Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/52B84266B3C411F0A952B10CC4F9AE02.roa
File: 52B84266B3C411F0A952B10CC4F9AE02.roa (raw, json)
Hash identifier: 6zTCHG3uP3cK2rw/2Eul1AW03DSAhrWGcY7OdFAvbQs=
Subject key identifier: 4D:20:58:1F:0C:84:B0:C8:BB:98:22:4A:C7:1C:34:0B:FA:24:08:19
Certificate issuer: /CN=A9123072/serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Certificate serial: 0857
Authority key identifier: E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/52B84266B3C411F0A952B10CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:51:21 +0000
ROA not before: Wed 10 Dec 2025 20:14:05 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 55720
IP address blocks: 45.116.164.0/24 maxlen: 24
45.116.165.0/24 maxlen: 24
45.116.166.0/24 maxlen: 24
45.116.167.0/24 maxlen: 24
59.153.148.0/24 maxlen: 24
59.153.149.0/24 maxlen: 24
59.153.150.0/24 maxlen: 24
59.153.151.0/24 maxlen: 24
61.4.112.0/24 maxlen: 24
61.4.113.0/24 maxlen: 24
61.4.114.0/24 maxlen: 24
61.4.115.0/24 maxlen: 24
61.4.116.0/24 maxlen: 24
61.4.117.0/24 maxlen: 24
61.4.118.0/24 maxlen: 24
61.4.119.0/24 maxlen: 24
61.4.120.0/24 maxlen: 24
61.4.121.0/24 maxlen: 24
61.4.122.0/24 maxlen: 24
61.4.123.0/24 maxlen: 24
61.4.124.0/24 maxlen: 24
61.4.125.0/24 maxlen: 24
61.4.126.0/24 maxlen: 24
61.4.127.0/24 maxlen: 24
103.229.64.0/24 maxlen: 24
103.229.65.0/24 maxlen: 24
103.229.66.0/24 maxlen: 24
103.229.67.0/24 maxlen: 24
103.229.224.0/24 maxlen: 24
103.229.225.0/24 maxlen: 24
103.230.144.0/24 maxlen: 24
103.230.145.0/24 maxlen: 24
103.230.146.0/24 maxlen: 24
103.230.147.0/24 maxlen: 24
103.232.136.0/24 maxlen: 24
103.232.137.0/24 maxlen: 24
103.232.138.0/24 maxlen: 24
103.232.139.0/24 maxlen: 24
114.29.252.0/24 maxlen: 24
114.29.253.0/24 maxlen: 24
114.29.254.0/24 maxlen: 24
114.29.255.0/24 maxlen: 24
185.189.160.0/24 maxlen: 24
185.189.161.0/24 maxlen: 24
185.189.162.0/24 maxlen: 24
185.189.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:58:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2135 (0x857)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9123072, serialNumber=E3BCBA88BEDC2A768A9865F416D68A7C3033F469
Validity
Not Before: Dec 10 20:14:05 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a47c98-a3bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:de:99:1a:ac:ce:64:52:b1:01:cc:69:dc:2b:
bc:73:50:cc:f2:cc:33:fc:bd:89:9c:79:60:a9:82:
d7:b0:cd:9b:f2:41:50:3a:28:63:37:73:8a:65:90:
4e:a2:a1:b0:ef:27:93:8d:ce:0e:e1:3e:be:44:8c:
94:11:ce:90:69:fd:77:35:66:c4:2c:48:c9:65:da:
56:63:c1:4d:9b:cd:dd:53:99:64:80:8a:18:77:27:
65:68:86:e4:ab:26:e3:d4:7d:e9:d7:e3:8f:3b:a3:
79:3e:9f:c5:8f:86:13:24:8e:8f:86:a9:0f:69:1a:
02:42:bd:9d:72:ac:09:e8:60:c8:08:aa:50:9f:38:
e9:20:08:68:1a:5d:70:b0:14:ac:b5:5b:66:f1:eb:
61:51:ce:0b:03:82:9a:a0:bf:b5:81:40:b0:b0:ec:
34:20:6d:98:a2:3d:b5:54:14:34:fb:c9:71:69:12:
45:14:78:22:ad:0d:d2:98:9b:37:87:60:4d:80:be:
3e:0a:1a:e2:15:27:c6:be:91:b4:87:30:e4:8f:5e:
4a:99:60:4d:fd:d1:1d:c7:19:9e:01:7a:d0:1c:3e:
7a:fb:4d:01:3e:30:1a:8e:4c:e6:17:21:c3:d0:40:
a4:62:78:38:7d:1f:d2:95:e4:b6:0b:b9:f7:98:2b:
00:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:20:58:1F:0C:84:B0:C8:BB:98:22:4A:C7:1C:34:0B:FA:24:08:19
