Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E4E0C13C5EBF11EAB066F050C4F9AE02.roa
File: E4E0C13C5EBF11EAB066F050C4F9AE02.roa (raw, json)
Hash identifier: vkLlTr6BLH0DqeB3KovJ07wJTeMUqoA+dzkLY1yV5v0=
Subject key identifier: 54:CF:7A:D3:D7:2C:33:41:75:36:AF:2D:5E:55:26:86:0D:9B:DF:57
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 2978
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E4E0C13C5EBF11EAB066F050C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:25:20 +0000
ROA not before: Tue 21 Oct 2025 09:34:13 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 7629
IP address blocks: 45.118.36.0/22 maxlen: 22
103.1.116.0/22 maxlen: 22
103.1.116.0/23 maxlen: 23
103.1.118.0/23 maxlen: 23
103.233.32.0/22 maxlen: 22
103.233.32.0/23 maxlen: 23
103.233.34.0/23 maxlen: 23
125.5.0.0/16 maxlen: 16
125.5.0.0/18 maxlen: 18
125.5.0.0/20 maxlen: 20
125.5.0.0/21 maxlen: 21
125.5.0.0/22 maxlen: 22
125.5.0.0/23 maxlen: 23
125.5.2.0/23 maxlen: 23
125.5.2.0/24 maxlen: 24
125.5.3.0/24 maxlen: 24
125.5.4.0/23 maxlen: 23
125.5.5.0/24 maxlen: 24
125.5.8.0/21 maxlen: 21
125.5.8.0/22 maxlen: 22
125.5.12.0/24 maxlen: 24
125.5.14.0/23 maxlen: 23
125.5.16.0/20 maxlen: 20
125.5.16.0/21 maxlen: 21
125.5.18.0/24 maxlen: 24
125.5.21.0/24 maxlen: 24
125.5.22.0/23 maxlen: 23
125.5.22.0/24 maxlen: 24
125.5.23.0/24 maxlen: 24
125.5.24.0/21 maxlen: 21
125.5.24.0/23 maxlen: 23
125.5.24.0/24 maxlen: 24
125.5.26.0/23 maxlen: 23
125.5.27.0/24 maxlen: 24
125.5.28.0/22 maxlen: 22
125.5.32.0/19 maxlen: 19
125.5.32.0/20 maxlen: 20
125.5.32.0/21 maxlen: 21
125.5.40.0/21 maxlen: 21
125.5.48.0/20 maxlen: 20
125.5.48.0/21 maxlen: 21
125.5.56.0/21 maxlen: 21
125.5.64.0/18 maxlen: 18
125.5.64.0/19 maxlen: 19
125.5.64.0/20 maxlen: 20
125.5.64.0/21 maxlen: 21
125.5.72.0/21 maxlen: 21
125.5.80.0/20 maxlen: 20
125.5.80.0/21 maxlen: 21
125.5.82.0/24 maxlen: 24
125.5.87.0/24 maxlen: 24
125.5.88.0/21 maxlen: 21
125.5.88.0/23 maxlen: 23
125.5.96.0/19 maxlen: 19
125.5.96.0/20 maxlen: 20
125.5.96.0/21 maxlen: 21
125.5.104.0/21 maxlen: 21
125.5.112.0/20 maxlen: 20
125.5.112.0/21 maxlen: 21
125.5.120.0/21 maxlen: 21
125.5.128.0/17 maxlen: 17
125.5.128.0/19 maxlen: 19
125.5.128.0/20 maxlen: 20
125.5.128.0/21 maxlen: 21
125.5.132.0/22 maxlen: 22
125.5.136.0/21 maxlen: 21
125.5.144.0/20 maxlen: 20
125.5.144.0/21 maxlen: 21
125.5.152.0/21 maxlen: 21
125.5.152.0/23 maxlen: 23
125.5.154.0/23 maxlen: 23
125.5.154.0/24 maxlen: 24
125.5.160.0/20 maxlen: 20
125.5.160.0/21 maxlen: 21
125.5.168.0/21 maxlen: 21
125.5.173.0/24 maxlen: 24
125.5.174.0/23 maxlen: 23
125.5.176.0/20 maxlen: 20
125.5.176.0/21 maxlen: 21
125.5.177.0/24 maxlen: 24
125.5.178.0/23 maxlen: 23
125.5.180.0/22 maxlen: 22
