Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/517E7D1AB0EC11E5A6934B42C4F9AE02.roa
File: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (raw, json)
Hash identifier: B5rWzBjI7BfkOi4vSBBhpW3ifXKdbuWjkXECi3PmcCw=
Subject key identifier: 13:BD:6D:59:8D:FB:FA:DE:08:22:08:FC:1C:C8:F6:5A:8C:10:E8:62
Certificate issuer: /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial: 3122
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/517E7D1AB0EC11E5A6934B42C4F9AE02.roa
Signing time: Tue 30 Jun 2026 16:17:26 +0000
ROA not before: Tue 30 Jun 2026 16:17:26 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 10024
IP address blocks: 27.125.196.0/22 maxlen: 22
27.125.196.0/23 maxlen: 23
27.125.196.0/24 maxlen: 24
27.125.197.0/24 maxlen: 24
27.125.198.0/23 maxlen: 23
27.125.198.0/24 maxlen: 24
27.125.199.0/24 maxlen: 24
43.245.16.0/22 maxlen: 22
43.245.16.0/23 maxlen: 23
43.245.16.0/24 maxlen: 24
43.245.17.0/24 maxlen: 24
43.245.18.0/23 maxlen: 23
43.245.18.0/24 maxlen: 24
43.245.19.0/24 maxlen: 24
103.3.200.0/22 maxlen: 22
103.3.200.0/23 maxlen: 23
103.3.200.0/24 maxlen: 24
103.3.201.0/24 maxlen: 24
103.3.202.0/23 maxlen: 23
103.3.202.0/24 maxlen: 24
103.3.203.0/24 maxlen: 24
119.75.192.0/20 maxlen: 20
119.75.192.0/23 maxlen: 23
119.75.192.0/24 maxlen: 24
119.75.193.0/24 maxlen: 24
119.75.194.0/23 maxlen: 23
119.75.194.0/24 maxlen: 24
119.75.195.0/24 maxlen: 24
119.75.196.0/23 maxlen: 23
119.75.196.0/24 maxlen: 24
119.75.197.0/24 maxlen: 24
119.75.198.0/23 maxlen: 23
119.75.198.0/24 maxlen: 24
119.75.199.0/24 maxlen: 24
119.75.200.0/23 maxlen: 23
119.75.200.0/24 maxlen: 24
119.75.201.0/24 maxlen: 24
119.75.202.0/23 maxlen: 23
119.75.202.0/24 maxlen: 24
119.75.203.0/24 maxlen: 24
119.75.204.0/23 maxlen: 23
119.75.204.0/24 maxlen: 24
119.75.205.0/24 maxlen: 24
119.75.206.0/23 maxlen: 23
119.75.206.0/24 maxlen: 24
119.75.207.0/24 maxlen: 24
203.92.64.0/18 maxlen: 18
203.92.64.0/23 maxlen: 23
203.92.64.0/24 maxlen: 24
203.92.65.0/24 maxlen: 24
203.92.66.0/23 maxlen: 23
203.92.66.0/24 maxlen: 24
203.92.67.0/24 maxlen: 24
203.92.68.0/23 maxlen: 23
203.92.68.0/24 maxlen: 24
203.92.69.0/24 maxlen: 24
203.92.70.0/23 maxlen: 23
203.92.70.0/24 maxlen: 24
203.92.71.0/24 maxlen: 24
203.92.72.0/23 maxlen: 23
203.92.72.0/24 maxlen: 24
203.92.73.0/24 maxlen: 24
203.92.74.0/23 maxlen: 23
203.92.74.0/24 maxlen: 24
203.92.75.0/24 maxlen: 24
203.92.76.0/23 maxlen: 23
203.92.76.0/24 maxlen: 24
203.92.77.0/24 maxlen: 24
203.92.78.0/23 maxlen: 23
203.92.78.0/24 maxlen: 24
203.92.79.0/24 maxlen: 24
203.92.80.0/23 maxlen: 23
203.92.80.0/24 maxlen: 24
203.92.81.0/24 maxlen: 24
203.92.82.0/23 maxlen: 23
203.92.82.0/24 maxlen: 24
203.92.83.0/24 maxlen: 24
203.92.84.0/23 maxlen: 23
203.92.84.0/24 maxlen: 24
203.92.85.0/24 maxlen: 24
203.92.86.0/23 maxlen: 23
203.92.86.0/24 maxlen: 24
203.92.87.0/24 maxlen: 24
203.92.88.0/23 maxlen: 23
203.92.88.0/24 maxlen: 24
203.92.89.0/24 maxlen: 24
203.92.90.0/23 maxlen: 23
203.92.90.0/24 maxlen: 24
203.92.91.0/24 maxlen: 24
203.92.92.0/23 maxlen: 23
203.92.92.0/24 maxlen: 24
203.92.93.0/24 maxlen: 24
203.92.94.0/23 maxlen: 23
203.92.94.0/24 maxlen: 24
203.92.95.0/24 maxlen: 24
203.92.96.0/23 maxlen: 23
203.92.96.0/24 maxlen: 24
203.92.97.0/24 maxlen: 24
203.92.98.0/23 maxlen: 23
203.92.98.0/24 maxlen: 24
203.92.99.0/24 maxlen: 24
203.92.100.0/23 maxlen: 23
203.92.100.0/24 maxlen: 24
203.92.101.0/24 maxlen: 24
203.92.102.0/23 maxlen: 23
