Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA8C670008B511F19E011CBA1D3D8C67.roa
File: BA8C670008B511F19E011CBA1D3D8C67.roa (raw, json)
Hash identifier: zfl2KRyz63dffEnzfszGdrpX45RoQlKUL/syBh9Cn5Q=
Subject key identifier: A6:1D:D1:21:97:2D:40:99:52:85:85:D4:A0:FB:14:02:67:63:9E:78
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DB1E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA8C670008B511F19E011CBA1D3D8C67.roa
Signing time: Sun 01 Mar 2026 23:06:54 +0000
ROA not before: Fri 13 Feb 2026 08:26:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137085
IP address blocks: 27.123.240.0/23 maxlen: 24
43.225.248.0/22 maxlen: 24
43.228.164.0/23 maxlen: 24
43.230.148.0/22 maxlen: 24
43.248.152.0/22 maxlen: 24
43.248.240.0/22 maxlen: 24
43.251.92.0/22 maxlen: 23
43.251.93.0/24 maxlen: 24
43.251.94.0/24 maxlen: 24
43.251.95.0/24 maxlen: 24
45.120.160.0/22 maxlen: 24
45.248.0.0/22 maxlen: 24
45.248.172.0/22 maxlen: 24
103.37.98.0/23 maxlen: 24
103.40.200.0/22 maxlen: 24
103.43.32.0/22 maxlen: 24
103.54.27.0/24 maxlen: 24
103.55.60.0/22 maxlen: 24
103.68.20.0/22 maxlen: 24
103.68.140.0/23 maxlen: 24
103.69.239.0/24 maxlen: 24
103.72.196.0/24 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/22 maxlen: 24
103.92.107.0/24 maxlen: 24
103.93.39.0/24 maxlen: 24
103.100.4.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.106.28.0/22 maxlen: 24
103.113.110.0/23 maxlen: 24
103.120.108.0/24 maxlen: 24
103.120.152.0/24 maxlen: 24
103.120.153.0/24 maxlen: 24
103.124.174.0/24 maxlen: 24
103.138.9.0/24 maxlen: 24
103.139.143.0/24 maxlen: 24
103.152.158.0/24 maxlen: 24
103.154.8.0/23 maxlen: 24
103.154.56.0/23 maxlen: 24
103.155.237.0/24 maxlen: 24
103.156.121.0/24 maxlen: 24
103.157.188.0/23 maxlen: 24
103.158.90.0/23 maxlen: 24
103.159.104.0/23 maxlen: 24
103.160.25.0/24 maxlen: 24
103.164.140.0/24 maxlen: 24
103.165.88.0/23 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.169.242.0/24 maxlen: 24
103.169.243.0/24 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.52.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
103.178.24.0/23 maxlen: 24
103.178.117.0/24 maxlen: 24
103.179.50.0/23 maxlen: 24
103.181.66.0/24 maxlen: 24
103.181.119.0/24 maxlen: 24
103.184.205.0/24 maxlen: 24
103.198.172.0/22 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/23 maxlen: 24
103.216.140.0/22 maxlen: 24
103.217.132.0/22 maxlen: 24
103.224.144.0/22 maxlen: 24
103.225.188.0/22 maxlen: 24
103.232.232.0/22 maxlen: 24
103.248.92.0/22 maxlen: 24
103.248.172.0/22 maxlen: 24
157.119.80.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
210.79.134.0/24 maxlen: 24
2001:df0:47c0::/48 maxlen: 48
2001:df1:1980::/48 maxlen: 48
2001:df1:ed40::/48 maxlen: 48
2001:df2:3ac0::/48 maxlen: 48
2001:df2:3f40::/48 maxlen: 48
2001:df3:1340::/48 maxlen: 48
2001:df3:6ec0::/48 maxlen: 48
2400:d660::/32 maxlen: 32
2401:bba0::/32 maxlen: 32
2405:e100:a::/48 maxlen: 48
2405:e100:b::/48 maxlen: 48
2405:e100:c::/48 maxlen: 48
2405:e100:d::/48 maxlen: 48
2405:e100:e::/48 maxlen: 48
2405:e100:f::/48 maxlen: 48
2405:e100:1d::/48 maxlen: 48
2405:e100:1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56094 (0xdb1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 13 08:26:44 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c68e-0e27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:93:f2:19:01:2a:a5:dc:0e:c6:17:d5:5e:
