Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ABCCDA0688A411F0A390C40CC4F9AE02.roa
File: ABCCDA0688A411F0A390C40CC4F9AE02.roa (raw, json)
Hash identifier: ooS83hhioML4NuRDAMJtIlKKlTV05VBeztTUNCCffUI=
Subject key identifier: 57:4F:65:9A:70:CD:88:EB:DF:FD:4F:22:40:AB:3B:62:1F:07:45:80
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D9F3
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ABCCDA0688A411F0A390C40CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 23:01:50 +0000
ROA not before: Wed 03 Sep 2025 09:02:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 132556
IP address blocks: 43.224.156.0/22 maxlen: 22
43.224.156.0/24 maxlen: 24
43.224.157.0/24 maxlen: 24
43.224.158.0/24 maxlen: 24
43.224.159.0/24 maxlen: 24
45.123.0.0/22 maxlen: 24
103.6.156.0/22 maxlen: 22
103.6.156.0/24 maxlen: 24
103.6.157.0/24 maxlen: 24
103.6.158.0/24 maxlen: 24
103.6.159.0/24 maxlen: 24
103.16.12.0/23 maxlen: 24
103.16.14.0/24 maxlen: 24
103.38.240.0/22 maxlen: 24
103.94.100.0/24 maxlen: 24
103.94.101.0/24 maxlen: 24
103.157.118.0/23 maxlen: 24
103.212.95.0/24 maxlen: 24
103.242.236.0/22 maxlen: 24
103.245.188.0/23 maxlen: 23
103.245.188.0/24 maxlen: 24
103.245.189.0/24 maxlen: 24
137.59.76.0/22 maxlen: 24
157.119.208.0/22 maxlen: 24
220.158.140.0/22 maxlen: 24
2001:df0:45d::/48 maxlen: 48
2404:7a40::/32 maxlen: 32
2404:7a40::/36 maxlen: 36
2404:7a40::/46 maxlen: 46
2404:7a40::/48 maxlen: 48
2404:7a40:1::/48 maxlen: 48
2404:7a40:2::/48 maxlen: 48
2404:7a40:3::/48 maxlen: 48
2404:7a40:4::/46 maxlen: 46
2404:7a40:4::/48 maxlen: 48
2404:7a40:5::/48 maxlen: 48
2404:7a40:6::/48 maxlen: 48
2404:7a40:7::/48 maxlen: 48
2404:7a40:8::/46 maxlen: 46
2404:7a40:8::/48 maxlen: 48
2404:7a40:9::/48 maxlen: 48
2404:7a40:a::/48 maxlen: 48
2404:7a40:b::/48 maxlen: 48
2404:7a40:c::/46 maxlen: 46
2404:7a40:c::/48 maxlen: 48
2404:7a40:d::/48 maxlen: 48
2404:7a40:e::/48 maxlen: 48
2404:7a40:f::/48 maxlen: 48
2404:7a40:10::/46 maxlen: 46
2404:7a40:10::/48 maxlen: 48
2404:7a40:11::/48 maxlen: 48
2404:7a40:12::/48 maxlen: 48
2404:7a40:13::/48 maxlen: 48
2404:7a40:14::/46 maxlen: 46
2404:7a40:14::/48 maxlen: 48
2404:7a40:15::/48 maxlen: 48
2404:7a40:18::/46 maxlen: 46
2404:7a40:1c::/46 maxlen: 46
2404:7a40:20::/46 maxlen: 46
2404:7a40:24::/46 maxlen: 46
2404:7a40:1000::/36 maxlen: 36
2404:7a40:1000::/48 maxlen: 48
2404:7a40:1001::/48 maxlen: 48
2404:7a40:1002::/48 maxlen: 48
2404:7a40:1003::/48 maxlen: 48
2404:7a40:1004::/48 maxlen: 48
2404:7a40:1005::/48 maxlen: 48
2404:7a40:2000::/36 maxlen: 36
2404:7a40:2000::/48 maxlen: 48
2404:7a40:2001::/48 maxlen: 48
2404:7a40:2002::/48 maxlen: 48
