Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
File: E44FF288EE9811EF88F8B953C4F9AE02.roa (raw, json)
Hash identifier: gsVMlgziaQLbABnIyD6FsfM+JT38vivaus8keVfzqJc=
Subject key identifier: 7C:14:D0:96:99:3D:49:7C:46:68:F1:AA:EB:F6:44:E1:E6:1A:68:63
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 2979
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:25:21 +0000
ROA not before: Fri 31 Oct 2025 11:09:15 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 23930
IP address blocks: 43.243.126.0/24 maxlen: 24
43.243.127.0/24 maxlen: 24
103.38.214.0/24 maxlen: 24
103.38.215.0/24 maxlen: 24
116.93.0.0/23 maxlen: 23
116.93.1.0/24 maxlen: 24
116.93.4.0/23 maxlen: 23
116.93.4.0/24 maxlen: 24
116.93.5.0/24 maxlen: 24
116.93.6.0/24 maxlen: 24
116.93.7.0/24 maxlen: 24
116.93.8.0/23 maxlen: 23
116.93.8.0/24 maxlen: 24
116.93.9.0/24 maxlen: 24
116.93.10.0/23 maxlen: 23
116.93.10.0/24 maxlen: 24
116.93.11.0/24 maxlen: 24
116.93.12.0/23 maxlen: 23
116.93.12.0/24 maxlen: 24
116.93.13.0/24 maxlen: 24
116.93.15.0/24 maxlen: 24
116.93.16.0/23 maxlen: 23
116.93.17.0/24 maxlen: 24
116.93.18.0/23 maxlen: 23
116.93.18.0/24 maxlen: 24
116.93.20.0/24 maxlen: 24
116.93.21.0/24 maxlen: 24
116.93.22.0/23 maxlen: 23
116.93.23.0/24 maxlen: 24
116.93.24.0/22 maxlen: 22
116.93.24.0/23 maxlen: 23
116.93.24.0/24 maxlen: 24
116.93.25.0/24 maxlen: 24
116.93.26.0/23 maxlen: 23
116.93.26.0/24 maxlen: 24
116.93.27.0/24 maxlen: 24
116.93.28.0/23 maxlen: 23
116.93.28.0/24 maxlen: 24
116.93.29.0/24 maxlen: 24
116.93.30.0/23 maxlen: 23
116.93.30.0/24 maxlen: 24
116.93.31.0/24 maxlen: 24
116.93.32.0/23 maxlen: 23
116.93.32.0/24 maxlen: 24
116.93.33.0/24 maxlen: 24
116.93.34.0/23 maxlen: 23
116.93.34.0/24 maxlen: 24
116.93.36.0/23 maxlen: 23
116.93.36.0/24 maxlen: 24
116.93.37.0/24 maxlen: 24
116.93.38.0/23 maxlen: 23
116.93.38.0/24 maxlen: 24
116.93.39.0/24 maxlen: 24
116.93.40.0/24 maxlen: 24
116.93.41.0/24 maxlen: 24
116.93.42.0/24 maxlen: 24
116.93.43.0/24 maxlen: 24
116.93.44.0/24 maxlen: 24
116.93.45.0/24 maxlen: 24
116.93.46.0/23 maxlen: 23
116.93.47.0/24 maxlen: 24
116.93.48.0/23 maxlen: 23
116.93.49.0/24 maxlen: 24
116.93.50.0/23 maxlen: 23
116.93.51.0/24 maxlen: 24
116.93.52.0/24 maxlen: 24
116.93.54.0/23 maxlen: 23
116.93.54.0/24 maxlen: 24
116.93.61.0/24 maxlen: 24
116.93.62.0/24 maxlen: 24
116.93.63.0/24 maxlen: 24
116.93.64.0/24 maxlen: 24
116.93.65.0/24 maxlen: 24
116.93.66.0/24 maxlen: 24
116.93.67.0/24 maxlen: 24
116.93.71.0/24 maxlen: 24
116.93.74.0/24 maxlen: 24
116.93.75.0/24 maxlen: 24
