Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13A8B71864AE11F1B6B05B759247A888.roa
File: 13A8B71864AE11F1B6B05B759247A888.roa (raw, json)
Hash identifier: FIHQkoiemdqNV2CrKlKX3CTIlvq+Bq+YWwqgZRgKbh0=
Subject key identifier: DF:EC:D1:72:B5:07:D6:DD:BD:D0:8E:73:A2:01:C3:11:7E:29:CD:2D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ECF0
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13A8B71864AE11F1B6B05B759247A888.roa
Signing time: Fri 12 Jun 2026 11:44:53 +0000
ROA not before: Fri 12 Jun 2026 11:44:53 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 150008
IP address blocks: 14.192.0.0/22 maxlen: 24
36.50.124.0/23 maxlen: 24
43.225.24.0/24 maxlen: 24
43.225.25.0/24 maxlen: 24
43.225.26.0/24 maxlen: 24
43.225.27.0/24 maxlen: 24
43.228.92.0/22 maxlen: 24
43.249.224.0/22 maxlen: 24
45.112.28.0/22 maxlen: 24
45.112.48.0/24 maxlen: 24
45.112.49.0/24 maxlen: 24
45.112.50.0/24 maxlen: 24
45.112.51.0/24 maxlen: 24
45.127.56.0/22 maxlen: 24
45.249.76.0/24 maxlen: 24
45.249.77.0/24 maxlen: 24
45.249.78.0/24 maxlen: 24
45.249.79.0/24 maxlen: 24
49.238.32.0/24 maxlen: 24
49.238.33.0/24 maxlen: 24
49.238.34.0/24 maxlen: 24
49.238.35.0/24 maxlen: 24
49.238.58.0/24 maxlen: 24
49.238.59.0/24 maxlen: 24
103.12.116.0/24 maxlen: 24
103.24.124.0/24 maxlen: 24
103.24.125.0/24 maxlen: 24
103.24.126.0/24 maxlen: 24
103.24.127.0/24 maxlen: 24
103.41.96.0/22 maxlen: 24
103.42.200.0/24 maxlen: 24
103.42.201.0/24 maxlen: 24
103.44.0.0/24 maxlen: 24
103.44.1.0/24 maxlen: 24
103.44.2.0/24 maxlen: 24
103.69.28.0/23 maxlen: 24
103.70.129.0/24 maxlen: 24
103.70.130.0/24 maxlen: 24
103.95.173.0/24 maxlen: 24
103.99.108.0/24 maxlen: 24
103.99.109.0/24 maxlen: 24
103.99.110.0/24 maxlen: 24
103.99.111.0/24 maxlen: 24
103.102.18.0/23 maxlen: 24
103.105.101.0/24 maxlen: 24
103.105.103.0/24 maxlen: 24
103.117.36.0/23 maxlen: 24
103.122.61.0/24 maxlen: 24
103.154.206.0/24 maxlen: 24
103.157.12.0/23 maxlen: 24
103.159.250.0/23 maxlen: 24
103.161.243.0/24 maxlen: 24
103.162.128.0/23 maxlen: 24
103.164.200.0/23 maxlen: 24
103.168.82.0/23 maxlen: 24
103.171.190.0/24 maxlen: 24
103.171.191.0/24 maxlen: 24
103.172.4.0/23 maxlen: 24
103.172.202.0/23 maxlen: 24
103.174.80.0/23 maxlen: 24
103.174.160.0/23 maxlen: 24
103.183.202.0/24 maxlen: 24
103.183.203.0/24 maxlen: 24
103.186.254.0/23 maxlen: 24
103.204.35.0/24 maxlen: 24
103.206.104.0/22 maxlen: 24
103.213.202.0/23 maxlen: 24
103.217.236.0/24 maxlen: 24
103.217.237.0/24 maxlen: 24
103.217.238.0/24 maxlen: 24
103.217.239.0/24 maxlen: 24
103.220.234.0/23 maxlen: 24
103.233.73.0/24 maxlen: 24
103.236.193.0/24 maxlen: 24
103.239.36.0/24 maxlen: 24
103.239.37.0/24 maxlen: 24
103.239.38.0/24 maxlen: 24
103.239.39.0/24 maxlen: 24
103.248.208.0/22 maxlen: 24
103.252.144.0/22 maxlen: 24
103.255.144.0/22 maxlen: 24
106.0.36.0/23 maxlen: 24
182.18.177.0/24 maxlen: 24
202.63.121.0/24 maxlen: 24
202.65.129.0/24 maxlen: 24
202.65.130.0/24 maxlen: 24
202.65.133.0/24 maxlen: 24
202.65.134.0/24 maxlen: 24
