Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/9CC241B2016511EA91E3CF4AC4F9AE02.roa
File: 9CC241B2016511EA91E3CF4AC4F9AE02.roa (raw, json)
Hash identifier: IW60qrYeqhkrSJOf/dWa7e0oqGq8pQdL5fuzz3QnZUE=
Subject key identifier: 69:EE:77:4E:96:3C:6B:FB:83:03:AF:A5:B7:2A:74:01:8D:37:D4:D4
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3A59
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/9CC241B2016511EA91E3CF4AC4F9AE02.roa
Signing time: Sun 01 Mar 2026 21:22:17 +0000
ROA not before: Fri 16 Jan 2026 16:13:22 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 17885
IP address blocks: 112.215.7.0/24 maxlen: 24
112.215.10.0/24 maxlen: 24
112.215.11.0/24 maxlen: 24
112.215.18.0/24 maxlen: 24
112.215.21.0/24 maxlen: 24
112.215.22.0/24 maxlen: 24
112.215.30.0/24 maxlen: 24
112.215.33.0/24 maxlen: 24
112.215.34.0/24 maxlen: 24
112.215.40.0/24 maxlen: 24
112.215.41.0/24 maxlen: 24
112.215.42.0/24 maxlen: 24
112.215.46.0/24 maxlen: 24
112.215.49.0/24 maxlen: 24
112.215.62.0/24 maxlen: 24
112.215.68.0/24 maxlen: 24
112.215.69.0/24 maxlen: 24
112.215.77.0/24 maxlen: 24
112.215.78.0/24 maxlen: 24
112.215.81.0/24 maxlen: 24
112.215.87.0/24 maxlen: 24
112.215.89.0/24 maxlen: 24
112.215.94.0/24 maxlen: 24
112.215.96.0/24 maxlen: 24
112.215.97.0/24 maxlen: 24
112.215.98.0/24 maxlen: 24
112.215.100.0/24 maxlen: 24
112.215.105.0/24 maxlen: 24
112.215.106.0/24 maxlen: 24
112.215.107.0/24 maxlen: 24
112.215.108.0/24 maxlen: 24
112.215.112.0/24 maxlen: 24
112.215.113.0/24 maxlen: 24
112.215.114.0/24 maxlen: 24
112.215.116.0/24 maxlen: 24
112.215.118.0/24 maxlen: 24
112.215.121.0/24 maxlen: 24
112.215.129.0/24 maxlen: 24
112.215.131.0/24 maxlen: 24
112.215.132.0/24 maxlen: 24
112.215.141.0/24 maxlen: 24
112.215.142.0/24 maxlen: 24
112.215.143.0/24 maxlen: 24
112.215.159.0/24 maxlen: 24
112.215.176.0/24 maxlen: 24
112.215.177.0/24 maxlen: 24
112.215.178.0/24 maxlen: 24
112.215.190.0/24 maxlen: 24
112.215.191.0/24 maxlen: 24
112.215.192.0/24 maxlen: 24
112.215.193.0/24 maxlen: 24
112.215.195.0/24 maxlen: 24
112.215.205.0/24 maxlen: 24
112.215.248.0/24 maxlen: 24
121.52.25.0/24 maxlen: 24
121.52.29.0/24 maxlen: 24
121.52.35.0/24 maxlen: 24
121.52.40.0/24 maxlen: 24
121.52.41.0/24 maxlen: 24
121.52.42.0/24 maxlen: 24
121.52.45.0/24 maxlen: 24
121.52.48.0/24 maxlen: 24
121.52.49.0/24 maxlen: 24
121.52.50.0/24 maxlen: 24
121.52.51.0/24 maxlen: 24
121.52.52.0/24 maxlen: 24
121.52.53.0/24 maxlen: 24
121.52.54.0/24 maxlen: 24
121.52.55.0/24 maxlen: 24
121.52.59.0/24 maxlen: 24
121.52.60.0/24 maxlen: 24
121.52.64.0/24 maxlen: 24
121.52.65.0/24 maxlen: 24
121.52.66.0/24 maxlen: 24
121.52.67.0/24 maxlen: 24
121.52.68.0/24 maxlen: 24
121.52.70.0/24 maxlen: 24
121.52.71.0/24 maxlen: 24
121.52.72.0/24 maxlen: 24
121.52.73.0/24 maxlen: 24
121.52.74.0/24 maxlen: 24
121.52.75.0/24 maxlen: 24
121.52.76.0/24 maxlen: 24
121.52.77.0/24 maxlen: 24