116.93.78.0/24 maxlen: 24
116.93.79.0/24 maxlen: 24
116.93.80.0/23 maxlen: 23
116.93.80.0/24 maxlen: 24
116.93.85.0/24 maxlen: 24
116.93.87.0/24 maxlen: 24
116.93.88.0/24 maxlen: 24
116.93.90.0/24 maxlen: 24
116.93.91.0/24 maxlen: 24
116.93.93.0/24 maxlen: 24
116.93.94.0/24 maxlen: 24
116.93.96.0/24 maxlen: 24
116.93.97.0/24 maxlen: 24
116.93.98.0/24 maxlen: 24
116.93.100.0/24 maxlen: 24
116.93.102.0/24 maxlen: 24
116.93.105.0/24 maxlen: 24
116.93.106.0/24 maxlen: 24
116.93.107.0/24 maxlen: 24
116.93.108.0/24 maxlen: 24
116.93.109.0/24 maxlen: 24
116.93.110.0/24 maxlen: 24
116.93.111.0/24 maxlen: 24
116.93.112.0/24 maxlen: 24
116.93.114.0/24 maxlen: 24
116.93.115.0/24 maxlen: 24
116.93.117.0/24 maxlen: 24
116.93.118.0/24 maxlen: 24
116.93.119.0/24 maxlen: 24
116.93.120.0/24 maxlen: 24
116.93.121.0/24 maxlen: 24
116.93.122.0/24 maxlen: 24
116.93.124.0/24 maxlen: 24
116.93.126.0/24 maxlen: 24
116.93.127.0/24 maxlen: 24
121.127.0.0/24 maxlen: 24
121.127.1.0/24 maxlen: 24
121.127.6.0/24 maxlen: 24
121.127.7.0/24 maxlen: 24
121.127.8.0/24 maxlen: 24
121.127.9.0/24 maxlen: 24
121.127.10.0/24 maxlen: 24
121.127.11.0/24 maxlen: 24
121.127.12.0/23 maxlen: 23
121.127.12.0/24 maxlen: 24
121.127.13.0/24 maxlen: 24
121.127.14.0/23 maxlen: 23
121.127.14.0/24 maxlen: 24
121.127.15.0/24 maxlen: 24
121.127.16.0/24 maxlen: 24
121.127.17.0/24 maxlen: 24
121.127.18.0/24 maxlen: 24
121.127.20.0/23 maxlen: 23
121.127.20.0/24 maxlen: 24
121.127.21.0/24 maxlen: 24
121.127.22.0/23 maxlen: 23
121.127.22.0/24 maxlen: 24
121.127.23.0/24 maxlen: 24
121.127.26.0/23 maxlen: 23
121.127.26.0/24 maxlen: 24
121.127.27.0/24 maxlen: 24
121.127.28.0/23 maxlen: 23
121.127.28.0/24 maxlen: 24
121.127.29.0/24 maxlen: 24
121.127.30.0/23 maxlen: 23
121.127.30.0/24 maxlen: 24
121.127.31.0/24 maxlen: 24
203.99.232.0/21 maxlen: 21
203.99.232.0/23 maxlen: 23
203.99.232.0/24 maxlen: 24
203.99.233.0/24 maxlen: 24
203.99.234.0/24 maxlen: 24
203.99.235.0/24 maxlen: 24
203.99.236.0/24 maxlen: 24
203.99.237.0/24 maxlen: 24
203.99.238.0/23 maxlen: 23
203.99.238.0/24 maxlen: 24
203.99.239.0/24 maxlen: 24
203.208.24.0/23 maxlen: 23
203.208.24.0/24 maxlen: 24
203.208.25.0/24 maxlen: 24
203.208.26.0/24 maxlen: 24
203.208.27.0/24 maxlen: 24
203.208.28.0/24 maxlen: 24
203.208.29.0/24 maxlen: 24
203.208.30.0/24 maxlen: 24
203.208.31.0/24 maxlen: 24
2401:9800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10617 (0x2979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Validity
