Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/1CA9AC0E55E111F18B979D53AF833773.roa
File: 1CA9AC0E55E111F18B979D53AF833773.roa (raw, json)
Hash identifier: Dbwt6nm5VyyCTjwVUdPIQGcNeUg1GDeIUpEjZ2v1gJ8=
Subject key identifier: E8:C7:96:E2:63:F8:38:2A:6A:84:11:45:D5:D6:40:7C:82:42:C2:55
Certificate issuer: /CN=A914D29B/serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Certificate serial: 23
Authority key identifier: 4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/1CA9AC0E55E111F18B979D53AF833773.roa
Signing time: Fri 10 Jul 2026 11:32:11 +0000
ROA not before: Fri 10 Jul 2026 11:32:11 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 149194
IP address blocks: 45.112.56.0/22 maxlen: 22
45.112.56.0/23 maxlen: 24
45.112.58.0/23 maxlen: 24
45.127.200.0/22 maxlen: 22
45.127.200.0/23 maxlen: 24
45.127.202.0/23 maxlen: 24
103.2.237.0/24 maxlen: 24
103.2.238.0/24 maxlen: 24
103.106.102.0/24 maxlen: 24
103.133.38.0/24 maxlen: 24
103.178.50.0/24 maxlen: 24
103.178.51.0/24 maxlen: 24
103.196.132.0/22 maxlen: 22
103.196.132.0/23 maxlen: 24
103.196.134.0/23 maxlen: 24
103.239.168.0/22 maxlen: 22
103.239.168.0/23 maxlen: 24
103.239.170.0/23 maxlen: 24
119.10.128.0/22 maxlen: 24
223.29.220.0/22 maxlen: 24
2400:44a0::/48 maxlen: 48
2400:44a0:1::/48 maxlen: 48
2400:44a0:2::/118 maxlen: 118
2400:44a0:2::400/118 maxlen: 118
2400:44a0:2::800/118 maxlen: 118
2400:44a0:2::c00/118 maxlen: 118
2400:44a0:2::1000/120 maxlen: 120
2400:44a0:2::1100/120 maxlen: 120
2400:44a0:2::1200/120 maxlen: 120
2400:44a0:2::1300/120 maxlen: 120
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl
rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 10:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35 (0x23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914D29B, serialNumber=4B5F1C92DC68D9412AAC3077183FA36DD03DCD15
Validity
Not Before: Jul 10 11:32:11 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a50d83b-4240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:8b:dc:75:e8:3d:98:1b:25:01:fe:d6:53:fb:
bc:bd:31:5e:8c:0d:12:c5:f4:3a:87:ac:13:6a:b2:
02:77:b6:66:ea:39:6c:9a:5c:eb:10:a8:78:cb:7f:
a1:71:5f:61:4c:69:dc:33:f9:f7:1c:5b:ad:99:84:
71:89:8e:f6:c8:12:c0:b7:3d:dc:a3:48:28:4c:be:
61:90:2c:8d:97:fd:5e:f6:43:d0:16:0d:64:4d:19:
fa:64:49:c8:f8:0b:04:41:15:55:bb:a3:46:cd:8c:
67:b6:62:9e:b3:be:e6:6e:27:88:62:cb:93:91:07:
a7:dd:c2:a4:98:3d:6a:46:ce:34:13:4d:49:3d:29:
6a:11:fd:cb:ba:ea:02:e2:b8:e2:27:70:2f:2b:8d:
09:f9:a3:15:cd:7e:fd:c6:0e:ed:7b:58:31:cc:d7:
c5:e2:e2:8b:6a:c5:01:41:ab:ae:19:df:48:af:26:
4c:9d:a1:2b:ae:23:64:44:e2:40:02:fa:78:c0:69:
5e:25:b2:78:69:37:f0:c0:70:9e:e4:f1:20:7f:c0:
d8:92:fc:96:5a:15:c3:05:a5:a7:b8:52:9c:60:13:
40:ac:8f:76:07:c9:50:63:ed:25:f7:d2:8b:76:23:
92:d0:66:0e:de:cd:81:75:8c:b9:58:2e:87:4e:54:
b7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C7:96:E2:63:F8:38:2A:6A:84:11:45:D5:D6:40:7C:82:42:C2:55
X509v3 Authority Key Identifier:
keyid:4B:5F:1C:92:DC:68:D9:41:2A:AC:30:77:18:3F:A3:6D:D0:3D:CD:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/S18cktxo2UEqrDB3GD-jbdA9zRU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S18cktxo2UEqrDB3GD-jbdA9zRU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D29B/0B778E8055C111F1AB048894A4833773/1CA9AC0E55E111F18B979D53AF833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.56.0/22
45.127.200.0/22
103.2.237.0-103.2.238.255
103.106.102.0/24
103.133.38.0/24
103.178.50.0/23
103.196.132.0/22
103.239.168.0/22
119.10.128.0/22
223.29.220.0/22
IPv6:
2400:44a0::-2400:44a0:2:0:0:0:0:13ff
Signature Algorithm: sha256WithRSAEncryption
64:b9:f1:d6:0b:43:36:9e:b9:63:f2:89:87:14:25:85:f2:f0:
56:c1:4f:7a:e8:e3:d8:23:26:b9:0a:3f:96:cf:49:dc:ce:a2:
7e:83:b3:1e:cd:a3:1c:74:83:04:13:05:1f:a1:11:19:45:9c:
56:3a:00:3e:36:61:b5:9e:47:de:af:e8:7c:2c:4d:aa:87:b8:
5c:70:c5:c4:8e:37:15:d2:b8:f8:63:78:f7:56:9b:69:6d:59:
45:0b:0e:87:80:a6:66:9b:94:65:72:ad:8f:a9:b1:83:d5:7f:
89:e9:64:11:ad:4e:3c:fc:87:6d:29:16:74:77:52:22:7e:c0:
de:ae:95:b8:b3:98:4b:9b:6e:6e:8e:72:12:71:cb:23:7c:c9:
af:2a:01:ab:6a:ee:0c:d2:2d:6e:4d:c2:3a:67:77:be:19:c9:
42:b4:ff:dd:49:aa:cd:88:91:a4:17:6c:a2:e5:96:80:32:09:
96:62:4b:23:65:1b:66:51:18:48:cb:23:b8:9d:1d:8a:2b:69:
5e:b0:bd:be:e3:c9:6d:9d:15:04:1a:50:70:c1:f3:17:bb:42:
a3:21:b7:af:15:f0:5f:ef:01:a6:1d:e7:ea:a0:d6:f2:d6:83:
9b:d3:40:29:3d:93:bf:fd:e7:ee:1e:e8:a1:12:29:b9:e7:6f:
f2:80:de:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:30 2026 by rpki-client