202.65.138.0/24 maxlen: 24
202.65.142.0/24 maxlen: 24
202.65.144.0/24 maxlen: 24
202.65.147.0/24 maxlen: 24
202.65.148.0/24 maxlen: 24
202.65.154.0/24 maxlen: 24
202.65.155.0/24 maxlen: 24
202.65.158.0/24 maxlen: 24
202.65.159.0/24 maxlen: 24
2001:df7:bd80::/48 maxlen: 48
2400:3b01::/32 maxlen: 40
2400:3b01::/48 maxlen: 48
2400:3b01:5::/48 maxlen: 48
2400:3b01:6::/48 maxlen: 48
2400:3b01:7::/48 maxlen: 48
2400:3b01:8::/48 maxlen: 48
2400:3b01:9::/48 maxlen: 48
2400:3b01:a::/48 maxlen: 48
2400:3b01:b::/48 maxlen: 48
2400:3b01:c::/48 maxlen: 48
2400:3b01:d::/48 maxlen: 48
2400:3b01:e::/48 maxlen: 48
2400:3b01:f::/48 maxlen: 48
2400:3b01:10::/48 maxlen: 48
2400:3b01:11::/48 maxlen: 48
2400:3b01:12::/48 maxlen: 48
2400:3b01:13::/48 maxlen: 48
2400:3b01:14::/48 maxlen: 48
2400:3b01:15::/48 maxlen: 48
2400:3b01:16::/48 maxlen: 48
2400:3b01:17::/48 maxlen: 48
2400:3b01:18::/48 maxlen: 48
2400:3b01:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60656 (0xecf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 12 11:44:53 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a2bf135-a8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ee:3e:6c:5b:d1:e7:89:a3:b3:98:ab:fe:50:
60:64:b2:c8:44:31:7b:75:42:ac:8c:b5:0a:0b:bf:
d4:f0:b2:ed:59:b9:c9:1a:0f:f7:82:e1:24:5d:52:
f6:02:93:24:0e:5d:85:cc:9c:85:cf:c5:19:9d:38:
fb:da:74:c6:a5:40:33:12:1d:75:6e:6b:89:d7:31:
a6:cc:7a:b8:d0:8c:02:b3:4f:16:2c:ef:da:ce:ab:
ac:fc:da:72:d3:3d:7b:f2:49:8e:8c:e9:9c:66:3a:
5d:12:db:f7:4c:65:fd:b2:2d:cf:e2:2c:5e:cb:88:
66:11:3e:fd:57:ab:ad:70:c6:38:f9:84:c4:42:eb:
84:9d:6a:3b:1c:57:c0:10:53:b8:7c:0b:91:36:a0:
20:a6:65:d7:19:72:8f:eb:ad:a2:22:da:28:e1:6a:
5f:08:6e:41:59:10:71:18:f2:13:e8:81:27:99:f3:
9b:c2:fa:54:0c:08:ad:81:86:f7:15:dd:55:ab:22:
de:15:7d:30:06:98:d8:79:ca:38:9b:48:be:ab:18:
9f:d4:de:46:87:d0:d6:fe:35:c0:7e:67:29:b0:b6:
cf:53:c2:05:5d:91:13:33:2f:ab:69:43:97:71:b8:
38:9a:e0:d5:37:a3:ae:d5:1e:67:d1:13:84:30:e6:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EC:D1:72:B5:07:D6:DD:BD:D0:8E:73:A2:01:C3:11:7E:29:CD:2D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/13A8B71864AE11F1B6B05B759247A888.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.0.0/22
36.50.124.0/23
43.225.24.0/22
43.228.92.0/22
43.249.224.0/22
45.112.28.0/22
45.112.48.0/22
45.127.56.0/22
45.249.76.0/22
49.238.32.0/22
49.238.58.0/23
103.12.116.0/24
103.24.124.0/22
103.41.96.0/22
103.42.200.0/23
103.44.0.0-103.44.2.255
103.69.28.0/23
103.70.129.0-103.70.130.255
103.95.173.0/24
103.99.108.0/22
103.102.18.0/23
103.105.101.0/24
103.105.103.0/24
103.117.36.0/23
103.122.61.0/24
103.154.206.0/24
103.157.12.0/23
103.159.250.0/23
103.161.243.0/24
103.162.128.0/23
103.164.200.0/23
103.168.82.0/23
103.171.190.0/23
103.172.4.0/23
103.172.202.0/23
103.174.80.0/23
103.174.160.0/23
103.183.202.0/23
103.186.254.0/23
103.204.35.0/24
103.206.104.0/22
103.213.202.0/23
103.217.236.0/22
103.220.234.0/23
103.233.73.0/24
103.236.193.0/24
103.239.36.0/22
