Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4848A8C83A0411F086BFFE49C4F9AE02.roa
File: 4848A8C83A0411F086BFFE49C4F9AE02.roa (raw, json)
Hash identifier: gn1WxkLk7ro/YH61XnjMNzOi2xvSU3Ue/ji3AF408SQ=
Subject key identifier: F5:D3:1C:92:86:34:AF:01:78:08:A9:56:F3:E0:CF:7A:52:5C:29:E5
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 36B0
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4848A8C83A0411F086BFFE49C4F9AE02.roa
Signing time: Sat 02 Aug 2025 15:53:21 +0000
ROA not before: Sat 02 Aug 2025 15:53:21 +0000
ROA not after: Mon 02 Mar 2026 00:00:00 +0000
asID: 4787
IP address blocks: 45.126.80.0/22 maxlen: 22
101.50.16.0/21 maxlen: 21
101.50.16.0/24 maxlen: 24
101.50.24.0/21 maxlen: 21
101.50.24.0/24 maxlen: 24
101.128.64.0/18 maxlen: 24
103.61.248.0/22 maxlen: 22
103.86.148.0/22 maxlen: 22
103.86.148.0/23 maxlen: 23
103.86.149.0/24 maxlen: 24
103.86.150.0/23 maxlen: 23
103.86.150.0/24 maxlen: 24
103.86.152.0/22 maxlen: 22
103.86.152.0/24 maxlen: 24
103.86.156.0/22 maxlen: 22
103.86.156.0/24 maxlen: 24
103.86.160.0/22 maxlen: 22
103.87.76.0/22 maxlen: 22
103.87.76.0/24 maxlen: 24
103.87.80.0/22 maxlen: 22
103.87.80.0/24 maxlen: 24
103.87.84.0/22 maxlen: 22
103.87.84.0/24 maxlen: 24
103.87.152.0/22 maxlen: 22
103.87.152.0/24 maxlen: 24
103.109.152.0/22 maxlen: 22
103.109.152.0/24 maxlen: 24
103.109.156.0/22 maxlen: 22
103.109.156.0/24 maxlen: 24
103.109.160.0/22 maxlen: 22
103.109.160.0/24 maxlen: 24
103.109.164.0/22 maxlen: 22
103.109.164.0/24 maxlen: 24
103.109.168.0/22 maxlen: 22
103.109.168.0/24 maxlen: 24
103.109.188.0/22 maxlen: 22
103.109.188.0/24 maxlen: 24
103.109.192.0/22 maxlen: 22
103.109.192.0/24 maxlen: 24
103.109.196.0/22 maxlen: 22
103.109.196.0/24 maxlen: 24
103.109.200.0/22 maxlen: 22
103.109.200.0/24 maxlen: 24
103.111.184.0/22 maxlen: 22
103.111.184.0/24 maxlen: 24
103.111.188.0/22 maxlen: 22
103.111.188.0/24 maxlen: 24
103.111.200.0/22 maxlen: 22
103.111.200.0/24 maxlen: 24
103.111.204.0/22 maxlen: 22
103.111.204.0/24 maxlen: 24
103.111.208.0/22 maxlen: 22
103.111.208.0/24 maxlen: 24
103.111.212.0/22 maxlen: 22
103.111.212.0/24 maxlen: 24
103.113.48.0/22 maxlen: 22
103.113.48.0/24 maxlen: 24
103.113.52.0/22 maxlen: 22
103.113.52.0/24 maxlen: 24
103.113.72.0/22 maxlen: 22
103.113.72.0/24 maxlen: 24
103.113.76.0/22 maxlen: 22
103.113.76.0/24 maxlen: 24
103.113.116.0/22 maxlen: 22
103.113.116.0/24 maxlen: 24
103.113.120.0/22 maxlen: 22
103.113.120.0/24 maxlen: 24
103.113.128.0/22 maxlen: 22
103.113.128.0/24 maxlen: 24
103.113.132.0/22 maxlen: 22
103.113.132.0/24 maxlen: 24
103.114.80.0/22 maxlen: 22
103.114.80.0/24 maxlen: 24
103.114.84.0/22 maxlen: 22
103.114.84.0/24 maxlen: 24
103.114.108.0/22 maxlen: 22
103.114.108.0/24 maxlen: 24
103.114.112.0/22 maxlen: 22
103.114.112.0/24 maxlen: 24
