Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C5768EEAABE11F1A748CD724011F970.roa
File: 2C5768EEAABE11F1A748CD724011F970.roa (raw, json)
Hash identifier: mBJVS92mD0ftSqILuAvow6nQ9YBQGa3Ul0n7uyuVIY8=
Subject key identifier: 49:7A:30:E1:11:D6:8E:4A:92:DC:D1:D2:6C:42:FD:C8:93:1A:E2:B9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FC9D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C5768EEAABE11F1A748CD724011F970.roa
Signing time: Thu 17 Sep 2026 12:15:57 +0000
ROA not before: Thu 17 Sep 2026 12:15:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140641
IP address blocks: 43.242.36.0/22 maxlen: 24
45.118.160.0/22 maxlen: 22
45.118.160.0/24 maxlen: 24
45.118.161.0/24 maxlen: 24
45.118.162.0/24 maxlen: 24
45.118.163.0/24 maxlen: 24
45.119.148.0/22 maxlen: 24
45.248.60.0/22 maxlen: 24
45.251.28.0/22 maxlen: 24
103.15.80.0/22 maxlen: 24
103.16.32.0/22 maxlen: 24
103.19.136.0/22 maxlen: 24
103.43.36.0/24 maxlen: 24
103.49.206.0/24 maxlen: 24
103.58.164.0/22 maxlen: 24
103.67.180.0/22 maxlen: 24
103.69.43.0/24 maxlen: 24
103.91.244.0/22 maxlen: 24
103.93.94.0/24 maxlen: 24
103.95.50.0/23 maxlen: 24
103.97.104.0/24 maxlen: 24
103.97.105.0/24 maxlen: 24
103.97.106.0/24 maxlen: 24
103.97.107.0/24 maxlen: 24
103.99.36.0/22 maxlen: 24
103.108.12.0/22 maxlen: 24
103.110.12.0/24 maxlen: 24
103.110.13.0/24 maxlen: 24
103.110.14.0/24 maxlen: 24
103.110.15.0/24 maxlen: 24
103.114.152.0/22 maxlen: 24
103.117.48.0/22 maxlen: 24
103.117.212.0/24 maxlen: 24
103.119.170.0/23 maxlen: 24
103.123.52.0/22 maxlen: 24
103.129.97.0/24 maxlen: 24
103.131.26.0/24 maxlen: 24
103.139.7.0/24 maxlen: 24
103.140.72.0/24 maxlen: 24
103.144.37.0/24 maxlen: 24
103.151.96.0/23 maxlen: 24
103.152.79.0/24 maxlen: 24
103.171.44.0/24 maxlen: 24
103.171.45.0/24 maxlen: 24
103.182.90.0/24 maxlen: 24
103.190.243.0/24 maxlen: 24
103.207.148.0/22 maxlen: 24
103.216.92.0/22 maxlen: 24
103.216.208.0/22 maxlen: 24
103.218.124.0/24 maxlen: 24
103.218.125.0/24 maxlen: 24
103.218.126.0/24 maxlen: 24
103.218.127.0/24 maxlen: 24
103.219.0.0/24 maxlen: 24
103.219.1.0/24 maxlen: 24
103.219.2.0/24 maxlen: 24
103.219.3.0/24 maxlen: 24
103.219.200.0/22 maxlen: 24
103.225.224.0/22 maxlen: 24
103.228.140.0/24 maxlen: 24
103.228.141.0/24 maxlen: 24
103.228.142.0/24 maxlen: 24
103.228.143.0/24 maxlen: 24
103.232.24.0/22 maxlen: 24
103.235.68.0/22 maxlen: 24
103.240.89.0/24 maxlen: 24
103.251.150.0/24 maxlen: 24
103.253.70.0/24 maxlen: 24
150.107.144.0/22 maxlen: 24
157.119.228.0/22 maxlen: 24
163.227.186.0/24 maxlen: 24
163.227.187.0/24 maxlen: 24
175.158.75.0/24 maxlen: 24
182.255.56.0/22 maxlen: 24
202.3.72.0/23 maxlen: 24
202.162.240.0/24 maxlen: 24
202.162.241.0/24 maxlen: 24
202.162.243.0/24 maxlen: 24
203.112.132.0/22 maxlen: 22
203.112.132.0/24 maxlen: 24
203.112.133.0/24 maxlen: 24
203.112.134.0/24 maxlen: 24
203.112.135.0/24 maxlen: 24
203.112.156.0/22 maxlen: 24
