Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FE58C10EC7A11F098ACD3F1536F56BC.roa
File: 1FE58C10EC7A11F098ACD3F1536F56BC.roa (raw, json)
Hash identifier: v6itibtS0mVxAOiyejRsbpYN17vvcOBERMVxR/rop78=
Subject key identifier: 84:05:CA:DF:5B:D5:62:00:1D:FD:52:34:07:F5:5E:CD:A9:AA:06:73
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FCA6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FE58C10EC7A11F098ACD3F1536F56BC.roa
Signing time: Fri 18 Sep 2026 11:52:55 +0000
ROA not before: Fri 18 Sep 2026 11:52:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133296
IP address blocks: 43.239.110.0/24 maxlen: 24
43.243.76.0/24 maxlen: 24
43.243.77.0/24 maxlen: 24
43.243.78.0/24 maxlen: 24
103.78.245.0/24 maxlen: 24
103.78.247.0/24 maxlen: 24
103.131.24.0/23 maxlen: 24
103.172.224.0/24 maxlen: 24
103.182.176.0/23 maxlen: 24
103.228.149.0/24 maxlen: 24
103.233.24.0/23 maxlen: 24
103.251.22.0/24 maxlen: 24
150.129.235.0/24 maxlen: 24
202.162.231.0/24 maxlen: 24
202.162.240.0/24 maxlen: 24
202.162.241.0/24 maxlen: 24
202.162.248.0/24 maxlen: 24
202.162.249.0/24 maxlen: 24
202.162.251.0/24 maxlen: 24
203.115.82.0/23 maxlen: 24
210.89.32.0/24 maxlen: 24
210.89.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64678 (0xfca6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 18 11:52:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aad2617-94fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1c:92:da:f2:64:80:30:2c:0e:2c:85:d6:11:
5d:e1:10:a1:8c:26:22:0d:a2:a7:a8:d8:95:1b:af:
ea:22:5d:55:92:6d:82:21:e6:77:6e:b8:90:d6:b7:
0e:6e:5a:d8:8c:f4:3d:d6:0e:21:3c:b5:28:79:90:
cf:48:38:61:60:df:4c:b3:20:c7:58:f9:6c:fb:18:
d2:40:07:8a:99:d4:bd:99:db:ab:be:f8:1c:71:65:
1f:98:36:66:72:06:a6:a2:27:5f:3b:22:b9:49:b2:
14:af:6c:3f:85:68:57:1c:c3:44:22:08:3e:e6:1b:
a8:d3:44:7a:df:34:67:3e:93:b7:7a:a3:b2:9f:ab:
ca:3a:ba:58:60:2a:72:71:cf:4c:eb:da:39:fa:6f:
48:84:1d:b3:d0:b1:ea:35:b9:3b:a9:c8:13:a5:ba:
f1:b0:8e:31:0a:cd:e0:18:fb:05:1c:35:2f:d5:64:
0c:54:cf:a7:d9:0b:5f:62:06:10:40:c7:92:78:45:
9d:75:d5:96:c7:7b:b7:e4:36:db:9d:c2:75:cc:1b:
26:ef:fa:65:6b:b0:c5:d8:17:50:a5:78:72:cd:63:
a4:8a:5f:a9:03:28:36:19:be:68:1c:8a:bf:32:f2:
67:b2:1b:12:7c:c1:66:a6:a2:0c:5d:c2:32:b8:4a:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:05:CA:DF:5B:D5:62:00:1D:FD:52:34:07:F5:5E:CD:A9:AA:06:73
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FE58C10EC7A11F098ACD3F1536F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
43.239.110.0/24
43.243.76.0-43.243.78.255
