12:18:6A:83:65:A1:AF:C1:F1:1D:56:8D
Certificate issuer: /CN=A914C3FB/serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Certificate serial: F5
Authority key identifier: 4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/103C3FCAE4AF11F0B84F3FCD4D6F56BC.roa
Signing time: Sun 01 Mar 2026 18:35:12 +0000
ROA not before: Mon 29 Dec 2025 12:08:19 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 7540
IP address blocks: 117.18.106.0/23 maxlen: 23
117.18.106.0/24 maxlen: 24
117.18.107.0/24 maxlen: 24
117.18.108.0/23 maxlen: 23
117.18.108.0/24 maxlen: 24
117.18.109.0/24 maxlen: 24
117.18.112.0/22 maxlen: 22
117.18.112.0/24 maxlen: 24
117.18.113.0/24 maxlen: 24
117.18.114.0/24 maxlen: 24
117.18.115.0/24 maxlen: 24
117.18.119.0/24 maxlen: 24
117.18.120.0/23 maxlen: 23
117.18.120.0/24 maxlen: 24
117.18.121.0/24 maxlen: 24
117.18.122.0/24 maxlen: 24
202.181.154.0/24 maxlen: 24
202.181.160.0/24 maxlen: 24
202.181.161.0/24 maxlen: 24
202.181.162.0/24 maxlen: 24
202.181.163.0/24 maxlen: 24
202.181.170.0/24 maxlen: 24
202.181.171.0/24 maxlen: 24
202.181.172.0/24 maxlen: 24
202.181.173.0/24 maxlen: 24
202.181.178.0/24 maxlen: 24
202.181.184.0/22 maxlen: 22
202.181.184.0/24 maxlen: 24
202.181.186.0/24 maxlen: 24
202.181.187.0/24 maxlen: 24
202.181.216.0/24 maxlen: 24
202.181.218.0/24 maxlen: 24
202.181.220.0/24 maxlen: 24
202.181.223.0/24 maxlen: 24
202.181.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:04:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 245 (0xf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C3FB, serialNumber=4F5F75A6C2988F58B603012A8DB445A1F37D5D72
Validity
Not Before: Dec 29 12:08:19 2025 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a486e0-6467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:a4:8a:7b:ec:a1:e5:ad:3f:ea:aa:b0:37:
75:d1:82:db:9d:11:3f:c4:23:7f:f9:41:37:69:78:
fe:3c:bf:0f:37:30:d3:dc:e6:ff:53:54:85:a5:9f:
24:7a:da:01:0c:d8:13:79:8b:0a:af:d9:c6:fe:e2:
f4:1f:1f:57:aa:62:15:32:51:0e:4b:9b:b7:2f:12:
f6:6e:ac:5f:03:f9:61:72:95:3a:89:a8:94:bb:24:
8c:c0:a7:a0:bc:3c:ed:6c:6d:ad:ef:ed:86:0f:6f:
ed:02:40:1b:0b:b9:5f:fd:22:38:71:4a:2f:a7:ca:
51:ba:c0:6d:1b:49:11:69:fb:0a:9f:be:3a:6b:74:
23:2a:24:0a:21:de:51:18:3b:e9:e6:74:ca:aa:2a:
88:e8:df:01:fe:ef:a6:36:af:f6:01:2c:39:d7:80:
d4:ac:e2:27:b6:ba:99:c9:53:e2:c0:73:3a:a9:40:
08:9b:25:10:3e:07:93:4a:02:8d:bb:1e:91:03:6b:
f9:e0:c7:67:13:ec:6a:c0:c8:53:51:22:3a:3b:0c:
c9:f8:f2:40:d2:c5:cc:a3:61:a6:b5:37:96:4a:55:
9c:3c:5c:16:d4:24:9e:4a:27:14:6e:87:de:2e:ff:
43:7d:b9:04:1b:8a:18:8e:73:a7:16:8a:0f:0a:66:
fe:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:27:02:5F:94:B2:D0:F2:12:18:6A:83:65:A1:AF:C1:F1:1D:56:8D
X509v3 Authority Key Identifier:
keyid:4F:5F:75:A6:C2:98:8F:58:B6:03:01:2A:8D:B4:45:A1:F3:7D:5D:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/T191psKYj1i2AwEqjbRFofN9XXI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T191psKYj1i2AwEqjbRFofN9XXI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C3FB/701782160BA111F08EFED219C4F9AE02/103C3FCAE4AF11F0B84F3FCD4D6F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
117.18.106.0-117.18.109.255
117.18.112.0/22
117.18.119.0-117.18.122.255
202.181.154.0/24
202.181.160.0/22
202.181.170.0-202.181.173.255
202.181.178.0/24
202.181.184.0/22
202.181.216.0/24
202.181.218.0/24
202.181.220.0/24
202.181.223.0-202.181.224.255
Signature Algorithm: sha256WithRSAEncryption
96:d9:7d:a2:51:ff:8d:ca:9e:3d:99:4e:d1:e7:d9:87:bc:fa:
56:d2:23:26:cf:1a:71:d3:ef:5d:88:d0:aa:49:61:3d:e2:0d:
25:06:c3:57:7d:cc:02:08:f8:e7:ff:44:67:e7:66:45:57:cc:
a0:50:d9:35:a7:ad:82:ee:37:87:b3:41:da:05:32:2e:fc:38:
2e:d0:76:2f:8f:d7:6f:d9:33:e1:64:e3:55:eb:ec:e4:bf:15:
99:35:b5:5f:1f:da:76:36:7c:bc:52:ca:bd:4c:0d:3e:2b:88:
cc:73:d6:88:29:70:6d:c2:13:84:8d:ad:7c:9e:52:c3:16:b4:
d2:82:43:34:7f:2c:b9:14:c8:c5:fa:cd:bb:37:29:47:c9:a0:
99:07:d5:1f:e1:54:c6:0f:39:53:24:5a:ed:7e:63:0b:9b:a5:
87:95:d0:44:9a:02:e8:55:85:1c:c8:bb:37:4d:ce:2e:f5:a1:
71:47:7b:7d:fe:64:45:ff:3d:30:a0:03:4c:7b:88:ac:a0:bf:
df:9d:7f:d2:09:20:89:b7:91:69:2c:a6:41:44:50:12:0d:12:
e2:3c:16:60:b6:d0:a4:12:9a:8d:92:8e:75:d8:a1:28:a7:91:
bd:2c:be:bb:74:09:85:6d:7a:33:c7:c2:93:93:c4:dc:8c:5a:
93:75:d5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:08:09 2026 by rpki-client