125.5.184.0/21 maxlen: 21
125.5.192.0/19 maxlen: 19
125.5.192.0/20 maxlen: 20
125.5.192.0/21 maxlen: 21
125.5.195.0/24 maxlen: 24
125.5.200.0/21 maxlen: 21
125.5.200.0/23 maxlen: 23
125.5.201.0/24 maxlen: 24
125.5.204.0/22 maxlen: 22
125.5.208.0/20 maxlen: 20
125.5.208.0/21 maxlen: 21
125.5.209.0/24 maxlen: 24
125.5.210.0/24 maxlen: 24
125.5.211.0/24 maxlen: 24
125.5.212.0/24 maxlen: 24
125.5.213.0/24 maxlen: 24
125.5.216.0/21 maxlen: 21
125.5.224.0/19 maxlen: 19
125.5.224.0/20 maxlen: 20
125.5.224.0/21 maxlen: 21
125.5.224.0/24 maxlen: 24
125.5.232.0/21 maxlen: 21
125.5.240.0/20 maxlen: 20
125.5.240.0/21 maxlen: 21
125.5.240.0/23 maxlen: 23
125.5.244.0/24 maxlen: 24
125.5.248.0/21 maxlen: 21
125.5.251.0/24 maxlen: 24
125.5.252.0/22 maxlen: 22
202.57.64.0/18 maxlen: 18
202.57.64.0/19 maxlen: 19
202.57.64.0/20 maxlen: 20
202.57.64.0/21 maxlen: 21
202.57.72.0/21 maxlen: 21
202.57.80.0/20 maxlen: 20
202.57.80.0/21 maxlen: 21
202.57.88.0/21 maxlen: 21
202.57.96.0/19 maxlen: 19
202.57.96.0/21 maxlen: 21
202.57.96.0/24 maxlen: 24
202.57.102.0/23 maxlen: 23
202.57.104.0/21 maxlen: 21
202.57.104.0/22 maxlen: 22
202.57.108.0/23 maxlen: 23
202.57.111.0/24 maxlen: 24
202.57.112.0/21 maxlen: 21
202.57.114.0/23 maxlen: 23
202.57.116.0/22 maxlen: 22
202.57.119.0/24 maxlen: 24
202.57.120.0/21 maxlen: 21
202.57.120.0/22 maxlen: 22
202.57.124.0/23 maxlen: 23
202.57.127.0/24 maxlen: 24
202.163.192.0/18 maxlen: 18
202.163.192.0/21 maxlen: 21
202.163.200.0/21 maxlen: 21
202.163.200.0/22 maxlen: 22
202.163.204.0/22 maxlen: 22
202.163.208.0/21 maxlen: 21
202.163.216.0/21 maxlen: 21
202.163.216.0/22 maxlen: 22
202.163.220.0/22 maxlen: 22
202.163.224.0/21 maxlen: 21
202.163.232.0/21 maxlen: 21
202.163.240.0/21 maxlen: 21
202.163.248.0/21 maxlen: 21
203.131.64.0/18 maxlen: 18
203.131.64.0/19 maxlen: 19
203.131.64.0/20 maxlen: 20
203.131.64.0/21 maxlen: 21
203.131.72.0/21 maxlen: 21
203.131.80.0/20 maxlen: 20
203.131.96.0/19 maxlen: 19
203.131.96.0/20 maxlen: 20
203.131.112.0/20 maxlen: 20
203.131.128.0/18 maxlen: 18
203.131.128.0/19 maxlen: 19
203.131.128.0/20 maxlen: 20
203.131.144.0/20 maxlen: 20
203.131.160.0/19 maxlen: 19
203.131.160.0/20 maxlen: 20
203.131.176.0/20 maxlen: 20
203.172.0.0/19 maxlen: 19
203.172.0.0/20 maxlen: 20
203.172.0.0/21 maxlen: 21
203.172.8.0/21 maxlen: 21
203.172.16.0/20 maxlen: 20
203.172.16.0/21 maxlen: 21
203.172.24.0/21 maxlen: 21
222.126.0.0/17 maxlen: 17
222.126.0.0/18 maxlen: 18
222.126.0.0/20 maxlen: 20
222.126.16.0/20 maxlen: 20
222.126.32.0/20 maxlen: 20
222.126.48.0/20 maxlen: 20
222.126.64.0/20 maxlen: 20
222.126.80.0/20 maxlen: 20
222.126.96.0/20 maxlen: 20
222.126.97.0/24 maxlen: 24
222.126.98.0/23 maxlen: 23
222.126.100.0/22 maxlen: 22
