Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
File: 4DEF33661FBE11EF97E7974FC4F9AE02.roa (raw, json)
Hash identifier: n4Uw0jqs5ZcyjoPEC6zZrVjuP+W+SprZyYk5yGCTMb8=
Subject key identifier: 41:A0:4C:33:F5:D8:44:76:21:86:AD:24:7A:99:96:1F:97:79:B2:69
Certificate issuer: /CN=A9148D01/serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Certificate serial: 0761
Authority key identifier: 7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:56:54 +0000
ROA not before: Sat 14 Feb 2026 09:18:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17762
IP address blocks: 49.248.0.0/17 maxlen: 21
49.248.0.0/18 maxlen: 24
49.248.64.0/19 maxlen: 24
49.248.96.0/22 maxlen: 22
49.248.96.0/23 maxlen: 24
49.248.104.0/21 maxlen: 24
49.248.112.0/20 maxlen: 23
49.248.112.0/21 maxlen: 24
49.248.120.0/22 maxlen: 24
49.248.124.0/23 maxlen: 24
49.248.126.0/24 maxlen: 24
49.248.128.0/18 maxlen: 18
49.248.128.0/21 maxlen: 23
49.248.129.0/24 maxlen: 24
49.248.135.0/24 maxlen: 24
49.248.136.0/21 maxlen: 23
49.248.136.0/24 maxlen: 24
49.248.138.0/23 maxlen: 24
49.248.140.0/22 maxlen: 24
49.248.144.0/22 maxlen: 24
49.248.148.0/23 maxlen: 24
49.248.151.0/24 maxlen: 24
49.248.152.0/21 maxlen: 24
49.248.160.0/19 maxlen: 24
49.248.192.0/19 maxlen: 24
49.248.246.0/23 maxlen: 24
49.248.248.0/21 maxlen: 24
103.3.40.0/24 maxlen: 24
103.3.41.0/24 maxlen: 24
103.3.43.0/24 maxlen: 24
103.8.148.0/22 maxlen: 24
114.143.0.0/16 maxlen: 24
123.252.128.0/18 maxlen: 21
123.252.128.0/22 maxlen: 22
123.252.128.0/23 maxlen: 24
123.252.131.0/24 maxlen: 24
123.252.133.0/24 maxlen: 24
123.252.134.0/23 maxlen: 24
123.252.136.0/21 maxlen: 22
123.252.136.0/23 maxlen: 24
123.252.138.0/24 maxlen: 24
123.252.140.0/22 maxlen: 24
123.252.144.0/20 maxlen: 24
123.252.160.0/19 maxlen: 24
123.252.192.0/18 maxlen: 24
202.149.192.0/19 maxlen: 19
202.149.192.0/22 maxlen: 22
202.149.192.0/24 maxlen: 24
202.149.193.0/24 maxlen: 24
202.149.196.0/24 maxlen: 24
202.149.198.0/24 maxlen: 24
202.149.199.0/24 maxlen: 24
202.149.201.0/24 maxlen: 24
202.149.202.0/24 maxlen: 24
202.149.203.0/24 maxlen: 24
202.149.204.0/22 maxlen: 22
202.149.204.0/23 maxlen: 23
202.149.207.0/24 maxlen: 24
202.149.210.0/24 maxlen: 24
202.149.212.0/22 maxlen: 22
202.149.214.0/24 maxlen: 24
202.149.217.0/24 maxlen: 24
202.149.218.0/24 maxlen: 24
202.149.219.0/24 maxlen: 24
202.149.220.0/22 maxlen: 22
202.149.222.0/23 maxlen: 23
202.149.222.0/24 maxlen: 24
202.149.223.0/24 maxlen: 24
202.189.224.0/19 maxlen: 24
2402:d400::/32 maxlen: 32
2402:d400::/44 maxlen: 48
2402:d400:40::/48 maxlen: 48
2402:d400:41::/48 maxlen: 48
2402:d400:3e2::/48 maxlen: 48
2402:d400:3e3::/48 maxlen: 48
