Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/3607DBA8687E11F1B56F8D616747A888.roa
File: 3607DBA8687E11F1B56F8D616747A888.roa (raw, json)
Hash identifier: WO/scCKxLdc7YDN982DAvWLVxjSTIhP/jPPfp19RJno=
Subject key identifier: 2E:F9:90:F7:DD:C3:1E:53:E3:76:88:B7:19:6B:85:BC:8D:06:6D:24
Certificate issuer: /CN=A918B936/serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E
Certificate serial: 21ED
Authority key identifier: 94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/3607DBA8687E11F1B56F8D616747A888.roa
Signing time: Fri 24 Jul 2026 02:17:29 +0000
ROA not before: Fri 24 Jul 2026 02:17:28 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 23620
IP address blocks: 43.255.40.0/22 maxlen: 22
43.255.40.0/24 maxlen: 24
43.255.41.0/24 maxlen: 24
43.255.42.0/24 maxlen: 24
43.255.43.0/24 maxlen: 24
103.254.144.0/22 maxlen: 22
103.254.144.0/24 maxlen: 24
103.254.145.0/24 maxlen: 24
103.254.146.0/24 maxlen: 24
103.254.147.0/24 maxlen: 24
202.6.244.0/22 maxlen: 22
202.6.244.0/24 maxlen: 24
202.6.245.0/24 maxlen: 24
202.6.246.0/24 maxlen: 24
202.6.247.0/24 maxlen: 24
203.209.144.0/20 maxlen: 20
203.209.144.0/24 maxlen: 24
203.209.145.0/24 maxlen: 24
203.209.146.0/24 maxlen: 24
203.209.147.0/24 maxlen: 24
203.209.148.0/24 maxlen: 24
203.209.149.0/24 maxlen: 24
203.209.150.0/24 maxlen: 24
203.209.151.0/24 maxlen: 24
203.209.152.0/24 maxlen: 24
203.209.153.0/24 maxlen: 24
203.209.154.0/24 maxlen: 24
203.209.155.0/24 maxlen: 24
203.209.156.0/24 maxlen: 24
203.209.157.0/24 maxlen: 24
203.209.158.0/24 maxlen: 24
203.209.159.0/24 maxlen: 24
223.252.112.0/20 maxlen: 20
223.252.112.0/24 maxlen: 24
223.252.113.0/24 maxlen: 24
223.252.114.0/24 maxlen: 24
223.252.115.0/24 maxlen: 24
223.252.116.0/24 maxlen: 24
223.252.117.0/24 maxlen: 24
223.252.118.0/24 maxlen: 24
223.252.119.0/24 maxlen: 24
223.252.120.0/24 maxlen: 24
223.252.121.0/24 maxlen: 24
223.252.122.0/24 maxlen: 24
223.252.123.0/24 maxlen: 24
223.252.124.0/24 maxlen: 24
223.252.125.0/24 maxlen: 24
223.252.126.0/24 maxlen: 24
223.252.127.0/24 maxlen: 24
2001:df0:6800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl
rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 02:17:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8685 (0x21ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918B936, serialNumber=94224CFA17AAA0DE543AB61089FC1D39D1990E3E
Validity
Not Before: Jul 24 02:17:28 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a62cb38-fbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:6a:b4:c2:e2:c5:f1:d4:0a:d8:9d:bc:06:
c7:b7:44:63:d8:b4:95:a0:71:09:96:c3:ee:a3:dc:
cb:b8:ef:f3:b0:6c:e7:bb:14:4a:81:96:a8:37:08:
c1:fa:a7:d0:01:64:84:28:27:66:95:ab:e8:15:29:
b4:90:ee:a2:50:85:12:98:21:ca:4d:fa:0f:71:9f:
e4:7d:34:6e:3c:0c:14:5c:cc:35:4f:75:e5:78:72:
c5:21:47:9e:1b:6c:90:3a:d7:ed:01:60:01:a2:d4:
aa:1f:76:f5:d6:81:7a:10:66:37:f9:c8:0a:a5:2f:
26:0d:40:b9:4e:ae:fd:15:e6:f9:69:13:1d:a8:35:
da:0a:5b:59:dd:63:88:3a:60:82:82:db:09:06:a1:
dc:27:d9:c8:32:70:9e:ed:5d:91:ec:22:99:3f:6e:
45:4a:63:7d:75:dc:2a:69:16:e6:f2:a7:4d:32:57:
84:a4:d6:ee:1a:8e:65:eb:05:ef:36:95:92:3f:fc:
5e:dd:d2:40:a4:34:1b:2a:fd:aa:09:34:ba:35:67:
f5:7d:56:ac:2b:fb:af:e5:79:f5:cc:13:1c:21:ee:
a9:07:7c:09:73:9f:60:4c:fc:9d:bd:37:a4:df:bf:
