Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB8EA3244B4911F082AB047EC4F9AE02.roa
File: EB8EA3244B4911F082AB047EC4F9AE02.roa (raw, json)
Hash identifier: Xgu1eEAKunMtJta+yiBSSk1HDbvZxB/63gCZNNQpq44=
Subject key identifier: A1:3B:65:DE:4A:11:58:0A:37:F3:DB:87:6F:AA:87:15:27:97:57:D7
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FC7D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB8EA3244B4911F082AB047EC4F9AE02.roa
Signing time: Tue 15 Sep 2026 12:10:51 +0000
ROA not before: Tue 15 Sep 2026 12:10:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45582
IP address blocks: 27.116.16.0/21 maxlen: 24
45.112.184.0/24 maxlen: 24
45.112.185.0/24 maxlen: 24
45.112.186.0/24 maxlen: 24
45.112.187.0/24 maxlen: 24
45.118.72.0/22 maxlen: 24
45.249.48.0/24 maxlen: 24
45.249.50.0/24 maxlen: 24
103.10.132.0/22 maxlen: 24
103.22.172.0/22 maxlen: 24
103.52.36.0/22 maxlen: 24
103.124.28.0/23 maxlen: 24
103.126.42.0/23 maxlen: 24
103.166.218.0/24 maxlen: 24
103.178.208.0/23 maxlen: 24
103.196.4.0/22 maxlen: 24
103.211.168.0/23 maxlen: 23
103.211.168.0/24 maxlen: 24
103.211.169.0/24 maxlen: 24
103.217.212.0/22 maxlen: 24
119.235.48.0/21 maxlen: 24
182.48.214.0/24 maxlen: 24
182.48.219.0/24 maxlen: 24
182.48.254.0/24 maxlen: 24
202.131.131.0/24 maxlen: 24
202.140.56.0/24 maxlen: 24
202.140.57.0/24 maxlen: 24
2400:3680::/32 maxlen: 32
2400:3680::/40 maxlen: 40
2400:3680:100::/40 maxlen: 40
2400:3680:10c::/48 maxlen: 48
2400:3680:200::/40 maxlen: 40
2400:3680:300::/40 maxlen: 40
2400:3680:400::/40 maxlen: 40
2400:3680:500::/40 maxlen: 40
2400:3680:600::/40 maxlen: 40
2400:3680:700::/40 maxlen: 40
2400:3680:800::/40 maxlen: 40
2400:3680:900::/40 maxlen: 40
2400:3680:1000::/40 maxlen: 40
2400:3680:ff00::/40 maxlen: 40
2400:f1e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64637 (0xfc7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 15 12:10:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aa935cb-7ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:f4:01:2a:3e:80:e7:d9:2b:b0:d7:cb:76:
c4:3e:e9:51:e2:de:e0:bd:11:05:f5:39:af:31:fd:
fd:df:9a:e4:49:68:96:70:09:05:4c:89:9a:49:fe:
50:3c:23:ad:52:b0:78:83:c3:cd:29:89:4d:63:91:
a9:cd:ad:35:30:2c:1f:dd:5c:c5:31:94:6e:68:0c:
df:53:85:4a:18:38:4b:70:a0:a8:4e:61:3c:d7:a5:
a1:c8:92:f4:4c:84:99:06:e9:65:34:4f:4a:60:a0:
3e:0a:a2:9e:43:13:4a:b6:d4:33:68:c0:a4:37:0d:
7c:70:3d:80:5a:40:54:14:5e:c4:95:9a:e7:c7:78:
07:c1:44:c3:f2:d1:e9:b5:57:0a:aa:64:93:47:0f:
6d:ab:36:73:83:98:39:7b:6d:7e:e1:29:a1:8e:57:
b7:86:89:7a:74:af:a5:a0:5e:e9:a5:34:c1:17:b9:
75:93:90:74:c1:40:89:b7:e0:8b:cf:ac:2a:58:7b:
1a:29:54:be:96:58:fc:46:7f:60:f4:0b:7b:1a:60:
c8:89:b2:ce:9a:90:3c:84:71:25:a9:a7:47:85:5e:
11:30:01:f8:98:0c:00:44:1c:78:85:69:34:53:86:
49:7e:f5:e4:0a:1e:da:c0:66:6a:d7:b5:f3:cc:97:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3B:65:DE:4A:11:58:0A:37:F3:DB:87:6F:AA:87:15:27:97:57:D7
