Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/2F20ECAE554211EF82D40732C4F9AE02.roa
File: 2F20ECAE554211EF82D40732C4F9AE02.roa (raw, json)
Hash identifier: r+ewS8jRefW6/Fs2vkW+LCfFdXLDWM6NtEIDinEYIFQ=
Subject key identifier: 52:77:90:89:A9:19:E8:F0:F8:E0:2C:7E:CB:FF:5A:25:6C:64:F9:05
Certificate issuer: /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial: 35AE
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/2F20ECAE554211EF82D40732C4F9AE02.roa
Signing time: Thu 30 Oct 2025 15:31:27 +0000
ROA not before: Thu 30 Oct 2025 15:31:27 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55824
IP address blocks: 14.139.0.0/16 maxlen: 16
14.139.0.0/19 maxlen: 19
14.139.0.0/23 maxlen: 23
14.139.3.0/24 maxlen: 24
14.139.4.0/24 maxlen: 24
14.139.5.0/24 maxlen: 24
14.139.6.0/23 maxlen: 23
14.139.8.0/24 maxlen: 24
14.139.9.0/24 maxlen: 24
14.139.10.0/24 maxlen: 24
14.139.11.0/24 maxlen: 24
14.139.12.0/24 maxlen: 24
14.139.13.0/24 maxlen: 24
14.139.14.0/24 maxlen: 24
14.139.16.0/20 maxlen: 20
14.139.32.0/19 maxlen: 19
14.139.32.0/24 maxlen: 24
14.139.33.0/24 maxlen: 24
14.139.34.0/24 maxlen: 24
14.139.35.0/24 maxlen: 24
14.139.36.0/24 maxlen: 24
14.139.37.0/24 maxlen: 24
14.139.38.0/24 maxlen: 24
14.139.39.0/24 maxlen: 24
14.139.40.0/21 maxlen: 24
14.139.48.0/20 maxlen: 24
14.139.64.0/18 maxlen: 24
14.139.128.0/19 maxlen: 19
14.139.128.0/20 maxlen: 24
14.139.144.0/21 maxlen: 24
14.139.152.0/22 maxlen: 22
14.139.156.0/23 maxlen: 23
14.139.158.0/24 maxlen: 24
14.139.159.0/24 maxlen: 24
14.139.160.0/19 maxlen: 19
14.139.160.0/24 maxlen: 24
14.139.161.0/24 maxlen: 24
14.139.162.0/24 maxlen: 24
14.139.163.0/24 maxlen: 24
14.139.164.0/22 maxlen: 22
14.139.168.0/21 maxlen: 21
14.139.176.0/21 maxlen: 21
14.139.184.0/24 maxlen: 24
14.139.185.0/24 maxlen: 24
14.139.186.0/24 maxlen: 24
14.139.187.0/24 maxlen: 24
14.139.188.0/22 maxlen: 22
14.139.192.0/19 maxlen: 19
14.139.192.0/20 maxlen: 20
14.139.192.0/24 maxlen: 24
14.139.193.0/24 maxlen: 24
14.139.194.0/24 maxlen: 24
14.139.195.0/24 maxlen: 24
14.139.196.0/23 maxlen: 23
14.139.198.0/24 maxlen: 24
14.139.199.0/24 maxlen: 24
14.139.200.0/21 maxlen: 24
14.139.208.0/20 maxlen: 20
14.139.208.0/21 maxlen: 21
14.139.208.0/23 maxlen: 23
14.139.208.0/24 maxlen: 24
14.139.210.0/24 maxlen: 24
14.139.211.0/24 maxlen: 24
14.139.212.0/23 maxlen: 23
14.139.212.0/24 maxlen: 24
14.139.213.0/24 maxlen: 24
14.139.214.0/23 maxlen: 23
14.139.216.0/21 maxlen: 21
14.139.216.0/24 maxlen: 24
14.139.217.0/24 maxlen: 24
14.139.218.0/23 maxlen: 23
14.139.220.0/24 maxlen: 24
14.139.221.0/24 maxlen: 24
14.139.222.0/24 maxlen: 24
14.139.223.0/24 maxlen: 24
14.139.224.0/19 maxlen: 19
14.139.224.0/24 maxlen: 24
14.139.225.0/24 maxlen: 24
14.139.226.0/24 maxlen: 24
14.139.227.0/24 maxlen: 24
