Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A8AE51C61CC11F1800B0C0C9547A888.roa
File: 2A8AE51C61CC11F1800B0C0C9547A888.roa (raw, json)
Hash identifier: ZqNVgJLi8VF1MFDh1dOw6KG+QzReCnm5PfcN3mpzdWc=
Subject key identifier: 70:B9:DB:1B:3A:3D:37:F1:5C:72:1E:25:D6:B8:1B:AE:88:DC:6F:46
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EC34
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A8AE51C61CC11F1800B0C0C9547A888.roa
Signing time: Sat 06 Jun 2026 17:21:34 +0000
ROA not before: Sat 06 Jun 2026 17:21:34 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 17665
IP address blocks: 36.255.88.0/22 maxlen: 24
43.230.40.0/22 maxlen: 24
45.117.72.0/22 maxlen: 24
45.118.104.0/22 maxlen: 24
59.152.120.0/22 maxlen: 24
103.27.48.0/22 maxlen: 24
103.38.68.0/23 maxlen: 24
103.38.128.0/22 maxlen: 24
103.57.140.0/22 maxlen: 24
103.58.152.0/22 maxlen: 24
103.59.204.0/22 maxlen: 24
103.86.68.0/24 maxlen: 24
103.86.69.0/24 maxlen: 24
103.88.58.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.92.112.0/24 maxlen: 24
103.92.113.0/24 maxlen: 24
103.92.114.0/24 maxlen: 24
103.99.196.0/23 maxlen: 24
103.99.198.0/23 maxlen: 24
103.135.64.0/24 maxlen: 24
103.135.65.0/24 maxlen: 24
103.135.200.0/22 maxlen: 24
103.136.172.0/22 maxlen: 24
103.142.114.0/23 maxlen: 24
103.144.188.0/23 maxlen: 24
103.147.1.0/24 maxlen: 24
103.152.38.0/23 maxlen: 24
103.157.162.0/24 maxlen: 24
103.157.163.0/24 maxlen: 24
103.158.170.0/23 maxlen: 24
103.159.98.0/24 maxlen: 24
103.159.212.0/23 maxlen: 24
103.161.40.0/23 maxlen: 24
103.164.46.0/23 maxlen: 24
103.165.28.0/23 maxlen: 24
103.168.177.0/24 maxlen: 24
103.168.232.0/23 maxlen: 24
103.171.9.0/24 maxlen: 24
103.171.208.0/24 maxlen: 24
103.175.30.0/24 maxlen: 24
103.175.31.0/24 maxlen: 24
103.176.176.0/24 maxlen: 24
103.176.194.0/23 maxlen: 24
103.177.174.0/23 maxlen: 24
103.178.74.0/24 maxlen: 24
103.178.168.0/23 maxlen: 24
103.179.122.0/24 maxlen: 24
103.182.130.0/23 maxlen: 24
103.184.40.0/24 maxlen: 24
103.184.41.0/24 maxlen: 24
103.186.121.0/24 maxlen: 24
103.186.176.0/24 maxlen: 24
103.199.192.0/22 maxlen: 24
103.203.36.0/22 maxlen: 24
103.206.8.0/24 maxlen: 24
103.206.9.0/24 maxlen: 24
103.206.10.0/24 maxlen: 24
103.206.11.0/24 maxlen: 24
103.209.68.0/22 maxlen: 22
103.209.68.0/24 maxlen: 24
103.209.69.0/24 maxlen: 24
103.209.70.0/24 maxlen: 24
103.209.71.0/24 maxlen: 24
103.215.164.0/22 maxlen: 24
103.245.103.0/24 maxlen: 24
111.223.24.0/22 maxlen: 24
157.119.44.0/22 maxlen: 24