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB8EA3244B4911F082AB047EC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.116.16.0/21
45.112.184.0/22
45.118.72.0/22
45.249.48.0/24
45.249.50.0/24
103.10.132.0/22
103.22.172.0/22
103.52.36.0/22
103.124.28.0/23
103.126.42.0/23
103.166.218.0/24
103.178.208.0/23
103.196.4.0/22
103.211.168.0/23
103.217.212.0/22
119.235.48.0/21
182.48.214.0/24
182.48.219.0/24
182.48.254.0/24
202.131.131.0/24
202.140.56.0/23
IPv6:
2400:3680::/32
2400:f1e0::/32
Signature Algorithm: sha256WithRSAEncryption
1a:8a:68:06:78:0f:49:32:a9:9e:fa:49:81:1a:40:ba:6d:1d:
fb:0d:14:71:1b:93:73:b8:7e:a3:de:b9:87:2a:9f:ba:fa:a8:
30:2f:30:e7:46:eb:de:c3:ad:4e:b8:57:02:46:6f:dc:f2:a7:
79:51:7f:28:3e:2e:31:a4:57:b5:db:c6:eb:28:97:de:d5:aa:
f0:e1:c2:94:c2:b8:00:31:2c:a0:11:76:33:a5:f1:72:54:bf:
6f:6c:86:a1:97:4c:b4:97:e0:94:3b:46:6c:5b:90:5e:45:f7:
01:e7:15:d7:27:be:3c:39:e1:3a:fa:ad:10:1a:3a:cd:c8:9a:
bf:df:61:5e:a9:7c:93:66:c7:59:af:cd:f5:98:2d:fc:d8:05:
93:13:67:07:d0:93:c8:1a:16:2e:8a:ff:50:db:83:ac:7c:ec:
27:b9:b3:56:80:90:3f:a7:cf:82:49:ef:52:31:b9:97:6c:b3:
d5:cf:ee:5c:17:52:d3:a8:e5:5f:35:88:18:4a:af:82:00:61:
f6:e8:b1:70:b5:f5:ae:9c:2a:d6:f6:2c:ed:dd:4b:07:94:02:
eb:cb:7c:7a:81:a3:e7:e6:0e:da:d7:df:32:7d:46:8b:68:b0:
99:20:13:87:c8:f1:f5:e8:6a:05:0a:5b:42:5b:7c:87:b8:ce:
eb:db:00:36
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgIDAPx9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDkxNTEyMTA1MVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmFhOTM1Y2ItN2VkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM0I9AEqPoDn2Suw18t2xD7pUeLe4L0RBfU5rzH9/d+a5ElolnAJBUyJmkn+
UDwjrVKweIPDzSmJTWORqc2tNTAsH91cxTGUbmgM31OFShg4S3CgqE5hPNelociS
9EyEmQbpZTRPSmCgPgqinkMTSrbUM2jApDcNfHA9gFpAVBRexJWa58d4B8FEw/LR
6bVXCqpkk0cPbas2c4OYOXttfuEpoY5Xt4aJenSvpaBe6aU0wRe5dZOQdMFAibfg
i8+sKlh7GilUvpZY/EZ/YPQLexpgyImyzpqQPIRxJamnR4VeETAB+JgMAEQceIVp
NFOGSX715Aoe2sBmate188yXCgkCAwEAAaOCAvIwggLuMB0GA1UdDgQWBBShO2Xe
ShFYCjfz24dvqocVJ5dX1zAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VCOEVBMzI0
NEI0OTExRjA4MkFCMDQ3RUM0RjlBRTAyLnJvYTCBsAYIKwYBBQUHAQcBAf8EgaAw
gZ0wgYQEAgABMH4DBAMbdBADBAItcLgDBAItdkgDBAAt+TADBAAt+TIDBAJnCoQD
BAJnFqwDBAJnNCQDBAFnfBwDBAFnfioDBABnptoDBAFnstADBAJnxAQDBAFn06gD
BAJn2dQDBAN36zADBAC2MNYDBAC2MNsDBAC2MP4DBADKg4MDBAHKjDgwFAQCAAIw
DgMFACQANoADBQAkAPHgMA0GCSqGSIb3DQEBCwUAA4IBAQAaimgGeA9JMqme+kmB
GkC6bR37DRRxG5NzuH6j3rmHKp+6+qgwLzDnRuvew61OuFcCRm/c8qd5UX8oPi4x
pFe128brKJfe1arw4cKUwrgAMSygEXYzpfFyVL9vbIahl0y0l+CUO0ZsW5BeRfcB
5xXXJ748OeE6+q0QGjrNyJq/32FeqXyTZsdZr831mC382AWTE2cH0JPIGhYuiv9Q
24OsfOwnubNWgJA/p8+CSe9SMbmXbLPVz+5cF1LTqOVfNYgYSq+CAGH26LFwtfWu
nCrW9izt3UsHlALry3x6gaPn5g7a198yfUaLaLCZIBOHyPH16GoFCltCW3yHuM7r
2wA2
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:13:54 2026 by rpki-client