Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D3480822CDD11F1ABF684D89D833773.roa
File: 0D3480822CDD11F1ABF684D89D833773.roa (raw, json)
Hash identifier: jJNf/EkcrsgDTtNLybLEghKEYc36O0PndzyGzJc4gYA=
Subject key identifier: 0F:95:0F:0E:0F:94:B1:E5:88:9A:7A:62:A0:75:EE:67:7C:5D:CA:A2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DD54
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D3480822CDD11F1ABF684D89D833773.roa
Signing time: Tue 31 Mar 2026 10:07:29 +0000
ROA not before: Tue 31 Mar 2026 10:07:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 45769
IP address blocks: 45.112.144.0/22 maxlen: 24
45.112.148.0/22 maxlen: 24
45.112.184.0/22 maxlen: 24
103.26.232.0/22 maxlen: 24
103.51.232.0/22 maxlen: 24
103.51.236.0/22 maxlen: 24
103.52.36.0/22 maxlen: 24
150.242.205.0/24 maxlen: 24
150.242.206.0/24 maxlen: 24
150.242.207.0/24 maxlen: 24
182.48.192.0/18 maxlen: 24
202.122.16.0/24 maxlen: 24
202.122.17.0/24 maxlen: 24
202.122.18.0/24 maxlen: 24
202.122.19.0/24 maxlen: 24
202.122.20.0/24 maxlen: 24
202.122.21.0/24 maxlen: 24
202.122.22.0/24 maxlen: 24
202.122.23.0/24 maxlen: 24
202.131.128.0/24 maxlen: 24
202.131.129.0/24 maxlen: 24
202.131.130.0/24 maxlen: 24
202.131.131.0/24 maxlen: 24
202.131.132.0/24 maxlen: 24
202.131.133.0/24 maxlen: 24
202.131.134.0/24 maxlen: 24
202.131.135.0/24 maxlen: 24
202.131.136.0/23 maxlen: 24
202.131.138.0/24 maxlen: 24
202.131.139.0/24 maxlen: 24
202.131.140.0/24 maxlen: 24
202.131.141.0/24 maxlen: 24
202.131.142.0/23 maxlen: 24
202.131.144.0/24 maxlen: 24
202.131.145.0/24 maxlen: 24
202.131.146.0/24 maxlen: 24
202.131.147.0/24 maxlen: 24
202.131.148.0/24 maxlen: 24
202.131.149.0/24 maxlen: 24
202.131.150.0/24 maxlen: 24
202.131.151.0/24 maxlen: 24
202.131.152.0/24 maxlen: 24
202.131.153.0/24 maxlen: 24
202.131.155.0/24 maxlen: 24
202.131.156.0/24 maxlen: 24
202.131.157.0/24 maxlen: 24
202.131.158.0/23 maxlen: 24
202.140.33.0/24 maxlen: 24
202.140.34.0/24 maxlen: 24
202.140.35.0/24 maxlen: 24
202.140.36.0/24 maxlen: 24
202.140.37.0/24 maxlen: 24
202.140.38.0/24 maxlen: 24
202.140.39.0/24 maxlen: 24
202.140.41.0/24 maxlen: 24
202.140.42.0/23 maxlen: 24
202.140.44.0/24 maxlen: 24
202.140.45.0/24 maxlen: 24
202.140.47.0/24 maxlen: 24
202.140.48.0/24 maxlen: 24
202.140.49.0/24 maxlen: 24
202.140.50.0/24 maxlen: 24
202.140.51.0/24 maxlen: 24
202.140.52.0/24 maxlen: 24
202.140.53.0/24 maxlen: 24
202.140.54.0/24 maxlen: 24
202.140.55.0/24 maxlen: 24
202.140.56.0/24 maxlen: 24
202.140.57.0/24 maxlen: 24
202.140.58.0/24 maxlen: 24
202.140.59.0/24 maxlen: 24
202.140.60.0/24 maxlen: 24
202.140.61.0/24 maxlen: 24
202.140.62.0/24 maxlen: 24
202.140.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 11:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56660 (0xdd54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 31 10:07:29 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69cb9ce1-af5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2f:05:aa:f2:e8:f0:4c:d1:3c:8e:7b:1e:e6:
2a:6b:ee:67:89:2b:bb:3e:f5:fa:26:0c:14:0b:0b:
81:9e:70:b1:fe:f1:b9:04:44:f1:be:98:c4:0b:5e:
af:21:fe:ec:26:45:33:0a:64:9f:81:37:4c:19:ff:
83:38:63:b2:0e:56:8c:87:da:5e:f6:fe:08:ec:46:
d2:eb:6c:f9:99:20:8f:82:0d:ce:07:ae:3a:27:a0:
bc:f5:82:b1:40:c8:30:be:ca:1e:fc:52:82:22:ed:
