Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/79FEF2F4ACE111F181EDEA616F11F970.roa
File: 79FEF2F4ACE111F181EDEA616F11F970.roa (raw, json)
Hash identifier: sKWhdQhsM1CrzjRqugcVBKGkIUXYyw136pxGhSXGUEU=
Subject key identifier: A2:DF:7D:A9:A5:A1:28:07:F3:6A:18:1B:15:61:15:AB:A7:82:29:F3
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FC3B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/79FEF2F4ACE111F181EDEA616F11F970.roa
Signing time: Sat 12 Sep 2026 09:23:22 +0000
ROA not before: Sat 12 Sep 2026 09:23:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133001
IP address blocks: 43.225.160.0/22 maxlen: 24
43.251.216.0/22 maxlen: 24
45.117.220.0/22 maxlen: 24
45.119.44.0/22 maxlen: 22
45.119.44.0/24 maxlen: 24
45.119.45.0/24 maxlen: 24
45.119.46.0/24 maxlen: 24
45.119.47.0/24 maxlen: 24
103.38.36.0/22 maxlen: 24
103.42.166.0/23 maxlen: 24
103.51.132.0/24 maxlen: 24
103.51.133.0/24 maxlen: 24
103.51.134.0/24 maxlen: 24
103.51.135.0/24 maxlen: 24
103.54.76.0/24 maxlen: 24
103.56.227.0/24 maxlen: 24
103.105.108.0/22 maxlen: 23
103.105.108.0/23 maxlen: 24
103.105.111.0/24 maxlen: 24
103.110.102.0/24 maxlen: 24
103.114.0.0/22 maxlen: 23
103.114.2.0/23 maxlen: 24
103.116.147.0/24 maxlen: 24
103.116.238.0/24 maxlen: 24
103.116.239.0/24 maxlen: 24
103.118.144.0/24 maxlen: 24
103.118.145.0/24 maxlen: 24
103.118.146.0/24 maxlen: 24
103.118.147.0/24 maxlen: 24
103.140.26.0/24 maxlen: 24
103.140.27.0/24 maxlen: 24
103.147.239.0/24 maxlen: 24
103.148.207.0/24 maxlen: 24
103.156.98.0/24 maxlen: 24
103.156.99.0/24 maxlen: 24
103.171.7.0/24 maxlen: 24
103.176.6.0/23 maxlen: 24
103.176.210.0/24 maxlen: 24
103.176.211.0/24 maxlen: 24
103.196.76.0/22 maxlen: 24
103.201.148.0/22 maxlen: 24
111.125.225.0/24 maxlen: 24
183.87.251.0/24 maxlen: 24
183.87.252.0/22 maxlen: 24
202.94.160.0/22 maxlen: 24
2401:b240::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64571 (0xfc3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 12 09:23:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa51a0a-c776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:83:0f:a2:06:32:03:a1:70:90:68:c6:3a:
6d:93:50:ad:41:00:3f:57:22:2e:44:5f:8b:99:96:
42:35:f0:31:32:1c:87:06:c1:42:bc:37:9e:a7:19:
51:5e:c6:98:8f:81:42:d7:f3:cb:88:0e:d0:1f:05:
d8:26:94:4e:1a:76:4e:b7:31:0e:0e:28:7d:e4:55:
12:5d:36:de:2d:c1:ec:59:24:f1:82:45:d7:82:7e:
5a:c4:18:12:89:93:98:6e:57:3e:e4:e4:63:34:e7:
da:16:ee:b3:29:17:dc:33:2d:4e:5a:07:15:8d:0b:
86:1f:6e:1b:5a:a1:e5:45:37:cc:2e:c3:76:38:46:
a0:7e:66:65:f8:74:1d:a4:b6:af:9d:d4:c0:42:d0:
11:c7:d5:b3:a3:c5:08:cc:e6:4d:0b:78:34:29:f4:
09:66:7c:bf:99:5f:56:e2:fc:1d:61:3c:fe:d7:61:
e5:63:e2:20:40:49:40:2f:89:b1:9b:fd:a5:c2:8b:
6f:e4:e3:60:c1:c8:ff:5f:db:dd:a4:52:e2:64:2e:
6a:5a:be:f8:84:57:14:74:6a:e4:93:05:4e:dc:de:
1d:e0:8e:0e:41:b6:64:15:19:4d:43:45:66:61:01:
8e:4b:d1:42:68:4e:53:fa:31:e6:81:2d:74:be:6f:
18:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DF:7D:A9:A5:A1:28:07:F3:6A:18:1B:15:61:15:AB:A7:82:29:F3
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/79FEF2F4ACE111F181EDEA616F11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.160.0/22
43.251.216.0/22
45.117.220.0/22
45.119.44.0/22
103.38.36.0/22
103.42.166.0/23
103.51.132.0/22
103.54.76.0/24
103.56.227.0/24
103.105.108.0/22
103.110.102.0/24
103.114.0.0/22
103.116.147.0/24
103.116.238.0/23
103.118.144.0/22
103.140.26.0/23
103.147.239.0/24
103.148.207.0/24
103.156.98.0/23
103.171.7.0/24
103.176.6.0/23
103.176.210.0/23
103.196.76.0/22
103.201.148.0/22
111.125.225.0/24
183.87.251.0-183.87.255.255
202.94.160.0/22
IPv6:
2401:b240::/32
Signature Algorithm: sha256WithRSAEncryption
59:5f:e7:bd:72:83:14:9f:4f:42:fd:83:d7:13:19:a8:2f:0f:
05:48:55:dc:4e:03:df:f2:ca:92:6e:a5:a7:cb:c3:e7:f7:5e:
91:30:12:d5:d2:b5:90:36:8d:b7:ee:8f:4e:9b:1d:dc:dc:a8:
98:25:7a:36:c9:56:fd:c1:84:e6:83:f3:a9:d2:57:c9:8d:08:
a6:20:c5:a4:bb:a7:6f:20:f4:1a:83:71:33:9c:92:e8:6a:61:
38:ce:89:c6:56:03:61:9c:c6:dd:e2:be:a7:9c:d3:85:ba:22:
e5:f8:3d:30:45:11:ce:b9:5c:ef:2c:b2:5a:e3:65:82:4f:d2:
37:e1:88:f8:f4:be:fa:ea:f5:7d:d6:d0:b4:97:5d:ca:6a:2e:
86:c1:6a:2c:80:f6:94:99:41:be:b7:66:5e:d2:2e:a8:86:a6:
54:d9:d0:5d:c5:90:24:60:29:3c:34:c9:99:30:95:94:10:05:
aa:ce:cd:66:51:48:cf:33:6a:03:8a:d3:03:cf:21:84:4c:9f:
ca:31:55:6b:d9:a2:ea:20:5a:56:b8:f2:f7:40:65:8b:ed:60:
da:83:54:3c:16:7c:98:92:17:6c:29:48:1a:d8:5f:f8:c0:6d:
c9:a1:97:38:c9:13:e1:15:7a:da:d6:f9:e9:de:4d:8b:7f:52:
3b:6a:ad:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:02 2026 by rpki-client