Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB90D944B7C211EB9171C27AC4F9AE02.roa
File: CB90D944B7C211EB9171C27AC4F9AE02.roa (raw, json)
Hash identifier: 6xFk7HWWa2jaZHOnkdSlpx6bUvFSZRBZWAQoHVqZvlU=
Subject key identifier: 73:C7:19:EC:7E:5C:FB:AB:24:84:98:28:E9:43:8E:1D:BD:2E:4F:7B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D94F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB90D944B7C211EB9171C27AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:58:42 +0000
ROA not before: Tue 01 Jul 2025 06:45:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 134326
IP address blocks: 43.246.136.0/22 maxlen: 24
45.249.120.0/22 maxlen: 24
103.69.8.0/22 maxlen: 24
103.81.32.0/22 maxlen: 24
103.114.248.0/22 maxlen: 24
103.118.164.0/22 maxlen: 24
103.139.224.0/23 maxlen: 24
103.144.232.0/23 maxlen: 24
103.145.110.0/24 maxlen: 24
103.150.70.0/24 maxlen: 24
103.154.202.0/23 maxlen: 24
103.169.244.0/23 maxlen: 24
103.194.240.0/22 maxlen: 24
103.218.112.0/22 maxlen: 24
113.30.176.0/22 maxlen: 24
2401:fa40::/32 maxlen: 32
2401:fa40::/34 maxlen: 34
2401:fa40::/36 maxlen: 36
2401:fa40:1000::/36 maxlen: 36
2401:fa40:2000::/36 maxlen: 36
2401:fa40:3000::/36 maxlen: 36
2401:fa40:4000::/34 maxlen: 34
2401:fa40:4000::/36 maxlen: 36
2401:fa40:5000::/36 maxlen: 36
2401:fa40:6000::/36 maxlen: 36
2401:fa40:7000::/36 maxlen: 36
2401:fa40:8000::/34 maxlen: 34
2401:fa40:8000::/36 maxlen: 36
2401:fa40:9000::/36 maxlen: 36
2401:fa40:a000::/36 maxlen: 36
2401:fa40:b000::/36 maxlen: 36
2401:fa40:c000::/34 maxlen: 34
2401:fa40:c000::/36 maxlen: 36
2401:fa40:d000::/36 maxlen: 36
2401:fa40:e000::/36 maxlen: 36
2401:fa40:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55631 (0xd94f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 1 06:45:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c4a2-839a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:02:44:85:94:40:fc:f1:3a:42:66:a6:1b:
b0:74:b3:f0:da:f9:bf:b4:7b:6e:ee:45:a8:9d:f6:
e8:c4:47:50:15:1c:57:f9:0d:82:06:e1:74:59:da:
b0:cd:b4:c0:12:9d:03:ba:bf:1c:6d:f5:64:45:99:
71:01:bc:3c:75:00:9d:ab:fd:da:b7:56:e2:f1:4e:
28:2b:39:35:c6:89:5e:8f:6c:67:65:4c:bf:ec:66:
62:a6:98:85:f3:95:38:83:0e:a3:55:53:53:10:47:
4d:74:35:9b:aa:28:31:9c:b9:77:02:6f:00:24:7c:
45:32:4f:51:f0:54:cd:49:3e:a6:80:41:53:90:fc:
35:38:23:14:11:08:2e:7a:8f:2c:d4:e7:f2:f0:91:
2d:81:3c:a1:7c:1d:a3:94:6e:7c:2f:fc:fe:3c:a4:
1f:22:ef:4f:0f:60:fd:aa:75:d6:a6:3d:b3:ba:11:
57:25:1c:ef:f4:d4:6a:2d:ec:95:74:ab:f8:fe:68:
fa:a6:59:1d:a5:48:49:4a:5d:84:93:c4:e1:47:18:
00:25:cd:a4:9a:e7:03:ca:18:43:97:3e:47:b5:bd:
40:2c:f3:d3:39:d1:63:d1:85:73:4a:3c:4a:75:dd:
9f:0e:28:97:17:1e:d4:c7:2f:ea:fc:f6:97:14:92:
92:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C7:19:EC:7E:5C:FB:AB:24:84:98:28:E9:43:8E:1D:BD:2E:4F:7B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CB90D944B7C211EB9171C27AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.246.136.0/22
45.249.120.0/22
103.69.8.0/22
103.81.32.0/22
103.114.248.0/22
103.118.164.0/22
103.139.224.0/23
103.144.232.0/23
103.145.110.0/24
103.150.70.0/24
103.154.202.0/23
103.169.244.0/23
103.194.240.0/22
103.218.112.0/22
113.30.176.0/22
IPv6:
2401:fa40::/32
Signature Algorithm: sha256WithRSAEncryption
67:7d:aa:91:a9:ab:4c:5a:86:55:e3:44:92:c3:fe:cd:2f:e3:
77:82:a0:a2:c3:35:f3:a3:a1:bc:c4:ee:f6:60:f8:f4:59:38:
31:2f:89:87:64:07:81:58:05:30:75:aa:93:1a:2a:80:5c:63:
39:1c:67:bb:88:7b:52:f2:14:16:56:e3:ee:ab:ec:94:44:e2:
88:49:7b:e5:87:42:6e:78:de:57:72:6b:47:af:aa:43:22:84:
ac:0a:b8:dc:53:dc:0d:bf:1e:d5:50:f7:7c:bc:c4:8d:a7:f9:
f0:c9:89:5f:ef:f8:34:90:0d:15:43:4e:9e:42:47:74:a5:77:
5e:76:36:cd:ed:49:ad:4f:18:66:b3:97:63:ad:95:dc:1b:75:
a5:f2:4a:a8:2f:af:02:8c:41:1d:75:39:a9:f4:9a:f6:bc:81:
99:04:39:b4:11:b6:55:14:21:60:dc:54:18:f5:b7:ce:0f:49:
c7:91:44:15:53:34:90:89:88:09:a6:9e:b4:8f:ec:96:6d:ca:
db:91:14:fa:ec:ba:29:bb:2f:b8:fc:03:b4:d1:01:e8:c5:0c:
7d:d8:61:7c:b6:44:80:4a:d0:92:87:25:77:e7:4d:b2:62:4b:
d1:87:c1:a1:ab:e1:9c:bd:1d:2e:33:1d:f5:19:eb:00:ac:3b:
3d:23:81:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:07:59 2026 by rpki-client