73:ec:69:20:9e:28:ae:ba:ad:a9:23:c8:fe:f3:ef:
a7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F9:90:F7:DD:C3:1E:53:E3:76:88:B7:19:6B:85:BC:8D:06:6D:24
X509v3 Authority Key Identifier:
keyid:94:22:4C:FA:17:AA:A0:DE:54:3A:B6:10:89:FC:1D:39:D1:99:0E:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/lCJM-heqoN5UOrYQifwdOdGZDj4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lCJM-heqoN5UOrYQifwdOdGZDj4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B936/4ED22FD2F0CD11E5A4432E74C4F9AE02/3607DBA8687E11F1B56F8D616747A888.roa
sbgp-ipAddrBlock: critical
IPv4:
43.255.40.0/22
103.254.144.0/22
202.6.244.0/22
203.209.144.0/20
223.252.112.0/20
IPv6:
2001:df0:6800::/48
Signature Algorithm: sha256WithRSAEncryption
1c:9d:d9:a6:d4:db:4b:86:8c:02:18:3e:42:21:27:f0:0c:dd:
c2:ed:f8:28:e6:15:e8:9b:01:e7:a8:7d:4d:c4:97:d4:ef:78:
58:c1:66:82:3d:b9:d6:69:ad:5b:11:4f:37:7f:11:00:b3:5a:
c6:f0:ed:7d:97:3f:19:10:fe:07:7c:9b:fd:a2:5a:e3:f2:50:
e2:05:1b:73:19:6b:f3:a4:47:f1:dd:6b:9c:be:71:3a:82:92:
16:74:43:7c:37:a6:55:47:86:85:76:2e:86:ad:08:67:5c:ae:
78:92:2e:4f:a9:c5:cc:15:c1:d2:1b:e0:17:c1:b8:7e:39:ef:
33:e9:1e:b0:1e:11:bc:b6:bc:61:38:a7:47:1e:b7:2c:4d:1e:
6a:2c:12:46:01:a3:ec:82:4d:1a:55:86:37:5b:0c:d2:48:4d:
aa:ea:d7:70:a5:09:2d:8f:fa:d8:10:fa:2b:01:46:ea:38:58:
53:62:d0:c4:e0:2a:7b:eb:a1:37:81:02:25:5e:d8:c3:ef:2c:
fa:67:c7:60:aa:06:06:9e:9a:72:fc:9c:80:2b:d7:c4:28:f5:
d9:a8:44:1f:7c:50:34:25:f9:90:e5:76:9f:73:78:44:7c:07:
63:f7:98:6a:80:98:3b:52:b2:a2:4f:59:a2:6d:18:02:ea:8c:
fb:6e:30:c6
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgICIe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEI5MzYxMTAvBgNVBAUTKDk0MjI0Q0ZBMTdBQUEwREU1NDNBQjYxMDg5RkMxRDM5
RDE5OTBFM0UwHhcNMjYwNzI0MDIxNzI4WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYyY2IzOC1mYmUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvuFqtMLixfHUCtidvAbHt0Rj2LSVoHEJlsPuo9zLuO/zsGznuxRKgZaoNwjB
+qfQAWSEKCdmlavoFSm0kO6iUIUSmCHKTfoPcZ/kfTRuPAwUXMw1T3XleHLFIUee
G2yQOtftAWABotSqH3b11oF6EGY3+cgKpS8mDUC5Tq79Feb5aRMdqDXaCltZ3WOI
OmCCgtsJBqHcJ9nIMnCe7V2R7CKZP25FSmN9ddwqaRbm8qdNMleEpNbuGo5l6wXv
NpWSP/xe3dJApDQbKv2qCTS6NWf1fVasK/uv5Xn1zBMcIe6pB3wJc59gTPydvTek
379z7Gkgniiuuq2pI8j+8++nNwIDAQABo4ICiTCCAoUwHQYDVR0OBBYEFC75kPfd
wx5T43aItxlrhbyNBm0kMB8GA1UdIwQYMBaAFJQiTPoXqqDeVDq2EIn8HTnRmQ4+
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjkzNi80RUQyMkZEMkYw
Q0QxMUU1QTQ0MzJFNzRDNEY5QUUwMi9sQ0pNLWhlcW9ONVVPcllRaWZ3ZE9kR1pE
ajQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2xDSk0taGVxb041VU9yWVFpZndkT2RHWkRqNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEI5MzYvNEVEMjJGRDJGMENEMTFFNUE0NDMyRTc0QzRGOUFFMDIvMzYwN0RCQTg2
ODdFMTFGMUI1NkY4RDYxNjc0N0E4ODgucm9hMEgGCCsGAQUFBwEHAQH/BDkwNzAk
BAIAATAeAwQCK/8oAwQCZ/6QAwQCygb0AwQEy9GQAwQE3/xwMA8EAgACMAkDBwAg
AQ3waAAwDQYJKoZIhvcNAQELBQADggEBAByd2abU20uGjAIYPkIhJ/AM3cLt+Cjm
FeibAeeofU3El9TveFjBZoI9udZprVsRTzd/EQCzWsbw7X2XPxkQ/gd8m/2iWuPy
UOIFG3MZa/OkR/Hda5y+cTqCkhZ0Q3w3plVHhoV2LoatCGdcrniSLk+pxcwVwdIb
4BfBuH457zPpHrAeEby2vGE4p0cetyxNHmosEkYBo+yCTRpVhjdbDNJITarq13Cl
CS2P+tgQ+isBRuo4WFNi0MTgKnvroTeBAiVe2MPvLPpnx2CqBgaemnL8nIAr18Qo
9dmoRB98UDQl+ZDldp9zeER8B2P3mGqAmDtSsqJPWaJtGALqjPtuMMY=
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:07 2026 by rpki-client