Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/A0121BD4871711EA924C6626C4F9AE02.roa
File: A0121BD4871711EA924C6626C4F9AE02.roa (raw, json)
Hash identifier: 3W4AiNrrj2kArnRpgqwuIaUDi20UJ9Jgfp+kFDwU8cQ=
Subject key identifier: B7:54:B8:21:83:A7:5D:D7:A6:3F:9B:B0:B0:BE:98:89:EC:DF:EA:60
Certificate issuer: /CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Certificate serial: 3541
Authority key identifier: FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/A0121BD4871711EA924C6626C4F9AE02.roa
Signing time: Sun 01 Mar 2026 11:22:01 +0000
ROA not before: Tue 02 Sep 2025 14:30:20 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 23673
IP address blocks: 43.230.192.0/22 maxlen: 22
43.230.192.0/24 maxlen: 24
43.230.193.0/24 maxlen: 24
43.230.194.0/24 maxlen: 24
43.230.195.0/24 maxlen: 24
103.197.240.0/22 maxlen: 24
103.206.68.0/22 maxlen: 24
103.239.52.0/22 maxlen: 22
103.239.52.0/24 maxlen: 24
103.239.53.0/24 maxlen: 24
103.239.54.0/24 maxlen: 24
103.239.55.0/24 maxlen: 24
110.235.240.0/20 maxlen: 20
110.235.240.0/24 maxlen: 24
110.235.241.0/24 maxlen: 24
110.235.242.0/24 maxlen: 24
110.235.243.0/24 maxlen: 24
110.235.244.0/24 maxlen: 24
110.235.245.0/24 maxlen: 24
110.235.246.0/24 maxlen: 24
110.235.247.0/24 maxlen: 24
110.235.248.0/24 maxlen: 24
110.235.249.0/24 maxlen: 24
110.235.250.0/24 maxlen: 24
110.235.251.0/24 maxlen: 24
110.235.252.0/24 maxlen: 24
110.235.253.0/24 maxlen: 24
110.235.254.0/24 maxlen: 24
110.235.255.0/24 maxlen: 24
124.248.160.0/19 maxlen: 19
124.248.160.0/24 maxlen: 24
124.248.161.0/24 maxlen: 24
124.248.162.0/24 maxlen: 24
124.248.163.0/24 maxlen: 24
124.248.164.0/24 maxlen: 24
124.248.165.0/24 maxlen: 24
124.248.166.0/24 maxlen: 24
124.248.167.0/24 maxlen: 24
124.248.168.0/24 maxlen: 24
124.248.169.0/24 maxlen: 24
124.248.170.0/24 maxlen: 24
124.248.171.0/24 maxlen: 24
124.248.172.0/24 maxlen: 24
124.248.173.0/24 maxlen: 24
124.248.174.0/24 maxlen: 24
124.248.175.0/24 maxlen: 24
124.248.176.0/24 maxlen: 24
124.248.177.0/24 maxlen: 24
124.248.178.0/24 maxlen: 24
124.248.179.0/24 maxlen: 24
124.248.180.0/24 maxlen: 24
124.248.181.0/24 maxlen: 24
124.248.182.0/24 maxlen: 24
124.248.183.0/24 maxlen: 24
124.248.184.0/24 maxlen: 24
124.248.185.0/24 maxlen: 24
124.248.186.0/24 maxlen: 24
124.248.187.0/24 maxlen: 24
124.248.188.0/24 maxlen: 24
124.248.189.0/24 maxlen: 24
124.248.190.0/24 maxlen: 24
124.248.191.0/24 maxlen: 24
202.62.32.0/19 maxlen: 19
202.62.32.0/24 maxlen: 24
202.62.33.0/24 maxlen: 24
202.62.34.0/24 maxlen: 24
202.62.35.0/24 maxlen: 24
202.62.36.0/24 maxlen: 24
202.62.37.0/24 maxlen: 24
202.62.38.0/24 maxlen: 24
202.62.39.0/24 maxlen: 24
202.62.40.0/24 maxlen: 24
202.62.41.0/24 maxlen: 24
202.62.42.0/24 maxlen: 24
202.62.43.0/24 maxlen: 24
202.62.44.0/24 maxlen: 24
202.62.45.0/24 maxlen: 24
202.62.46.0/24 maxlen: 24
202.62.47.0/24 maxlen: 24
202.62.48.0/24 maxlen: 24
202.62.49.0/24 maxlen: 24
202.62.50.0/24 maxlen: 24
202.62.51.0/24 maxlen: 24
202.62.52.0/24 maxlen: 24
202.62.53.0/24 maxlen: 24
202.62.54.0/24 maxlen: 24
202.62.55.0/24 maxlen: 24
202.62.56.0/24 maxlen: 24
202.62.57.0/24 maxlen: 24
202.62.58.0/24 maxlen: 24
202.62.59.0/24 maxlen: 24
202.62.60.0/24 maxlen: 24
