Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6996292CB8CC11F1A9DBEF897111F970.roa
File: 6996292CB8CC11F1A9DBEF897111F970.roa (raw, json)
Hash identifier: t8YSS1UyUt4A+Xb+KpBLArMXKvy6C9VOCBvuOywBHi0=
Subject key identifier: D1:F9:6F:7E:AB:5C:F1:1A:22:31:B2:3A:1B:94:85:85:6D:82:F8:7F
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FD3D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6996292CB8CC11F1A9DBEF897111F970.roa
Signing time: Fri 25 Sep 2026 10:32:31 +0000
ROA not before: Fri 25 Sep 2026 10:32:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147224
IP address blocks: 27.0.144.0/24 maxlen: 24
103.98.194.0/24 maxlen: 24
103.108.45.0/24 maxlen: 24
103.137.45.0/24 maxlen: 24
103.148.6.0/24 maxlen: 24
103.172.58.0/23 maxlen: 24
103.174.247.0/24 maxlen: 24
103.178.0.0/24 maxlen: 24
103.178.1.0/24 maxlen: 24
103.207.176.0/24 maxlen: 24
103.207.177.0/24 maxlen: 24
103.207.178.0/24 maxlen: 24
103.207.179.0/24 maxlen: 24
103.207.180.0/24 maxlen: 24
103.207.181.0/24 maxlen: 24
103.207.182.0/24 maxlen: 24
202.47.174.0/24 maxlen: 24
2001:df0:f740::/48 maxlen: 48
2001:df1:e40::/48 maxlen: 48
2001:df2:16c0::/48 maxlen: 48
2001:df3:93c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 10:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64829 (0xfd3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 25 10:32:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ab64dbf-9825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4a:31:bc:88:3a:86:94:47:38:16:cb:78:18:
58:70:ec:09:00:6a:b4:ff:db:b0:d0:b5:be:de:33:
7e:01:30:04:ca:f7:e5:20:4c:ac:1d:c2:d1:15:2d:
ca:9b:19:d0:48:8e:41:7c:18:95:c3:a4:37:9d:3a:
cd:13:b3:2c:28:e0:c2:9d:4b:1b:e2:f3:14:da:4e:
d8:fc:c3:d1:aa:93:e1:cf:f8:5d:7d:60:e2:d1:93:
9c:96:b0:95:2c:e0:d5:2c:c5:2c:5c:a7:48:74:f7:
41:56:2c:a7:36:16:5e:60:2a:45:6e:1c:06:e5:09:
ed:46:64:66:97:17:3d:03:81:62:69:a1:4e:b9:26:
c2:7d:08:57:ef:81:77:77:b6:cd:dc:c7:04:20:69:
ff:77:21:e8:37:64:98:fd:6a:9e:5e:e2:20:9a:c7:
17:9a:28:2a:6e:9e:31:a7:47:ae:f1:54:5a:cf:f6:
db:4c:cd:ea:a8:c3:b4:6a:68:9d:18:ea:b4:90:a6:
8e:f8:6c:57:f8:a5:17:7c:6a:0a:6f:f7:ff:3f:e9:
4c:e3:9a:07:09:81:88:0d:24:87:d5:a0:45:ae:c6:
9b:e7:ff:ec:96:70:a3:13:c9:bb:e6:f1:9a:94:80:
7a:69:1b:ed:9a:33:ff:17:a1:2c:32:3b:1e:ac:6a:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F9:6F:7E:AB:5C:F1:1A:22:31:B2:3A:1B:94:85:85:6D:82:F8:7F
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6996292CB8CC11F1A9DBEF897111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
27.0.144.0/24
103.98.194.0/24
103.108.45.0/24
103.137.45.0/24
103.148.6.0/24
103.172.58.0/23
103.174.247.0/24
103.178.0.0/23
103.207.176.0-103.207.182.255
202.47.174.0/24
IPv6:
2001:df0:f740::/48
2001:df1:e40::/48
2001:df2:16c0::/48
2001:df3:93c0::/48
Signature Algorithm: sha256WithRSAEncryption
27:4b:a2:aa:ac:cd:b8:0b:3f:84:20:5f:0b:b0:4e:da:4d:4f:
85:3e:7b:da:74:91:83:cc:60:44:43:e7:11:03:5b:1b:69:6e:
bf:c3:14:9f:d8:18:6a:57:77:03:d1:47:3c:69:af:76:54:69:
97:58:71:a6:5b:f8:da:de:46:af:e7:38:6c:1d:3b:cc:94:e4:
21:3b:7d:c1:58:75:a6:f2:da:dc:52:14:16:80:90:f9:a2:8b:
17:0b:93:9a:03:82:f2:01:ad:29:14:9e:6d:cf:e7:52:8b:21:
dc:e4:96:48:79:1c:c3:3d:a8:fb:0b:1c:ce:a6:85:46:d3:08:
b6:3f:6d:a7:b5:a1:63:ee:6e:ea:1e:b8:54:98:ed:9c:ac:a2:
1b:d9:19:a7:a7:6d:a3:96:7f:07:04:68:33:9c:f3:e8:6a:83:
5f:f4:a7:ab:2a:3f:30:3e:4f:df:b8:3d:b3:cc:8f:0f:b8:7c:
63:38:c8:0a:43:bc:5c:90:89:0d:89:bf:d2:d4:d5:fc:0b:1f:
5a:6b:3e:cc:67:f9:c8:fa:c6:cb:88:13:7e:bc:58:eb:4c:3e:
ba:64:ea:d3:1b:6d:88:02:3a:89:5a:ed:53:b1:c6:3c:31:e3:
11:31:7b:d8:02:63:93:6f:2e:fa:4c:11:12:dd:45:f5:85:a6:
e9:0c:76:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:14:25 2026 by rpki-client