121.52.78.0/24 maxlen: 24
121.52.79.0/24 maxlen: 24
121.52.80.0/24 maxlen: 24
121.52.81.0/24 maxlen: 24
121.52.82.0/24 maxlen: 24
121.52.83.0/24 maxlen: 24
121.52.84.0/24 maxlen: 24
121.52.85.0/24 maxlen: 24
121.52.87.0/24 maxlen: 24
121.52.88.0/24 maxlen: 24
121.52.89.0/24 maxlen: 24
121.52.91.0/24 maxlen: 24
121.52.92.0/24 maxlen: 24
121.52.93.0/24 maxlen: 24
121.52.94.0/24 maxlen: 24
121.52.95.0/24 maxlen: 24
202.152.224.0/24 maxlen: 24
202.152.225.0/24 maxlen: 24
202.152.230.0/24 maxlen: 24
202.152.231.0/24 maxlen: 24
202.152.233.0/24 maxlen: 24
202.152.237.0/24 maxlen: 24
202.152.244.0/24 maxlen: 24
202.152.248.0/24 maxlen: 24
202.152.249.0/24 maxlen: 24
202.152.250.0/24 maxlen: 24
202.152.251.0/24 maxlen: 24
202.152.252.0/24 maxlen: 24
202.152.253.0/24 maxlen: 24
202.152.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14937 (0x3a59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Jan 16 16:13:22 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a4ae09-5d50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:3f:d6:c0:1f:4f:bf:47:ad:bf:63:70:45:
b2:53:2f:33:29:49:4f:43:d3:dc:16:c9:16:bd:d7:
49:64:1e:7c:93:1d:44:c1:dd:f3:0a:7d:7b:80:46:
3d:9d:64:48:32:01:e8:80:8d:1a:d6:98:9b:11:66:
2d:bf:1f:88:dd:67:df:82:2c:dd:29:73:82:e5:ed:
48:ab:a6:f5:12:c9:c9:64:e4:8b:51:97:33:e6:ea:
0c:e1:f2:99:27:7c:1e:b4:24:c9:49:fb:6e:6c:69:
36:ed:7e:ba:c5:3c:2f:81:b3:fb:61:c9:56:02:1f:
a6:28:f6:3c:79:92:8f:1e:85:71:7b:d1:2d:9c:0b:
21:1c:e4:b2:10:a1:95:3d:74:92:24:11:5c:3b:46:
42:11:43:e8:4f:d7:e3:06:23:03:7e:ca:6b:05:c7:
fe:56:ef:e3:1b:ff:ee:f6:0d:86:a2:4c:b1:48:bc:
1e:74:dd:53:cc:87:e2:09:f4:b7:ab:c2:22:2a:df:
bd:b2:98:af:2c:80:f2:e0:fc:6c:43:ad:50:c8:68:
c6:14:51:4b:a8:94:98:58:fc:6c:6d:33:ab:fb:c3:
f7:59:b1:b9:b4:6f:82:95:97:75:1c:2b:a0:2a:a0:
1d:bc:04:4f:73:da:86:73:d6:ac:89:4f:54:aa:af:
b9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EE:77:4E:96:3C:6B:FB:83:03:AF:A5:B7:2A:74:01:8D:37:D4:D4
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/9CC241B2016511EA91E3CF4AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
112.215.7.0/24
112.215.10.0/23
112.215.18.0/24
112.215.21.0-112.215.22.255
112.215.30.0/24
112.215.33.0-112.215.34.255
112.215.40.0-112.215.42.255
112.215.46.0/24
112.215.49.0/24
112.215.62.0/24
112.215.68.0/23
112.215.77.0-112.215.78.255
112.215.81.0/24
112.215.87.0/24
112.215.89.0/24
112.215.94.0/24
112.215.96.0-112.215.98.255
112.215.100.0/24
112.215.105.0-112.215.108.255
112.215.112.0-112.215.114.255
112.215.116.0/24
112.215.118.0/24
112.215.121.0/24
112.215.129.0/24
112.215.131.0-112.215.132.255
112.215.141.0-112.215.143.255
112.215.159.0/24
112.215.176.0-112.215.178.255
112.215.190.0-112.215.193.255
112.215.195.0/24
112.215.205.0/24
112.215.248.0/24
121.52.25.0/24
121.52.29.0/24
121.52.35.0/24
121.52.40.0-121.52.42.255
121.52.45.0/24
121.52.48.0/21
121.52.59.0-121.52.60.255
121.52.64.0-121.52.68.255