162.12.246.0/23 maxlen: 24
202.148.60.0/22 maxlen: 24
203.189.248.0/22 maxlen: 24
203.192.192.0/20 maxlen: 24
203.192.208.0/22 maxlen: 24
203.192.212.0/24 maxlen: 24
203.192.213.0/24 maxlen: 24
203.192.214.0/24 maxlen: 24
203.192.215.0/24 maxlen: 24
203.192.216.0/24 maxlen: 24
203.192.217.0/24 maxlen: 24
203.192.218.0/24 maxlen: 24
203.192.219.0/24 maxlen: 24
203.192.220.0/22 maxlen: 24
203.192.224.0/23 maxlen: 24
203.192.226.0/24 maxlen: 24
203.192.227.0/24 maxlen: 24
203.192.228.0/22 maxlen: 24
203.192.232.0/22 maxlen: 24
203.192.236.0/24 maxlen: 24
203.192.237.0/24 maxlen: 24
203.192.238.0/23 maxlen: 24
203.192.240.0/20 maxlen: 20
203.192.240.0/24 maxlen: 24
203.192.241.0/24 maxlen: 24
203.192.242.0/24 maxlen: 24
203.192.243.0/24 maxlen: 24
203.192.244.0/24 maxlen: 24
203.192.245.0/24 maxlen: 24
203.192.246.0/24 maxlen: 24
203.192.247.0/24 maxlen: 24
203.192.248.0/24 maxlen: 24
203.192.249.0/24 maxlen: 24
203.192.250.0/24 maxlen: 24
203.192.251.0/24 maxlen: 24
203.192.252.0/24 maxlen: 24
203.192.253.0/24 maxlen: 24
203.192.254.0/24 maxlen: 24
203.192.255.0/24 maxlen: 24
203.194.96.0/24 maxlen: 24
203.194.97.0/24 maxlen: 24
203.194.98.0/24 maxlen: 24
203.194.99.0/24 maxlen: 24
203.194.100.0/24 maxlen: 24
203.194.101.0/24 maxlen: 24
203.194.102.0/24 maxlen: 24
203.194.103.0/24 maxlen: 24
203.194.104.0/24 maxlen: 24
203.194.105.0/24 maxlen: 24
203.194.106.0/24 maxlen: 24
203.194.107.0/24 maxlen: 24
203.194.108.0/24 maxlen: 24
203.194.109.0/24 maxlen: 24
203.194.110.0/24 maxlen: 24
203.194.111.0/24 maxlen: 24
2001:df1:9980::/48 maxlen: 48
2001:df1:9980:1::/64 maxlen: 64
2001:df1:9980:2::/64 maxlen: 64
2001:df1:9980:3::/64 maxlen: 64
2001:df1:9980:4::/64 maxlen: 64
2001:df1:9980:5::/64 maxlen: 64
2001:df2:4c0::/48 maxlen: 48
2404:ba00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60468 (0xec34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 6 17:21:34 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a24571e-d417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:88:86:3e:71:53:20:e5:e7:e8:2e:7c:08:e9:
1f:0a:ab:6c:62:69:c5:2e:df:32:6f:9c:58:f2:d4:
a5:81:14:3c:25:d7:99:22:31:d2:bd:00:14:55:73:
29:80:ad:07:1d:28:88:29:aa:53:1f:9b:47:0b:c4:
6e:dc:bf:9e:29:5f:6f:b1:56:06:b0:73:3e:6e:f3:
14:54:02:d0:29:68:f7:f1:bb:93:4a:fa:96:52:2e:
87:5f:5d:9e:40:78:f8:52:04:2c:20:70:6a:8d:cc:
ad:61:8e:8b:c9:c6:9e:e6:9a:a5:49:81:85:8a:bb:
5f:11:59:36:a5:23:eb:3c:12:de:1e:91:63:fa:80:
dc:9a:04:8a:ca:5d:80:d0:7f:a8:fe:1d:a8:ef:de:
