Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
File: 493C56AEDE3C11EF979E6834C4F9AE02.roa (raw, json)
Hash identifier: mPHFAIKoEOSr7nKnJfxKOfaFTXhn3Ruk+1IyMUo2x10=
Subject key identifier: 53:FC:A5:CA:EC:E3:96:E6:E5:8C:9A:F8:5A:F6:27:95:AB:21:4B:35
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D9D1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
Signing time: Sun 01 Mar 2026 23:01:13 +0000
ROA not before: Thu 21 Aug 2025 10:00:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132768
IP address blocks: 103.16.144.0/22 maxlen: 24
103.16.196.0/24 maxlen: 24
103.18.68.0/22 maxlen: 24
103.18.120.0/22 maxlen: 24
103.18.164.0/22 maxlen: 24
103.18.242.0/24 maxlen: 24
103.25.132.0/22 maxlen: 24
103.30.80.0/22 maxlen: 24
103.103.212.0/22 maxlen: 24
103.107.96.0/22 maxlen: 24
103.198.10.0/23 maxlen: 24
103.241.242.0/24 maxlen: 24
103.241.243.0/24 maxlen: 24
103.246.170.0/23 maxlen: 24
103.253.148.0/22 maxlen: 24
139.5.36.0/22 maxlen: 24
150.107.92.0/22 maxlen: 24
183.87.12.0/22 maxlen: 24
2405:ec0::/32 maxlen: 32
2405:ec0::/36 maxlen: 36
2405:ec0:1000::/36 maxlen: 36
2405:ec0:2000::/36 maxlen: 36
2407:a780:1000::/36 maxlen: 36
2407:a780:1000::/48 maxlen: 48
2407:a780:1001::/48 maxlen: 48
2407:a780:1002::/48 maxlen: 48
2407:a780:1003::/48 maxlen: 48
2407:a780:1004::/48 maxlen: 48
2407:a780:1005::/48 maxlen: 48
2407:a780:1006::/48 maxlen: 48
2407:a780:1007::/48 maxlen: 48
2407:a780:1008::/48 maxlen: 48
2407:a780:1009::/48 maxlen: 48
2407:a780:100a::/48 maxlen: 48
2407:a780:100b::/48 maxlen: 48
2407:a780:100c::/48 maxlen: 48
2407:a780:100d::/48 maxlen: 48
2407:a780:100e::/48 maxlen: 48
2407:a780:100f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55761 (0xd9d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 21 10:00:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c539-0bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:92:de:fc:55:4c:b4:51:b2:59:e3:da:b0:ee:
84:8c:bf:6a:af:ba:0b:52:30:96:0d:46:ce:9c:d3:
40:1b:21:f9:ec:17:c7:bf:93:40:6a:83:3a:0d:d6:
c0:9e:7c:22:a4:fb:d6:26:fa:65:4a:fd:f0:ad:48:
7d:5e:49:87:3a:20:9b:e5:3f:e0:ef:f1:a7:82:2c:
3e:9c:4b:31:63:2c:9d:cc:73:4f:89:0d:15:3f:78:
9f:5a:19:2f:3c:7e:74:4b:bd:19:35:59:5d:c4:be:
f6:d1:bc:ab:10:e8:d7:ba:b1:99:2e:01:93:db:f9:
3f:6b:a1:be:19:7c:5a:3c:d7:12:db:23:a7:21:56:
43:e1:66:90:ed:3c:bf:2e:df:35:33:aa:0e:c0:13:
e2:67:d7:b4:17:c8:b6:e7:dc:f2:0b:60:cf:b2:85:
ab:1e:da:08:9f:57:5d:c5:65:a3:63:ac:67:d9:e0:
7d:3a:3b:d5:65:85:e4:09:ad:ca:9c:1b:96:f2:86:
08:78:09:4e:d7:14:ef:9c:dc:23:68:d2:19:1e:79:
67:3a:10:8c:63:7e:81:6c:d4:cc:fc:ad:df:8b:0e:
04:71:1e:1f:64:58:95:a1:2f:ba:36:61:1a:f6:44:
9a:f0:29:1b:b5:62:51:63:f1:5b:f4:3d:bc:7b:22:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:FC:A5:CA:EC:E3:96:E6:E5:8C:9A:F8:5A:F6:27:95:AB:21:4B:35
