Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/37B1E57EFD6D11F09CB822DF526F56BC.roa
File: 37B1E57EFD6D11F09CB822DF526F56BC.roa (raw, json)
Hash identifier: WIWaaL6J0bqMMf0KvezWt+PHFUVrDbYuMF14salkaWE=
Subject key identifier: 86:1E:F6:EA:45:80:0C:69:79:F2:B4:04:C9:45:26:89:22:59:59:C8
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 08DB
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/37B1E57EFD6D11F09CB822DF526F56BC.roa
Signing time: Sun 01 Mar 2026 18:43:19 +0000
ROA not before: Thu 29 Jan 2026 23:49:57 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55720
IP address blocks: 14.192.67.0/24 maxlen: 24
14.192.68.0/24 maxlen: 24
14.192.69.0/24 maxlen: 24
43.231.6.0/24 maxlen: 24
43.231.7.0/24 maxlen: 24
45.116.160.0/24 maxlen: 24
45.116.161.0/24 maxlen: 24
45.116.162.0/24 maxlen: 24
45.116.163.0/24 maxlen: 24
45.120.52.0/24 maxlen: 24
45.120.53.0/24 maxlen: 24
45.120.54.0/24 maxlen: 24
45.120.55.0/24 maxlen: 24
61.4.97.0/24 maxlen: 24
61.4.98.0/24 maxlen: 24
61.4.99.0/24 maxlen: 24
61.4.100.0/22 maxlen: 24
61.4.104.0/22 maxlen: 24
61.4.109.0/24 maxlen: 24
61.4.110.0/24 maxlen: 24
103.4.28.0/24 maxlen: 24
103.4.29.0/24 maxlen: 24
103.4.30.0/24 maxlen: 24
103.4.31.0/24 maxlen: 24
103.15.104.0/24 maxlen: 24
103.15.105.0/24 maxlen: 24
103.15.106.0/24 maxlen: 24
103.15.107.0/24 maxlen: 24
103.21.88.0/24 maxlen: 24
103.21.89.0/24 maxlen: 24
103.21.90.0/24 maxlen: 24
103.21.91.0/24 maxlen: 24
103.23.46.0/24 maxlen: 24
103.23.47.0/24 maxlen: 24
103.71.176.0/24 maxlen: 24
103.71.177.0/24 maxlen: 24
103.71.178.0/24 maxlen: 24
103.71.179.0/24 maxlen: 24
103.243.212.0/24 maxlen: 24
103.243.213.0/24 maxlen: 24
103.243.214.0/24 maxlen: 24
103.243.215.0/24 maxlen: 24
103.246.112.0/24 maxlen: 24
103.246.113.0/24 maxlen: 24
103.246.114.0/24 maxlen: 24
118.107.216.0/24 maxlen: 24
118.107.217.0/24 maxlen: 24
118.107.218.0/24 maxlen: 24
118.107.219.0/24 maxlen: 24
118.107.220.0/24 maxlen: 24
118.107.221.0/24 maxlen: 24
118.107.222.0/24 maxlen: 24
118.107.223.0/24 maxlen: 24
150.107.76.0/24 maxlen: 24
150.107.77.0/24 maxlen: 24
150.107.78.0/24 maxlen: 24
150.107.79.0/24 maxlen: 24
202.9.36.0/24 maxlen: 24
202.9.39.0/24 maxlen: 24
202.73.12.0/24 maxlen: 24
202.73.13.0/24 maxlen: 24
202.73.14.0/24 maxlen: 24
202.73.15.0/24 maxlen: 24
202.87.220.0/24 maxlen: 24
202.87.221.0/24 maxlen: 24
202.87.222.0/24 maxlen: 24
202.87.223.0/24 maxlen: 24
223.25.240.0/24 maxlen: 24
223.25.241.0/24 maxlen: 24
223.25.242.0/24 maxlen: 24
223.25.243.0/24 maxlen: 24