103.78.245.0/24
103.78.247.0/24
103.131.24.0/23
103.172.224.0/24
103.182.176.0/23
103.228.149.0/24
103.233.24.0/23
103.251.22.0/24
150.129.235.0/24
202.162.231.0/24
202.162.240.0/23
202.162.248.0/23
202.162.251.0/24
203.115.82.0/23
210.89.32.0/24
210.89.49.0/24
Signature Algorithm: sha256WithRSAEncryption
13:db:1f:a0:13:9b:78:90:c3:86:0a:a8:09:d2:c0:ca:6b:32:
49:d1:f4:8f:c1:e9:93:9b:4f:2d:6b:a6:d8:ae:51:d8:4a:21:
7e:cf:a4:f7:20:fd:85:78:98:d9:67:b6:36:d7:2b:7a:99:ff:
41:84:e0:24:ea:4e:fc:6e:45:d9:0b:55:0b:30:fc:c2:a4:32:
51:ba:1f:ca:f8:dd:f9:cc:a5:3f:3a:ef:5b:68:1c:00:18:07:
50:df:cd:5f:8b:c7:9b:2f:56:cd:74:cd:3c:4b:5c:92:51:b7:
d7:38:ce:b2:9d:6d:2d:39:e3:3c:4f:e5:4a:43:99:d2:28:dc:
ad:48:38:dc:0a:20:9c:82:d8:23:fe:bc:1c:71:68:cc:9e:e1:
d9:f7:1f:97:4b:2d:6a:65:1f:26:8b:2b:5c:0b:7e:40:9b:c0:
06:48:56:e1:b2:10:7a:06:fe:12:28:85:96:a7:10:12:50:cf:
71:ce:b6:cd:ee:24:3a:1b:cb:eb:77:b1:db:28:5a:3a:0a:6b:
c5:52:e3:7b:82:e6:71:ad:27:ae:bb:88:6c:5c:43:0d:b7:07:
af:75:30:35:91:55:16:60:e1:5a:7d:2d:5d:93:29:12:a3:b6:
98:99:8f:f9:50:5e:6f:02:a3:77:1d:a7:8e:35:64:71:ae:08:
6f:cd:75:8c
-----BEGIN CERTIFICATE-----
MIIFrDCCBJSgAwIBAgIDAPymMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDkxODExNTI1NVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmFhZDI2MTctOTRmYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALAcktryZIAwLA4shdYRXeEQoYwmIg2ip6jYlRuv6iJdVZJtgiHmd264kNa3
Dm5a2Iz0PdYOITy1KHmQz0g4YWDfTLMgx1j5bPsY0kAHipnUvZnbq774HHFlH5g2
ZnIGpqInXzsiuUmyFK9sP4VoVxzDRCIIPuYbqNNEet80Zz6Tt3qjsp+ryjq6WGAq
cnHPTOvaOfpvSIQds9Cx6jW5O6nIE6W68bCOMQrN4Bj7BRw1L9VkDFTPp9kLX2IG
EEDHknhFnXXVlsd7t+Q2253CdcwbJu/6ZWuwxdgXUKV4cs1jpIpfqQMoNhm+aByK
vzLyZ7IbEnzBZqaiDF3CMrhKtKECAwEAAaOCAs8wggLLMB0GA1UdDgQWBBSEBcrf
W9ViAB39UjQH9V7NqaoGczAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFGRTU4QzEw
RUM3QTExRjA5OEFDRDNGMTUzNkY1NkJDLnJvYTCBjQYIKwYBBQUHAQcBAf8EfjB8
MHoEAgABMHQDBAAr724wDAMEAivzTAMEACvzTgMEAGdO9QMEAGdO9wMEAWeDGAME
AGes4AMEAWe2sAMEAGfklQMEAWfpGAMEAGf7FgMEAJaB6wMEAMqi5wMEAcqi8AME
Acqi+AMEAMqi+wMEActzUgMEANJZIAMEANJZMTANBgkqhkiG9w0BAQsFAAOCAQEA
E9sfoBObeJDDhgqoCdLAymsySdH0j8Hpk5tPLWum2K5R2Eohfs+k9yD9hXiY2We2
Ntcrepn/QYTgJOpO/G5F2QtVCzD8wqQyUbofyvjd+cylPzrvW2gcABgHUN/NX4vH
my9WzXTNPEtcklG31zjOsp1tLTnjPE/lSkOZ0ijcrUg43AognILYI/68HHFozJ7h
2fcfl0stamUfJosrXAt+QJvABkhW4bIQegb+EiiFlqcQElDPcc62ze4kOhvL63ex
2yhaOgprxVLje4Lmca0nrruIbFxDDbcHr3UwNZFVFmDhWn0tXZMpEqO2mJmP+VBe
bwKjdx2njjVkca4Ib811jA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:57:57 2026 by rpki-client