Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A121A056A7EE11EFBC0D4F52C4F9AE02.roa
File: A121A056A7EE11EFBC0D4F52C4F9AE02.roa (raw, json)
Hash identifier: NMEwkGZJV5hDBxssGK9aiPhpG1YtYYwScSk6eqSVeRo=
Subject key identifier: CF:58:8E:19:F3:8C:14:5C:4A:8E:F0:09:8B:16:5C:C0:D4:AF:EA:DE
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D901
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A121A056A7EE11EFBC0D4F52C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:57:20 +0000
ROA not before: Tue 27 May 2025 09:57:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4755
IP address blocks: 1.6.229.0/24 maxlen: 24
1.6.230.0/24 maxlen: 24
1.7.229.0/24 maxlen: 24
1.22.36.0/24 maxlen: 24
1.23.62.0/24 maxlen: 24
103.15.74.0/24 maxlen: 24
103.29.197.0/24 maxlen: 24
103.53.21.0/24 maxlen: 24
103.57.216.0/24 maxlen: 24
103.57.217.0/24 maxlen: 24
103.57.218.0/24 maxlen: 24
103.57.219.0/24 maxlen: 24
103.81.88.0/22 maxlen: 24
103.98.54.0/24 maxlen: 24
103.109.211.0/24 maxlen: 24
103.109.224.0/24 maxlen: 24
103.109.225.0/24 maxlen: 24
103.109.227.0/24 maxlen: 24
103.112.230.0/23 maxlen: 24
103.115.236.0/23 maxlen: 24
103.160.172.0/23 maxlen: 24
103.167.152.0/24 maxlen: 24
103.173.132.0/24 maxlen: 24
103.237.84.0/24 maxlen: 24
113.193.25.0/24 maxlen: 24
113.193.48.0/24 maxlen: 24
113.193.128.0/24 maxlen: 24
202.52.134.0/24 maxlen: 24
202.162.229.0/24 maxlen: 24
202.162.230.0/24 maxlen: 24
202.162.232.0/24 maxlen: 24
202.162.233.0/24 maxlen: 24
202.177.153.0/24 maxlen: 24
202.177.157.0/24 maxlen: 24
2001:df0:7400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55553 (0xd901)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 27 09:57:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c450-2607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b3:1e:a3:d0:47:8f:dc:b8:e9:14:57:12:c1:
7c:8e:4f:0e:1f:e9:e0:c8:41:42:53:52:13:49:ca:
1c:03:bd:ed:08:9c:2a:8c:ae:65:0f:2d:be:34:37:
73:a8:b5:43:67:cb:dc:ba:62:50:c9:8d:d9:8c:46:
fd:67:a2:60:fb:ac:38:07:64:21:3c:83:a0:2f:26:
ff:bc:58:72:51:1b:60:71:32:70:7f:43:0b:93:84:
98:cf:14:56:41:0e:ba:d1:65:84:13:f9:82:48:b3:
30:42:8b:e4:f2:05:76:a3:eb:37:31:e3:64:24:7a:
04:45:48:1e:fa:02:8c:00:f8:7d:f7:f9:9a:c5:19:
4f:ac:53:cd:a7:0e:77:e5:d4:35:7b:dc:df:00:22:
40:f4:b6:6d:29:6c:ee:ca:56:fa:57:04:29:1f:e6:
70:69:da:ed:96:08:6d:d8:3a:5d:ab:89:84:00:d6:
48:ca:3d:b4:da:82:00:04:53:53:d0:d0:c5:67:11:
cc:9b:f9:b3:2c:ae:ed:1c:98:7b:22:05:a7:1f:5f:
26:a8:a2:11:5d:19:ae:29:ad:c3:89:48:3f:92:59:
e3:90:a3:4b:07:a2:07:89:c8:d8:ae:56:6a:53:89:
88:26:3e:2a:8d:58:a7:ec:ad:1a:14:70:d8:13:2b:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:58:8E:19:F3:8C:14:5C:4A:8E:F0:09:8B:16:5C:C0:D4:AF:EA:DE
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A121A056A7EE11EFBC0D4F52C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
1.6.229.0-1.6.230.255
1.7.229.0/24
1.22.36.0/24
1.23.62.0/24
103.15.74.0/24
103.29.197.0/24
103.53.21.0/24
103.57.216.0/22
103.81.88.0/22
103.98.54.0/24
103.109.211.0/24
103.109.224.0/23
103.109.227.0/24
103.112.230.0/23
103.115.236.0/23
103.160.172.0/23
103.167.152.0/24
103.173.132.0/24
103.237.84.0/24
113.193.25.0/24
113.193.48.0/24
113.193.128.0/24
202.52.134.0/24
202.162.229.0-202.162.230.255
202.162.232.0/23
202.177.153.0/24
202.177.157.0/24
IPv6:
2001:df0:7400::/48
Signature Algorithm: sha256WithRSAEncryption
30:8b:f0:d8:0f:c3:91:00:3a:94:b4:7a:1b:5f:eb:80:f2:61:
0e:93:db:71:78:70:0d:0e:19:01:c0:13:1f:70:4d:f9:2e:35:
fe:96:4f:9a:4a:f4:09:bc:d3:48:4c:30:9c:59:1d:a7:80:b3:
b9:dd:0a:74:ac:99:47:59:4e:8d:ee:a2:8c:3d:fe:0c:30:5d:
8d:74:7a:bd:71:23:b0:ee:20:5d:71:48:ab:d8:42:fd:bc:cd:
fb:c7:00:6a:26:24:bc:0f:4c:da:4e:fd:f2:d6:8f:30:b4:b6:
49:42:cd:a2:f3:c6:5f:30:63:e0:7b:63:8c:df:e8:86:75:4a:
81:32:5f:8d:6e:cf:5e:3b:8c:fd:2f:92:4f:bf:91:2a:bb:eb:
64:70:86:5c:ec:13:80:e1:80:90:74:60:e0:41:db:7d:79:fb:
0e:a0:6b:cc:43:d4:10:1a:65:90:8b:db:79:76:02:fa:7c:a6:
7c:5e:77:43:f0:8d:1f:75:17:b4:b2:c0:93:7c:31:e0:42:26:
d3:c0:e9:94:1a:fc:49:7b:27:0f:5a:7f:d9:6a:60:ac:87:b7:
71:b8:f8:9a:94:91:f5:46:e7:db:d0:ea:1a:fd:55:a1:64:ae:
85:73:e9:c4:d3:b1:2b:2a:39:be:5a:3a:81:98:0b:fc:f1:a8:
28:21:b9:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:05:26 2026 by rpki-client