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/493C56AEDE3C11EF979E6834C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.16.144.0/22
103.16.196.0/24
103.18.68.0/22
103.18.120.0/22
103.18.164.0/22
103.18.242.0/24
103.25.132.0/22
103.30.80.0/22
103.103.212.0/22
103.107.96.0/22
103.198.10.0/23
103.241.242.0/23
103.246.170.0/23
103.253.148.0/22
139.5.36.0/22
150.107.92.0/22
183.87.12.0/22
IPv6:
2405:ec0::/32
2407:a780:1000::/36
Signature Algorithm: sha256WithRSAEncryption
64:e8:6e:56:57:5a:95:7a:af:f6:00:bb:e1:18:6a:41:90:b7:
36:9a:8c:81:8b:53:b3:6a:f3:ad:0a:22:5b:91:f3:00:6e:ac:
02:81:d1:b4:1f:9d:bb:9c:ee:2f:13:62:c5:75:19:72:c9:ab:
d2:72:62:40:a1:1c:14:41:fd:ac:f2:26:1c:be:99:92:ae:08:
c9:d3:91:20:08:cf:9f:f4:52:50:7c:4f:82:38:a3:e2:cd:1c:
d3:49:7a:53:c6:08:ca:03:01:ac:d8:04:82:8d:55:6a:7e:8c:
d9:f6:56:8d:25:07:f3:4a:ab:ca:37:8d:88:1c:14:18:e3:15:
b8:1a:2d:fb:75:33:fd:c2:5d:f7:99:79:33:f8:4c:e4:5e:ac:
e0:d7:f6:82:2b:1e:61:9f:22:0e:3e:90:cf:25:5d:59:87:b9:
f7:ed:2e:e4:70:58:b6:61:73:39:a4:33:54:41:a7:79:dd:e8:
a6:26:ff:b2:6f:39:e6:15:ce:c0:75:8f:15:c2:6e:bf:e8:d7:
98:6d:3b:a1:d7:7f:bd:d2:30:ed:33:ba:c6:e0:50:bb:40:43:
41:9e:91:33:a8:7f:a4:53:5c:c6:f6:c9:7a:7c:e8:76:c5:d2:
fc:be:f0:f1:76:74:7b:3e:88:20:74:ab:e8:26:21:d3:9f:b6:
d7:27:e8:94
-----BEGIN CERTIFICATE-----
MIIFtzCCBJ+gAwIBAgIDANnRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDgyMTEwMDAzNVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGM1MzktMGJmYzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL6S3vxVTLRRslnj2rDuhIy/aq+6C1Iwlg1GzpzTQBsh+ewXx7+TQGqDOg3W
wJ58IqT71ib6ZUr98K1IfV5Jhzogm+U/4O/xp4IsPpxLMWMsncxzT4kNFT94n1oZ
Lzx+dEu9GTVZXcS+9tG8qxDo17qxmS4Bk9v5P2uhvhl8WjzXEtsjpyFWQ+FmkO08
vy7fNTOqDsAT4mfXtBfItufc8gtgz7KFqx7aCJ9XXcVlo2OsZ9ngfTo71WWF5Amt
ypwblvKGCHgJTtcU75zcI2jSGR55ZzoQjGN+gWzUzPyt34sOBHEeH2RYlaEvujZh
GvZEmvApG7ViUWPxW/Q9vHsi+w0CAwEAAaOCAtowggLWMB0GA1UdDgQWBBRT/KXK
7OOW5uWMmvha9ieVqyFLNTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQ5M0M1NkFF
REUzQzExRUY5NzlFNjgzNEM0RjlBRTAyLnJvYTCBmAYIKwYBBQUHAQcBAf8EgYgw
gYUwbAQCAAEwZgMEAmcQkAMEAGcQxAMEAmcSRAMEAmcSeAMEAmcSpAMEAGcS8gME
AmcZhAMEAmceUAMEAmdn1AMEAmdrYAMEAWfGCgMEAWfx8gMEAWf2qgMEAmf9lAME
AosFJAMEApZrXAMEArdXDDAVBAIAAjAPAwUAJAUOwAMGBCQHp4AQMA0GCSqGSIb3
DQEBCwUAA4IBAQBk6G5WV1qVeq/2ALvhGGpBkLc2moyBi1OzavOtCiJbkfMAbqwC
gdG0H527nO4vE2LFdRlyyavScmJAoRwUQf2s8iYcvpmSrgjJ05EgCM+f9FJQfE+C
OKPizRzTSXpTxgjKAwGs2ASCjVVqfozZ9laNJQfzSqvKN42IHBQY4xW4Gi37dTP9
wl33mXkz+EzkXqzg1/aCKx5hnyIOPpDPJV1Zh7n37S7kcFi2YXM5pDNUQad53eim
Jv+ybznmFc7AdY8Vwm6/6NeYbTuh13+90jDtM7rG4FC7QENBnpEzqH+kU1zG9sl6
fOh2xdL8vvDxdnR7PoggdKvoJiHTn7bXJ+iU
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:06 2026 by rpki-client