Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/173AFE3434C711F1B7993833C4833773.roa
File: 173AFE3434C711F1B7993833C4833773.roa (raw, json)
Hash identifier: amthksNB5S8smiSCNseVyoP8hH+6gqTL2Pqt97RAmik=
Subject key identifier: D4:31:6E:79:FA:34:BF:08:6E:B0:BA:C5:E1:E6:3D:1F:54:22:66:69
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DE20
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/173AFE3434C711F1B7993833C4833773.roa
Signing time: Sat 11 Apr 2026 11:12:57 +0000
ROA not before: Sat 11 Apr 2026 11:12:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 149240
IP address blocks: 36.50.118.0/23 maxlen: 24
103.82.96.0/24 maxlen: 24
103.88.56.0/24 maxlen: 24
103.88.57.0/24 maxlen: 24
103.139.191.0/24 maxlen: 24
103.148.119.0/24 maxlen: 24
103.152.158.0/24 maxlen: 24
103.157.112.0/23 maxlen: 24
103.159.99.0/24 maxlen: 24
103.160.72.0/23 maxlen: 24
103.162.196.0/23 maxlen: 24
103.163.149.0/24 maxlen: 24
103.163.166.0/23 maxlen: 24
103.167.172.0/24 maxlen: 24
103.170.0.0/23 maxlen: 24
103.170.190.0/24 maxlen: 24
103.171.172.0/24 maxlen: 24
103.174.108.0/23 maxlen: 24
103.178.176.0/23 maxlen: 24
103.184.40.0/24 maxlen: 24
103.184.236.0/24 maxlen: 24
103.191.203.0/24 maxlen: 24
2001:df0:3bc0::/48 maxlen: 48
2001:df0:8640::/48 maxlen: 48
2001:df0:9340::/48 maxlen: 48
2001:df1:9c40::/48 maxlen: 48
2001:df2:c3c0::/48 maxlen: 48
2001:df3:4940::/48 maxlen: 48
2001:df3:b6c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 11:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56864 (0xde20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 11 11:12:57 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69da2cb9-7351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:63:af:bd:1e:e0:48:63:77:87:ba:39:5a:f6:
08:ef:4b:be:80:c3:ec:cd:ea:99:c3:14:93:c5:60:
70:5e:35:8e:8f:ec:15:c3:5a:2d:cb:ed:ca:87:85:
90:a5:26:f0:f6:ab:64:19:45:09:e9:03:87:85:f2:
70:04:e9:43:61:fb:4f:b2:e1:f8:0b:42:ce:2a:db:
c0:c8:5e:e7:76:38:62:29:ae:ca:73:99:13:80:78:
b2:31:26:3d:d1:68:ae:0d:9d:6d:d4:d4:00:ef:ac:
e4:71:1e:7e:2d:1c:f7:ac:cf:a1:70:14:90:01:1b:
56:0f:9a:ce:c7:30:6d:0f:f4:bf:8b:42:2f:6f:51:
f9:78:17:c2:2e:f2:8d:cf:1c:31:79:dd:1f:1f:e9:
c0:eb:c6:91:af:04:d3:9b:6d:99:74:a9:bc:8f:3a:
b6:ea:85:b0:e4:96:61:a3:a5:05:52:50:97:66:68:
c8:b5:f5:5e:33:72:fe:28:6f:c0:01:1d:85:92:95:
63:0d:8e:70:fd:3c:a6:ae:7a:2a:4d:35:c1:8d:ad:
8e:1b:96:2b:e7:73:a2:71:84:b0:5f:9a:94:a2:04:
7f:05:62:a5:b2:70:3b:11:f4:ca:09:f6:5f:c8:62:
54:aa:bd:71:41:15:e8:7f:c4:c3:8f:5d:6d:93:c2:
51:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:6E:79:FA:34:BF:08:6E:B0:BA:C5:E1:E6:3D:1F:54:22:66:69
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/173AFE3434C711F1B7993833C4833773.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.118.0/23
103.82.96.0/24
103.88.56.0/23
103.139.191.0/24
103.148.119.0/24
103.152.158.0/24
103.157.112.0/23
103.159.99.0/24
103.160.72.0/23
103.162.196.0/23
103.163.149.0/24
103.163.166.0/23
103.167.172.0/24
103.170.0.0/23
103.170.190.0/24
103.171.172.0/24
103.174.108.0/23
103.178.176.0/23
103.184.40.0/24
103.184.236.0/24
103.191.203.0/24
IPv6:
2001:df0:3bc0::/48
2001:df0:8640::/48
2001:df0:9340::/48
2001:df1:9c40::/48
2001:df2:c3c0::/48
2001:df3:4940::/48
2001:df3:b6c0::/48
Signature Algorithm: sha256WithRSAEncryption
30:eb:4f:df:0c:73:ec:98:53:db:44:7d:fd:d4:e6:c7:d0:3b:
ea:f2:7f:d6:32:b5:8b:e6:a5:b2:20:c5:2a:03:25:5c:a6:87:
ff:46:d2:47:3e:80:ab:51:87:26:d4:90:cd:2f:56:ff:65:a3:
6c:91:d4:c2:b2:2b:8d:26:a1:28:0a:34:a1:a6:85:b6:47:90:
d1:f3:79:4b:d9:4c:a8:03:6d:f5:57:ce:41:2c:96:01:8e:c7:
b5:d6:75:71:4c:bf:41:41:04:70:0a:5b:54:3a:0a:40:23:6f:
b0:34:2e:54:7b:df:24:e2:15:82:78:0c:99:08:24:e5:be:08:
f9:aa:c8:5a:f6:67:cd:2f:62:6f:18:26:92:22:d9:e8:aa:d9:
71:af:36:4e:5c:95:6f:38:fb:63:f9:a4:5d:1d:bb:ed:6d:41:
9a:63:bf:9b:a8:0c:4d:8e:53:c1:3e:fe:b6:ed:9a:2f:17:5f:
2a:7b:fd:27:7a:2e:39:03:87:d2:39:e5:21:76:39:64:82:94:
b4:b5:f5:e7:5c:76:09:28:b5:42:5c:4c:44:09:9f:05:28:25:
9d:93:aa:28:8c:fc:61:53:a0:33:8b:b5:b5:f8:de:ee:92:05:
6b:cc:21:e5:b6:65:9e:f8:71:2e:76:3c:88:3f:4b:c2:97:5a:
7b:f5:ee:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:50 2026 by rpki-client