Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46A66F34BB3911F1AF3606DA3111F970.roa
File: 46A66F34BB3911F1AF3606DA3111F970.roa (raw, json)
Hash identifier: XL36ypiEvveTdsPxlFpS2R2aBvEdlFToWvCnN4E1Dms=
Subject key identifier: 6A:04:6E:F7:24:C2:1F:E0:8E:2F:06:48:C5:AC:3C:9E:0A:AC:AC:59
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FD6D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46A66F34BB3911F1AF3606DA3111F970.roa
Signing time: Mon 28 Sep 2026 12:36:50 +0000
ROA not before: Mon 28 Sep 2026 12:36:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153252
IP address blocks: 45.115.252.0/24 maxlen: 24
45.115.253.0/24 maxlen: 24
45.115.254.0/24 maxlen: 24
45.115.255.0/24 maxlen: 24
45.116.68.0/24 maxlen: 24
45.116.69.0/24 maxlen: 24
45.116.70.0/24 maxlen: 24
45.116.71.0/24 maxlen: 24
103.38.70.0/24 maxlen: 24
103.50.4.0/24 maxlen: 24
103.50.5.0/24 maxlen: 24
103.50.6.0/24 maxlen: 24
103.50.7.0/24 maxlen: 24
103.55.6.0/24 maxlen: 24
103.55.7.0/24 maxlen: 24
103.61.102.0/24 maxlen: 24
103.61.103.0/24 maxlen: 24
103.69.216.0/24 maxlen: 24
103.69.217.0/24 maxlen: 24
103.69.218.0/24 maxlen: 24
103.69.219.0/24 maxlen: 24
103.70.144.0/24 maxlen: 24
103.70.145.0/24 maxlen: 24
103.70.146.0/24 maxlen: 24
103.70.147.0/24 maxlen: 24
103.70.176.0/24 maxlen: 24
103.70.177.0/24 maxlen: 24
103.79.112.0/24 maxlen: 24
103.79.113.0/24 maxlen: 24
103.79.114.0/24 maxlen: 24
103.79.115.0/24 maxlen: 24
103.90.204.0/24 maxlen: 24
103.93.176.0/24 maxlen: 24
103.93.177.0/24 maxlen: 24
103.93.178.0/24 maxlen: 24
103.93.179.0/24 maxlen: 24
103.109.72.0/24 maxlen: 24
103.109.73.0/24 maxlen: 24
103.122.84.0/24 maxlen: 24
103.122.85.0/24 maxlen: 24
103.156.168.0/24 maxlen: 24
103.156.169.0/24 maxlen: 24
103.157.160.0/24 maxlen: 24
103.157.161.0/24 maxlen: 24
103.159.154.0/24 maxlen: 24
103.159.155.0/24 maxlen: 24
103.161.230.0/24 maxlen: 24
103.161.231.0/24 maxlen: 24
103.161.232.0/24 maxlen: 24
103.161.233.0/24 maxlen: 24
103.174.105.0/24 maxlen: 24
103.175.76.0/24 maxlen: 24
103.175.77.0/24 maxlen: 24
103.176.71.0/24 maxlen: 24
103.220.28.0/24 maxlen: 24
103.220.29.0/24 maxlen: 24
103.220.30.0/24 maxlen: 24
103.220.31.0/24 maxlen: 24
103.237.172.0/24 maxlen: 24
103.237.173.0/24 maxlen: 24
103.237.174.0/24 maxlen: 24
103.237.175.0/24 maxlen: 24
175.111.180.0/24 maxlen: 24
175.111.182.0/24 maxlen: 24
175.111.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 06 Oct 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64877 (0xfd6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 28 12:36:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aba5f62-b079