2402:61a0:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64669 (0xfc9d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 17 12:15:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aabd9fd-e36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4e:11:a5:7b:0e:bc:ed:c0:86:0a:30:da:6d:
d2:8f:5e:0b:70:f4:a6:4b:6b:00:1c:e7:b0:ef:29:
52:e5:9f:9d:b8:06:f3:ef:0b:53:9f:a5:f5:86:20:
7b:85:25:97:e9:eb:c6:1f:ca:73:a8:7d:26:23:cb:
bc:42:06:d4:18:a9:34:0b:0b:7f:b0:c6:8e:31:21:
94:57:4d:8a:26:bb:55:c8:e2:60:9f:88:60:f8:78:
42:57:de:bd:70:90:30:b8:2f:e0:66:af:50:e2:1d:
5f:91:e8:a2:4a:2e:48:b1:f1:9e:cf:0c:8d:8f:da:
e5:47:4f:48:fb:87:c8:88:a1:0d:a0:c1:2d:60:94:
3f:94:0b:7d:84:da:1f:1c:8f:d5:42:9e:93:22:25:
35:2c:49:b4:51:03:06:b2:87:34:e7:12:84:7d:19:
6f:58:b0:64:eb:ea:c5:2f:b2:05:05:40:6b:f3:b2:
f8:86:80:90:98:59:95:b9:f9:66:00:15:c0:32:91:
34:91:a1:79:ba:67:59:ba:93:4d:b2:14:95:76:ec:
39:12:91:ef:9f:81:fc:cc:c9:dd:7b:54:3f:23:6f:
ca:90:7e:ca:c1:29:8c:1d:72:ae:8e:24:fc:7b:01:
b8:92:64:fb:88:87:9f:d7:88:8e:51:a0:d0:50:6d:
2e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7A:30:E1:11:D6:8E:4A:92:DC:D1:D2:6C:42:FD:C8:93:1A:E2:B9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/2C5768EEAABE11F1A748CD724011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.242.36.0/22
45.118.160.0/22
45.119.148.0/22
45.248.60.0/22
45.251.28.0/22
103.15.80.0/22
103.16.32.0/22
103.19.136.0/22
103.43.36.0/24
103.49.206.0/24
103.58.164.0/22
103.67.180.0/22
103.69.43.0/24
103.91.244.0/22
103.93.94.0/24
103.95.50.0/23
103.97.104.0/22
103.99.36.0/22
103.108.12.0/22
103.110.12.0/22
103.114.152.0/22
103.117.48.0/22
103.117.212.0/24
103.119.170.0/23
103.123.52.0/22
103.129.97.0/24
103.131.26.0/24
103.139.7.0/24
103.140.72.0/24
103.144.37.0/24
103.151.96.0/23
103.152.79.0/24
103.171.44.0/23
103.182.90.0/24
103.190.243.0/24
103.207.148.0/22
103.216.92.0/22
103.216.208.0/22
103.218.124.0/22
103.219.0.0/22
103.219.200.0/22
103.225.224.0/22
103.228.140.0/22
103.232.24.0/22
103.235.68.0/22
103.240.89.0/24
103.251.150.0/24
103.253.70.0/24
150.107.144.0/22
157.119.228.0/22
163.227.186.0/23
175.158.75.0/24
182.255.56.0/22
202.3.72.0/23
202.162.240.0/23
202.162.243.0/24
203.112.132.0/22
203.112.156.0/22
IPv6:
2402:61a0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
5f:fe:b1:7d:99:bd:f7:67:72:b7:b4:3a:c8:5b:d6:6e:91:22:
1b:33:02:65:93:2b:64:59:f5:a3:8c:5c:7e:1c:84:bd:94:e7:
29:4d:b6:68:40:06:33:7e:70:3f:71:8f:93:dd:05:39:c5:2b:
aa:eb:23:98:d2:6e:eb:40:45:ca:ba:6e:10:a7:76:d9:2e:ed:
75:72:75:be:a4:86:03:eb:2c:6c:00:11:de:0b:19:dc:92:06:
49:08:f9:e3:2f:19:7f:37:75:b6:7d:a1:48:98:33:95:a9:e2:
a4:71:f9:c1:2c:0d:55:eb:32:7c:0d:5e:60:50:a2:a5:3e:69:
e1:a8:07:00:3a:b5:7e:a4:ac:6e:4c:bd:39:67:f0:9d:db:5e:
cf:77:70:16:76:d7:39:3b:a6:73:0f:67:48:5f:24:81:ee:2e:
8f:ef:c6:12:c4:ee:d0:25:c7:8f:9e:0c:d0:44:98:7f:e2:fa:
31:a7:6d:54:eb:4c:cb:16:2f:e7:b4:13:11:d2:7a:fd:79:78:
f4:04:a1:22:f7:4a:1f:3d:b6:98:2c:53:ff:3e:c1:52:ae:89:
ad:3e:3f:52:cb:7b:59:37:07:f1:fa:63:fb:c1:7c:34:59:c2:
04:1e:b3:6c:4d:eb:09:c3:f0:fd:bb:18:6e:3e:13:ce:d7:64:
b4:d7:b3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:49:23 2026 by rpki-client