Not Before: Oct 31 11:09:15 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a492a1-d293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:81:33:69:6a:36:2d:ed:26:a4:c2:52:89:e5:
e6:35:28:27:3b:bb:22:1f:3f:bb:5a:06:22:6d:c8:
5e:bb:fb:dd:26:00:2c:d7:70:aa:27:50:a8:71:b3:
a3:7d:46:59:ab:17:09:40:8c:8b:0b:09:ee:f9:11:
78:54:18:76:5f:17:15:92:8a:84:6b:7d:a2:da:33:
ab:3f:e1:50:0a:d7:68:5f:3b:06:97:a9:ed:43:35:
d4:94:0e:a2:ae:92:5a:c7:9b:b0:8b:6b:be:bc:4a:
40:fc:80:1f:90:47:5f:12:03:7a:72:53:60:3c:72:
4c:93:4f:1a:8a:9e:96:77:02:dc:63:c4:8e:c6:dc:
1f:4b:65:9d:44:90:e7:5f:ad:1f:a0:d3:a7:5d:22:
40:fd:b8:33:14:e5:08:6b:0a:1d:46:ee:68:89:ae:
83:e1:d6:89:c2:65:22:9a:54:4a:e7:58:c9:87:43:
ff:55:a8:17:2f:13:44:55:c7:df:1b:ff:aa:41:60:
55:70:75:24:1e:3e:8d:e6:88:eb:c7:1b:71:e3:4d:
56:de:a5:c7:43:2f:19:05:f6:80:14:3a:14:00:c5:
c4:b3:12:ce:cf:4c:8d:b8:e9:87:5e:71:36:64:02:
d7:7c:5f:d4:2e:88:46:2b:f3:26:d0:0d:87:2b:9e:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:14:D0:96:99:3D:49:7C:46:68:F1:AA:EB:F6:44:E1:E6:1A:68:63
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.243.126.0/23
103.38.214.0/23
116.93.0.0/23
116.93.4.0-116.93.13.255
116.93.15.0-116.93.52.255
116.93.54.0/23
116.93.61.0-116.93.67.255
116.93.71.0/24
116.93.74.0/23
116.93.78.0-116.93.81.255
116.93.85.0/24
116.93.87.0-116.93.88.255
116.93.90.0/23
116.93.93.0-116.93.94.255
116.93.96.0-116.93.98.255
116.93.100.0/24
116.93.102.0/24
116.93.105.0-116.93.112.255
116.93.114.0/23
116.93.117.0-116.93.122.255
116.93.124.0/24
116.93.126.0/23
121.127.0.0/23
121.127.6.0-121.127.18.255
121.127.20.0/22
121.127.26.0-121.127.31.255
203.99.232.0/21
203.208.24.0/21
IPv6:
2401:9800::/32
Signature Algorithm: sha256WithRSAEncryption
27:aa:0d:2b:28:75:24:87:56:c3:1d:0a:97:2d:c0:a2:01:b8:
d7:a5:d7:5c:9d:b7:22:c6:3b:e0:b0:79:e5:36:b9:96:78:e9:
9a:ef:d8:4c:a8:c5:3f:3e:ea:0e:ac:59:9e:20:9d:77:ee:6d:
93:b4:45:2d:1e:61:43:ec:9a:07:cb:3b:19:33:0a:b3:96:96:
55:2c:d8:f9:2e:f5:46:d7:82:a4:83:b9:96:a5:6c:83:58:76:
f3:00:e1:96:86:3d:7e:2b:10:13:c1:5a:6b:34:0a:b8:b4:3a:
35:a8:9b:b6:25:3c:9b:24:7a:64:25:f6:28:1f:3c:ef:78:ff:
44:09:4e:86:a2:23:41:c8:b1:b5:6c:9d:7f:44:3c:ea:99:b8:
63:6a:44:60:6c:96:c2:a9:70:1d:ba:43:c2:bf:64:9e:ef:71:
15:e8:2f:6d:12:e6:f2:26:cc:b4:b7:9e:c1:38:12:6a:f6:2c:
66:4b:02:94:f2:d5:36:b2:2e:38:26:95:03:93:1e:b2:bf:3d:
9f:8c:3a:11:c4:1e:2f:a0:71:b1:5e:4c:44:d1:d4:f7:96:88:
3a:72:ff:d7:b3:ec:e9:b5:2f:45:ec:76:c9:3a:ca:b4:01:42:
fd:5f:56:d7:18:f5:7a:1b:98:44:99:18:bd:6a:1f:10:ef:74:
57:2e:63:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:14 2026 by rpki-client