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c7:6a:77:bd:38:fd:a9:c7:c2:63:ed:fd:20:
30:f0:f4:32:cb:0b:8c:7e:0c:02:c0:e7:e1:a1:50:
89:0d:f8:93:28:87:55:b0:f6:4d:66:c8:7b:91:2e:
ad:2a:47:25:ce:06:47:f8:71:98:91:ce:86:d7:70:
e4:f7:53:23:53:55:4d:ca:a0:a4:03:f3:92:de:bb:
e9:9b:73:0f:cd:ec:cf:0d:1e:e0:39:e2:fc:ad:8b:
45:ab:7f:89:af:74:9d:e9:ad:03:50:44:33:40:cb:
33:07:99:fd:66:f2:4c:05:14:53:29:5d:90:d5:96:
61:12:6f:da:8a:25:1e:86:2f:63:d7:8e:8c:f6:ff:
e6:b3:38:49:a3:ef:cb:70:85:21:ba:b5:b0:5e:3b:
aa:32:ca:83:93:0e:e5:fe:e5:29:5a:7a:f9:24:0f:
3c:aa:47:b7:34:8f:50:cd:f4:f2:e0:64:1f:39:95:
7d:e5:7a:d5:2c:4d:77:38:b9:84:64:f9:50:23:fe:
7c:91:95:e1:7f:84:97:d9:a4:c8:74:1a:53:ae:08:
4b:3e:21:f3:b9:82:86:73:34:4d:98:4d:3d:72:35:
96:60:5d:75:5f:71:4a:ce:ed:cb:b3:9d:a3:63:c8:
a0:57:66:e8:70:10:07:4f:41:e5:b0:1b:c3:23:02:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:04:6E:F7:24:C2:1F:E0:8E:2F:06:48:C5:AC:3C:9E:0A:AC:AC:59
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/46A66F34BB3911F1AF3606DA3111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
45.115.252.0/22
45.116.68.0/22
103.38.70.0/24
103.50.4.0/22
103.55.6.0/23
103.61.102.0/23
103.69.216.0/22
103.70.144.0/22
103.70.176.0/23
103.79.112.0/22
103.90.204.0/24
103.93.176.0/22
103.109.72.0/23
103.122.84.0/23
103.156.168.0/23
103.157.160.0/23
103.159.154.0/23
103.161.230.0-103.161.233.255
103.174.105.0/24
103.175.76.0/23
103.176.71.0/24
103.220.28.0/22
103.237.172.0/22
175.111.180.0/24
175.111.182.0/23
Signature Algorithm: sha256WithRSAEncryption
97:d7:3e:23:73:a4:ee:75:82:dc:03:e1:3d:5d:c5:8b:e5:8f:
2d:1a:ca:73:d4:8f:93:48:11:b7:1b:22:ba:6f:1e:41:16:e0:
3d:21:4e:1e:76:3d:20:ee:66:3d:cd:62:9d:78:b2:78:75:67:
09:cd:65:c6:5e:97:1d:26:32:84:b3:2d:78:c0:01:df:90:1a:
b9:00:c7:5c:33:5e:94:1e:a7:9a:fc:7c:42:5e:02:49:86:dc:
d9:5a:8e:43:5c:a1:79:13:8a:81:52:07:c6:e2:91:07:44:d1:
39:ec:c7:e6:61:48:0c:36:e8:72:8c:f3:a5:d4:c6:d7:88:1a:
0e:48:2b:85:82:d0:b1:12:cd:b7:20:a3:ca:cc:13:48:2b:c6:
8c:18:9c:02:6b:77:80:01:85:54:d5:58:05:77:77:8b:9a:cf:
2c:8c:18:6f:ed:b4:29:6a:dd:6b:e4:79:49:74:9c:6b:34:4e:
7a:52:72:c1:7e:50:e8:7c:16:4a:64:a5:5a:26:c6:92:f8:65:
a6:b5:b5:17:3b:eb:a8:ee:7d:b6:76:36:1b:d9:82:bd:ce:7c:
db:b9:7c:68:a4:1c:05:45:77:30:24:33:07:5a:6f:52:f8:49:
c4:17:28:20:15:7d:95:57:9f:6e:b7:14:ff:ca:ef:76:b2:ff:
c5:23:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 13:19:44 2026 by rpki-client