202.62.61.0/24 maxlen: 24
202.62.62.0/24 maxlen: 24
202.62.63.0/24 maxlen: 24
203.189.128.0/19 maxlen: 19
203.189.128.0/24 maxlen: 24
203.189.129.0/24 maxlen: 24
203.189.130.0/24 maxlen: 24
203.189.131.0/24 maxlen: 24
203.189.132.0/22 maxlen: 24
203.189.136.0/23 maxlen: 24
203.189.138.0/23 maxlen: 24
203.189.140.0/23 maxlen: 24
203.189.142.0/23 maxlen: 24
203.189.144.0/22 maxlen: 24
203.189.148.0/22 maxlen: 24
203.189.152.0/23 maxlen: 24
203.189.154.0/23 maxlen: 24
203.189.156.0/23 maxlen: 24
203.189.158.0/23 maxlen: 24
2402:c100::/32 maxlen: 32
2402:c100::/48 maxlen: 48
2402:c100:c00::/48 maxlen: 48
2402:c100:c01::/48 maxlen: 48
2402:c100:c02::/48 maxlen: 48
2402:c100:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:20:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13633 (0x3541)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917225D, serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Validity
Not Before: Sep 2 14:30:20 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a42159-739c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:21:00:c9:bc:ca:0e:0c:f2:d4:2c:d4:25:
25:91:04:1b:b1:7b:76:2b:61:53:aa:fe:40:cc:c2:
e1:71:c4:61:03:b9:8d:61:ea:b0:6c:fa:35:c6:82:
50:6a:a2:b5:aa:82:5b:f9:fe:16:e2:48:dd:a1:ad:
cc:58:26:bb:44:28:af:13:ed:d3:32:94:e2:a6:4d:
28:a9:e1:90:96:4b:de:6a:a0:a0:30:44:50:e0:14:
cf:3f:76:44:81:e5:01:0a:4a:fc:02:5f:89:7e:85:
7b:b4:e0:94:be:a4:61:ab:58:03:c2:87:5f:83:bf:
70:7f:fa:c0:a2:03:53:e5:44:7a:1d:f2:e4:92:51:
b2:be:8d:db:d4:81:19:59:87:9a:7d:f0:6a:78:f0:
f1:4e:39:7f:ab:23:19:19:f8:e8:4b:e6:e9:02:7d:
88:5a:4d:1d:11:ca:b0:82:48:0f:7c:7f:7a:58:60:
f4:61:c3:0a:a7:0e:89:fe:df:17:95:b9:0a:17:7f:
ea:42:69:af:92:a1:fa:fa:c0:b8:a6:3d:36:a0:14:
74:2b:36:e6:6a:e3:93:13:87:16:dd:ed:64:2e:94:
c6:79:8f:ea:41:fd:92:32:45:8a:de:05:78:f2:95:
f5:a3:8d:66:b7:08:0a:43:7d:cb:0b:84:03:ab:41:
84:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:54:B8:21:83:A7:5D:D7:A6:3F:9B:B0:B0:BE:98:89:EC:DF:EA:60
X509v3 Authority Key Identifier:
keyid:FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/A0121BD4871711EA924C6626C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.230.192.0/22
103.197.240.0/22
103.206.68.0/22
103.239.52.0/22
110.235.240.0/20
124.248.160.0/19
202.62.32.0/19
203.189.128.0/19
IPv6:
2402:c100::/32
Signature Algorithm: sha256WithRSAEncryption
11:ac:4c:8d:d8:8d:b7:6d:d7:61:75:7b:98:41:0c:db:b2:6f:
3d:94:4a:90:6e:90:7f:01:40:21:e5:be:72:06:71:c1:7c:aa:
44:03:de:81:f1:1a:41:9c:27:2e:1e:48:35:0a:ee:1c:20:4c:
0e:0f:cd:34:55:50:a8:cd:d4:0b:bd:73:4b:7f:be:f8:7f:e2:
a9:74:29:97:2c:36:8d:d0:75:04:46:b7:5b:e5:08:25:c5:e9:
54:6c:b0:35:a8:61:36:0d:47:e4:79:83:19:9e:a9:8c:45:4d:
de:84:f2:70:da:91:90:4b:63:ef:42:3c:35:08:97:df:79:ac:
62:c4:4f:b5:f2:15:c5:fe:93:65:25:72:ad:13:0c:04:40:9a:
8e:2d:78:9f:6b:5a:ba:34:e3:2e:90:e7:42:c6:ad:bd:a7:3d:
df:28:ac:c5:d3:8c:a3:f9:8c:27:01:ba:aa:b5:ca:5c:f3:63:
7b:2c:52:30:84:a7:11:1e:a9:9a:63:ff:08:ae:2c:72:56:17:
60:f5:04:2b:29:18:3e:75:47:b9:5b:19:f0:11:1f:79:f2:a3:
72:6b:e5:5f:08:61:ea:54:40:53:f4:74:08:5b:7f:86:11:da:
01:38:ad:20:8b:96:90:20:e3:20:a3:29:94:ae:06:68:a7:f8:
78:9d:06:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:37:42 2026 by rpki-client