Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B8D006028F911F1A1871496CD833773.roa
File: 6B8D006028F911F1A1871496CD833773.roa (raw, json)
Hash identifier: UmsAYUTkZ5L3t651NsS8I6wGt5bdn0W6/Dghm/ptHTw=
Subject key identifier: 10:A2:0E:C0:D2:3E:35:7A:EB:E7:46:BD:FA:49:7D:57:EB:AF:39:05
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DCD6
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B8D006028F911F1A1871496CD833773.roa
Signing time: Thu 26 Mar 2026 09:51:54 +0000
ROA not before: Thu 26 Mar 2026 09:51:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58678
IP address blocks: 43.241.28.0/22 maxlen: 24
43.241.128.0/22 maxlen: 24
43.241.132.0/22 maxlen: 24
43.242.208.0/24 maxlen: 24
43.242.209.0/24 maxlen: 24
43.242.210.0/24 maxlen: 24
43.242.211.0/24 maxlen: 24
43.242.228.0/22 maxlen: 24
45.64.84.0/22 maxlen: 24
45.114.192.0/22 maxlen: 24
45.127.120.0/22 maxlen: 24
45.250.248.0/24 maxlen: 24
45.250.249.0/24 maxlen: 24
45.250.250.0/24 maxlen: 24
45.251.236.0/24 maxlen: 24
45.251.237.0/24 maxlen: 24
45.251.238.0/24 maxlen: 24
45.251.239.0/24 maxlen: 24
103.14.232.0/22 maxlen: 24
103.26.52.0/22 maxlen: 22
103.26.52.0/24 maxlen: 24
103.26.53.0/24 maxlen: 24
103.26.54.0/24 maxlen: 24
103.26.55.0/24 maxlen: 24
103.26.56.0/22 maxlen: 24
103.39.251.0/24 maxlen: 24
103.42.160.0/22 maxlen: 24
103.48.56.0/23 maxlen: 24
103.48.58.0/24 maxlen: 24
103.48.59.0/24 maxlen: 24
103.48.100.0/22 maxlen: 24
103.57.96.0/23 maxlen: 24
103.59.212.0/22 maxlen: 24
103.69.238.0/24 maxlen: 24
103.74.236.0/22 maxlen: 24
103.77.152.0/22 maxlen: 23
103.77.152.0/23 maxlen: 24
103.77.154.0/24 maxlen: 24
103.89.40.0/22 maxlen: 24
103.111.132.0/22 maxlen: 24
103.112.32.0/24 maxlen: 24
103.112.33.0/24 maxlen: 24
103.112.34.0/24 maxlen: 24
103.112.35.0/24 maxlen: 24
103.117.184.0/24 maxlen: 24
103.117.187.0/24 maxlen: 24
103.137.152.0/22 maxlen: 24
103.153.151.0/24 maxlen: 24
103.166.112.0/23 maxlen: 24
103.173.208.0/23 maxlen: 24
103.174.30.0/24 maxlen: 24
103.174.38.0/24 maxlen: 24
103.178.212.0/24 maxlen: 24
103.178.213.0/24 maxlen: 24
103.181.209.0/24 maxlen: 24
103.185.11.0/24 maxlen: 24
103.204.119.0/24 maxlen: 24
103.209.18.0/24 maxlen: 24
103.209.19.0/24 maxlen: 24
103.215.114.0/23 maxlen: 24
103.216.144.0/22 maxlen: 24
103.218.100.0/22 maxlen: 24
103.219.164.0/24 maxlen: 24
103.219.165.0/24 maxlen: 24
103.219.166.0/24 maxlen: 24
103.219.167.0/24 maxlen: 24
103.220.80.0/22 maxlen: 24
103.220.212.0/22 maxlen: 24
103.226.0.0/22 maxlen: 24
103.226.4.0/22 maxlen: 24
103.226.28.0/22 maxlen: 24
124.108.16.0/22 maxlen: 24
163.223.244.0/23 maxlen: 24
203.134.248.0/23 maxlen: 24
2001:df6:f180::/48 maxlen: 48
2404:bd00::/48 maxlen: 48
2404:bd00:1::/48 maxlen: 48
2404:bd00:2::/48 maxlen: 48
2404:bd00:3::/48 maxlen: 48
2404:bd00:4::/48 maxlen: 48
2404:bd00:5::/48 maxlen: 48
2404:bd00:6::/48 maxlen: 48
2404:bd00:7::/48 maxlen: 48
2404:bd00:8::/48 maxlen: 48
2404:bd00:a::/48 maxlen: 48
2404:bd00:b::/48 maxlen: 48
2404:bd00:c::/48 maxlen: 48
2404:bd00:d::/48 maxlen: 48
2404:bd00:e::/48 maxlen: 48
