Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FA175C6222BF11F19CD94C8FBF833773.roa
File: FA175C6222BF11F19CD94C8FBF833773.roa (raw, json)
Hash identifier: 7WMjeq7iMzgNAiDcBDFAkUi2+XqSxPWbEywbflEh7fE=
Subject key identifier: 3C:1C:BC:19:3A:F9:75:4F:C8:70:6B:5F:2C:FD:AE:6A:76:F6:77:F1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DE70
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FA175C6222BF11F19CD94C8FBF833773.roa
Signing time: Wed 15 Apr 2026 11:12:27 +0000
ROA not before: Wed 15 Apr 2026 11:12:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133001
IP address blocks: 43.225.160.0/22 maxlen: 24
43.251.216.0/22 maxlen: 24
45.117.220.0/22 maxlen: 24
45.119.44.0/22 maxlen: 22
45.119.44.0/24 maxlen: 24
45.119.45.0/24 maxlen: 24
45.119.46.0/24 maxlen: 24
45.119.47.0/24 maxlen: 24
103.38.36.0/22 maxlen: 24
103.42.166.0/23 maxlen: 24
103.51.132.0/24 maxlen: 24
103.51.133.0/24 maxlen: 24
103.51.134.0/24 maxlen: 24
103.51.135.0/24 maxlen: 24
103.54.76.0/24 maxlen: 24
103.54.77.0/24 maxlen: 24
103.56.227.0/24 maxlen: 24
103.110.102.0/24 maxlen: 24
103.114.0.0/22 maxlen: 23
103.114.2.0/23 maxlen: 24
103.116.147.0/24 maxlen: 24
103.116.238.0/24 maxlen: 24
103.116.239.0/24 maxlen: 24
103.140.26.0/24 maxlen: 24
103.140.27.0/24 maxlen: 24
103.148.207.0/24 maxlen: 24
103.156.98.0/24 maxlen: 24
103.156.99.0/24 maxlen: 24
103.171.7.0/24 maxlen: 24
103.176.6.0/23 maxlen: 24
103.176.211.0/24 maxlen: 24
103.196.76.0/22 maxlen: 24
103.201.148.0/22 maxlen: 24
111.125.225.0/24 maxlen: 24
183.87.251.0/24 maxlen: 24
183.87.252.0/22 maxlen: 24
202.94.160.0/22 maxlen: 24
2401:b240::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 11:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56944 (0xde70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 15 11:12:27 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69df729b-24f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:95:66:3b:9f:dd:84:fa:e7:48:91:ae:6d:3e:
88:68:d7:08:04:4b:fe:fb:4c:0e:0a:8e:2a:72:db:
81:03:28:7b:d2:8d:b3:0b:84:c6:96:d7:00:fe:a7:
07:89:8b:76:da:69:13:5a:31:27:60:38:46:74:9e:
5d:54:68:39:ef:46:6d:d1:bd:da:24:b7:f1:47:9f:
52:17:5d:c0:94:b8:7c:27:96:ff:3b:f0:81:ba:e6:
eb:a0:2c:51:ed:c6:e6:ee:b6:17:6b:ef:1b:5c:7b:
c3:03:65:57:fc:3c:df:93:91:c8:a0:d0:a1:c2:5d:
38:f4:4a:71:7f:1f:4c:a6:7a:45:51:30:7d:93:a0:
80:9d:c7:48:95:fb:0d:61:9a:ef:a1:e2:67:47:7d:
2b:61:99:11:66:6a:4f:a2:5b:e0:d4:e4:46:f5:4d:
e6:77:34:d8:ca:12:e1:57:44:b2:c2:4f:87:08:8f:
f5:0b:a6:d6:18:fa:c9:7c:cd:d3:c0:3c:0f:6d:37:
68:50:da:40:39:01:d6:55:f9:b3:4b:e4:51:fe:cb:
06:2f:8f:fa:0a:56:f9:0b:af:c9:2f:fa:e5:f2:c3:
1e:27:70:d5:e3:9c:b9:da:11:41:5b:5d:b7:82:3a:
a9:56:22:f4:27:c0:92:11:4d:ff:b5:67:27:0c:2d:
57:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1C:BC:19:3A:F9:75:4F:C8:70:6B:5F:2C:FD:AE:6A:76:F6:77:F1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FA175C6222BF11F19CD94C8FBF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.160.0/22
43.251.216.0/22
45.117.220.0/22
45.119.44.0/22
103.38.36.0/22
103.42.166.0/23
103.51.132.0/22
103.54.76.0/23
103.56.227.0/24
103.110.102.0/24
103.114.0.0/22
103.116.147.0/24
103.116.238.0/23
103.140.26.0/23
103.148.207.0/24
103.156.98.0/23
103.171.7.0/24
103.176.6.0/23
103.176.211.0/24
103.196.76.0/22
103.201.148.0/22
111.125.225.0/24
183.87.251.0-183.87.255.255
202.94.160.0/22
IPv6:
2401:b240::/32
Signature Algorithm: sha256WithRSAEncryption
67:cb:25:7b:85:98:51:99:b8:23:e8:41:eb:e6:75:05:c8:37:
ef:55:ab:b4:40:18:c1:ed:e3:d0:9f:44:4f:61:06:6a:c0:43:
c1:e0:7c:96:aa:85:cb:22:d3:c0:4e:40:80:9b:ec:21:9f:b3:
58:46:a1:89:d4:ae:98:39:f7:e8:e2:98:4f:67:ea:ee:64:22:
ac:89:6e:32:b7:b8:b8:17:6f:e6:84:3b:f1:5c:aa:9d:74:7f:
3c:11:fe:65:69:1c:7f:36:95:a1:38:a2:be:9b:3f:d6:23:40:
5b:9e:bf:af:1c:ba:0f:6a:26:06:01:53:67:75:3e:84:6f:f7:
9d:97:4a:03:14:6f:bd:94:ad:c4:4b:d9:cc:de:73:fd:0a:d7:
09:a3:8f:ad:c8:d3:9e:17:ba:05:94:e5:59:f2:b8:2d:87:a7:
f8:29:71:ae:4e:cc:09:65:0f:10:ad:ee:83:4c:be:26:da:0e:
15:dc:b7:e8:c5:dc:49:0a:53:b8:f4:6e:6f:55:7e:c5:d2:4b:
7b:a3:be:77:da:57:40:db:e5:2d:43:96:97:a9:93:6c:fc:c5:
a7:5c:e2:5e:e6:1d:b0:26:68:90:b2:b0:bd:3e:f6:4e:92:3e:
1a:7b:24:a8:cc:fc:4d:9c:1d:d6:08:17:e4:f3:b2:a6:50:90:
40:24:b3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:11:47 2026 by rpki-client