14.139.228.0/24 maxlen: 24
14.139.229.0/24 maxlen: 24
14.139.230.0/24 maxlen: 24
14.139.231.0/24 maxlen: 24
14.139.232.0/24 maxlen: 24
14.139.233.0/24 maxlen: 24
14.139.234.0/24 maxlen: 24
14.139.235.0/24 maxlen: 24
14.139.236.0/24 maxlen: 24
14.139.237.0/24 maxlen: 24
14.139.238.0/24 maxlen: 24
14.139.239.0/24 maxlen: 24
14.139.240.0/24 maxlen: 24
14.139.241.0/24 maxlen: 24
14.139.242.0/24 maxlen: 24
14.139.243.0/24 maxlen: 24
14.139.244.0/24 maxlen: 24
14.139.245.0/24 maxlen: 24
14.139.246.0/23 maxlen: 24
14.139.248.0/24 maxlen: 24
14.139.249.0/24 maxlen: 24
14.139.250.0/24 maxlen: 24
14.139.251.0/24 maxlen: 24
14.139.252.0/23 maxlen: 23
14.139.253.0/24 maxlen: 24
14.139.254.0/24 maxlen: 24
14.139.255.0/24 maxlen: 24
180.149.48.0/20 maxlen: 20
180.149.48.0/24 maxlen: 24
180.149.49.0/24 maxlen: 24
180.149.51.0/24 maxlen: 24
180.149.52.0/24 maxlen: 24
180.149.54.0/24 maxlen: 24
180.149.55.0/24 maxlen: 24
180.149.56.0/24 maxlen: 24
180.149.59.0/24 maxlen: 24
180.149.60.0/24 maxlen: 24
180.149.61.0/24 maxlen: 24
180.149.62.0/24 maxlen: 24
180.149.63.0/24 maxlen: 24
2405:8a00::/32 maxlen: 32
2405:8a00:a::/48 maxlen: 48
2405:8a00:14::/48 maxlen: 48
2405:8a00:15::/48 maxlen: 48
2405:8a00:1a::/48 maxlen: 48
2405:8a00:aa::/48 maxlen: 48
2405:8a00:bb::/48 maxlen: 48
2405:8a00:2002::/48 maxlen: 48
2405:8a00:200a::/48 maxlen: 48
2405:8a00:2021::/48 maxlen: 48
2405:8a00:2039::/48 maxlen: 48
2405:8a00:2063::/48 maxlen: 48
2405:8a00:2072::/48 maxlen: 48
2405:8a00:2077::/48 maxlen: 48
2405:8a00:2078::/48 maxlen: 48
2405:8a00:2090::/48 maxlen: 48
2405:8a00:20c3::/48 maxlen: 48
2405:8a00:20d9::/48 maxlen: 48
2405:8a00:20da::/48 maxlen: 48
2405:8a00:20db::/48 maxlen: 48
2405:8a00:20dc::/48 maxlen: 48
2405:8a00:20dd::/48 maxlen: 48
2405:8a00:20de::/48 maxlen: 48
2405:8a00:20df::/48 maxlen: 48
2405:8a00:20e0::/48 maxlen: 48
2405:8a00:20e1::/48 maxlen: 48
2405:8a00:20e2::/48 maxlen: 48
2405:8a00:20e3::/48 maxlen: 48
2405:8a00:20e5::/48 maxlen: 48
2405:8a00:20e6::/48 maxlen: 48
2405:8a00:20e7::/48 maxlen: 48
2405:8a00:20e8::/48 maxlen: 48
2405:8a00:20f3::/48 maxlen: 48
2405:8a00:210c::/48 maxlen: 48
2405:8a00:2110::/48 maxlen: 48
2405:8a00:217e::/48 maxlen: 48
2405:8a00:21a5::/48 maxlen: 48
2405:8a00:21b1::/48 maxlen: 48
2405:8a00:21b3::/48 maxlen: 48
2405:8a00:21b4::/48 maxlen: 48
2405:8a00:21b5::/48 maxlen: 48
2405:8a00:21bd::/48 maxlen: 48
2405:8a00:4001::/48 maxlen: 48
2405:8a00:400d::/48 maxlen: 48
2405:8a00:4014::/48 maxlen: 48
2405:8a00:401d::/48 maxlen: 48
2405:8a00:401e::/48 maxlen: 48
2405:8a00:401f::/48 maxlen: 48
2405:8a00:4020::/48 maxlen: 48
2405:8a00:4021::/48 maxlen: 48
2405:8a00:6013::/48 maxlen: 48
2405:8a00:6016::/48 maxlen: 48
2405:8a00:601c::/48 maxlen: 48
2405:8a00:602e::/48 maxlen: 48