33:0e:a8:18:07:a5:df:f5:68:14:36:80:56:1d:67:
f7:20:ee:a7:1a:31:6f:ac:f0:6b:15:56:71:b1:61:
7a:28:74:7b:89:36:3b:11:d8:29:ca:e1:91:91:bd:
c1:aa:a1:4e:8d:5c:58:05:40:16:b5:95:74:37:a4:
3e:3c:c9:6d:83:3f:f8:a4:8a:14:77:98:64:f0:f6:
1f:0b:19:5c:4f:ea:98:1d:f6:5d:97:fd:88:38:cb:
67:8f:b6:77:83:f0:8a:e5:9b:b0:69:57:af:fa:b6:
ef:f6:cb:12:28:d4:65:3a:0a:45:90:5b:e0:d7:aa:
f4:f9:61:bd:15:a4:e6:aa:4e:68:92:c0:6d:8c:f6:
32:e5:1c:47:a0:c9:83:a9:96:e5:05:c9:07:8f:65:
8f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:95:0F:0E:0F:94:B1:E5:88:9A:7A:62:A0:75:EE:67:7C:5D:CA:A2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/0D3480822CDD11F1ABF684D89D833773.roa
sbgp-ipAddrBlock: critical
IPv4:
45.112.144.0/21
45.112.184.0/22
103.26.232.0/22
103.51.232.0/21
103.52.36.0/22
150.242.205.0-150.242.207.255
182.48.192.0/18
202.122.16.0/21
202.131.128.0-202.131.153.255
202.131.155.0-202.131.159.255
202.140.33.0-202.140.39.255
202.140.41.0-202.140.45.255
202.140.47.0-202.140.63.255
Signature Algorithm: sha256WithRSAEncryption
74:92:5a:f3:36:13:d4:e6:6e:53:87:af:e6:8b:50:22:34:77:
d2:8d:e4:11:6e:9a:1a:4f:fd:b6:d1:e0:a6:58:00:7a:81:e8:
9e:60:fc:10:a9:a1:da:e4:6a:45:90:56:da:1e:f2:c2:cf:90:
0a:9e:46:31:83:76:de:ae:f2:e4:57:6f:8f:15:ad:7a:5e:33:
fa:01:3d:ad:3a:a6:8c:f9:3f:44:6b:1d:48:85:66:73:07:57:
f4:6b:08:1e:27:84:03:87:1d:ff:c7:7b:4a:13:f1:72:1d:72:
83:44:c1:07:f8:d4:8c:8a:66:0a:1f:08:1b:44:d0:18:db:6a:
3b:9e:8c:4a:46:6d:da:5f:0e:04:94:18:79:0a:47:d0:b0:bb:
d7:6a:18:44:5a:d9:f2:5e:5b:89:0d:77:74:a0:2e:74:94:67:
a4:1a:dc:e3:6f:54:62:4d:44:93:85:68:57:a4:11:ce:1e:bb:
e9:37:28:de:b8:46:9c:52:8f:48:7f:7f:38:20:69:1f:a4:1b:
56:99:51:cc:3c:5d:ff:9a:c7:6e:dd:d8:84:37:10:6b:1a:bb:
b2:f6:c5:a9:dc:01:6a:64:bd:2b:38:7b:3d:4a:fe:8d:fc:66:
30:27:da:19:08:3c:6a:33:93:b0:44:69:b8:33:b3:70:41:6c:
cf:4b:a4:cb
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgIDAN1UMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDMzMTEwMDcyOVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjljYjljZTEtYWY1YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALovBary6PBM0TyOex7mKmvuZ4kruz71+iYMFAsLgZ5wsf7xuQRE8b6YxAte
ryH+7CZFMwpkn4E3TBn/gzhjsg5WjIfaXvb+COxG0uts+Zkgj4INzgeuOiegvPWC
sUDIML7KHvxSgiLtMw6oGAel3/VoFDaAVh1n9yDupxoxb6zwaxVWcbFheih0e4k2
OxHYKcrhkZG9waqhTo1cWAVAFrWVdDekPjzJbYM/+KSKFHeYZPD2HwsZXE/qmB32
XZf9iDjLZ4+2d4PwiuWbsGlXr/q27/bLEijUZToKRZBb4Neq9PlhvRWk5qpOaJLA
bYz2MuUcR6DJg6mW5QXJB49ljwECAwEAAaOCAtwwggLYMB0GA1UdDgQWBBQPlQ8O
D5Sx5YiaemKgde5nfF3KojAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzBEMzQ4MDgy
MkNERDExRjFBQkY2ODREODlEODMzNzczLnJvYTCBmgYIKwYBBQUHAQcBAf8EgYow
gYcwgYQEAgABMH4DBAMtcJADBAItcLgDBAJnGugDBANnM+gDBAJnNCQwDAMEAJby
zQMEBJbywAMEBrYwwAMEA8p6EDAMAwQHyoOAAwQByoOYMAwDBADKg5sDBAXKg4Aw
DAMEAMqMIQMEA8qMIDAMAwQAyowpAwQByowsMAwDBADKjC8DBAbKjAAwDQYJKoZI
hvcNAQELBQADggEBAHSSWvM2E9TmblOHr+aLUCI0d9KN5BFumhpP/bbR4KZYAHqB
6J5g/BCpodrkakWQVtoe8sLPkAqeRjGDdt6u8uRXb48VrXpeM/oBPa06poz5P0Rr
HUiFZnMHV/RrCB4nhAOHHf/He0oT8XIdcoNEwQf41IyKZgofCBtE0BjbajuejEpG
bdpfDgSUGHkKR9Cwu9dqGERa2fJeW4kNd3SgLnSUZ6Qa3ONvVGJNRJOFaFekEc4e
u+k3KN64RpxSj0h/fzggaR+kG1aZUcw8Xf+ax27d2IQ3EGsau7L2xancAWpkvSs4
ez1K/o38ZjAn2hkIPGozk7BEabgzs3BBbM9LpMs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:29:43 2026 by rpki-client