X509v3 Authority Key Identifier:
keyid:E3:BC:BA:88:BE:DC:2A:76:8A:98:65:F4:16:D6:8A:7C:30:33:F4:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/47y6iL7cKnaKmGX0FtaKfDAz9Gk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/47y6iL7cKnaKmGX0FtaKfDAz9Gk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123072/0CEA495C0B5C11EB99A17562C4F9AE02/52B84266B3C411F0A952B10CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.116.164.0/22
59.153.148.0/22
61.4.112.0/20
103.229.64.0/22
103.229.224.0/23
103.230.144.0/22
103.232.136.0/22
114.29.252.0/22
185.189.160.0/22
Signature Algorithm: sha256WithRSAEncryption
57:46:ed:8b:2a:43:2a:17:47:0f:33:3d:42:7b:f6:b5:d7:af:
dc:1c:9d:91:f2:e2:a4:81:e8:95:07:fd:55:e2:d7:93:80:2e:
65:80:d1:4b:ec:85:59:e8:4c:8d:06:2b:33:ae:c9:21:8f:85:
90:e0:b4:54:f4:15:62:05:f7:7f:57:6b:fa:2d:f1:14:cc:8d:
0b:35:a3:78:3a:86:55:6d:00:c9:a0:4e:aa:e5:fc:f3:a3:4a:
ca:33:38:c2:a3:68:86:02:92:6c:6f:7f:94:16:0c:c0:99:23:
b7:38:c9:a9:6c:8c:48:d7:ff:01:c5:8c:9d:77:ce:c9:d1:0d:
aa:a3:93:87:5e:05:f6:d7:9d:cb:1f:4f:a9:78:22:a3:5b:d7:
df:7e:91:19:99:2e:24:56:38:16:7c:77:4f:4e:5b:50:ca:60:
1d:59:9d:e0:ee:06:86:5f:52:2c:20:7d:9b:b0:7a:72:28:9b:
28:8a:7b:bc:b5:6d:2a:c3:09:b0:3f:24:8d:47:f0:e9:90:fd:
ff:74:88:c1:2f:30:36:be:b8:a1:38:a2:dc:67:26:00:76:4d:
0c:5d:52:64:0e:b4:74:64:9b:6c:7f:e9:ca:34:7e:c6:e1:88:
f0:f4:98:ef:03:df:7a:e2:7b:9c:d5:2a:20:85:2f:90:f4:37:
e5:e0:d9:05
-----BEGIN CERTIFICATE-----
MIIFbDCCBFSgAwIBAgICCFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjMwNzIxMTAvBgNVBAUTKEUzQkNCQTg4QkVEQzJBNzY4QTk4NjVGNDE2RDY4QTdD
MzAzM0Y0NjkwHhcNMjUxMjEwMjAxNDA1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0N2M5OC1hM2JkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAs96ZGqzOZFKxAcxp3Cu8c1DM8swz/L2JnHlgqYLXsM2b8kFQOihjN3OKZZBO
oqGw7yeTjc4O4T6+RIyUEc6Qaf13NWbELEjJZdpWY8FNm83dU5lkgIoYdydlaIbk
qybj1H3p1+OPO6N5Pp/Fj4YTJI6PhqkPaRoCQr2dcqwJ6GDICKpQnzjpIAhoGl1w
sBSstVtm8ethUc4LA4KaoL+1gUCwsOw0IG2Yoj21VBQ0+8lxaRJFFHgirQ3SmJs3
h2BNgL4+ChriFSfGvpG0hzDkj15KmWBN/dEdxxmeAXrQHD56+00BPjAajkzmFyHD
0ECkYng4fR/SleS2C7n3mCsA+QIDAQABo4ICkDCCAowwHQYDVR0OBBYEFE0gWB8M
hLDIu5giSsccNAv6JAgZMB8GA1UdIwQYMBaAFOO8uoi+3Cp2iphl9BbWinwwM/Rp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMzA3Mi8wQ0VBNDk1QzBC
NUMxMUVCOTlBMTc1NjJDNEY5QUUwMi80N3k2aUw3Y0tuYUttR1gwRnRhS2ZEQXo5
R2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzQ3eTZpTDdjS25hS21HWDBGdGFLZkRBejlHay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjMwNzIvMENFQTQ5NUMwQjVDMTFFQjk5QTE3NTYyQzRGOUFFMDIvNTJCODQyNjZC
M0M0MTFGMEE5NTJCMTBDQzRGOUFFMDIucm9hME8GCCsGAQUFBwEHAQH/BEAwPjA8
BAIAATA2AwQCLXSkAwQCO5mUAwQEPQRwAwQCZ+VAAwQBZ+XgAwQCZ+aQAwQCZ+iI
AwQCch38AwQCub2gMA0GCSqGSIb3DQEBCwUAA4IBAQBXRu2LKkMqF0cPMz1Ce/a1
16/cHJ2R8uKkgeiVB/1V4teTgC5lgNFL7IVZ6EyNBiszrskhj4WQ4LRU9BViBfd/
V2v6LfEUzI0LNaN4OoZVbQDJoE6q5fzzo0rKMzjCo2iGApJsb3+UFgzAmSO3OMmp
bIxI1/8BxYydd87J0Q2qo5OHXgX2153LH0+peCKjW9fffpEZmS4kVjgWfHdPTltQ
ymAdWZ3g7gaGX1IsIH2bsHpyKJsoinu8tW0qwwmwPySNR/DpkP3/dIjBLzA2vrih
OKLcZyYAdk0MXVJkDrR0ZJtsf+nKNH7G4Yjw9JjvA9964nuc1SoghS+Q9Dfl4NkF
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:31:18 2026 by rpki-client