Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C06759C5E8111F1940DAE0D1D7AAC22.roa
File: 4C06759C5E8111F1940DAE0D1D7AAC22.roa (raw, json)
Hash identifier: sdRjc84rwmChhd/QCxvKb6FpZ6ZlV37ug3gCjXgq47s=
Subject key identifier: A5:FA:2E:B4:90:D6:3F:58:0C:09:B2:A7:53:21:C3:02:78:02:63:B2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ECA8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C06759C5E8111F1940DAE0D1D7AAC22.roa
Signing time: Wed 10 Jun 2026 11:37:27 +0000
ROA not before: Wed 10 Jun 2026 11:37:27 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133676
IP address blocks: 36.50.82.0/24 maxlen: 24
43.225.74.0/24 maxlen: 24
43.230.196.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.5.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
43.250.252.0/22 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.25.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.14.0/24 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.54.24.0/23 maxlen: 24
103.54.26.0/24 maxlen: 24
103.62.147.0/24 maxlen: 24
103.80.34.0/23 maxlen: 24
103.82.72.0/22 maxlen: 24
103.85.118.0/23 maxlen: 24
103.87.204.0/22 maxlen: 24
103.93.172.0/22 maxlen: 24
103.93.212.0/23 maxlen: 24
103.98.53.0/24 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.103.163.0/24 maxlen: 24
103.109.180.0/23 maxlen: 24
103.109.182.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.143.51.0/24 maxlen: 24
103.148.66.0/23 maxlen: 24
103.153.208.0/24 maxlen: 24
103.160.25.0/24 maxlen: 24
103.170.113.0/24 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/24 maxlen: 24
103.178.59.0/24 maxlen: 24
103.181.90.0/23 maxlen: 24
103.182.44.0/23 maxlen: 24
103.182.160.0/23 maxlen: 24
103.184.184.0/23 maxlen: 24
103.184.237.0/24 maxlen: 24
103.186.44.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.182.0/23 maxlen: 24
103.191.234.0/23 maxlen: 24
103.195.24.0/23 maxlen: 23
103.195.24.0/24 maxlen: 24
103.195.25.0/24 maxlen: 24
103.195.26.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.211.56.0/23 maxlen: 24
103.211.58.0/24 maxlen: 24
103.211.190.0/23 maxlen: 24
103.212.136.0/23 maxlen: 24
103.212.138.0/23 maxlen: 24
103.213.6.0/23 maxlen: 24
103.225.204.0/24 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/24 maxlen: 24
103.225.207.0/24 maxlen: 24
103.226.200.0/22 maxlen: 24
103.227.95.0/24 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.121.0/24 maxlen: 24
103.248.122.0/24 maxlen: 24
103.248.123.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60584 (0xeca8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 10 11:37:27 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a294c77-7432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:80:e3:df:40:81:a4:66:4e:02:70:ac:86:aa:
48:0b:43:11:31:53:1e:74:93:c5:de:ed:af:fd:a2:
77:1c:34:05:0f:9d:86:02:1c:08:10:6d:d2:88:8c:
71:db:c3:3b:ad:74:db:c9:79:fa:cf:cd:19:f1:46:
2a:8b:6a:a9:9d:f8:47:4f:5c:b7:b8:84:94:05:d3:
dc:11:00:68:1e:4d:0a:92:51:82:29:73:f9:50:68:
1b:85:bd:bd:f1:b8:e4:68:f3:63:c9:81:65:ba:57:
e5:f2:4d:c8:73:17:11:08:91:55:0d:51:81:dd:28:
6e:27:75:44:d9:8e:cf:7e:13:91:44:ea:41:ac:4a:
52:09:bf:91:e6:80:58:cf:d2:de:8c:9e:9b:2d:36:
91:8d:8d:b2:60:7c:2c:65:05:80:22:6a:5f:18:63:
17:c2:9f:0d:96:50:75:49:b5:eb:23:83:68:d8:41:
2d:dc:54:3f:ec:60:d6:99:e3:43:7a:92:0b:a3:8b:
29:b3:1b:d6:8a:35:77:5e:70:ca:b9:69:cc:a7:18:
ce:20:41:db:24:f3:32:33:15:a3:48:46:65:b8:f4:
b8:67:f6:68:e8:14:09:f4:c0:fa:54:6c:76:b0:32:
7a:06:cc:40:6f:26:70:6d:ef:f4:a1:e7:cd:ca:4f:
34:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FA:2E:B4:90:D6:3F:58:0C:09:B2:A7:53:21:C3:02:78:02:63:B2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4C06759C5E8111F1940DAE0D1D7AAC22.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.225.74.0/24
43.230.196.0/22
43.240.4.0/22
43.250.252.0/22
45.64.8.0/22
45.248.24.0/22
103.42.88.0/22
103.47.12.0/22
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.54.24.0-103.54.26.255
103.62.147.0/24
103.80.34.0/23
103.82.72.0/22
103.85.118.0/23
103.87.204.0/22
103.93.172.0/22
103.93.212.0/23
103.98.53.0/24
103.101.116.0/22
103.103.163.0/24
103.109.180.0/22
103.114.188.0/23
103.118.180.0/22
103.143.51.0/24
103.148.66.0/23
103.153.208.0/24
103.160.25.0/24
103.170.113.0/24
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.182.44.0/23
103.182.160.0/23
103.184.184.0/23
103.184.237.0/24
103.186.44.0/23
103.189.146.0/23
103.191.182.0/23
103.191.234.0/23
103.195.24.0/22
103.204.168.0/22
103.211.56.0-103.211.58.255
103.211.190.0/23
103.212.136.0/22
103.213.6.0/23
103.225.204.0/22
103.226.200.0/22
103.227.95.0/24
103.248.120.0/22
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
1a:77:ab:73:61:30:04:0b:1d:9b:ff:2f:22:d7:8d:8c:c1:43:
b9:bf:0b:21:a8:62:cc:33:ab:3b:be:85:3a:40:15:07:21:57:
98:16:7d:ea:ce:a2:ab:71:69:42:7e:c5:44:bd:98:d0:4b:de:
2e:f6:83:2c:d0:25:e2:78:ec:c7:fe:be:33:32:cc:c9:c3:fc:
b6:52:21:27:5a:88:8a:fd:2b:11:86:27:fd:2c:24:e1:5e:12:
b1:80:98:e5:5b:db:b3:4e:69:1d:b9:5b:4a:c4:b4:6e:07:7a:
5a:44:d7:21:fd:f0:6b:ae:c4:65:90:b5:dd:0b:20:46:d5:1d:
8c:94:d6:a1:20:f1:a8:73:e5:36:f2:3c:3d:55:8c:a3:e7:20:
f2:69:05:4b:a9:bc:fd:34:cd:dc:e1:67:39:d8:78:55:5c:70:
32:cf:df:12:14:4a:a3:c5:ac:02:29:a5:d9:47:32:af:ef:e6:
29:8a:ca:4f:d4:ee:12:1f:5d:60:c2:88:f1:92:e9:45:e5:0c:
d7:be:3a:2d:bd:5c:ec:ed:dc:65:8b:95:7e:b2:83:90:cd:3f:
a0:44:06:28:c2:eb:55:7c:a7:e1:ea:5e:6a:b4:d6:23:b3:20:
e2:36:96:48:8c:fe:41:94:ed:84:dc:67:88:40:58:09:0f:a7:
b4:26:9b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:42:35 2026 by rpki-client