222.126.104.0/21 maxlen: 21
222.126.112.0/20 maxlen: 20
2404:d8::/33 maxlen: 33
2404:d8::/36 maxlen: 36
2404:d8:8000::/34 maxlen: 34
2404:d8:9000::/36 maxlen: 36
2404:d8:a000::/36 maxlen: 36
2404:d8:a001::/48 maxlen: 48
2404:d8:c000::/36 maxlen: 36
2404:d8:d000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:11:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10616 (0x2978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Validity
Not Before: Oct 21 09:34:13 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=69a492a0-60c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f3:3d:22:b2:61:a6:ba:f6:04:36:81:cc:ea:
31:3a:39:23:24:45:59:bc:97:9a:01:6d:58:ca:a2:
c1:75:9b:2d:04:dd:8f:35:d2:f3:4c:ed:55:62:af:
be:c9:16:ca:7c:22:b2:39:c5:8c:c7:35:42:bd:f7:
95:22:66:04:c1:45:b6:2a:77:1d:b1:2f:d4:97:6f:
a7:f6:3d:16:57:dd:00:8c:4d:c9:c3:4d:fb:32:0f:
50:1a:f1:62:53:5f:f9:38:7c:c4:a7:8a:fe:4a:c4:
0b:38:10:ca:68:14:7e:11:12:24:57:41:81:05:4a:
a5:a6:3c:f8:64:c8:b8:44:c8:48:95:d1:e2:05:29:
53:92:d9:68:98:4f:b4:1f:04:32:2a:52:44:b6:ce:
aa:af:3f:d7:c0:45:98:48:89:19:ef:e9:03:6c:58:
68:65:3a:e4:84:a1:2c:d7:11:24:33:b5:26:1a:f6:
4e:fb:a0:5c:59:f6:24:e6:bb:4e:fe:d8:be:db:9a:
aa:b2:68:55:f1:63:14:18:ac:64:71:c4:81:22:14:
54:dd:70:43:df:da:eb:de:20:c0:87:10:08:f5:03:
c8:44:3d:ba:61:b1:bf:71:d3:15:a5:37:cf:b0:d8:
d2:a9:64:11:16:b5:27:88:56:d5:f2:08:8b:2d:72:
50:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:CF:7A:D3:D7:2C:33:41:75:36:AF:2D:5E:55:26:86:0D:9B:DF:57
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E4E0C13C5EBF11EAB066F050C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.118.36.0/22
103.1.116.0/22
103.233.32.0/22
125.5.0.0/16
202.57.64.0/18
202.163.192.0/18
203.131.64.0-203.131.191.255
203.172.0.0/19
222.126.0.0/17
IPv6:
2404:d8::-2404:d8:dfff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
22:08:7c:80:10:f0:ca:45:b2:71:bb:d8:60:5c:b0:69:43:39:
d6:9a:ba:79:55:69:90:bf:4c:7c:f9:a5:71:de:40:1c:83:54:
e0:d3:f0:36:8a:ce:85:a5:6d:79:cc:4f:34:8c:89:a0:2c:84:
3f:51:3c:f7:9a:9c:f5:59:bb:11:28:25:8d:5b:77:be:4a:e7:
0b:0f:9b:97:d7:00:17:49:11:c2:bd:8b:eb:d9:6d:ee:8c:b0:
01:c5:a3:c2:dd:55:72:7c:a8:b5:a2:60:58:99:54:27:7a:4c:
b5:a2:a8:c0:52:1e:29:1e:7c:43:79:81:18:9c:8b:1b:f0:cf:
a5:12:ab:24:28:16:73:ab:9a:16:1d:ab:e3:35:b0:ef:7b:ef:
80:bd:ad:f3:d5:14:01:4c:d4:e0:91:76:b6:df:87:25:e2:15:
c1:03:5d:52:70:a8:d7:d4:e2:d4:aa:2f:0c:ea:2e:9f:9d:bf:
36:9e:cd:32:8c:89:6f:c8:9f:04:7a:39:b6:62:22:2f:c1:f9:
ec:e1:eb:1a:13:ff:cd:e9:64:68:a0:ac:96:64:6b:74:c2:d6:
68:35:97:30:1f:cb:bd:9d:b3:9c:54:af:42:95:71:b0:ee:93:
93:c3:f5:0b:4c:16:0e:38:1e:86:69:1e:d4:99:77:59:58:f6:
d3:5d:44:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:10 2026 by rpki-client