Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25ECFE32BDE011EF85554E6FC4F9AE02.roa
File: 25ECFE32BDE011EF85554E6FC4F9AE02.roa (raw, json)
Hash identifier: NSsOCWGA8IKY6yxd1RYmD6gTMHVPxu5ZVsSkf3cFeig=
Subject key identifier: 30:7C:09:1A:81:C6:0F:18:0D:DA:BA:4A:71:21:76:DB:F8:01:F3:16
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D184
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25ECFE32BDE011EF85554E6FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:15:43 +0000
ROA not before: Thu 08 May 2025 15:56:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132453
IP address blocks: 103.21.184.0/22 maxlen: 24
103.227.68.0/22 maxlen: 22
103.227.68.0/24 maxlen: 24
103.227.69.0/24 maxlen: 24
103.227.70.0/24 maxlen: 24
103.227.71.0/24 maxlen: 24
103.240.192.0/22 maxlen: 22
103.240.192.0/24 maxlen: 24
103.240.193.0/24 maxlen: 24
103.240.194.0/24 maxlen: 24
103.240.195.0/24 maxlen: 24
103.240.232.0/22 maxlen: 22
103.240.232.0/24 maxlen: 24
103.240.233.0/24 maxlen: 24
103.240.234.0/24 maxlen: 24
103.240.235.0/24 maxlen: 24
103.240.236.0/22 maxlen: 22
103.240.236.0/24 maxlen: 24
103.240.237.0/24 maxlen: 24
103.240.238.0/24 maxlen: 24
103.240.239.0/24 maxlen: 24
103.245.12.0/22 maxlen: 22
103.245.12.0/24 maxlen: 24
103.245.13.0/24 maxlen: 24
103.245.14.0/24 maxlen: 24
103.245.15.0/24 maxlen: 24
103.248.84.0/22 maxlen: 22
103.248.84.0/24 maxlen: 24
103.248.85.0/24 maxlen: 24
103.248.86.0/24 maxlen: 24
103.248.87.0/24 maxlen: 24
103.252.216.0/22 maxlen: 22
103.252.216.0/24 maxlen: 24
103.252.217.0/24 maxlen: 24
103.252.218.0/24 maxlen: 24
103.252.219.0/24 maxlen: 24
103.253.172.0/22 maxlen: 22
103.253.172.0/24 maxlen: 24
103.253.173.0/24 maxlen: 24
103.253.174.0/24 maxlen: 24
103.253.175.0/24 maxlen: 24
111.125.196.0/22 maxlen: 24
150.129.180.0/22 maxlen: 22
150.129.180.0/24 maxlen: 24
150.129.181.0/24 maxlen: 24
150.129.182.0/24 maxlen: 24
150.129.183.0/24 maxlen: 24
150.129.236.0/22 maxlen: 22
150.129.236.0/24 maxlen: 24
150.129.237.0/24 maxlen: 24
150.129.238.0/24 maxlen: 24
150.129.239.0/24 maxlen: 24
150.129.248.0/22 maxlen: 22
150.129.248.0/24 maxlen: 24
150.129.249.0/24 maxlen: 24
150.129.250.0/24 maxlen: 24
150.129.251.0/24 maxlen: 24
150.242.60.0/22 maxlen: 22
150.242.60.0/24 maxlen: 24
150.242.61.0/24 maxlen: 24
150.242.62.0/24 maxlen: 24
150.242.63.0/24 maxlen: 24
150.242.64.0/22 maxlen: 22
150.242.64.0/24 maxlen: 24
150.242.65.0/24 maxlen: 24
150.242.66.0/24 maxlen: 24
150.242.67.0/24 maxlen: 24
150.242.72.0/22 maxlen: 22
150.242.72.0/24 maxlen: 24
150.242.73.0/24 maxlen: 24
150.242.74.0/24 maxlen: 24
150.242.75.0/24 maxlen: 24
150.242.84.0/22 maxlen: 22
150.242.84.0/24 maxlen: 24
150.242.85.0/24 maxlen: 24
