Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29F7050711711F0AD01080BC4F9AE02.roa
File: A29F7050711711F0AD01080BC4F9AE02.roa (raw, json)
Hash identifier: MZeAyffXI1uymW5opxprQIGpaLGZzspebkvfo1z3ALQ=
Subject key identifier: DF:B0:C9:1A:61:4C:68:08:0A:04:1E:BE:F2:DC:1F:ED:BB:D0:15:44
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D9F8
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29F7050711711F0AD01080BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 23:01:55 +0000
ROA not before: Thu 04 Sep 2025 12:10:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132925
IP address blocks: 36.50.4.0/23 maxlen: 24
43.249.188.0/24 maxlen: 24
43.249.189.0/24 maxlen: 24
103.114.63.0/24 maxlen: 24
103.135.120.0/24 maxlen: 24
103.135.121.0/24 maxlen: 24
103.161.12.0/23 maxlen: 24
103.169.80.0/23 maxlen: 24
103.171.56.0/23 maxlen: 24
103.172.6.0/23 maxlen: 24
103.172.12.0/23 maxlen: 24
103.172.198.0/23 maxlen: 24
103.172.224.0/23 maxlen: 24
103.172.228.0/24 maxlen: 24
103.172.229.0/24 maxlen: 24
103.173.18.0/23 maxlen: 24
103.173.48.0/23 maxlen: 24
103.173.68.0/23 maxlen: 24
103.211.170.0/23 maxlen: 24
103.233.26.0/24 maxlen: 24
103.233.27.0/24 maxlen: 24
103.236.108.0/24 maxlen: 24
103.236.109.0/24 maxlen: 24
103.236.110.0/24 maxlen: 24
103.236.111.0/24 maxlen: 24
150.129.1.0/24 maxlen: 24
210.16.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:55:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55800 (0xd9f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 4 12:10:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c563-4870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:02:95:cd:aa:ca:c9:fe:1b:7d:07:23:b3:b3:
ff:b1:18:63:1a:40:a8:bf:27:13:df:66:8a:05:18:
0c:61:e9:7e:49:6a:20:25:fb:39:e7:fe:37:53:65:
56:1c:dc:1f:dc:48:81:21:50:a2:02:56:a6:f7:a7:
e6:02:4d:4a:64:96:3b:b8:1f:56:6c:63:82:39:8e:
7b:ef:0d:a3:88:03:03:dd:d4:96:85:e2:23:7c:0b:
7f:d3:15:ca:4b:e0:ee:49:7c:39:71:3b:c1:40:2f:
e9:22:b1:48:5d:18:ce:2e:de:05:8a:01:5e:85:24:
75:de:90:0f:ec:f0:01:20:82:d5:a8:2d:a4:de:66:
d6:62:b6:d5:3a:55:6f:ae:e2:16:58:6a:8f:2a:4f:
e1:5b:81:61:5a:a7:72:24:92:f9:34:23:e9:6e:48:
78:b5:77:46:d9:e6:88:31:f4:af:c8:6b:ab:56:eb:
e5:28:01:01:1c:9a:0b:d1:19:c3:b7:33:9a:7c:b0:
40:30:d6:09:ee:36:86:4f:b0:6f:56:1d:47:e2:4e:
2e:6c:3f:ac:a6:00:aa:9a:ff:f6:d8:f2:f9:64:ca:
b7:a2:63:b4:92:6e:99:27:44:da:0e:06:01:57:3c:
26:ef:9c:f4:63:94:ad:f4:08:e9:46:49:0a:f8:0d:
34:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B0:C9:1A:61:4C:68:08:0A:04:1E:BE:F2:DC:1F:ED:BB:D0:15:44
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/A29F7050711711F0AD01080BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.4.0/23
43.249.188.0/23
103.114.63.0/24
103.135.120.0/23
103.161.12.0/23
103.169.80.0/23
103.171.56.0/23
103.172.6.0/23
103.172.12.0/23
103.172.198.0/23
103.172.224.0/23
103.172.228.0/23
103.173.18.0/23
103.173.48.0/23
103.173.68.0/23
103.211.170.0/23
103.233.26.0/23
103.236.108.0/22
150.129.1.0/24
210.16.101.0/24
Signature Algorithm: sha256WithRSAEncryption
53:09:64:33:73:c9:30:a4:66:97:40:96:87:31:ea:89:82:42:
2b:a3:c7:d7:e4:17:8c:b4:ac:49:d1:ca:dc:56:cd:c8:24:91:
ee:97:65:30:e0:6b:ab:df:bd:19:17:2f:d8:48:c1:d9:30:b0:
af:41:c1:a9:05:6c:57:32:1c:9b:e2:19:54:fa:d4:e8:0e:cf:
ae:2a:d4:ad:7f:e7:65:2f:5b:0a:03:21:12:bc:3f:b7:d5:b9:
eb:85:96:a6:9f:20:8f:3f:e8:83:e5:cd:b7:6e:6f:41:f3:0e:
03:cc:77:8b:fe:2d:c6:54:6c:ae:4d:a1:39:6c:62:cb:2a:24:
dc:f2:cb:8f:1e:c7:a8:f2:87:5f:b6:41:10:c3:52:fc:81:83:
fe:34:3f:a3:28:bc:42:d9:9a:30:91:fe:0e:cb:37:f4:d4:ab:
c8:ef:ec:9f:0d:89:d1:b8:c2:b0:21:26:a7:65:93:84:10:c2:
75:4d:de:fe:ed:2e:9f:ff:86:0e:5c:81:b6:91:7c:4e:74:0f:
35:90:7a:d9:b0:61:21:be:d1:22:34:43:89:83:0b:27:23:13:
f3:a6:92:94:88:25:5f:dc:a1:31:a8:01:e8:ae:2e:ca:7a:df:
9f:de:7d:92:50:b3:d3:83:a2:e6:d2:53:90:af:ad:d0:36:44:
d1:cd:a1:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:00:29 2026 by rpki-client