Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDE399E5E7711F19D717D61177AAC22.roa
File: 7BDE399E5E7711F19D717D61177AAC22.roa (raw, json)
Hash identifier: NYZxgM++K5BLRmwNxMJZ7/bAw+BXOm+lDzCxs2rhSw8=
Subject key identifier: F9:5D:03:3E:C7:C4:1C:54:07:89:42:9E:5D:90:48:54:21:CC:CF:BF
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FD13
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDE399E5E7711F19D717D61177AAC22.roa
Signing time: Tue 22 Sep 2026 06:09:53 +0000
ROA not before: Tue 22 Sep 2026 06:09:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45804
IP address blocks: 43.251.168.0/22 maxlen: 24
43.251.172.0/22 maxlen: 24
43.251.176.0/22 maxlen: 24
45.114.176.0/22 maxlen: 24
45.116.188.0/22 maxlen: 24
45.248.56.0/22 maxlen: 24
103.27.140.0/22 maxlen: 24
103.43.80.0/24 maxlen: 24
103.43.81.0/24 maxlen: 24
103.43.82.0/24 maxlen: 24
103.43.83.0/24 maxlen: 24
103.56.236.0/22 maxlen: 24
103.70.44.0/22 maxlen: 24
103.76.80.0/22 maxlen: 24
103.80.172.0/24 maxlen: 24
103.80.173.0/24 maxlen: 24
103.80.174.0/24 maxlen: 24
103.80.175.0/24 maxlen: 24
103.93.100.0/22 maxlen: 24
103.100.20.0/24 maxlen: 24
103.100.21.0/24 maxlen: 24
103.100.22.0/24 maxlen: 24
103.100.23.0/24 maxlen: 24
103.132.170.0/24 maxlen: 24
103.176.138.0/23 maxlen: 23
103.193.88.0/22 maxlen: 24
103.199.97.0/24 maxlen: 24
103.216.204.0/22 maxlen: 24
103.244.240.0/22 maxlen: 24
103.244.244.0/24 maxlen: 24
103.245.2.0/24 maxlen: 24
103.245.20.0/24 maxlen: 24
103.251.80.0/22 maxlen: 24
114.29.224.0/22 maxlen: 24
150.129.108.0/22 maxlen: 24
150.129.132.0/22 maxlen: 24
2001:df0:9fc0::/48 maxlen: 48
2001:df4:4240::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 19 Oct 2026 15:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64787 (0xfd13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 22 06:09:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ab21bb1-b672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:84:9d:5a:a6:5c:ae:50:97:ff:a0:94:37:ae:
0d:2d:49:68:c9:dc:f9:4e:17:c7:bb:c6:9f:2c:7a:
9e:77:bf:22:0e:e8:c8:6f:39:1c:93:b1:63:46:d0:
17:cd:77:fa:4d:a7:0c:ec:0a:e7:1a:c5:5e:d7:ca:
1d:0c:a9:62:3c:1a:8b:50:85:ae:f8:b6:b4:b6:e6:
db:5c:c6:1c:5b:e4:cd:e2:65:b3:f1:1a:e1:24:4e:
cb:56:68:a7:b5:e4:10:3a:93:4a:de:ad:72:10:2d:
0a:97:0a:ac:24:ab:e1:36:82:b1:b4:ba:2d:6b:cb:
15:87:72:99:aa:e8:45:83:f3:2a:d3:61:e6:6b:5e:
b7:5b:28:3c:cb:63:dd:ce:32:28:fa:ec:71:65:04:
1a:dc:0f:22:55:18:52:d3:09:d6:da:1a:ac:3d:a3:
4b:0b:78:35:61:0d:6c:ee:65:04:07:0a:9d:56:0a:
61:1a:68:58:1c:e1:51:c9:99:ee:9c:d9:d1:2a:75:
2c:7b:f9:62:06:a6:69:c2:4e:26:55:33:b6:75:56:
d8:6b:35:17:d2:6d:16:23:95:54:e2:47:e2:2f:00:
9d:5d:24:7c:90:a9:22:c3:88:c1:13:bb:e8:16:34:
be:01:ee:79:9e:7c:ab:e5:1c:ae:70:e6:05:89:f6:
1c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5D:03:3E:C7:C4:1C:54:07:89:42:9E:5D:90:48:54:21:CC:CF:BF
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/7BDE399E5E7711F19D717D61177AAC22.roa
sbgp-ipAddrBlock: critical
IPv4:
43.251.168.0-43.251.179.255
45.114.176.0/22
45.116.188.0/22
45.248.56.0/22
103.27.140.0/22
103.43.80.0/22
103.56.236.0/22
103.70.44.0/22
103.76.80.0/22
103.80.172.0/22
103.93.100.0/22
103.100.20.0/22
103.132.170.0/24
103.176.138.0/23
103.193.88.0/22
103.199.97.0/24
103.216.204.0/22
103.244.240.0-103.244.244.255
103.245.2.0/24
103.245.20.0/24
103.251.80.0/22
114.29.224.0/22
150.129.108.0/22
150.129.132.0/22
IPv6:
2001:df0:9fc0::/48
2001:df4:4240::/48
Signature Algorithm: sha256WithRSAEncryption
0c:01:5b:4a:4d:36:70:40:41:08:8c:96:77:01:82:06:ae:ad:
ce:2d:c5:c1:ac:2d:74:c8:23:de:05:96:2b:23:01:cd:15:86:
16:ce:5a:37:c0:3e:1a:27:b6:46:21:d2:a4:4e:0c:7b:e1:c7:
f9:cd:5c:ad:46:3d:eb:2c:8c:0f:cb:5b:a7:f0:1f:8b:c0:e3:
10:33:59:eb:3e:b9:0d:27:11:36:5b:7f:21:91:87:2d:a9:cd:
a4:c4:17:c5:1c:4c:b5:ce:14:3e:9d:56:69:59:4b:f6:03:4a:
64:4d:8a:c6:e9:f4:6e:7a:55:94:9b:56:62:b6:a9:50:86:58:
c7:f9:66:eb:24:5d:87:80:6c:c4:a6:0c:30:17:ef:15:07:ba:
33:7f:e4:a7:0d:6e:81:83:3d:0d:fd:b7:f7:72:75:4e:b9:f7:
a2:a4:e6:d8:80:b6:4f:35:2a:0d:42:84:28:a8:d8:40:bc:bf:
10:0e:12:9f:1f:c1:b6:a7:f6:9f:32:95:55:f4:a3:dc:00:d9:
33:49:05:02:55:c4:b8:0d:35:6b:38:09:fa:0d:86:0e:81:d4:
77:dd:8f:24:0d:5b:28:ee:17:6a:5b:ca:40:e1:f1:5f:51:63:
7b:d4:ad:02:2e:e9:60:b6:58:1b:b7:78:dc:52:3b:1b:9e:9c:
0f:64:0a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:55:58 2026 by rpki-client