2402:d400:3e4::/48 maxlen: 48
2402:d400:3e5::/48 maxlen: 48
2402:d400:3e6::/48 maxlen: 48
2402:d400:fa00::/44 maxlen: 48
2402:d400:fa10::/44 maxlen: 48
2402:d400:fa20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:39:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1889 (0x761)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D01, serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Validity
Not Before: Feb 14 09:18:17 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a453b6-3e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:8f:93:f2:47:7c:de:27:8b:38:d4:7e:a3:
e9:d6:a2:b4:33:2b:80:02:9a:60:b4:e3:f6:ed:d0:
92:a7:a2:b2:75:f1:33:7c:f6:e3:18:ad:17:f6:93:
ff:16:2d:0a:6b:60:27:53:2f:11:21:e2:05:44:32:
0a:33:80:7c:b0:e2:08:0b:91:3a:14:03:38:66:27:
0b:d6:68:c4:92:7d:1e:bf:b3:a2:ec:3f:80:f5:05:
a6:b3:06:17:88:09:4a:6f:f7:00:11:86:15:a7:a4:
56:d7:a5:48:9c:13:0b:2e:a0:2d:0f:6c:4f:c4:19:
91:0b:14:eb:68:32:07:75:32:2e:06:d8:bc:c8:5b:
9e:ad:50:03:c2:16:1a:e4:66:8d:76:40:22:20:51:
2b:89:fe:d7:b9:47:34:79:fc:24:c2:fe:23:60:9f:
f4:7c:b9:7d:0c:4a:09:10:de:9c:c7:99:8f:17:e1:
4d:f9:9a:d8:56:a1:e8:84:0f:a0:f9:fc:52:fd:bd:
c6:59:46:d9:ca:9a:be:6a:12:78:c4:76:55:86:c8:
c4:f0:aa:5b:51:b6:ee:1d:22:6f:84:4e:af:65:a5:
f3:54:43:dc:f8:5f:e5:64:49:96:3a:a0:73:f7:d9:
ab:21:b1:db:b3:34:1e:3e:d2:ea:08:31:5f:40:c5:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A0:4C:33:F5:D8:44:76:21:86:AD:24:7A:99:96:1F:97:79:B2:69
X509v3 Authority Key Identifier:
keyid:7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.248.0.0-49.248.223.255
49.248.246.0-49.248.255.255
103.3.40.0/23
103.3.43.0/24
103.8.148.0/22
114.143.0.0/16
123.252.128.0/17
202.149.192.0/19
202.189.224.0/19
IPv6:
2402:d400::/32
Signature Algorithm: sha256WithRSAEncryption
6d:ab:5c:ff:fc:b9:cc:bd:54:bc:ca:61:68:37:c2:90:db:00:
b7:a3:46:9d:96:b0:c1:b5:80:13:f5:b2:58:e0:9d:18:4d:52:
c9:35:b6:5f:da:5f:67:0e:be:cc:3e:22:fb:19:90:d3:ee:1b:
bb:de:84:00:c6:60:3f:bf:db:8c:eb:21:0c:f4:64:d8:a8:60:
77:0e:70:b8:b2:3c:00:ee:34:2f:9b:62:d9:28:70:a0:58:f7:
b2:17:22:d6:b4:85:b5:61:5c:68:58:dc:18:b1:bb:45:ca:aa:
50:b3:72:7e:ce:35:df:a8:c3:5d:b3:46:0b:84:7f:2a:4f:26:
40:2d:be:f0:18:8f:f0:02:13:d9:e0:9d:a0:2c:b1:e5:18:8d:
2e:00:7f:c0:7a:89:a3:cb:96:9f:a8:00:8c:24:f9:89:a5:79:
05:84:3b:38:e4:1c:ce:63:1d:9f:95:72:c3:b5:99:83:4b:bd:
04:54:c1:26:f3:68:ce:6e:a3:43:f8:8a:ab:66:90:e4:46:b7:
a7:b2:e6:3e:39:28:56:42:99:c5:a5:64:64:51:e0:7f:77:de:
f4:7d:e4:26:79:0a:27:57:ad:f2:07:0c:05:20:71:73:fe:cd:
39:5a:b9:b9:35:9a:ef:1e:59:1e:5b:e9:e7:e2:d9:72:7c:10:
51:44:7a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:33:22 2026 by rpki-client