2404:bd00:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 11:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56534 (0xdcd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 26 09:51:54 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69c501ba-1e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:83:e8:91:f7:65:2a:a7:8a:b5:40:84:41:
de:2e:78:bc:8f:5a:c8:98:9a:10:96:a5:22:73:0c:
ab:c9:db:f4:86:ac:0a:75:0b:c8:2f:d4:d6:68:04:
b2:b7:41:bf:a1:f2:1f:45:8d:84:3d:15:f4:99:de:
8f:1d:36:82:35:c9:91:28:96:2c:59:bd:33:40:19:
61:a4:8f:24:8d:d7:76:9b:44:dc:b8:0e:99:82:76:
43:58:c8:e2:71:25:c8:20:e0:cb:8a:a5:ad:8c:8e:
c4:26:d5:6c:93:6f:84:ef:76:ba:ee:f2:d4:e6:c6:
c7:17:a6:45:30:44:3e:9c:9b:ac:aa:76:0a:cd:0c:
42:9a:4c:3a:fd:ed:14:9e:42:03:4e:df:3a:87:9a:
76:9d:5c:6a:8b:4e:8c:06:4d:e5:03:a5:b3:dc:b3:
a7:55:4a:8c:a7:49:39:3c:f6:49:c9:5f:34:73:a8:
6b:81:1d:e8:6b:c3:79:c2:01:70:d1:ea:b3:e9:a0:
b3:e4:49:39:52:e4:5d:3b:53:a2:90:48:bb:87:80:
7d:4d:bd:72:94:76:dd:72:a7:8f:59:c3:64:6b:a5:
62:76:0d:6c:98:cd:e5:2b:f1:cd:92:c9:1f:55:16:
50:49:07:84:e5:5a:fe:9b:e3:30:56:2b:81:fd:37:
4a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A2:0E:C0:D2:3E:35:7A:EB:E7:46:BD:FA:49:7D:57:EB:AF:39:05
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B8D006028F911F1A1871496CD833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.241.28.0/22
43.241.128.0/21
43.242.208.0/22
43.242.228.0/22
45.64.84.0/22
45.114.192.0/22
45.127.120.0/22
45.250.248.0-45.250.250.255
45.251.236.0/22
103.14.232.0/22
103.26.52.0-103.26.59.255
103.39.251.0/24
103.42.160.0/22
103.48.56.0/22
103.48.100.0/22
103.57.96.0/23
103.59.212.0/22
103.69.238.0/24
103.74.236.0/22
103.77.152.0/22
103.89.40.0/22
103.111.132.0/22
103.112.32.0/22
103.117.184.0/24
103.117.187.0/24
103.137.152.0/22
103.153.151.0/24
103.166.112.0/23
103.173.208.0/23
103.174.30.0/24
103.174.38.0/24
103.178.212.0/23
103.181.209.0/24
103.185.11.0/24
103.204.119.0/24
103.209.18.0/23
103.215.114.0/23
103.216.144.0/22
103.218.100.0/22
103.219.164.0/22
103.220.80.0/22
103.220.212.0/22
103.226.0.0/21
103.226.28.0/22
124.108.16.0/22
163.223.244.0/23
203.134.248.0/23
IPv6:
2001:df6:f180::/48
2404:bd00::-2404:bd00:8:ffff:ffff:ffff:ffff:ffff
2404:bd00:a::-2404:bd00:f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
07:b1:19:2e:f9:5a:bf:25:93:d9:6b:2f:6a:8a:01:63:df:f8:
78:62:89:36:37:9b:8b:df:a9:dc:7c:66:e4:cb:6e:0e:fe:6e:
77:6f:c8:2b:a0:31:f9:7a:f5:51:b5:48:d4:91:fb:3a:92:f8:
78:27:b9:a1:5e:b0:71:12:32:34:44:32:b8:f9:28:93:9e:fd:
b6:e0:b3:f5:2a:97:d6:21:92:4d:8b:2f:05:0e:61:15:96:37:
11:c8:f3:45:0a:d6:8a:a3:af:a1:0f:17:33:dd:1b:68:b1:b8:
2e:19:b6:f2:c4:57:e5:df:f5:88:e9:2e:51:dc:e2:23:c5:28:
e2:16:d8:af:08:3a:96:58:b5:c6:2e:28:22:cb:b2:1c:37:2c:
aa:4e:78:4b:ab:c8:fa:7d:dd:13:3d:7a:d3:e0:bc:d6:0d:c8:
35:f0:25:e1:8f:95:d4:00:19:2b:5a:0b:61:40:d1:52:9f:3c:
d5:48:e9:dc:d0:3d:c1:8c:9a:cf:03:95:34:95:85:7d:56:ff:
fb:6d:32:1c:a3:60:64:29:cf:29:84:7b:b4:f3:4a:d2:9f:03:
21:69:92:06:eb:49:29:0a:f3:3a:4b:db:21:42:73:d8:83:04:
5a:ab:04:a1:9b:97:78:9b:79:01:53:47:ac:e8:2e:23:8b:6f:
d2:1a:5e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:56 2026 by rpki-client