2405:8a00:602f::/48 maxlen: 48
2405:8a00:6035::/48 maxlen: 48
2405:8a00:6036::/48 maxlen: 48
2405:8a00:6037::/48 maxlen: 48
2405:8a00:6038::/48 maxlen: 48
2405:8a00:6039::/48 maxlen: 48
2405:8a00:603a::/48 maxlen: 48
2405:8a00:8001::/48 maxlen: 48
2405:8a00:8016::/48 maxlen: 48
2405:8a00:801b::/48 maxlen: 48
2405:8a00:801c::/48 maxlen: 48
2405:8a00:801f::/48 maxlen: 48
2405:8a00:8020::/48 maxlen: 48
2405:8a00:8021::/48 maxlen: 48
2405:8a00:8022::/48 maxlen: 48
2405:8a00:8024::/48 maxlen: 48
2405:8a00:8027::/48 maxlen: 48
2405:8a00:802f::/48 maxlen: 48
2405:8a00:8031::/48 maxlen: 48
2405:8a00:8032::/48 maxlen: 48
2405:8a00:8033::/48 maxlen: 48
2405:8a00:8035::/48 maxlen: 48
2405:8a00:8036::/48 maxlen: 48
2405:8a00:a001::/48 maxlen: 48
2405:8a00:a00d::/48 maxlen: 48
2405:8a00:a01b::/48 maxlen: 48
2405:8a00:a01d::/48 maxlen: 48
2405:8a00:a027::/48 maxlen: 48
2405:8a00:a031::/48 maxlen: 48
2405:8a00:a048::/48 maxlen: 48
2405:8a00:a04b::/48 maxlen: 48
2405:8a00:a04c::/48 maxlen: 48
2405:8a00:a052::/48 maxlen: 48
2405:8a00:a054::/48 maxlen: 48
2405:8a00:a056::/48 maxlen: 48
2405:8a00:c012::/48 maxlen: 48
2405:8a00:c01a::/48 maxlen: 48
2405:8a00:c01b::/48 maxlen: 48
2405:8a00:c01c::/48 maxlen: 48
2405:8a00:c01f::/48 maxlen: 48
2405:8a00:c020::/48 maxlen: 48
2405:8a00:c021::/48 maxlen: 48
2405:8a00:c022::/48 maxlen: 48
2405:8a00:c023::/48 maxlen: 48
2405:8a00:c024::/48 maxlen: 48
2405:8a00:c025::/48 maxlen: 48
2405:8a00:c026::/48 maxlen: 48
2405:8a00:c027::/48 maxlen: 48
2409::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 15:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13742 (0x35ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Validity
Not Before: Oct 30 15:31:27 2025 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=690384cf-c222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5b:ce:22:14:71:5e:78:57:8b:aa:20:17:37:
cd:ad:3a:da:70:6d:80:ab:36:62:1f:69:93:44:be:
3b:80:9c:40:7a:07:41:3d:a3:f9:7f:d6:4c:0d:96:
85:9c:9f:a6:45:42:a0:d9:f8:51:6c:a6:f7:99:af:
ad:da:57:2f:5d:ef:27:06:21:5d:a8:be:cf:ad:a7:
3f:a4:b0:1c:1d:c7:58:a8:36:9e:04:26:04:36:cb:
01:50:54:37:dd:f7:20:5d:1e:e8:1e:e3:84:4c:13:
2a:f1:a8:99:8c:92:52:92:8d:c4:6c:d4:f1:96:73:
9e:0d:c7:11:55:25:0b:37:47:73:fe:3e:a7:e5:5d:
e1:1e:ba:54:65:22:4b:73:8c:8d:b9:2b:72:c8:f3:
1b:df:29:bc:91:0a:89:99:30:19:27:ea:42:fd:69:
45:d2:b1:75:3a:ff:9a:12:ce:01:b3:1f:c1:f3:31:
3c:97:ef:3c:00:6b:b6:54:4d:3c:7d:a0:87:09:cd:
fe:10:54:9c:3f:49:22:32:5c:94:9c:65:65:1f:31:
00:ff:e9:2b:94:e4:c3:64:dd:63:7a:10:bd:c5:cf:
a3:ed:e1:09:22:5f:d8:c5:b8:d9:22:ec:58:4d:d8:
77:5c:c4:f2:65:1f:ac:b5:29:f0:30:ec:7e:15:50:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:77:90:89:A9:19:E8:F0:F8:E0:2C:7E:CB:FF:5A:25:6C:64:F9:05
X509v3 Authority Key Identifier:
keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/2F20ECAE554211EF82D40732C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.139.0.0/16
180.149.48.0/20
IPv6:
2405:8a00::/32
2409::/28
Signature Algorithm: sha256WithRSAEncryption
9a:fb:4c:95:91:4d:2b:8e:76:61:3c:98:b2:6c:53:09:a6:0b:
44:5a:c3:ec:d1:7a:b9:7e:38:2a:66:2c:ac:21:bd:56:ed:6f:
72:fb:af:f4:47:2f:ae:12:83:d4:22:20:81:09:ba:e2:fa:33:
aa:8f:5c:75:fa:d5:89:ce:ac:e2:98:86:9f:c9:0a:05:8d:c4:
c4:4c:72:89:7f:3c:74:54:c0:ea:61:0d:8a:27:50:a5:55:b6:
d5:2c:0a:85:db:c0:1b:ce:8d:cf:b0:1f:bb:c2:27:52:26:7e:
72:d1:1d:57:87:c2:0e:36:61:70:00:a3:93:8f:ff:6e:ee:9d:
6d:69:15:98:f5:52:cc:24:39:52:ae:69:c4:8a:ae:77:d1:1c:
94:5d:ef:0b:85:09:42:a3:39:c5:17:fe:f7:f3:0f:28:a6:cf:
46:64:70:4d:5e:fa:1c:07:c6:3a:b6:b6:0f:0e:b3:25:03:63:
6d:25:a9:37:10:29:75:47:d0:d2:5c:b6:f3:9f:b5:99:bc:7b:
55:11:b5:2a:ce:df:e7:fd:a8:c7:ff:e5:fb:a4:4c:c2:f2:f8:
16:f4:32:ad:74:ff:28:c2:fb:c6:1b:b2:a9:b1:b9:fc:cc:94:
fc:3c:c1:36:40:52:3f:ad:7d:52:2d:9d:54:44:4b:f7:3a:22:
51:3d:09:47
-----BEGIN CERTIFICATE-----
MIIFjDCCBHSgAwIBAgICNa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEJDN0ExMTAvBgNVBAUTKDUzMTJGMzk5QTZGN0VCMEREQ0Q1MUMwMzlGODNGN0I3
QTQ3QTVGMDkwHhcNMjUxMDMwMTUzMTI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTAzODRjZi1jMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApFvOIhRxXnhXi6ogFzfNrTracG2AqzZiH2mTRL47gJxAegdBPaP5f9ZMDZaF
nJ+mRUKg2fhRbKb3ma+t2lcvXe8nBiFdqL7Prac/pLAcHcdYqDaeBCYENssBUFQ3
3fcgXR7oHuOETBMq8aiZjJJSko3EbNTxlnOeDccRVSULN0dz/j6n5V3hHrpUZSJL
c4yNuStyyPMb3ym8kQqJmTAZJ+pC/WlF0rF1Ov+aEs4Bsx/B8zE8l+88AGu2VE08
faCHCc3+EFScP0kiMlyUnGVlHzEA/+krlOTDZN1jehC9xc+j7eEJIl/YxbjZIuxY
Tdh3XMTyZR+stSnwMOx+FVDJTwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFJ3kImp
Gejw+OAsfsv/WiVsZPkFMB8GA1UdIwQYMBaAFFMS85mm9+sN3NUcA5+D97ekel8J
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QkM3QS80QzUyOEY3ODQ1
MDMxMUUyQkRDQTFGNzMyOTc5QkIyMC9VeEx6bWFiMzZ3M2MxUndEbjRQM3Q2UjZY
d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V4THptYWIzNnczYzFSd0RuNFAzdDZSNlh3ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEJDN0EvNEM1MjhGNzg0NTAzMTFFMkJEQ0ExRjczMjk3OUJCMjAvMkYyMEVDQUU1
NTQyMTFFRjgyRDQwNzMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E
KzApMBEEAgABMAsDAwAOiwMEBLSVMDAUBAIAAjAOAwUAJAWKAAMFBCQJAAAwDQYJ
KoZIhvcNAQELBQADggEBAJr7TJWRTSuOdmE8mLJsUwmmC0Raw+zRerl+OCpmLKwh
vVbtb3L7r/RHL64Sg9QiIIEJuuL6M6qPXHX61YnOrOKYhp/JCgWNxMRMcol/PHRU
wOphDYonUKVVttUsCoXbwBvOjc+wH7vCJ1ImfnLRHVeHwg42YXAAo5OP/27unW1p
FZj1UswkOVKuacSKrnfRHJRd7wuFCUKjOcUX/vfzDyimz0ZkcE1e+hwHxjq2tg8O
syUDY20lqTcQKXVH0NJctvOftZm8e1URtSrO3+f9qMf/5fukTMLy+Bb0Mq10/yjC
+8YbsqmxufzMlPw8wTZAUj+tfVItnVRES/c6IlE9CUc=
-----END CERTIFICATE-----
Generated at Wed Nov 5 05:18:27 2025 by rpki-client