Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBD48D1E0F8311F0AB75BC25C4F9AE02.roa
File: EBD48D1E0F8311F0AB75BC25C4F9AE02.roa (raw, json)
Hash identifier: NmQAOBWCgZV8W/N7i2P/cpXYHWlEOk/VzgYNtpl68Ao=
Subject key identifier: D5:2D:57:AF:67:E8:D2:E0:4A:E1:B1:FE:5E:96:59:3D:FC:AB:34:C5
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EC22
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBD48D1E0F8311F0AB75BC25C4F9AE02.roa
Signing time: Thu 04 Jun 2026 11:51:58 +0000
ROA not before: Thu 04 Jun 2026 11:51:58 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 133594
IP address blocks: 14.102.1.0/24 maxlen: 24
14.102.2.0/23 maxlen: 24
14.102.3.0/24 maxlen: 24
14.102.12.0/23 maxlen: 24
14.102.15.0/24 maxlen: 24
14.102.22.0/23 maxlen: 24
14.102.24.0/22 maxlen: 24
14.102.32.0/22 maxlen: 24
14.102.36.0/23 maxlen: 24
14.102.38.0/24 maxlen: 24
14.102.40.0/22 maxlen: 24
14.102.43.0/24 maxlen: 24
14.102.44.0/24 maxlen: 24
14.102.45.0/24 maxlen: 24
14.102.48.0/24 maxlen: 24
14.102.50.0/24 maxlen: 24
14.102.56.0/23 maxlen: 24
14.102.57.0/24 maxlen: 24
14.102.59.0/24 maxlen: 24
14.102.64.0/22 maxlen: 24
14.102.66.0/24 maxlen: 24
14.102.68.0/22 maxlen: 24
14.102.72.0/22 maxlen: 24
14.102.76.0/23 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/23 maxlen: 24
14.102.82.0/24 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.92.0/23 maxlen: 24
14.102.95.0/24 maxlen: 24
14.102.96.0/23 maxlen: 24
14.102.100.0/23 maxlen: 24
14.102.103.0/24 maxlen: 24
14.102.104.0/22 maxlen: 24
14.102.108.0/22 maxlen: 24
14.102.112.0/22 maxlen: 24
14.102.116.0/22 maxlen: 24
14.102.120.0/22 maxlen: 24
14.102.123.0/24 maxlen: 24
14.102.125.0/24 maxlen: 24
14.102.126.0/23 maxlen: 24
103.5.200.0/24 maxlen: 24
103.5.201.0/24 maxlen: 24
103.5.202.0/24 maxlen: 24
103.94.83.0/24 maxlen: 24
103.124.76.0/24 maxlen: 24
103.155.128.0/23 maxlen: 24
103.160.72.0/23 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.150.0/24 maxlen: 24
110.172.168.0/24 maxlen: 24
110.172.170.0/24 maxlen: 24
111.235.64.0/22 maxlen: 24
118.91.176.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60450 (0xec22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 4 11:51:58 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a2166de-9ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:fd:80:a5:27:24:fa:48:d3:7e:c8:e2:06:
d4:7a:5a:40:4e:41:2a:a9:93:99:28:76:2a:a4:f1:
2b:3d:05:39:5e:3f:12:bc:cd:95:1e:80:2e:2e:34:
be:43:27:36:aa:52:c8:f8:8e:de:69:20:23:bf:7d:
55:d8:7b:8e:dc:ca:bd:c5:8b:cd:34:2b:ad:07:54:
ac:ec:2b:dd:9e:de:40:a1:46:88:5f:d6:92:3d:6e:
2d:2f:c6:71:00:5c:07:9f:cb:f0:5b:c8:6c:57:af:
3a:ec:a2:f4:9c:e0:5f:64:fc:5f:89:d2:50:bb:6f:
62:2b:42:f3:33:27:2e:6f:5f:e8:6d:91:e3:3f:93:
a2:c5:4c:35:e4:aa:ca:ae:33:5f:47:f4:22:81:6b:
64:e9:dc:fd:59:fd:79:e0:ed:c4:07:0e:98:a5:5f:
96:10:03:c7:19:79:f9:a6:81:4c:7e:0d:8b:02:01:
d2:64:bb:f4:15:a4:9c:e1:77:99:ec:ce:22:0f:9a:
de:eb:b4:c7:3d:51:21:a5:f6:07:b4:a5:4e:0c:9b:
74:55:a1:fe:4c:26:13:13:34:a0:6a:d1:68:8f:85:
02:30:0d:cf:77:5d:81:96:bc:ee:d8:ae:70:56:d4:
52:0c:c0:3c:7c:ec:87:10:11:9c:d3:aa:35:6f:dd:
d3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2D:57:AF:67:E8:D2:E0:4A:E1:B1:FE:5E:96:59:3D:FC:AB:34:C5
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EBD48D1E0F8311F0AB75BC25C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.102.1.0-14.102.3.255
14.102.12.0/23
14.102.15.0/24
14.102.22.0-14.102.27.255
14.102.32.0-14.102.38.255
14.102.40.0-14.102.45.255
14.102.48.0/24
14.102.50.0/24
14.102.56.0/23
14.102.59.0/24
14.102.64.0-14.102.78.255
14.102.80.0-14.102.82.255
14.102.88.0/24
14.102.92.0/23
14.102.95.0-14.102.97.255
14.102.100.0/23
14.102.103.0-14.102.123.255
14.102.125.0-14.102.127.255
103.5.200.0-103.5.202.255
103.94.83.0/24
103.124.76.0/24
103.155.128.0/23
103.160.72.0/23
110.172.136.0/24
110.172.150.0/24
110.172.168.0/24
110.172.170.0/24
111.235.64.0/22
118.91.176.0/24
202.89.70.0/24
Signature Algorithm: sha256WithRSAEncryption
42:58:2f:1b:7a:22:ae:79:2e:5f:4b:51:4b:a3:ae:66:01:56:
81:42:f4:3d:56:07:62:6a:6a:9c:a1:0d:1b:7a:f3:09:fa:32:
83:cf:98:50:6c:bd:ea:07:bd:f1:72:26:ce:43:a8:50:9a:f4:
4f:bc:fe:9f:b5:cb:b0:cd:5c:bf:3a:f6:a3:01:b0:90:da:6b:
4d:48:b8:8d:ab:55:c4:55:ff:78:d5:e6:35:bc:31:d1:d9:22:
85:53:ce:a2:77:07:59:73:1b:82:56:9a:10:32:d0:c8:ff:90:
71:db:cd:85:93:58:02:49:a6:a3:b9:78:e4:47:92:3f:d3:13:
b4:ae:8b:2a:1f:02:56:b5:f8:56:d5:0c:03:46:c9:ca:b5:d4:
c9:67:40:05:32:1c:bf:fe:1f:8a:99:49:c6:f9:b8:97:78:46:
03:ef:89:09:ea:fd:1f:27:21:12:9b:7f:d6:39:b7:36:f8:b8:
d2:87:8b:3b:de:70:8d:1c:b1:0e:44:96:34:95:d0:f5:b3:3d:
06:82:01:9d:19:3d:c4:90:91:6d:db:f5:c8:c5:5b:4d:65:be:
8d:70:c7:d0:a2:3c:a4:50:72:82:98:4e:cc:b8:7c:c6:46:8d:
98:61:1f:af:63:c0:1e:7e:08:a9:87:1f:7e:ca:e5:b4:97:3b:
fb:ca:d9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:42:05 2026 by rpki-client