203.92.102.0/24 maxlen: 24
203.92.103.0/24 maxlen: 24
203.92.104.0/23 maxlen: 23
203.92.104.0/24 maxlen: 24
203.92.105.0/24 maxlen: 24
203.92.106.0/23 maxlen: 23
203.92.106.0/24 maxlen: 24
203.92.107.0/24 maxlen: 24
203.92.108.0/23 maxlen: 23
203.92.108.0/24 maxlen: 24
203.92.109.0/24 maxlen: 24
203.92.110.0/23 maxlen: 23
203.92.110.0/24 maxlen: 24
203.92.111.0/24 maxlen: 24
203.92.112.0/23 maxlen: 23
203.92.112.0/24 maxlen: 24
203.92.113.0/24 maxlen: 24
203.92.114.0/23 maxlen: 23
203.92.114.0/24 maxlen: 24
203.92.115.0/24 maxlen: 24
203.92.116.0/23 maxlen: 23
203.92.116.0/24 maxlen: 24
203.92.117.0/24 maxlen: 24
203.92.118.0/23 maxlen: 23
203.92.118.0/24 maxlen: 24
203.92.119.0/24 maxlen: 24
203.92.120.0/23 maxlen: 23
203.92.120.0/24 maxlen: 24
203.92.121.0/24 maxlen: 24
203.92.122.0/23 maxlen: 23
203.92.122.0/24 maxlen: 24
203.92.123.0/24 maxlen: 24
203.92.124.0/23 maxlen: 23
203.92.124.0/24 maxlen: 24
203.92.125.0/24 maxlen: 24
203.92.126.0/23 maxlen: 23
203.92.126.0/24 maxlen: 24
203.92.127.0/24 maxlen: 24
2406:a400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 15:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12578 (0x3122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Validity
Not Before: Jun 30 16:17:26 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a43ec16-73bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d8:98:50:08:86:b5:16:40:c9:4d:31:73:06:
d3:e2:29:ea:a1:90:9a:b4:3c:50:02:3e:ad:66:2f:
cc:a1:2b:99:97:92:bf:84:b6:fe:65:56:c8:04:d0:
8f:07:ba:2b:6c:7d:b2:2d:e9:bf:d2:b4:cb:ec:e8:
a7:49:50:32:d7:13:f8:ac:d5:8b:57:79:5e:de:21:
c7:28:b6:af:f9:0a:8c:44:bf:08:98:ad:47:6a:34:
30:02:87:0e:68:0b:80:44:e0:93:c8:e5:74:cb:10:
2f:79:73:86:42:45:22:0b:96:0f:4a:5c:be:91:5e:
c1:67:18:b0:f3:91:a3:e0:af:e9:f1:11:3d:89:39:
89:e8:df:aa:c5:35:1e:20:87:fb:c5:03:bf:16:29:
99:fe:2c:5a:bd:3e:9d:cd:6f:d1:fa:f9:a6:ca:08:
e5:5f:de:10:25:f7:b2:d3:63:07:58:6c:e5:8a:d1:
53:97:29:ea:81:95:74:71:05:a8:0f:f2:f3:b9:9a:
56:c3:d9:e0:19:52:ad:cc:6d:bb:3e:4b:70:ee:d0:
4a:22:22:cf:aa:4f:29:6b:bf:16:95:47:50:3c:6d:
f6:10:9b:dd:10:19:36:0e:18:68:3b:24:38:40:ca:
bd:83:28:40:0a:65:4d:b4:74:e5:3b:8b:2d:e1:81:
75:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BD:6D:59:8D:FB:FA:DE:08:22:08:FC:1C:C8:F6:5A:8C:10:E8:62
X509v3 Authority Key Identifier:
keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/517E7D1AB0EC11E5A6934B42C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.125.196.0/22
43.245.16.0/22
103.3.200.0/22
119.75.192.0/20
203.92.64.0/18
IPv6:
2406:a400::/32
Signature Algorithm: sha256WithRSAEncryption
3e:94:3a:48:d6:31:91:34:41:55:f8:4f:c4:62:82:ca:be:8c:
c6:ae:8a:37:4c:f9:21:64:1c:7b:e9:8c:05:9c:0d:22:43:83:
83:36:30:93:75:84:17:c3:3e:29:25:1a:63:8d:1f:8a:99:08:
b0:40:2f:36:f7:4a:8e:ed:0f:b3:f7:87:34:58:f9:11:6a:08:
ed:4f:c6:e9:79:05:90:10:a0:84:cc:58:f0:6c:07:17:95:4d:
85:fd:de:c3:d8:d8:f1:4d:69:24:a1:fc:c0:ab:b6:b8:b3:6d:
41:68:45:74:53:cd:93:cb:8b:2c:9f:03:e6:63:23:21:0a:8b:
f7:df:c0:8b:18:40:c0:b8:5f:7d:7f:16:cd:07:ae:d3:77:5f:
d2:4c:25:d6:c0:fd:1c:c1:74:30:14:ce:06:d3:98:67:ee:fd:
a5:d9:20:e6:82:c2:8d:c7:d1:fc:fd:cc:cb:40:0b:a3:06:20:
c6:41:79:68:7c:ed:af:54:5d:93:3e:9f:27:c1:21:7a:c7:45:
cf:0c:86:3f:c5:e0:83:aa:f0:30:50:6c:86:63:84:a6:07:0f:
9b:05:7e:c6:d4:55:c8:0e:54:a9:b6:8e:18:c8:64:fb:cc:2d:
eb:dc:73:42:6f:48:d1:f7:03:07:28:21:8a:16:bd:30:42:4c:
c1:6f:2d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:35:39 2026 by rpki-client