Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/399E5562564611F093D7763DC4F9AE02.roa
File: 399E5562564611F093D7763DC4F9AE02.roa (raw, json)
Hash identifier: 9/EqAD3bf7Hr5ai0hXWexOGnpB2WJIBk3g6TIUmmkPs=
Subject key identifier: 1D:38:36:05:DC:FF:05:45:BF:FA:B1:E0:4A:65:70:FD:91:1A:8D:41
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D94E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/399E5562564611F093D7763DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:58:41 +0000
ROA not before: Tue 01 Jul 2025 06:40:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58898
IP address blocks: 45.116.112.0/22 maxlen: 24
103.25.44.0/22 maxlen: 24
103.93.104.0/22 maxlen: 24
103.127.170.0/24 maxlen: 24
103.137.148.0/24 maxlen: 24
103.143.214.0/24 maxlen: 24
103.148.134.0/23 maxlen: 24
103.151.114.0/24 maxlen: 24
103.153.22.0/24 maxlen: 24
103.157.228.0/23 maxlen: 24
103.159.136.0/24 maxlen: 24
103.159.180.0/24 maxlen: 24
103.160.171.0/24 maxlen: 24
103.170.160.0/24 maxlen: 24
103.175.108.0/23 maxlen: 24
103.176.124.0/23 maxlen: 24
103.225.124.0/22 maxlen: 24
163.53.204.0/22 maxlen: 24
2001:df2:a640::/48 maxlen: 48
2403:f680::/40 maxlen: 48
2403:f680:102::/48 maxlen: 48
2403:f680:103::/48 maxlen: 48
2403:f680:104::/48 maxlen: 48
2403:f680:105::/48 maxlen: 48
2403:f680:106::/48 maxlen: 48
2403:f680:107::/48 maxlen: 48
2403:f680:108::/48 maxlen: 48
2403:f680:112::/48 maxlen: 48
2403:f680:113::/48 maxlen: 48
2403:f680:114::/48 maxlen: 48
2403:f680:115::/48 maxlen: 48
2403:f680:116::/48 maxlen: 48
2403:f680:117::/48 maxlen: 48
2403:f680:118::/48 maxlen: 48
2403:f680:119::/48 maxlen: 48
2403:f680:120::/48 maxlen: 48
2403:f680:121::/48 maxlen: 48
2403:f680:122::/48 maxlen: 48
2403:f680:123::/48 maxlen: 48
2403:f680:124::/48 maxlen: 48
2403:f680:125::/48 maxlen: 48
2403:f680:126::/48 maxlen: 48
2403:f680:127::/48 maxlen: 48
2403:f680:128::/48 maxlen: 48
2403:f680:129::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55630 (0xd94e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 1 06:40:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c4a1-c50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:f0:02:b8:cd:8c:f0:03:4b:54:54:fc:33:
c0:9a:43:b4:b5:f4:f6:d7:82:f9:ca:b6:7d:0d:f6:
d4:d7:38:3a:13:35:a1:65:e2:4e:74:b0:99:1a:cd:
25:11:63:87:ce:67:91:11:d7:c5:ef:7e:33:2e:4d:
cb:e9:f4:bc:d4:7f:05:bd:f8:a0:67:c1:58:6c:ba:
df:08:d3:3a:53:9b:22:63:0a:cf:b7:50:48:de:76:
db:6c:c7:d9:22:31:1d:67:82:7c:a8:85:23:85:c9:
c6:ea:86:2d:cc:0a:94:92:cd:c0:cb:07:2b:c6:b5:
60:98:84:91:18:4f:33:6b:9a:81:81:5b:f1:68:d2:
0b:50:39:49:62:83:53:51:e8:2e:14:c5:a3:ad:de:
c2:8a:f6:56:64:6f:4e:d0:cd:e4:e8:58:b0:61:7a:
39:f8:90:bb:dd:67:73:94:bf:62:d9:6e:b7:a0:27:
8f:75:da:91:b7:ca:78:7e:6f:33:ad:95:9a:2d:9b:
b6:0b:bd:c4:22:41:a2:d1:c0:0c:8f:29:99:01:a9:
1a:2b:d8:03:14:29:8e:b3:77:ea:e7:81:3f:7e:57:
e8:6d:9c:57:c6:6f:74:a6:05:e5:8d:c5:ec:96:52:
56:a7:bb:ff:d4:13:ee:52:13:01:3b:dd:f6:df:5f:
73:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:38:36:05:DC:FF:05:45:BF:FA:B1:E0:4A:65:70:FD:91:1A:8D:41
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/399E5562564611F093D7763DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.116.112.0/22
103.25.44.0/22
103.93.104.0/22
103.127.170.0/24
103.137.148.0/24
103.143.214.0/24
103.148.134.0/23
103.151.114.0/24
103.153.22.0/24
103.157.228.0/23
103.159.136.0/24
103.159.180.0/24
103.160.171.0/24
103.170.160.0/24
103.175.108.0/23
103.176.124.0/23
103.225.124.0/22
163.53.204.0/22
IPv6:
2001:df2:a640::/48
2403:f680::/40
2403:f680:102::-2403:f680:108:ffff:ffff:ffff:ffff:ffff
2403:f680:112::-2403:f680:119:ffff:ffff:ffff:ffff:ffff
2403:f680:120::-2403:f680:129:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
b2:cf:46:d9:80:04:4d:3d:5d:b1:3f:c0:66:b4:b3:51:0e:6e:
a4:1d:b4:8e:aa:d4:29:92:6c:1d:35:5b:2a:00:fc:eb:95:fb:
61:ac:bc:9e:cc:57:6c:ad:e2:0f:5e:65:90:ac:aa:e9:5e:dc:
70:4d:92:51:a8:df:6e:04:01:8b:be:a1:5a:98:69:d4:5a:31:
29:e3:fc:d9:e6:77:6e:76:04:17:7e:51:d9:72:ad:a8:df:74:
1c:34:a7:79:ce:4e:a2:16:2f:e9:93:01:a2:04:20:27:5b:34:
ab:15:a1:2a:c2:8b:3a:cd:b8:cd:c2:ee:0a:67:81:0a:8f:ef:
11:eb:a9:12:fc:0e:bd:a2:20:c3:c4:26:5f:03:84:3f:5e:ca:
08:9a:be:e7:ef:1e:76:30:56:2d:59:59:a6:2b:ea:2c:3d:f3:
81:71:d0:6f:89:72:95:78:b8:1d:a3:2d:af:f8:ef:1a:e6:99:
82:f8:df:2b:79:77:9e:2c:5b:3d:00:3d:44:0c:da:33:60:3b:
77:47:1c:65:dc:18:ee:9f:b3:46:7f:4d:a5:ef:0a:b6:5b:44:
40:1d:80:54:22:61:77:48:05:9a:03:38:f1:23:63:5c:21:a1:
1d:7d:5e:e9:eb:9e:4d:61:0e:a6:c3:74:18:23:65:9c:83:a6:
4b:3e:d5:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:22 2026 by rpki-client