Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F48FD747E7511F1BEFCC67E8FA30FBC.roa
File: 4F48FD747E7511F1BEFCC67E8FA30FBC.roa (raw, json)
Hash identifier: M3JC8+CMzYRWSOspRUGm72WZ215jC+Rf7mKK7eukaZ0=
Subject key identifier: 91:27:49:33:8F:CE:52:65:8E:E0:EE:FC:DE:F9:F9:BA:46:C4:43:B9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F9B0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F48FD747E7511F1BEFCC67E8FA30FBC.roa
Signing time: Mon 27 Jul 2026 07:16:57 +0000
ROA not before: Mon 27 Jul 2026 07:16:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140641
IP address blocks: 103.69.43.0/24 maxlen: 24
103.93.94.0/24 maxlen: 24
103.95.50.0/23 maxlen: 24
103.97.104.0/24 maxlen: 24
103.97.105.0/24 maxlen: 24
103.97.106.0/24 maxlen: 24
103.97.107.0/24 maxlen: 24
103.110.12.0/24 maxlen: 24
103.110.13.0/24 maxlen: 24
103.110.14.0/24 maxlen: 24
103.110.15.0/24 maxlen: 24
103.117.212.0/24 maxlen: 24
103.119.170.0/23 maxlen: 24
103.129.97.0/24 maxlen: 24
103.131.26.0/24 maxlen: 24
103.139.7.0/24 maxlen: 24
103.140.72.0/24 maxlen: 24
103.152.79.0/24 maxlen: 24
103.171.44.0/24 maxlen: 24
103.171.45.0/24 maxlen: 24
103.182.90.0/24 maxlen: 24
103.190.243.0/24 maxlen: 24
103.218.124.0/24 maxlen: 24
103.218.125.0/24 maxlen: 24
103.218.126.0/24 maxlen: 24
103.218.127.0/24 maxlen: 24
103.228.140.0/24 maxlen: 24
103.228.141.0/24 maxlen: 24
103.228.142.0/24 maxlen: 24
103.228.143.0/24 maxlen: 24
103.240.89.0/24 maxlen: 24
103.251.150.0/24 maxlen: 24
103.253.70.0/24 maxlen: 24
163.227.186.0/24 maxlen: 24
163.227.187.0/24 maxlen: 24
175.158.75.0/24 maxlen: 24
182.255.56.0/24 maxlen: 24
182.255.57.0/24 maxlen: 24
182.255.58.0/24 maxlen: 24
182.255.59.0/24 maxlen: 24
202.162.240.0/24 maxlen: 24
202.162.241.0/24 maxlen: 24
202.162.243.0/24 maxlen: 24
2402:61a0:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63920 (0xf9b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 27 07:16:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a6705e8-06b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:be:85:8d:44:3f:76:94:41:b7:c1:64:80:6c:
31:3b:cd:ac:11:d8:68:f2:a7:91:2b:a2:a3:63:d2:
4e:2b:00:81:8f:f2:eb:ec:4b:56:ea:48:05:1d:8c:
79:e4:ea:a8:1e:5d:d4:cb:d3:f8:14:e7:aa:7b:7b:
34:f8:72:95:aa:08:7d:b1:77:1b:94:18:82:0a:59:
2a:1d:2a:6d:06:6a:c0:47:57:91:7f:ef:5d:f7:7d:
73:bc:0a:57:4c:df:f2:20:44:e8:8a:27:d5:e0:0c:
25:6f:95:2b:63:92:3f:6d:71:a2:30:b7:cc:54:32:
49:98:1e:8d:65:a8:b1:7c:08:ff:af:57:60:da:5b:
d1:a0:1d:65:82:49:b0:c8:b7:de:83:26:82:8c:88:
16:09:78:d4:02:fc:67:c0:3e:68:2b:4f:cf:85:7a:
5a:73:4b:9a:a2:7f:be:18:f2:7c:41:16:3d:3a:d2:
fb:79:b0:fa:64:64:9b:17:ee:75:df:2f:32:93:fb:
21:96:3f:dd:f9:87:3a:7f:ba:53:5e:10:c2:ee:24:
68:83:aa:dc:ec:9e:4e:83:e4:fb:48:42:13:38:25:
99:e8:a3:74:2e:86:62:93:0d:54:7d:81:cf:71:8b:
bf:74:6d:ba:aa:64:75:27:ab:7c:05:ab:1e:77:e0:
b3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:27:49:33:8F:CE:52:65:8E:E0:EE:FC:DE:F9:F9:BA:46:C4:43:B9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4F48FD747E7511F1BEFCC67E8FA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
103.69.43.0/24
103.93.94.0/24
103.95.50.0/23
103.97.104.0/22
103.110.12.0/22
103.117.212.0/24
103.119.170.0/23
103.129.97.0/24
103.131.26.0/24
103.139.7.0/24
103.140.72.0/24
103.152.79.0/24
103.171.44.0/23
103.182.90.0/24
103.190.243.0/24
103.218.124.0/22
103.228.140.0/22
103.240.89.0/24
103.251.150.0/24
103.253.70.0/24
163.227.186.0/23
175.158.75.0/24
182.255.56.0/22
202.162.240.0/23
202.162.243.0/24
IPv6:
2402:61a0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
25:91:97:a2:0f:d5:d9:82:ee:11:44:61:ce:cd:9b:4c:9a:7d:
ad:80:a2:05:80:e3:e5:9f:18:7f:d2:aa:c3:c5:67:4a:3b:dc:
45:03:3e:01:0f:8b:bd:f4:a5:11:ff:aa:92:ae:fe:37:ed:0e:
19:4b:aa:3c:2e:2d:99:fb:a2:c3:7a:2c:50:39:c3:5d:ae:6a:
06:60:f6:cb:d2:9a:d1:c2:65:fc:50:d7:44:d4:14:0d:2c:5f:
11:06:fb:a0:ba:3b:c1:b3:14:fd:92:ce:9c:69:b7:82:8e:cd:
c8:11:99:63:c1:9d:ed:49:ce:b6:c7:1a:07:80:7f:aa:80:b1:
43:23:26:bb:1a:1e:cb:48:19:ab:aa:63:a8:0e:3b:30:96:f2:
6a:77:7d:30:97:15:65:93:e5:18:7a:c5:3d:09:de:e5:8d:55:
09:43:3f:37:bb:73:c4:ca:38:bb:0d:2c:17:49:55:bd:e0:4e:
90:fe:58:61:b0:1c:ce:3f:71:9c:ab:82:97:ac:7d:ff:fb:04:
a9:94:9e:0f:ba:30:e3:4e:2e:d6:a4:71:76:b8:cd:ba:d3:f9:
21:f3:6f:56:ed:56:f9:ca:f3:0a:5e:22:c5:7c:f0:ac:1c:c4:
5e:3c:60:2d:a8:02:f2:9f:14:de:0e:99:95:77:b0:ae:77:9c:
2d:a6:d3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:04:03 2026 by rpki-client