20:86:30:19:48:83:63:be:ef:ba:58:d2:9c:c7:da:
ae:1a:f6:71:e5:1d:ff:c0:eb:af:8b:6a:cd:af:ab:
f3:a3:01:d3:95:ab:8b:ed:e8:5b:d0:a2:bd:21:1b:
f3:9e:d3:b1:cf:e6:4d:62:51:65:5e:ec:f2:0a:81:
b8:45:cd:93:79:b0:fb:23:27:c6:76:7d:e4:c3:83:
17:56:11:06:6d:2e:1f:b0:1e:1c:66:10:d1:22:af:
05:f1:9b:69:56:fe:ee:33:dd:99:8f:91:86:7e:1c:
b9:b9:94:ad:9b:d0:50:77:f1:bd:c7:ae:f6:c7:6c:
d0:9a:55:a8:04:ec:56:ee:8d:2a:25:0b:9f:61:5f:
a8:fa:53:9a:72:44:a8:b0:14:dc:ab:61:5e:67:c3:
7e:d1:a9:ac:ea:8b:07:1e:26:c6:ba:bc:bd:c3:93:
39:82:be:37:01:9c:66:eb:f1:bd:7d:de:8a:24:61:
b3:5a:97:f2:51:ea:73:06:7e:29:99:3d:bd:be:34:
76:aa:71:5a:02:12:67:35:5b:bc:b8:60:9d:c4:b2:
c4:f9:4e:1b:77:3d:08:fd:c6:c3:61:c1:28:27:c3:
a8:d1:dd:2d:3c:31:53:c8:48:67:51:c3:a3:64:00:
fe:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:1D:D1:21:97:2D:40:99:52:85:85:D4:A0:FB:14:02:67:63:9E:78
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/BA8C670008B511F19E011CBA1D3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/23
43.225.248.0/22
43.228.164.0/23
43.230.148.0/22
43.248.152.0/22
43.248.240.0/22
43.251.92.0/22
45.120.160.0/22
45.248.0.0/22
45.248.172.0/22
103.37.98.0/23
103.40.200.0/22
103.43.32.0/22
103.54.27.0/24
103.55.60.0/22
103.68.20.0/22
103.68.140.0/23
103.69.239.0/24
103.72.196.0/24
103.91.72.0/21
103.92.107.0/24
103.93.39.0/24
103.100.4.0/24
103.101.112.0/22
103.106.28.0/22
103.113.110.0/23
103.120.108.0/24
103.120.152.0/23
103.124.174.0/24
103.138.9.0/24
103.139.143.0/24
103.152.158.0/24
103.154.8.0/23
103.154.56.0/23
103.155.237.0/24
103.156.121.0/24
103.157.188.0/23
103.158.90.0/23
103.159.104.0/23
103.160.25.0/24
103.164.140.0/24
103.165.88.0/23
103.167.154.0/23
103.167.182.0/23
103.167.224.0/23
103.167.238.0/23
103.168.60.0/23
103.169.242.0/23
103.170.38.0/23
103.170.52.0/23
103.170.84.0/23
103.178.24.0/23
103.178.117.0/24
103.179.50.0/23
103.181.66.0/24
103.181.119.0/24
103.184.205.0/24
103.198.172.0/22
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.216.140.0/22
103.217.132.0/22
103.224.144.0/22
103.225.188.0/22
103.232.232.0/22
103.248.92.0/22
103.248.172.0/22
157.119.80.0/22
202.4.169.0/24
210.79.134.0/24
IPv6:
2001:df0:47c0::/48
2001:df1:1980::/48
2001:df1:ed40::/48
2001:df2:3ac0::/48
2001:df2:3f40::/48
2001:df3:1340::/48
2001:df3:6ec0::/48
2400:d660::/32
2401:bba0::/32
2405:e100:a::-2405:e100:f:ffff:ffff:ffff:ffff:ffff
2405:e100:1d::-2405:e100:1e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8f:93:71:b3:d8:c9:0c:98:1b:e6:65:bf:56:97:a7:1d:95:52:
01:5e:af:1a:bf:33:32:a4:ac:3b:70:cf:7e:48:fa:b1:7a:8b:
13:e8:ba:9c:dd:3c:d3:0a:70:31:da:84:48:51:20:47:c4:b7:
4e:e9:b5:8e:f8:99:49:ba:66:64:39:8e:bb:a7:29:43:56:f6:
a3:80:16:28:5a:fe:29:8b:5c:a2:99:14:99:59:73:1b:28:65:
08:42:69:1f:d8:b2:b6:ee:17:8a:6f:8a:48:bb:84:35:95:d5:
e6:f5:d5:97:30:4d:b3:8a:db:61:c2:97:34:a5:e4:d4:c5:c4:
00:0f:d6:c9:c9:c7:45:11:53:1d:8f:23:47:b5:d9:2c:7b:b4:
49:4b:72:95:56:83:c8:36:56:6c:e5:f0:95:84:32:3b:9b:98:
7d:68:62:a8:fa:ad:54:1a:3a:de:22:bd:1b:6f:0e:80:ea:76:
a4:5e:0f:d3:21:d0:f1:42:6d:7f:ac:0f:2a:f7:a1:33:fe:25:
e5:03:87:b5:03:50:2d:dc:1d:e4:56:a3:05:72:0c:8f:2b:cb:
42:65:39:52:f2:c1:32:3a:2b:66:65:27:8e:eb:0e:a0:81:a0:
95:68:b4:55:52:fe:ad:a1:91:1d:52:88:01:8d:c5:ef:93:3e:
b8:41:bc:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:18:41 2026 by rpki-client