Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C210C6A2D72711F0BA02C6ED5ED3641D.roa
File: C210C6A2D72711F0BA02C6ED5ED3641D.roa (raw, json)
Hash identifier: 5JqEf3WSUzurERdGHBj4hUQOeX8p9HfK7xzw8CHQBFA=
Subject key identifier: B7:8C:6D:87:C6:EF:1C:2F:34:64:67:6F:21:C7:37:86:BA:97:76:15
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DD5B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C210C6A2D72711F0BA02C6ED5ED3641D.roa
Signing time: Wed 01 Apr 2026 06:35:16 +0000
ROA not before: Wed 01 Apr 2026 06:35:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133676
IP address blocks: 36.50.82.0/24 maxlen: 24
43.225.74.0/24 maxlen: 24
43.230.196.0/22 maxlen: 24
43.240.4.0/24 maxlen: 24
43.240.5.0/24 maxlen: 24
43.240.6.0/24 maxlen: 24
43.240.7.0/24 maxlen: 24
43.250.252.0/22 maxlen: 24
45.64.8.0/24 maxlen: 24
45.64.9.0/24 maxlen: 24
45.64.10.0/24 maxlen: 24
45.64.11.0/24 maxlen: 24
45.248.24.0/24 maxlen: 24
45.248.25.0/24 maxlen: 24
45.248.26.0/23 maxlen: 24
103.42.88.0/22 maxlen: 24
103.47.12.0/23 maxlen: 24
103.47.14.0/24 maxlen: 24
103.47.15.0/24 maxlen: 24
103.47.72.0/23 maxlen: 24
103.47.74.0/23 maxlen: 24
103.47.172.0/23 maxlen: 24
103.47.174.0/23 maxlen: 24
103.49.232.0/23 maxlen: 24
103.54.24.0/23 maxlen: 24
103.54.26.0/24 maxlen: 24
103.62.147.0/24 maxlen: 24
103.80.34.0/23 maxlen: 24
103.82.72.0/22 maxlen: 24
103.85.118.0/23 maxlen: 24
103.87.204.0/22 maxlen: 24
103.93.172.0/22 maxlen: 24
103.93.212.0/23 maxlen: 24
103.98.53.0/24 maxlen: 24
103.101.116.0/24 maxlen: 24
103.101.117.0/24 maxlen: 24
103.101.118.0/23 maxlen: 24
103.103.163.0/24 maxlen: 24
103.109.180.0/23 maxlen: 24
103.109.182.0/23 maxlen: 24
103.114.188.0/23 maxlen: 24
103.118.180.0/22 maxlen: 24
103.143.51.0/24 maxlen: 24
103.148.66.0/23 maxlen: 24
103.153.208.0/24 maxlen: 24
103.170.113.0/24 maxlen: 24
103.173.218.0/24 maxlen: 24
103.177.202.0/23 maxlen: 24
103.178.58.0/24 maxlen: 24
103.178.59.0/24 maxlen: 24
103.181.90.0/23 maxlen: 24
103.182.44.0/23 maxlen: 24
103.182.160.0/23 maxlen: 24
103.184.184.0/23 maxlen: 24
103.184.237.0/24 maxlen: 24
103.186.44.0/23 maxlen: 24
103.189.146.0/24 maxlen: 24
103.189.147.0/24 maxlen: 24
103.191.182.0/23 maxlen: 24
103.191.234.0/23 maxlen: 24
103.195.24.0/23 maxlen: 23
103.195.24.0/24 maxlen: 24
103.195.25.0/24 maxlen: 24
103.195.26.0/23 maxlen: 24
103.204.168.0/22 maxlen: 24
103.211.56.0/23 maxlen: 24
103.211.58.0/24 maxlen: 24
103.211.190.0/23 maxlen: 24
103.212.136.0/23 maxlen: 24
103.212.138.0/23 maxlen: 24
103.213.6.0/23 maxlen: 24
103.225.204.0/24 maxlen: 24
103.225.205.0/24 maxlen: 24
103.225.206.0/23 maxlen: 24
103.226.200.0/22 maxlen: 24
103.227.95.0/24 maxlen: 24
103.248.120.0/24 maxlen: 24
103.248.121.0/24 maxlen: 24
103.248.122.0/24 maxlen: 24
103.248.123.0/24 maxlen: 24
139.5.16.0/23 maxlen: 24
139.5.18.0/23 maxlen: 24
