Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7C36A93C2BF811F1B6B07C8DC9833773.roa
File: 7C36A93C2BF811F1B6B07C8DC9833773.roa (raw, json)
Hash identifier: rvqswe9r1Si6cXzy1Y6IV4K33V0COloxcHfOrDiPN9c=
Subject key identifier: 7D:F0:DC:AC:64:44:AC:24:48:CE:2B:DD:B3:10:31:E3:64:27:AD:CB
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DD04
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7C36A93C2BF811F1B6B07C8DC9833773.roa
Signing time: Mon 30 Mar 2026 05:22:46 +0000
ROA not before: Mon 30 Mar 2026 05:22:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58965
IP address blocks: 43.225.192.0/22 maxlen: 24
103.74.144.0/22 maxlen: 24
103.77.40.0/22 maxlen: 24
103.83.144.0/22 maxlen: 24
103.110.16.0/22 maxlen: 22
103.110.16.0/24 maxlen: 24
103.110.17.0/24 maxlen: 24
103.110.18.0/24 maxlen: 24
103.110.19.0/24 maxlen: 24
103.110.180.0/24 maxlen: 24
103.125.128.0/22 maxlen: 22
103.125.128.0/24 maxlen: 24
103.125.129.0/24 maxlen: 24
103.125.130.0/24 maxlen: 24
103.125.131.0/24 maxlen: 24
103.134.112.0/22 maxlen: 24
103.141.90.0/24 maxlen: 24
103.161.198.0/24 maxlen: 24
103.163.144.0/23 maxlen: 24
103.164.46.0/24 maxlen: 24
103.164.47.0/24 maxlen: 24
103.165.28.0/23 maxlen: 24
103.180.43.0/24 maxlen: 24
103.188.126.0/24 maxlen: 24
103.231.32.0/23 maxlen: 24
103.233.116.0/22 maxlen: 24
103.243.7.0/24 maxlen: 24
103.254.204.0/23 maxlen: 24
2001:df0:4940::/48 maxlen: 48
2001:df1:5640::/48 maxlen: 48
2001:df3:69c0::/48 maxlen: 48
2001:df3:cac0::/48 maxlen: 48
2001:df7:2b00::/48 maxlen: 48
2407:45c0::/32 maxlen: 32
2407:45c0:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 11:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56580 (0xdd04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 30 05:22:46 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69ca08a6-79a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:a8:bd:40:f5:b0:0f:c6:39:84:75:c7:37:
e8:16:3c:a9:21:6f:d7:67:26:c7:0b:b9:60:1e:2e:
aa:96:fb:c4:06:94:88:69:14:d8:57:89:ad:7e:56:
28:f3:ff:67:cd:7e:9d:b7:91:fd:0a:f4:00:c4:6f:
87:be:b4:5f:4e:c6:2e:45:65:c6:21:ce:16:ad:a0:
3d:a6:20:5d:e9:96:a8:1f:eb:b4:6f:ad:7b:8b:4b:
f1:6a:50:df:d9:74:4b:b1:15:83:5f:38:9b:00:f3:
05:4c:c6:d2:a6:fc:a0:24:ce:0b:2d:df:e5:c0:c6:
08:e7:e7:47:eb:6c:ba:61:ac:2f:3f:c1:53:46:72:
b7:c5:49:fc:9f:25:79:0c:e9:ed:c8:64:ad:c8:fe:
76:56:8b:9e:e3:7c:b4:76:bf:70:65:72:39:e6:2c:
3c:4f:84:ae:f4:7a:48:28:40:fb:f5:9d:db:86:a0:
99:00:72:d5:2d:65:4e:99:68:14:d6:80:41:52:e0:
2e:2b:62:11:63:f8:13:7a:fe:6e:5e:2f:b1:fa:6f:
50:96:03:f5:3b:6d:84:70:dd:95:cc:a6:5f:bb:b8:
d7:4e:13:2e:35:80:ec:08:c8:12:0b:c3:bd:d8:88:
23:e8:be:c5:93:4b:95:85:13:78:d0:79:70:da:cd:
59:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F0:DC:AC:64:44:AC:24:48:CE:2B:DD:B3:10:31:E3:64:27:AD:CB
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7C36A93C2BF811F1B6B07C8DC9833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.192.0/22
103.74.144.0/22
103.77.40.0/22
103.83.144.0/22
103.110.16.0/22
103.110.180.0/24
103.125.128.0/22
103.134.112.0/22
103.141.90.0/24
103.161.198.0/24
103.163.144.0/23
103.164.46.0/23
103.165.28.0/23
103.180.43.0/24
103.188.126.0/24
103.231.32.0/23
103.233.116.0/22
103.243.7.0/24
103.254.204.0/23
IPv6:
2001:df0:4940::/48
2001:df1:5640::/48
2001:df3:69c0::/48
2001:df3:cac0::/48
2001:df7:2b00::/48
2407:45c0::/32
Signature Algorithm: sha256WithRSAEncryption
a2:70:de:fa:7a:65:bf:e9:ea:17:06:42:95:2b:ae:34:90:fd:
ad:27:d4:99:88:a5:9f:59:7c:52:3d:46:c3:41:fd:74:b2:4f:
fa:7f:04:03:3b:0c:e2:6f:6f:45:6f:1f:c3:4f:a7:01:74:34:
56:f7:62:c4:25:f6:3b:5e:b4:80:a6:18:89:c6:9a:72:dc:f5:
ce:44:2a:c2:a0:15:16:84:33:d9:93:8a:8a:58:24:45:3e:8b:
07:03:8f:79:b5:83:9e:db:97:77:c2:df:6b:97:42:f9:6f:05:
b8:e6:07:82:42:5e:56:dc:d5:e7:f0:f2:6d:a6:58:f2:45:6c:
c1:c7:94:f8:1f:d1:21:fe:2d:e3:75:59:4a:37:b4:a7:fb:e5:
53:69:4e:39:f7:ab:2b:18:80:d8:1c:96:bd:cb:3a:8d:60:2a:
b4:8f:95:5d:dc:bf:26:90:3b:3c:82:eb:55:b2:21:59:5a:0a:
51:db:41:51:23:95:e6:71:9c:99:a7:cc:3a:cd:18:a5:05:ee:
11:b1:4c:de:b1:45:bc:22:a4:46:5e:e8:8d:ef:c1:1e:ce:0e:
98:f0:35:00:8b:e0:54:7e:d7:32:4d:0c:fe:dc:0a:19:67:5d:
aa:48:8f:97:12:3b:06:74:18:8b:f6:01:9c:e2:b2:49:6a:5f:
bb:7b:d4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:44 2026 by rpki-client