103.248.208.0/22
103.252.144.0/22
103.255.144.0/22
106.0.36.0/23
182.18.177.0/24
202.63.121.0/24
202.65.129.0-202.65.130.255
202.65.133.0-202.65.134.255
202.65.138.0/24
202.65.142.0/24
202.65.144.0/24
202.65.147.0-202.65.148.255
202.65.154.0/23
202.65.158.0/23
IPv6:
2001:df7:bd80::/48
2400:3b01::/32
Signature Algorithm: sha256WithRSAEncryption
06:68:e0:51:47:1b:cd:ef:c9:1a:3c:69:4a:5d:33:ba:ee:b6:
f7:80:03:58:70:f4:da:96:44:28:48:7f:55:71:db:ea:73:c5:
e5:af:a7:1c:e1:52:c5:fd:f3:da:ec:6c:e2:b1:5c:f5:0e:77:
b5:75:d2:26:e5:40:0c:33:1e:75:46:28:84:17:39:f7:a3:5d:
37:12:67:f6:2e:b7:d2:4d:26:3b:c5:e3:cc:8b:1f:e6:bb:28:
a7:4e:0a:92:31:b8:76:4b:b7:a7:0a:41:81:2e:34:11:04:51:
12:30:af:79:b9:a3:d7:6f:7a:5f:fd:2f:19:f3:a8:b7:b9:67:
a6:13:aa:dc:34:15:95:a4:51:b5:93:a6:2b:aa:18:f9:de:6b:
f1:07:12:4d:7b:e7:7e:07:9c:ed:cb:f0:fb:69:b2:9a:93:b4:
14:25:30:13:3a:43:ad:24:d9:49:70:8e:91:c7:2b:7a:57:3a:
01:14:0c:94:bf:5f:2b:d6:e5:81:46:51:28:c4:5e:31:32:01:
9e:42:b0:4a:17:19:22:d0:87:d4:a6:29:73:a8:39:f9:fe:db:
0d:0b:f4:58:df:28:38:f2:8a:dc:15:5a:d2:fb:61:b6:09:70:
4c:0e:d7:bd:37:85:fa:23:49:55:d3:9e:b4:f7:8b:cc:d5:f7:
9e:49:77:5b
-----BEGIN CERTIFICATE-----
MIIG7jCCBdagAwIBAgIDAOzwMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDYxMjExNDQ1M1oXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmEyYmYxMzUtYThmMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL3uPmxb0eeJo7OYq/5QYGSyyEQxe3VCrIy1Cgu/1PCy7Vm5yRoP94LhJF1S
9gKTJA5dhcychc/FGZ04+9p0xqVAMxIddW5ridcxpsx6uNCMArNPFizv2s6rrPza
ctM9e/JJjozpnGY6XRLb90xl/bItz+IsXsuIZhE+/VerrXDGOPmExELrhJ1qOxxX
wBBTuHwLkTagIKZl1xlyj+utoiLaKOFqXwhuQVkQcRjyE+iBJ5nzm8L6VAwIrYGG
9xXdVasi3hV9MAaY2HnKOJtIvqsYn9TeRofQ1v41wH5nKbC2z1PCBV2REzMvq2lD
l3G4OJrg1TejrtUeZ9EThDDmdd0CAwEAAaOCBBEwggQNMB0GA1UdDgQWBBTf7NFy
tQfW3b3QjnOiAcMRfinNLTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzEzQThCNzE4
NjRBRTExRjFCNkIwNUI3NTkyNDdBODg4LnJvYTCCAc4GCCsGAQUFBwEHAQH/BIIB
vTCCAbkwggGdBAIAATCCAZUDBAIOwAADBAEkMnwDBAIr4RgDBAIr5FwDBAIr+eAD
BAItcBwDBAItcDADBAItfzgDBAIt+UwDBAIx7iADBAEx7joDBABnDHQDBAJnGHwD
BAJnKWADBAFnKsgwCwMDAmcsAwQAZywCAwQBZ0UcMAwDBABnRoEDBABnRoIDBABn
X60DBAJnY2wDBAFnZhIDBABnaWUDBABnaWcDBAFndSQDBABnej0DBABnms4DBAFn
nQwDBAFnn/oDBABnofMDBAFnooADBAFnpMgDBAFnqFIDBAFnq74DBAFnrAQDBAFn
rMoDBAFnrlADBAFnrqADBAFnt8oDBAFnuv4DBABnzCMDBAJnzmgDBAFn1coDBAJn
2ewDBAFn3OoDBABn6UkDBABn7MEDBAJn7yQDBAJn+NADBAJn/JADBAJn/5ADBAFq
ACQDBAC2ErEDBADKP3kwDAMEAMpBgQMEAMpBgjAMAwQAykGFAwQAykGGAwQAykGK
AwQAykGOAwQAykGQMAwDBADKQZMDBADKQZQDBAHKQZoDBAHKQZ4wFgQCAAIwEAMH
ACABDfe9gAMFACQAOwEwDQYJKoZIhvcNAQELBQADggEBAAZo4FFHG83vyRo8aUpd
M7rutveAA1hw9NqWRChIf1Vx2+pzxeWvpxzhUsX989rsbOKxXPUOd7V10iblQAwz
HnVGKIQXOfejXTcSZ/Yut9JNJjvF48yLH+a7KKdOCpIxuHZLt6cKQYEuNBEEURIw
r3m5o9dvel/9LxnzqLe5Z6YTqtw0FZWkUbWTpiuqGPnea/EHEk17534HnO3L8Ptp
spqTtBQlMBM6Q60k2UlwjpHHK3pXOgEUDJS/XyvW5YFGUSjEXjEyAZ5CsEoXGSLQ
h9SmKXOoOfn+2w0L9FjfKDjyitwVWtL7YbYJcEwO1703hfojSVXTnrT3i8zV955J
d1s=
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:12:44 2026 by rpki-client