2405:5540::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 11:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56667 (0xdd5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 1 06:35:16 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69ccbca4-3f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:20:58:fe:82:ac:03:a1:51:1d:f7:27:2d:61:
ba:8a:42:d2:1a:57:ff:11:5f:a3:ca:d1:f9:96:3c:
0f:67:16:b3:98:b7:9f:25:a6:d3:84:85:68:0b:55:
04:0f:f0:4b:01:8e:98:37:4d:26:28:65:28:55:04:
c4:f2:7e:1d:14:77:80:5e:0a:ea:a3:a8:e4:39:79:
b6:02:48:32:95:bd:8c:d2:80:3c:61:de:3e:98:1f:
09:88:c3:3e:5e:0a:0a:7a:3e:6b:60:8c:d3:34:ba:
05:c0:66:e2:76:44:23:c3:92:05:dd:30:04:46:1b:
9a:6b:6a:31:c9:e9:fb:a9:a2:7b:58:db:b6:62:60:
48:e6:22:30:82:73:0e:7a:66:b0:93:77:63:9c:bc:
6b:01:88:59:14:c2:9b:69:d7:48:c1:d9:e4:47:99:
a9:96:cf:2f:8c:73:82:b5:b9:59:2b:be:fc:75:88:
0e:68:12:8a:43:74:d7:2e:a3:7b:42:b3:5e:51:fa:
b9:c8:77:d1:e6:c5:fa:04:d0:c2:74:5c:b9:5a:09:
0b:c2:0b:ba:26:67:33:1a:a7:f7:63:86:62:58:fd:
c8:ae:cd:a3:00:26:09:61:a8:b2:76:dd:70:44:b5:
33:56:2e:02:6d:e5:b8:2a:35:39:14:ae:bf:24:35:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8C:6D:87:C6:EF:1C:2F:34:64:67:6F:21:C7:37:86:BA:97:76:15
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/C210C6A2D72711F0BA02C6ED5ED3641D.roa
sbgp-ipAddrBlock: critical
IPv4:
36.50.82.0/24
43.225.74.0/24
43.230.196.0/22
43.240.4.0/22
43.250.252.0/22
45.64.8.0/22
45.248.24.0/22
103.42.88.0/22
103.47.12.0/22
103.47.72.0/22
103.47.172.0/22
103.49.232.0/23
103.54.24.0-103.54.26.255
103.62.147.0/24
103.80.34.0/23
103.82.72.0/22
103.85.118.0/23
103.87.204.0/22
103.93.172.0/22
103.93.212.0/23
103.98.53.0/24
103.101.116.0/22
103.103.163.0/24
103.109.180.0/22
103.114.188.0/23
103.118.180.0/22
103.143.51.0/24
103.148.66.0/23
103.153.208.0/24
103.170.113.0/24
103.173.218.0/24
103.177.202.0/23
103.178.58.0/23
103.181.90.0/23
103.182.44.0/23
103.182.160.0/23
103.184.184.0/23
103.184.237.0/24
103.186.44.0/23
103.189.146.0/23
103.191.182.0/23
103.191.234.0/23
103.195.24.0/22
103.204.168.0/22
103.211.56.0-103.211.58.255
103.211.190.0/23
103.212.136.0/22
103.213.6.0/23
103.225.204.0/22
103.226.200.0/22
103.227.95.0/24
103.248.120.0/22
139.5.16.0/22
IPv6:
2405:5540::/32
Signature Algorithm: sha256WithRSAEncryption
a2:35:e8:e3:2f:29:5a:67:65:30:7e:5f:20:50:4e:70:ad:55:
59:d5:ff:9b:c1:da:c2:ea:c3:3c:14:d6:d3:0c:a0:51:8d:ce:
ad:ce:a3:aa:3b:44:c7:3c:8f:92:d6:dd:b9:b6:84:af:9e:50:
70:74:a3:d5:1c:83:28:24:00:45:9b:29:ce:d9:1d:03:12:49:
e2:1b:62:e8:11:9a:65:b0:5c:95:3b:16:c6:d5:15:5b:9e:b2:
1c:5d:f1:00:e5:e4:cc:e5:37:f7:3c:d7:e6:6d:2e:d8:af:2c:
21:db:e8:84:58:cf:4c:09:2b:db:00:8e:9a:90:65:2c:4e:ef:
7c:40:6d:94:54:47:c5:fd:e2:16:23:fb:b7:9f:a3:a6:ce:c4:
64:f4:c0:91:9e:c1:aa:27:21:18:11:41:76:41:0e:c8:c5:89:
f5:d0:b8:43:0b:cb:9f:04:03:52:4c:c1:71:46:89:07:fb:38:
ef:2d:1b:c4:80:a2:e5:a3:1f:e4:96:45:fe:ff:64:ba:52:c0:
36:0a:eb:c5:af:9f:08:fe:4c:b3:b3:da:a2:03:aa:71:39:3a:
47:1c:e6:20:61:5d:0d:77:c2:5c:0e:7e:23:2c:5b:97:2c:5a:
36:f8:77:f4:5f:7c:04:a3:28:09:2c:6b:34:57:a9:ab:a0:a2:
6c:69:8c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:05:22 2026 by rpki-client