223.25.244.0/24 maxlen: 24
223.25.245.0/24 maxlen: 24
223.25.246.0/24 maxlen: 24
223.25.247.0/24 maxlen: 24
2402:9500::/32 maxlen: 32
2402:9500::/48 maxlen: 48
2402:9500:a00::/48 maxlen: 48
2402:9500:b00::/48 maxlen: 48
2402:9500:c00::/48 maxlen: 48
2402:9500:d00::/48 maxlen: 48
2402:9500:1000::/48 maxlen: 48
2402:9500:2000::/48 maxlen: 48
2402:9500:3000::/48 maxlen: 48
2402:9500:4000::/48 maxlen: 48
2402:9500:5000::/48 maxlen: 48
2402:9500:6000::/48 maxlen: 48
2402:9500:7000::/48 maxlen: 48
2402:9500:8000::/48 maxlen: 48
2402:9500:9000::/48 maxlen: 48
2402:9500:e000::/48 maxlen: 48
2402:9500:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2267 (0x8db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Jan 29 23:49:57 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a488c7-6fc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:eb:0e:97:13:ff:3f:d0:2a:43:64:6b:91:74:
19:ac:ef:e4:cd:49:70:ef:69:4b:2c:b1:d9:50:84:
c1:02:02:ac:5b:23:5e:d8:02:cb:8d:1a:1b:6c:46:
fa:ab:cf:62:e1:fa:d3:ae:9e:75:9c:42:1d:d0:e5:
74:fe:3b:ed:58:6a:ea:47:19:ba:1e:9e:41:03:68:
da:8c:33:6f:a4:84:97:26:c4:91:3f:dd:d7:d4:76:
2f:7e:ad:97:6c:56:d0:ac:ba:0b:1a:1d:c5:c1:43:
53:2c:50:26:55:2c:1a:9a:86:67:0d:9f:97:7f:f4:
d4:9f:bd:12:ae:99:57:ff:91:51:b3:52:07:36:68:
63:6d:95:e6:27:25:80:7c:28:ae:0e:78:16:f4:df:
43:5f:c2:77:89:9f:18:87:e4:96:89:9d:0f:cc:98:
75:68:e0:0e:5b:d4:5c:a4:2e:f4:40:e9:42:aa:dc:
c1:74:75:22:be:32:87:3e:05:d4:4b:46:d6:f8:0e:
2e:87:1a:62:1d:74:d2:be:87:d5:c9:53:f7:18:d7:
c0:5b:e4:1d:19:84:2f:6e:7c:7c:ed:c6:63:7c:fd:
72:02:35:a7:26:a2:1d:a7:d4:9e:57:48:7a:45:1d:
e7:1a:47:7c:69:23:c9:7b:7d:09:08:51:6f:34:ea:
3f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1E:F6:EA:45:80:0C:69:79:F2:B4:04:C9:45:26:89:22:59:59:C8
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/37B1E57EFD6D11F09CB822DF526F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.67.0-14.192.69.255
43.231.6.0/23
45.116.160.0/22
45.120.52.0/22
61.4.97.0-61.4.107.255
61.4.109.0-61.4.110.255
103.4.28.0/22
103.15.104.0/22
103.21.88.0/22
103.23.46.0/23
103.71.176.0/22
103.243.212.0/22
103.246.112.0-103.246.114.255
118.107.216.0/21
150.107.76.0/22
202.9.36.0/24
202.9.39.0/24
202.73.12.0/22
202.87.220.0/22
223.25.240.0/21
IPv6:
2402:9500::/32
Signature Algorithm: sha256WithRSAEncryption
5e:0a:b2:1e:07:79:86:d8:ed:ee:73:ce:e0:27:52:05:9d:39:
69:74:13:d9:dd:85:18:e6:45:eb:3e:69:51:3c:ba:09:db:cd:
6a:44:f8:8a:d5:4a:a9:56:8b:9a:32:c7:e3:65:07:9f:c6:de:
70:d7:a7:24:b9:f1:71:81:b8:be:56:e2:3b:e4:ba:e1:17:86:
5a:92:73:07:50:01:20:c6:b8:7a:ef:d0:3e:2d:72:e2:34:3f:
e4:64:87:b8:4a:0f:a4:22:12:07:89:63:9d:f9:95:92:86:6e:
2d:e3:70:26:02:e9:cb:2b:1c:fd:00:b9:b9:c0:80:2a:1a:b6:
bf:e2:19:95:a3:f1:7d:d5:3f:16:30:a8:b5:40:3e:53:18:66:
b0:9a:16:73:8e:be:be:db:1d:43:47:79:7e:c2:a6:66:5a:c5:
9d:18:b7:1c:93:98:df:b0:11:a7:3d:66:79:ce:65:d3:43:37:
3c:7a:a0:57:d5:4e:02:7a:48:ae:04:ad:f7:49:7f:67:e6:b0:
c8:b5:f4:2d:2f:2f:4b:0e:0b:20:b0:a4:51:8b:41:25:53:f0:
8c:48:f4:41:bc:9d:cb:be:b8:05:f5:59:65:b2:88:7b:1a:36:
ac:ec:e0:7d:9a:a0:3b:7e:0f:c0:71:52:45:a8:87:37:06:2a:
d5:21:34:c3
-----BEGIN CERTIFICATE-----
MIIF4jCCBMqgAwIBAgICCNswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjE3NkQxMTAvBgNVBAUTKDk2RjQyRTE5RjY5RDU5NkEwMzE4OTIxNTkwQTE3REQ1
MzIzM0U1OTUwHhcNMjYwMTI5MjM0OTU3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODhjNy02ZmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7esOlxP/P9AqQ2RrkXQZrO/kzUlw72lLLLHZUITBAgKsWyNe2ALLjRobbEb6
q89i4frTrp51nEId0OV0/jvtWGrqRxm6Hp5BA2jajDNvpISXJsSRP93X1HYvfq2X
bFbQrLoLGh3FwUNTLFAmVSwamoZnDZ+Xf/TUn70SrplX/5FRs1IHNmhjbZXmJyWA
fCiuDngW9N9DX8J3iZ8Yh+SWiZ0PzJh1aOAOW9RcpC70QOlCqtzBdHUivjKHPgXU
S0bW+A4uhxpiHXTSvofVyVP3GNfAW+QdGYQvbnx87cZjfP1yAjWnJqIdp9SeV0h6
RR3nGkd8aSPJe30JCFFvNOo/KwIDAQABo4IDBjCCAwIwHQYDVR0OBBYEFIYe9upF
gAxpefK0BMlFJokiWVnIMB8GA1UdIwQYMBaAFJb0Lhn2nVlqAxiSFZChfdUyM+WV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTc2RC85M0QxN0NEMDA2
QTAxMUVCQjQwOTA4NTlDNEY5QUUwMi9sdlF1R2ZhZFdXb0RHSklWa0tGOTFUSXo1
WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2x2UXVHZmFkV1dvREdKSVZrS0Y5MVRJejVaVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjE3NkQvOTNEMTdDRDAwNkEwMTFFQkI0MDkwODU5QzRGOUFFMDIvMzdCMUU1N0VG
RDZEMTFGMDlDQjgyMkRGNTI2RjU2QkMucm9hMIHEBggrBgEFBQcBBwEB/wSBtDCB
sTCBnwQCAAEwgZgwDAMEAA7AQwMEAQ7ARAMEASvnBgMEAi10oAMEAi14NDAMAwQA
PQRhAwQCPQRoMAwDBAA9BG0DBAA9BG4DBAJnBBwDBAJnD2gDBAJnFVgDBAFnFy4D
BAJnR7ADBAJn89QwDAMEBGf2cAMEAGf2cgMEA3Zr2AMEApZrTAMEAMoJJAMEAMoJ
JwMEAspJDAMEAspX3AMEA98Z8DANBAIAAjAHAwUAJAKVADANBgkqhkiG9w0BAQsF
AAOCAQEAXgqyHgd5htjt7nPO4CdSBZ05aXQT2d2FGOZF6z5pUTy6CdvNakT4itVK
qVaLmjLH42UHn8becNenJLnxcYG4vlbiO+S64ReGWpJzB1ABIMa4eu/QPi1y4jQ/
5GSHuEoPpCISB4ljnfmVkoZuLeNwJgLpyysc/QC5ucCAKhq2v+IZlaPxfdU/FjCo
tUA+UxhmsJoWc46+vtsdQ0d5fsKmZlrFnRi3HJOY37ARpz1mec5l00M3PHqgV9VO
AnpIrgSt90l/Z+awyLX0LS8vSw4LILCkUYtBJVPwjEj0Qbydy764BfVZZbKIexo2
rOzgfZqgO34PwHFSRaiHNwYq1SE0ww==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:58:19 2026 by rpki-client