2404:7a40:2003::/48 maxlen: 48
2404:7a40:2004::/48 maxlen: 48
2404:7a40:2005::/48 maxlen: 48
2404:7a40:2006::/48 maxlen: 48
2404:7a40:2007::/48 maxlen: 48
2404:7a40:3000::/36 maxlen: 36
2404:7a40:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55795 (0xd9f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 3 09:02:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c55e-d4f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7b:60:49:5e:53:1f:22:fd:a2:c7:32:5e:2d:
8c:3b:b9:d7:77:d7:00:e2:0b:e0:6b:8f:f2:51:16:
6d:bb:52:8b:e8:1e:47:af:ed:2d:e6:26:34:13:3a:
c8:4f:3c:2c:cd:e9:23:00:32:d7:00:c4:c1:5a:be:
67:40:4a:4a:d7:d6:f5:9f:56:f8:ac:8f:e5:a7:91:
ba:02:f5:07:7b:01:0c:1e:a9:5f:b6:c6:e7:57:b3:
7d:1f:a4:6f:d0:ef:e4:cc:d9:47:87:b5:4e:42:51:
0a:b8:c6:cd:7c:40:23:8f:b3:7b:8f:25:ab:e4:1d:
8a:9e:cc:5d:50:e5:aa:70:4d:a3:f8:10:51:db:90:
3b:59:f3:56:69:2e:e9:04:be:89:70:88:84:fe:46:
f3:4a:02:61:2b:f0:7f:3c:70:2a:59:b2:2a:61:26:
16:e8:00:ac:89:cb:a4:60:13:aa:cc:57:2f:c5:43:
67:7a:1c:a1:da:ad:0c:9e:d5:26:2e:b1:e6:b5:b9:
5c:8c:c1:8a:c7:c0:99:26:27:ab:1a:66:64:37:cf:
39:08:99:c9:cd:27:c2:c5:bc:15:da:2d:f7:eb:76:
fe:2e:b4:96:2e:44:76:36:c7:3f:f6:21:6a:d2:d4:
96:2f:62:08:b1:2c:0f:56:5f:4e:30:df:e2:0d:1f:
ac:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:4F:65:9A:70:CD:88:EB:DF:FD:4F:22:40:AB:3B:62:1F:07:45:80
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/ABCCDA0688A411F0A390C40CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.224.156.0/22
45.123.0.0/22
103.6.156.0/22
103.16.12.0-103.16.14.255
103.38.240.0/22
103.94.100.0/23
103.157.118.0/23
103.212.95.0/24
103.242.236.0/22
103.245.188.0/23
137.59.76.0/22
157.119.208.0/22
220.158.140.0/22
IPv6:
2001:df0:45d::/48
2404:7a40::/32
Signature Algorithm: sha256WithRSAEncryption
3d:a8:de:18:09:8b:18:38:da:45:b8:e3:ba:3d:38:72:47:a3:
ab:25:ba:b0:2e:ea:7b:0c:63:66:aa:d3:ec:15:a3:c9:6e:be:
f9:ec:95:ef:85:b4:0f:b3:38:3f:f6:be:63:4c:ea:5d:1f:68:
36:fb:7e:d1:68:f8:dd:52:06:fe:a2:0c:1d:c0:78:94:5a:af:
64:17:79:5e:8a:d7:d1:82:93:1b:16:d3:27:09:02:fe:a7:a7:
98:f7:d9:fb:f8:0d:c5:23:d1:30:c4:91:d7:a1:cb:19:31:49:
60:a7:bd:df:82:e4:8b:22:ff:db:de:36:7b:cb:e6:83:d8:04:
d8:1f:67:95:a7:ca:a6:30:c7:1b:66:a3:0b:4d:ee:73:58:92:
be:c5:6a:9b:1e:08:22:cd:68:42:fe:c4:c9:cd:d4:f8:e0:34:
0a:c5:76:ba:58:c2:4c:94:d2:35:87:e8:37:ad:63:a2:73:be:
b1:09:cf:8d:4d:b9:21:ae:60:10:9d:dd:38:29:4f:19:d2:63:
74:2a:ae:c2:4c:18:2b:38:22:0a:be:28:12:58:58:3d:e7:20:
d1:ea:be:54:de:2e:1d:32:58:a6:7a:7b:e9:ca:f2:36:8a:fe:
73:ed:3d:4e:06:57:e1:a4:70:33:de:5a:de:6c:f1:ed:d5:95:
64:d1:2f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:07 2026 by rpki-client