Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73246420200411F0ACA27118C4F9AE02.roa
File: 73246420200411F0ACA27118C4F9AE02.roa (raw, json)
Hash identifier: MZVwu6eflB5CdMKN4XbPiA97jDvt6W+Oz1DaGqbzFSI=
Subject key identifier: E8:4B:A4:94:04:E8:A3:66:13:A4:16:C1:CE:9B:C7:05:29:5D:31:F8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DAC1
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73246420200411F0ACA27118C4F9AE02.roa
Signing time: Sun 01 Mar 2026 23:05:22 +0000
ROA not before: Fri 02 Jan 2026 12:32:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137127
IP address blocks: 103.55.214.0/23 maxlen: 24
103.102.28.0/22 maxlen: 24
103.103.90.0/23 maxlen: 24
103.109.136.0/24 maxlen: 24
103.109.139.0/24 maxlen: 24
103.112.121.0/24 maxlen: 24
103.124.109.0/24 maxlen: 24
103.144.64.0/23 maxlen: 24
103.147.120.0/24 maxlen: 24
103.147.121.0/24 maxlen: 24
103.148.62.0/24 maxlen: 24
103.148.63.0/24 maxlen: 24
103.167.130.0/23 maxlen: 24
103.168.248.0/23 maxlen: 24
103.170.66.0/23 maxlen: 24
103.171.200.0/23 maxlen: 24
103.172.148.0/23 maxlen: 23
103.174.34.0/23 maxlen: 24
103.183.24.0/24 maxlen: 24
103.183.25.0/24 maxlen: 24
103.190.14.0/24 maxlen: 24
103.190.15.0/24 maxlen: 24
103.220.32.0/24 maxlen: 24
103.220.34.0/24 maxlen: 24
137.59.99.0/24 maxlen: 24
2001:df0:82c0::/48 maxlen: 48
2001:df0:e140::/48 maxlen: 48
2001:df1:25c0::/48 maxlen: 48
2400:9820::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56001 (0xdac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jan 2 12:32:58 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c632-3cf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:46:96:88:bf:c7:6b:3e:c0:97:1d:f7:76:fc:
fa:df:78:e3:ad:83:39:81:c0:5a:5c:d3:4a:b5:e4:
72:04:db:11:6d:64:43:b1:4a:dc:16:87:bb:61:d4:
db:e5:5a:9d:b7:b7:42:9e:5d:03:98:5d:be:62:30:
a0:a9:f6:a4:3a:57:d3:96:c7:ed:37:0d:f1:6b:e7:
ea:33:cd:a8:bc:54:03:c2:ef:57:da:9d:6f:14:72:
36:2a:00:7b:52:c3:ac:c2:c6:fa:84:c9:15:4f:46:
a6:f1:de:9d:47:01:35:26:a7:39:59:41:86:b9:ee:
af:a8:39:bc:4f:3b:c1:a5:8e:00:7c:b7:18:a6:76:
c5:8b:1f:70:02:0a:af:93:fd:18:04:ba:3c:9d:41:
32:ed:fa:7e:64:5e:3f:19:82:00:49:ec:e3:6a:be:
0e:1f:94:02:27:2f:58:e5:28:6f:76:af:fb:ed:e1:
fe:4d:68:00:c6:3c:4f:26:c0:36:c4:2b:25:53:f4:
0d:bc:0c:be:9e:01:4e:26:ca:aa:09:be:6d:68:87:
8a:75:bd:0d:fd:34:fb:70:7a:3e:11:41:82:2c:f4:
58:eb:5e:f3:60:f2:21:be:f7:b5:26:1a:39:12:fc:
d8:7a:3e:4d:a9:8f:7d:b7:28:16:e8:4d:f4:32:f8:
6e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4B:A4:94:04:E8:A3:66:13:A4:16:C1:CE:9B:C7:05:29:5D:31:F8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/73246420200411F0ACA27118C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.55.214.0/23
103.102.28.0/22
103.103.90.0/23
103.109.136.0/24
103.109.139.0/24
103.112.121.0/24
103.124.109.0/24
103.144.64.0/23
103.147.120.0/23
103.148.62.0/23
103.167.130.0/23
103.168.248.0/23
103.170.66.0/23
103.171.200.0/23
103.172.148.0/23
103.174.34.0/23
103.183.24.0/23
103.190.14.0/23
103.220.32.0/24
103.220.34.0/24
137.59.99.0/24
IPv6:
2001:df0:82c0::/48
2001:df0:e140::/48
2001:df1:25c0::/48
2400:9820::/32
Signature Algorithm: sha256WithRSAEncryption
6f:97:2f:25:52:b7:3a:83:40:50:68:85:9c:ee:cf:c3:49:b7:
d0:7a:e3:e1:f2:f8:ec:b6:23:6b:d4:b1:8f:64:56:72:d9:f4:
07:a4:8e:27:9f:0a:64:a0:a8:6b:28:6b:51:e3:69:3c:ed:8b:
09:1b:c8:24:62:83:55:27:fc:75:26:89:78:e6:e3:ab:87:d5:
12:5e:75:53:01:9f:10:48:27:33:1e:7b:3d:08:9c:86:07:97:
b6:d6:fe:9e:4d:0b:6f:78:b0:a5:06:dc:5b:73:52:4a:da:9e:
e1:72:3b:cc:c0:36:4b:77:37:4f:0b:a9:99:50:be:e4:7c:ab:
f5:4b:7e:57:aa:90:24:42:c1:0f:f5:51:6b:20:6c:0c:e5:77:
ff:1b:2a:ce:9f:8a:2e:61:64:c6:1b:59:65:c8:87:86:28:74:
30:2b:13:9b:21:67:c0:72:01:da:15:7e:c9:2f:1b:04:97:0b:
6d:af:35:9c:e8:e8:76:fa:d9:64:ce:94:20:80:ea:4f:e4:28:
bf:26:38:fb:99:9a:d4:bd:e7:1e:a2:90:58:2a:2f:1e:78:ba:
68:8a:aa:b7:04:33:97:d6:e9:dc:ee:e7:f7:05:1c:01:48:3f:
b1:a5:f9:17:b0:d3:d2:b3:2e:1b:a6:0b:91:d2:0d:b4:29:5a:
26:58:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:12:25 2026 by rpki-client