121.52.70.0-121.52.85.255
121.52.87.0-121.52.89.255
121.52.91.0-121.52.95.255
202.152.224.0/23
202.152.230.0/23
202.152.233.0/24
202.152.237.0/24
202.152.244.0/24
202.152.248.0-202.152.254.255
Signature Algorithm: sha256WithRSAEncryption
6f:25:07:d4:ad:4b:6e:64:bc:9d:0d:d9:77:b2:44:42:5c:c2:
3f:fd:0c:5d:77:da:15:2c:ff:5d:8a:f2:ad:4c:82:62:dd:50:
7d:60:7f:c1:73:5d:18:2c:47:44:c5:f5:f1:e8:9b:59:f9:ae:
1c:67:1c:75:6b:86:0c:25:a8:52:d8:25:65:cd:7f:0b:26:7b:
c2:53:89:dc:8c:31:31:44:cf:de:6f:31:32:ff:2d:99:6b:b8:
fa:20:cc:37:b7:74:4d:f8:bb:69:7f:4f:bb:65:51:04:cc:da:
ed:ec:98:9e:8a:c7:10:60:24:c0:54:88:13:7e:0e:d6:65:9b:
70:e8:c1:dc:6d:5d:72:a2:da:4d:44:cf:c5:21:26:ae:c4:58:
12:7b:b6:6d:fa:29:33:b5:d0:d1:40:86:b9:44:d7:b3:0d:f1:
b6:ce:ba:a5:08:a6:40:3e:01:04:39:48:bf:1e:e8:97:6e:d7:
44:e6:05:ca:41:c7:70:02:0d:91:55:19:bf:0c:b1:d9:71:c6:
a7:89:c9:77:c0:87:73:64:1a:27:e3:4b:e1:c3:a6:c1:9b:bf:
1d:ce:9d:ea:6f:5a:58:aa:be:95:0a:21:7e:79:34:b7:6a:55:
8d:9a:ec:cb:b0:9a:f6:41:ca:01:a8:02:51:71:46:6a:f5:d6:
cc:87:b9:a4
-----BEGIN CERTIFICATE-----
MIIG9jCCBd6gAwIBAgICOlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwMTE2MTYxMzIyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0YWUwOS01ZDUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp60/1sAfT79Hrb9jcEWyUy8zKUlPQ9PcFskWvddJZB58kx1Ewd3zCn17gEY9
nWRIMgHogI0a1pibEWYtvx+I3WffgizdKXOC5e1Iq6b1EsnJZOSLUZcz5uoM4fKZ
J3wetCTJSftubGk27X66xTwvgbP7YclWAh+mKPY8eZKPHoVxe9EtnAshHOSyEKGV
PXSSJBFcO0ZCEUPoT9fjBiMDfsprBcf+Vu/jG//u9g2GokyxSLwedN1TzIfiCfS3
q8IiKt+9spivLIDy4PxsQ61QyGjGFFFLqJSYWPxsbTOr+8P3WbG5tG+ClZd1HCug
KqAdvARPc9qGc9asiU9Uqq+5KwIDAQABo4IEGjCCBBYwHQYDVR0OBBYEFGnud06W
PGv7gwOvpbcqdAGNN9TUMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvOUNDMjQxQjIw
MTY1MTFFQTkxRTNDRjRBQzRGOUFFMDIucm9hMIIB1wYIKwYBBQUHAQcBAf8EggHG
MIIBwjCCAb4EAgABMIIBtgMEAHDXBwMEAXDXCgMEAHDXEjAMAwQAcNcVAwQAcNcW
AwQAcNceMAwDBABw1yEDBABw1yIwDAMEA3DXKAMEAHDXKgMEAHDXLgMEAHDXMQME
AHDXPgMEAXDXRDAMAwQAcNdNAwQAcNdOAwQAcNdRAwQAcNdXAwQAcNdZAwQAcNde
MAwDBAVw12ADBABw12IDBABw12QwDAMEAHDXaQMEAHDXbDAMAwQEcNdwAwQAcNdy
AwQAcNd0AwQAcNd2AwQAcNd5AwQAcNeBMAwDBABw14MDBABw14QwDAMEAHDXjQME
BHDXgAMEAHDXnzAMAwQEcNewAwQAcNeyMAwDBAFw174DBAFw18ADBABw18MDBABw
180DBABw1/gDBAB5NBkDBAB5NB0DBAB5NCMwDAMEA3k0KAMEAHk0KgMEAHk0LQME
A3k0MDAMAwQAeTQ7AwQAeTQ8MAwDBAZ5NEADBAB5NEQwDAMEAXk0RgMEAXk0VDAM
AwQAeTRXAwQBeTRYMAwDBAB5NFsDBAV5NEADBAHKmOADBAHKmOYDBADKmOkDBADK
mO0DBADKmPQwDAMEA8qY+AMEAMqY/jANBgkqhkiG9w0BAQsFAAOCAQEAbyUH1K1L
bmS8nQ3Zd7JEQlzCP/0MXXfaFSz/XYryrUyCYt1QfWB/wXNdGCxHRMX18eibWfmu
HGccdWuGDCWoUtglZc1/CyZ7wlOJ3IwxMUTP3m8xMv8tmWu4+iDMN7d0Tfi7aX9P
u2VRBMza7eyYnorHEGAkwFSIE34O1mWbcOjB3G1dcqLaTUTPxSEmrsRYEnu2bfop
M7XQ0UCGuUTXsw3xts66pQimQD4BBDlIvx7ol27XROYFykHHcAINkVUZvwyx2XHG
p4nJd8CHc2QaJ+NL4cOmwZu/Hc6d6m9aWKq+lQohfnk0t2pVjZrsy7Ca9kHKAagC
UXFGavXWzIe5pA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:13:42 2026 by rpki-client