150.242.86.0/24 maxlen: 24
150.242.87.0/24 maxlen: 24
150.242.172.0/22 maxlen: 22
150.242.172.0/24 maxlen: 24
150.242.173.0/24 maxlen: 24
150.242.174.0/24 maxlen: 24
150.242.175.0/24 maxlen: 24
2400:80c0::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53636 (0xd184)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 15:56:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4ba8f-04ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:70:2c:24:9d:34:0a:c6:f1:fb:72:0b:d1:b1:
ec:bc:0d:a6:65:6d:0e:dd:1a:d9:dd:20:99:81:9c:
4c:ec:f2:67:f9:df:c9:04:ea:2c:c9:4e:16:54:2e:
45:c4:a0:2e:bc:8a:b5:cd:4c:65:13:fe:52:d2:d0:
d5:28:60:19:52:84:c8:e1:8c:42:20:7e:56:65:6a:
80:26:38:f0:b2:68:e7:ee:f1:bc:f3:33:c9:9c:d9:
9d:d3:5a:b9:ab:be:dd:24:48:55:d1:c8:f7:66:02:
62:2b:5a:c8:65:5a:1e:bc:ba:a8:06:9b:0b:93:c6:
38:41:02:22:d5:38:b6:75:4c:fb:06:24:0d:59:b3:
c3:a7:79:e2:8b:f7:34:d2:7a:02:e4:05:5f:7a:47:
a0:b2:f6:46:cd:08:95:ff:6c:5e:a2:4a:80:e4:92:
2a:4c:a0:04:c8:f7:3d:6a:ff:3e:90:19:8d:06:4f:
f0:20:f7:09:55:b2:75:55:5b:9a:58:e1:05:9e:3d:
df:63:19:94:52:33:96:79:17:dc:ed:42:36:ba:92:
5e:01:7c:17:7a:85:a5:7f:17:e3:a0:2e:c9:70:cf:
4e:df:3e:94:3c:5c:b2:09:39:1f:41:ef:78:92:ff:
70:0e:eb:85:5f:e6:5b:46:06:f9:54:21:30:31:26:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7C:09:1A:81:C6:0F:18:0D:DA:BA:4A:71:21:76:DB:F8:01:F3:16
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/25ECFE32BDE011EF85554E6FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.21.184.0/22
103.227.68.0/22
103.240.192.0/22
103.240.232.0/21
103.245.12.0/22
103.248.84.0/22
103.252.216.0/22
103.253.172.0/22
111.125.196.0/22
150.129.180.0/22
150.129.236.0/22
150.129.248.0/22
150.242.60.0-150.242.67.255
150.242.72.0/22
150.242.84.0/22
150.242.172.0/22
IPv6:
2400:80c0::/32
Signature Algorithm: sha256WithRSAEncryption
99:d1:fd:f3:63:e7:42:f8:b3:4d:3d:2a:59:fb:bc:20:e4:4d:
7d:51:36:63:65:ce:22:f4:a0:4e:1b:79:5b:39:24:52:e1:56:
22:79:41:b0:14:48:0a:f2:d4:58:fa:9c:f5:e1:86:69:ef:dc:
d3:df:2b:08:fe:3e:91:eb:86:1b:ce:13:39:63:7e:ce:21:60:
5e:f2:66:54:39:66:aa:c9:5f:0f:8d:ff:fd:94:17:b5:09:cd:
ef:a7:08:9a:28:6b:e8:15:1e:81:77:52:b8:58:9c:94:fd:ee:
f1:68:6c:f4:3f:a4:da:c8:32:5e:57:05:29:d5:6a:16:19:5e:
03:ed:1b:07:c3:b5:df:a0:6e:ed:e4:6a:75:92:c9:2e:a2:d1:
42:61:01:b7:d7:87:ac:71:6a:b3:86:5d:6b:ac:17:94:55:28:
51:13:7e:a0:4c:6a:6e:39:b8:7a:72:40:7e:40:1e:44:c1:8d:
bf:b1:81:b5:da:dc:10:09:9a:1a:ae:7e:24:2c:bf:aa:b9:0e:
38:0c:61:47:c6:95:62:02:7b:6e:d0:96:eb:36:ce:60:07:1e:
2c:c7:5b:8d:72:a2:95:c0:11:eb:dc:d4:53:96:bd:ed:c0:0b:
ca:b5:0a:22:82:39:34:cd:5e:3f:71:cb:3e:98:4a:95:e9:83:
5e:ad:e9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:19 2026 by rpki-client