103.114.116.0/22 maxlen: 22
103.114.116.0/24 maxlen: 24
103.114.120.0/22 maxlen: 22
103.114.120.0/24 maxlen: 24
103.114.136.0/22 maxlen: 22
103.114.136.0/24 maxlen: 24
103.114.140.0/22 maxlen: 22
103.118.96.0/22 maxlen: 22
103.118.96.0/24 maxlen: 24
103.118.100.0/22 maxlen: 22
103.118.100.0/24 maxlen: 24
103.118.104.0/22 maxlen: 22
103.118.104.0/24 maxlen: 24
103.118.108.0/22 maxlen: 22
103.118.108.0/24 maxlen: 24
103.118.128.0/22 maxlen: 22
103.118.128.0/24 maxlen: 24
103.118.132.0/22 maxlen: 22
103.118.132.0/24 maxlen: 24
103.118.136.0/22 maxlen: 22
103.118.136.0/24 maxlen: 24
103.118.140.0/22 maxlen: 22
103.118.140.0/24 maxlen: 24
103.118.224.0/22 maxlen: 22
103.118.224.0/24 maxlen: 24
103.118.228.0/22 maxlen: 22
103.118.228.0/24 maxlen: 24
103.118.232.0/22 maxlen: 22
103.118.232.0/24 maxlen: 24
103.118.236.0/22 maxlen: 22
103.118.236.0/24 maxlen: 24
103.119.4.0/22 maxlen: 22
103.119.4.0/24 maxlen: 24
103.119.8.0/22 maxlen: 22
103.119.8.0/24 maxlen: 24
103.119.36.0/22 maxlen: 22
103.119.36.0/24 maxlen: 24
103.119.40.0/22 maxlen: 22
103.119.40.0/24 maxlen: 24
103.121.96.0/22 maxlen: 22
103.121.96.0/24 maxlen: 24
103.121.100.0/22 maxlen: 22
103.121.100.0/24 maxlen: 24
103.121.108.0/22 maxlen: 22
103.121.108.0/24 maxlen: 24
103.121.132.0/22 maxlen: 22
103.121.132.0/24 maxlen: 24
103.121.136.0/22 maxlen: 22
103.121.136.0/24 maxlen: 24
103.121.144.0/22 maxlen: 22
103.121.144.0/24 maxlen: 24
103.121.168.0/22 maxlen: 22
103.121.168.0/24 maxlen: 24
103.121.180.0/22 maxlen: 22
103.121.180.0/24 maxlen: 24
103.121.244.0/22 maxlen: 22
103.121.244.0/24 maxlen: 24
103.129.4.0/22 maxlen: 22
103.129.4.0/24 maxlen: 24
103.129.20.0/22 maxlen: 22
103.129.20.0/24 maxlen: 24
103.129.24.0/22 maxlen: 22
103.129.24.0/24 maxlen: 24
103.129.40.0/22 maxlen: 22
103.129.40.0/24 maxlen: 24
103.129.48.0/22 maxlen: 22
103.129.48.0/24 maxlen: 24
103.129.56.0/22 maxlen: 22
103.129.56.0/24 maxlen: 24
103.129.68.0/22 maxlen: 22
103.129.68.0/24 maxlen: 24
116.206.232.0/22 maxlen: 22
116.206.232.0/24 maxlen: 24
116.206.236.0/22 maxlen: 22
116.206.236.0/24 maxlen: 24
116.206.240.0/22 maxlen: 22
116.206.240.0/24 maxlen: 24
125.208.128.0/18 maxlen: 18
175.158.32.0/19 maxlen: 19
175.158.32.0/21 maxlen: 21
175.158.32.0/22 maxlen: 22
175.158.32.0/24 maxlen: 24
202.158.0.0/17 maxlen: 17
210.210.128.0/18 maxlen: 24
2001:d10::/48 maxlen: 48
2403:3440::/32 maxlen: 32
2403:3440::/48 maxlen: 48
2403:34c0::/32 maxlen: 32
2403:34c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 Aug 2025 15:38:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14000 (0x36b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Aug 2 15:53:21 2025 GMT
Not After : Mar 2 00:00:00 2026 GMT
Subject: CN=688e3471-f8eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7f:44:eb:59:1c:5b:46:14:4a:eb:a5:26:78:
ec:78:b0:6a:4a:78:cc:e3:0f:ea:0b:8b:68:15:4e:
fe:d4:fa:48:9c:34:82:63:a2:0e:34:bc:7c:e9:d3:
bb:4e:68:70:fc:d4:96:61:1f:36:3b:f9:14:7c:87:
55:98:9e:f9:67:0b:68:98:39:d1:30:ec:90:0a:33:
6e:d2:be:09:81:6b:3d:69:16:38:1a:f5:da:d6:11:
33:9e:f5:8f:e6:dd:a9:bf:3e:db:f7:1e:ab:9c:62:
c7:b8:0a:8b:17:db:65:90:7d:da:27:7d:4f:1d:9d:
9b:d6:75:de:af:a2:79:2a:d2:fe:ab:c5:60:b0:e0:
8a:8a:95:42:6c:c9:be:22:66:66:69:fb:58:b8:34:
0c:95:e9:9b:a2:fe:5e:b1:9e:1e:fe:1e:46:15:98:
75:74:dd:1d:e4:b0:6e:94:f3:88:fa:90:1e:eb:ce:
b4:41:b4:ef:ca:b6:da:cd:7c:35:41:1c:bf:c7:67:
3c:ff:e8:25:fc:04:8c:45:db:c7:c8:e3:5f:8f:e6:
ee:56:66:a0:c2:4b:54:21:cf:5f:18:ef:85:0d:28:
cd:e7:6b:6e:f2:b6:6e:d5:e7:73:b0:37:9f:c0:c6:
1b:17:86:a4:be:2e:ed:bc:cd:22:55:24:b4:c9:5d:
85:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D3:1C:92:86:34:AF:01:78:08:A9:56:F3:E0:CF:7A:52:5C:29:E5
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4848A8C83A0411F086BFFE49C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.126.80.0/22
101.50.16.0/20
101.128.64.0/18
103.61.248.0/22
103.86.148.0-103.86.163.255
103.87.76.0-103.87.87.255
103.87.152.0/22
103.109.152.0-103.109.171.255
103.109.188.0-103.109.203.255
103.111.184.0/21
103.111.200.0-103.111.215.255
103.113.48.0/21
103.113.72.0/21
103.113.116.0-103.113.123.255
103.113.128.0/21
103.114.80.0/21
103.114.108.0-103.114.123.255
103.114.136.0/21
103.118.96.0/20
103.118.128.0/20
103.118.224.0/20
103.119.4.0-103.119.11.255
103.119.36.0-103.119.43.255
103.121.96.0/21
103.121.108.0/22
103.121.132.0-103.121.139.255
103.121.144.0/22
103.121.168.0/22
103.121.180.0/22
103.121.244.0/22
103.129.4.0/22
103.129.20.0-103.129.27.255
103.129.40.0/22
103.129.48.0/22
103.129.56.0/22
103.129.68.0/22
116.206.232.0-116.206.243.255
125.208.128.0/18
175.158.32.0/19
202.158.0.0/17
210.210.128.0/18
IPv6:
2001:d10::/48
2403:3440::/32
2403:34c0::/32
Signature Algorithm: sha256WithRSAEncryption
98:e5:17:07:13:25:59:4e:dc:15:1f:55:29:68:c5:05:2d:b9:
96:33:14:5c:e9:08:bc:9a:8e:2d:dd:55:14:2a:fa:2b:49:22:
1e:1c:10:d7:73:7f:1e:81:94:c2:f2:ce:a3:3e:cf:b7:6b:31:
30:de:f2:fd:18:52:7b:ea:34:a0:11:c9:d1:52:26:57:ea:e2:
74:d4:28:3a:c2:bf:df:99:b2:0d:09:3d:eb:7b:9b:74:43:43:
3b:d3:1f:1e:75:99:10:25:5d:bc:cf:93:af:01:b3:1e:e8:e3:
dc:99:17:1e:54:58:c6:30:f0:3b:9c:51:ef:b9:9d:b0:2f:73:
2a:9e:17:04:fc:52:b2:c9:4e:09:c7:da:e0:40:20:b3:76:47:
59:03:1c:eb:d0:0a:f4:e4:f9:11:74:09:57:1a:ea:9d:f6:10:
f1:51:b1:a5:83:a7:9b:9a:e5:fb:fc:23:0c:84:17:e9:08:f4:
32:b9:93:cc:a7:9a:da:40:5a:f7:f5:03:51:46:d2:34:a9:34:
73:b2:98:62:50:39:ba:25:fc:a7:c5:b0:37:40:c4:c7:28:4b:
d9:a1:76:7a:b8:75:9a:13:e1:85:5f:ca:dc:fb:c9:70:f6:b8:
1b:bf:92:7d:b8:48:47:cc:a8:17:b4:3e:ba:6d:a5:17:6c:b5:
92:ec:2e:e3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:00:16 2025 by rpki-client