21:87:d0:fd:c0:39:f7:60:8e:19:7a:9f:06:f3:54:
05:ee:f9:92:5a:40:fe:2e:92:b7:0c:e4:c5:9b:e3:
40:f4:aa:ca:a6:af:1d:11:e9:e1:5f:3e:4c:60:21:
f7:11:79:76:7b:ea:3b:a7:fb:0d:5f:44:a7:c6:b3:
0c:a5:6b:7a:4b:19:11:da:c7:f3:4b:f1:79:9f:74:
e2:da:e8:8e:1b:5c:4a:05:c5:c7:05:26:35:2a:c0:
63:79:bb:89:3b:94:b1:14:4c:5f:48:52:72:92:e7:
3b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B9:DB:1B:3A:3D:37:F1:5C:72:1E:25:D6:B8:1B:AE:88:DC:6F:46
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2A8AE51C61CC11F1800B0C0C9547A888.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.88.0/22
43.230.40.0/22
45.117.72.0/22
45.118.104.0/22
59.152.120.0/22
103.27.48.0/22
103.38.68.0/23
103.38.128.0/22
103.57.140.0/22
103.58.152.0/22
103.59.204.0/22
103.86.68.0/23
103.88.58.0/23
103.92.112.0-103.92.114.255
103.99.196.0/22
103.135.64.0/23
103.135.200.0/22
103.136.172.0/22
103.142.114.0/23
103.144.188.0/23
103.147.1.0/24
103.152.38.0/23
103.157.162.0/23
103.158.170.0/23
103.159.98.0/24
103.159.212.0/23
103.161.40.0/23
103.164.46.0/23
103.165.28.0/23
103.168.177.0/24
103.168.232.0/23
103.171.9.0/24
103.171.208.0/24
103.175.30.0/23
103.176.176.0/24
103.176.194.0/23
103.177.174.0/23
103.178.74.0/24
103.178.168.0/23
103.179.122.0/24
103.182.130.0/23
103.184.40.0/23
103.186.121.0/24
103.186.176.0/24
103.199.192.0/22
103.203.36.0/22
103.206.8.0/22
103.209.68.0/22
103.215.164.0/22
103.245.103.0/24
111.223.24.0/22
157.119.44.0/22
162.12.246.0/23
202.148.60.0/22
203.189.248.0/22
203.192.192.0/18
203.194.96.0/20
IPv6:
2001:df1:9980::/48
2001:df2:4c0::/48
2404:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
7d:f3:9c:75:00:ef:cc:cd:ae:6d:91:fa:44:dc:33:9b:d6:54:
c9:66:90:21:fe:21:02:f3:7a:a2:d7:56:df:8d:e0:9c:fc:6d:
dc:c0:c3:a1:d7:f2:38:23:7e:1d:3c:23:66:c3:76:33:12:4f:
5c:21:dd:f4:f4:e4:04:99:5f:53:f7:55:b5:e6:3c:66:a5:f7:
54:9f:6f:c6:8d:20:a8:e8:99:ad:aa:d9:69:b2:01:2f:19:58:
b3:fa:7f:96:8d:de:bc:ea:06:99:dc:a0:e2:99:6e:d2:a4:10:
f1:87:0c:de:0e:b4:8c:69:82:3e:37:6f:13:68:fc:b7:3b:64:
35:ad:ba:f9:09:ae:e0:cb:37:13:55:36:33:1d:cc:c5:58:1d:
79:69:c5:aa:36:fa:5d:56:27:00:c4:3f:68:fe:6b:54:a5:bf:
fc:ea:9b:ba:89:5a:40:2c:b9:11:2c:51:63:25:65:1f:ca:52:
f1:b4:69:c2:73:ba:eb:62:b7:aa:63:42:b0:bb:b2:20:a1:ec:
c5:5f:be:19:83:a9:34:b9:53:b6:c9:d8:06:f2:ee:e1:a6:ed:
62:2b:c3:f3:bd:30:b9:e7:21:86:49:79:10:d9:17:12:68:2b:
89:e0:b8:79:1d:48:de:49:2a:67:c7:7f:d6:f2:f3:cb:66:03:
21:07:f3:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:19:50 2026 by rpki-client