Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/235369B2D47B11EE8EA4073CC4F9AE02.roa
File: 235369B2D47B11EE8EA4073CC4F9AE02.roa (raw, json)
Hash identifier: /qr4OMhknicSdXO7dux1BF6HKh8ylkSQkLC6LhdcWuc=
Subject key identifier: C6:64:8C:11:7B:4D:9E:CE:AA:F5:B4:3F:26:09:9E:8B:92:DE:45:BF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DAFD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/235369B2D47B11EE8EA4073CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 23:06:21 +0000
ROA not before: Tue 03 Feb 2026 05:44:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17813
IP address blocks: 59.176.0.0/16 maxlen: 24
59.177.0.0/16 maxlen: 24
59.178.176.0/20 maxlen: 20
59.179.0.0/16 maxlen: 24
59.180.0.0/16 maxlen: 24
59.185.0.0/20 maxlen: 24
59.185.20.0/24 maxlen: 24
59.185.96.0/20 maxlen: 24
59.185.192.0/18 maxlen: 24
120.57.0.0/16 maxlen: 24
120.58.0.0/16 maxlen: 24
120.59.0.0/16 maxlen: 24
120.60.0.0/16 maxlen: 17
120.63.128.0/17 maxlen: 17
182.56.0.0/16 maxlen: 24
182.57.0.0/16 maxlen: 24
182.58.0.0/16 maxlen: 24
182.59.0.0/18 maxlen: 18
182.59.128.0/17 maxlen: 24
202.159.192.0/19 maxlen: 19
202.159.192.0/20 maxlen: 20
202.159.214.0/24 maxlen: 24
202.159.224.0/19 maxlen: 20
203.94.192.0/20 maxlen: 24
203.94.240.0/20 maxlen: 24
2402:2600::/33 maxlen: 48
2402:2600:8000::/33 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 11:16:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56061 (0xdafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 3 05:44:37 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c66d-9c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bb:47:63:51:41:df:af:c0:80:08:74:f8:82:
ce:81:aa:40:eb:30:1f:7d:7e:8c:bc:88:ec:df:73:
1d:80:4c:70:c9:d7:9a:25:f5:c1:f6:a0:42:8a:08:
41:c8:e1:98:07:7d:c0:a3:9e:b7:6e:7c:4e:1e:42:
8f:5f:0e:57:0b:74:4f:18:ff:de:b5:15:32:b2:cf:
ed:7f:02:1d:48:91:46:79:3d:f1:e6:d1:18:ad:01:
6c:24:b7:f6:ed:d2:07:15:90:61:06:55:73:38:1c:
a0:81:39:81:41:b7:cc:5c:7c:0d:ac:8d:e1:82:59:
ba:07:b1:2f:22:87:de:3e:39:75:5a:ad:92:27:6f:
83:86:cc:80:26:7f:1b:2e:0d:fc:84:55:92:10:62:
3d:cb:6d:96:8a:cf:be:4f:5d:ad:76:3b:1e:71:14:
e3:72:a0:cd:ec:1c:ce:89:a2:e1:24:c7:ec:86:d3:
b3:0b:cf:cd:ef:5c:a9:4d:49:07:ad:f6:6a:e8:e8:
61:e6:b6:91:15:0b:b3:ff:f3:d4:93:82:05:50:70:
3c:74:00:16:68:03:52:a8:40:df:77:b9:43:6c:da:
c3:0d:95:aa:ed:79:48:91:1d:ff:4d:66:61:32:67:
e5:9a:76:f7:db:6c:6f:aa:be:84:d4:87:ef:60:14:
f2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:64:8C:11:7B:4D:9E:CE:AA:F5:B4:3F:26:09:9E:8B:92:DE:45:BF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/235369B2D47B11EE8EA4073CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
59.176.0.0/15
59.178.176.0/20
59.179.0.0-59.180.255.255
59.185.0.0/20
59.185.20.0/24
59.185.96.0/20
59.185.192.0/18
120.57.0.0-120.60.255.255
120.63.128.0/17
182.56.0.0-182.59.63.255
182.59.128.0/17
202.159.192.0/18
203.94.192.0/20
203.94.240.0/20
IPv6:
2402:2600::/32
Signature Algorithm: sha256WithRSAEncryption
2b:85:97:ff:3f:c4:9e:10:af:bb:3e:ea:ae:3c:67:75:90:7c:
a4:84:70:5a:79:36:d8:f1:29:c2:a9:70:76:c6:6d:01:33:d2:
22:52:45:ef:2f:5c:c1:64:79:99:a4:d1:53:6b:92:f7:b8:31:
fe:08:e3:be:bc:da:4f:db:df:72:6b:95:ba:26:4b:e1:27:a0:
44:8a:43:cd:dd:dc:35:05:74:71:bb:0d:a3:1f:5e:cf:58:52:
50:0b:7c:9c:38:d8:2d:14:23:a0:83:bb:72:51:94:a1:4a:d0:
13:e5:94:9d:a1:a4:a5:59:1b:25:0e:ac:58:d7:39:d4:3b:d3:
34:36:82:91:1f:86:0e:ea:85:ae:1e:42:a6:8c:e1:4a:04:fe:
00:43:95:bd:52:fe:4a:f9:62:2d:da:be:f9:67:73:05:26:bf:
3c:f3:27:ed:67:6b:61:dc:b7:ef:2b:1c:55:07:51:70:80:54:
23:ec:60:13:60:16:f7:58:66:8a:27:fc:2f:bc:86:b8:7b:c0:
9f:4e:96:05:3b:e8:2d:f2:6e:0f:f7:c8:ba:4d:7d:d3:2c:e2:
4b:4c:4b:26:46:90:07:27:0b:73:b5:81:98:a1:6e:cd:e1:d7:
2c:eb:df:4a:58:c6:99:80:6c:2b:80:62:7c:cd:6f:d4:55:21:
be:a9:07:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:01 2026 by rpki-client