Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/20AF7940433811EFA525DA49C4F9AE02.roa
File: 20AF7940433811EFA525DA49C4F9AE02.roa (raw, json)
Hash identifier: 3jwm3MhqEfHhfN91jF6LuuUMLkdpp4+mtNlcLdp031I=
Subject key identifier: 61:0E:56:FA:18:E2:EA:C7:89:EA:B4:88:C4:6A:95:26:D9:31:B2:07
Certificate issuer: /CN=A915E475/serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Certificate serial: 0AFC
Authority key identifier: 74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/20AF7940433811EFA525DA49C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:36:08 +0000
ROA not before: Sat 08 Nov 2025 19:40:23 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 24093
IP address blocks: 125.63.12.0/24 maxlen: 24
125.63.15.0/24 maxlen: 24
125.63.19.0/24 maxlen: 24
125.253.0.0/18 maxlen: 18
125.253.8.0/24 maxlen: 24
125.253.11.0/24 maxlen: 24
125.253.16.0/24 maxlen: 24
125.253.25.0/24 maxlen: 24
125.253.28.0/23 maxlen: 23
125.253.28.0/24 maxlen: 24
125.253.32.0/24 maxlen: 24
125.253.33.0/24 maxlen: 24
125.253.34.0/24 maxlen: 24
125.253.35.0/24 maxlen: 24
125.253.41.0/24 maxlen: 24
125.253.44.0/24 maxlen: 24
125.253.45.0/24 maxlen: 24
125.253.46.0/24 maxlen: 24
125.253.47.0/24 maxlen: 24
125.253.48.0/24 maxlen: 24
125.253.50.0/23 maxlen: 23
125.253.50.0/24 maxlen: 24
125.253.51.0/24 maxlen: 24
125.253.60.0/24 maxlen: 24
125.253.61.0/24 maxlen: 24
125.253.96.0/20 maxlen: 20
125.253.97.0/24 maxlen: 24
125.253.98.0/24 maxlen: 24
125.253.99.0/24 maxlen: 24
125.253.101.0/24 maxlen: 24
125.253.102.0/24 maxlen: 24
125.253.103.0/24 maxlen: 24
125.253.106.0/24 maxlen: 24
125.253.107.0/24 maxlen: 24
125.253.109.0/24 maxlen: 24
125.253.110.0/24 maxlen: 24
202.171.160.0/19 maxlen: 19
202.171.160.0/24 maxlen: 24
202.171.164.0/24 maxlen: 24
202.171.165.0/24 maxlen: 24
202.171.169.0/24 maxlen: 24
202.171.170.0/24 maxlen: 24
202.171.175.0/24 maxlen: 24
202.171.177.0/24 maxlen: 24
202.171.178.0/24 maxlen: 24
202.171.179.0/24 maxlen: 24
202.171.184.0/23 maxlen: 23
202.171.186.0/23 maxlen: 23
202.171.189.0/24 maxlen: 24
202.171.190.0/24 maxlen: 24
202.171.191.0/24 maxlen: 24
203.25.102.0/24 maxlen: 24
223.27.66.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2812 (0xafc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915E475, serialNumber=745FF4F063AB5D171E05251B31E294A4BC7973B1
Validity
Not Before: Nov 8 19:40:23 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a48718-f0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:7d:3d:98:9e:13:ff:c4:07:a5:c6:d5:48:
0f:e7:4d:e0:80:43:d9:96:ba:c1:43:f8:39:6e:80:
6d:32:9a:22:e9:1f:21:e9:8f:15:d5:14:08:00:50:
82:cc:9b:35:22:75:79:87:a1:5e:b4:2c:33:2c:a9:
51:c0:35:95:3c:7a:9f:25:1b:67:ca:1c:8c:8f:68:
c0:82:1e:21:9f:91:04:5b:fb:df:07:52:5a:d3:5e:
ff:4c:3d:b3:d4:66:32:a7:95:85:d0:5b:24:9c:67:
24:e0:f7:47:1e:40:8c:1d:05:16:7c:09:df:22:42:
c7:5e:52:c8:53:c1:0b:1d:49:47:a7:ae:63:f8:d4:
b1:99:1d:ee:c6:c9:36:3d:af:be:f6:cc:13:b6:9f:
9f:af:4a:ac:f8:a1:11:85:8e:1f:ae:03:fb:f6:3f:
a0:5b:de:95:29:d7:8e:cb:1c:90:61:c1:e0:5a:38:
d2:3c:5b:4d:21:f2:0c:40:49:eb:fc:a0:46:fc:84:
26:40:bd:57:1f:ec:46:de:00:12:f3:29:b8:ef:be:
6c:b6:45:b6:4f:85:b8:93:57:63:e6:50:94:50:3b:
c8:1c:e2:05:8f:e1:e5:75:9f:c8:18:49:d1:17:4a:
cc:fa:a3:70:43:51:6c:ad:83:eb:82:3c:c6:cc:64:
db:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0E:56:FA:18:E2:EA:C7:89:EA:B4:88:C4:6A:95:26:D9:31:B2:07
X509v3 Authority Key Identifier:
keyid:74:5F:F4:F0:63:AB:5D:17:1E:05:25:1B:31:E2:94:A4:BC:79:73:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/dF_08GOrXRceBSUbMeKUpLx5c7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dF_08GOrXRceBSUbMeKUpLx5c7E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E475/DA83AA7ACA1111EAA479C734C4F9AE02/20AF7940433811EFA525DA49C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
125.63.12.0/24
125.63.15.0/24
125.63.19.0/24
125.253.0.0/18
125.253.96.0/20
202.171.160.0/19
203.25.102.0/24
223.27.66.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:34:a9:0a:f2:67:c5:7e:d0:1e:2d:8d:41:e4:bb:14:cf:52:
e3:6c:fd:b8:f6:cf:35:0e:ac:4e:82:5a:d0:23:3e:e7:db:ed:
8f:e3:80:0f:76:26:45:1f:53:e4:7f:f8:25:32:c9:b4:af:c7:
23:97:5f:d5:31:3d:28:d3:c5:73:be:9a:05:27:ad:74:b5:c5:
62:de:6f:7c:6e:e3:18:a9:fd:77:2c:c7:ac:60:35:af:c0:76:
c4:06:a0:d8:1f:46:4c:87:67:01:ee:de:cb:41:c3:32:a8:cb:
24:26:4a:ca:bf:e7:13:2a:88:ad:f3:46:d3:af:a3:ab:23:86:
4e:29:6c:f4:ed:00:df:2d:ed:f0:24:ef:06:c4:d4:13:8d:ee:
5d:b8:d3:d0:4c:69:11:0a:e4:53:59:e1:40:e2:6c:fe:98:f5:
7e:99:c5:ec:51:f5:32:d8:82:f6:65:6e:9d:4e:f0:eb:43:0e:
f1:76:d9:90:fd:bb:10:52:8b:be:58:d7:a3:92:16:d9:1b:27:
c0:20:cd:ff:ce:ea:fa:12:39:15:f7:38:74:35:2c:34:ab:54:
42:17:89:32:8a:56:99:0f:9f:ae:89:3c:40:a8:05:5f:bf:c4:
17:ae:82:67:97:b5:4a:0c:83:89:a7:79:91:ba:37:3e:3c:e1:
bf:3f:b6:c7
-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgICCvwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NUU0NzUxMTAvBgNVBAUTKDc0NUZGNEYwNjNBQjVEMTcxRTA1MjUxQjMxRTI5NEE0
QkM3OTczQjEwHhcNMjUxMTA4MTk0MDIzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODcxOC1mMGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAw2p9PZieE//EB6XG1UgP503ggEPZlrrBQ/g5boBtMpoi6R8h6Y8V1RQIAFCC
zJs1InV5h6FetCwzLKlRwDWVPHqfJRtnyhyMj2jAgh4hn5EEW/vfB1Ja017/TD2z
1GYyp5WF0FsknGck4PdHHkCMHQUWfAnfIkLHXlLIU8ELHUlHp65j+NSxmR3uxsk2
Pa++9swTtp+fr0qs+KERhY4frgP79j+gW96VKdeOyxyQYcHgWjjSPFtNIfIMQEnr
/KBG/IQmQL1XH+xG3gAS8ym4775stkW2T4W4k1dj5lCUUDvIHOIFj+HldZ/IGEnR
F0rM+qNwQ1FsrYPrgjzGzGTb+QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFGEOVvoY
4urHieq0iMRqlSbZMbIHMB8GA1UdIwQYMBaAFHRf9PBjq10XHgUlGzHilKS8eXOx
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1RTQ3NS9EQTgzQUE3QUNB
MTExMUVBQTQ3OUM3MzRDNEY5QUUwMi9kRl8wOEdPclhSY2VCU1ViTWVLVXBMeDVj
N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RGXzA4R09yWFJjZUJTVWJNZUtVcEx4NWM3RS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NUU0NzUvREE4M0FBN0FDQTExMTFFQUE0NzlDNzM0QzRGOUFFMDIvMjBBRjc5NDA0
MzM4MTFFRkE1MjVEQTQ5QzRGOUFFMDIucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2
BAIAATAwAwQAfT8MAwQAfT8PAwQAfT8TAwQGff0AAwQEff1gAwQFyqugAwQAyxlm
AwQB3xtCMA0GCSqGSIb3DQEBCwUAA4IBAQCtNKkK8mfFftAeLY1B5LsUz1LjbP24
9s81DqxOglrQIz7n2+2P44APdiZFH1Pkf/glMsm0r8cjl1/VMT0o08VzvpoFJ610
tcVi3m98buMYqf13LMesYDWvwHbEBqDYH0ZMh2cB7t7LQcMyqMskJkrKv+cTKoit
80bTr6OrI4ZOKWz07QDfLe3wJO8GxNQTje5duNPQTGkRCuRTWeFA4mz+mPV+mcXs
UfUy2IL2ZW6dTvDrQw7xdtmQ/bsQUou+WNejkhbZGyfAIM3/zur6EjkV9zh0NSw0
q1RCF4kyilaZD5+uiTxAqAVfv8QXroJnl7VKDIOJp3mRujc+POG/P7bH
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:55 2026 by rpki-client