Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3790507E121E11F1BBA0F6E81C3D8C67.roa
File: 3790507E121E11F1BBA0F6E81C3D8C67.roa (raw, json)
Hash identifier: zah2BeImwNBbuUrKudkasW/oUGSqYvjlO0ufZYenqq8=
Subject key identifier: BD:4C:F4:3B:D0:15:99:46:B7:1E:F2:48:11:95:BA:E7:B1:DD:9E:D9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ECE7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3790507E121E11F1BBA0F6E81C3D8C67.roa
Signing time: Fri 12 Jun 2026 11:11:23 +0000
ROA not before: Fri 12 Jun 2026 11:11:23 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 55352
IP address blocks: 36.255.108.0/22 maxlen: 22
36.255.108.0/24 maxlen: 24
36.255.109.0/24 maxlen: 24
36.255.110.0/24 maxlen: 24
36.255.111.0/24 maxlen: 24
36.255.180.0/22 maxlen: 22
36.255.180.0/24 maxlen: 24
36.255.181.0/24 maxlen: 24
36.255.182.0/24 maxlen: 24
36.255.183.0/24 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.224.172.0/24 maxlen: 24
43.224.173.0/24 maxlen: 24
43.231.132.0/22 maxlen: 24
43.231.212.0/22 maxlen: 24
43.231.236.0/22 maxlen: 24
43.231.252.0/22 maxlen: 24
43.247.136.0/22 maxlen: 24
45.112.8.0/22 maxlen: 24
45.114.80.0/22 maxlen: 24
45.115.56.0/24 maxlen: 24
45.115.57.0/24 maxlen: 24
45.115.58.0/24 maxlen: 24
45.115.59.0/24 maxlen: 24
45.117.108.0/22 maxlen: 24
45.251.12.0/24 maxlen: 24
45.251.13.0/24 maxlen: 24
45.251.14.0/24 maxlen: 24
45.251.15.0/24 maxlen: 24
59.152.56.0/22 maxlen: 22
59.152.56.0/24 maxlen: 24
59.152.57.0/24 maxlen: 24
59.152.58.0/24 maxlen: 24
59.152.59.0/24 maxlen: 24
59.153.0.0/22 maxlen: 24
59.153.120.0/22 maxlen: 24
103.8.164.0/22 maxlen: 24
103.29.156.0/22 maxlen: 24
103.36.26.0/24 maxlen: 24
103.36.27.0/24 maxlen: 24
103.53.232.0/22 maxlen: 24
103.54.104.0/22 maxlen: 22
103.54.104.0/24 maxlen: 24
103.54.105.0/24 maxlen: 24
103.54.106.0/24 maxlen: 24
103.54.107.0/24 maxlen: 24
103.57.172.0/22 maxlen: 22
103.57.172.0/24 maxlen: 24
103.57.173.0/24 maxlen: 24
103.57.174.0/24 maxlen: 24
103.57.175.0/24 maxlen: 24
103.60.208.0/22 maxlen: 24
103.75.60.0/23 maxlen: 24
103.83.216.0/22 maxlen: 22
103.83.216.0/24 maxlen: 24
103.83.217.0/24 maxlen: 24
103.83.218.0/24 maxlen: 24
103.83.219.0/24 maxlen: 24
103.102.92.0/22 maxlen: 24
103.114.0.0/22 maxlen: 24
103.119.188.0/22 maxlen: 24
103.131.184.0/22 maxlen: 22
103.131.184.0/24 maxlen: 24
103.131.185.0/24 maxlen: 24
103.131.186.0/24 maxlen: 24
103.131.187.0/24 maxlen: 24
103.136.174.0/24 maxlen: 24
103.148.138.0/24 maxlen: 24
103.148.139.0/24 maxlen: 24
103.155.212.0/23 maxlen: 24
103.156.212.0/23 maxlen: 24
103.163.194.0/23 maxlen: 24
103.169.164.0/24 maxlen: 24
103.169.165.0/24 maxlen: 24
103.176.240.0/23 maxlen: 24
103.179.212.0/23 maxlen: 24
103.181.86.0/24 maxlen: 24
103.183.54.0/23 maxlen: 24
103.197.224.0/22 maxlen: 24
103.198.164.0/22 maxlen: 24
103.200.100.0/22 maxlen: 22
103.200.100.0/24 maxlen: 24
103.200.101.0/24 maxlen: 24
103.200.102.0/24 maxlen: 24
103.200.103.0/24 maxlen: 24
103.200.104.0/22 maxlen: 24
103.200.212.0/22 maxlen: 22
103.200.212.0/24 maxlen: 24
103.200.213.0/24 maxlen: 24
103.200.214.0/24 maxlen: 24
103.200.215.0/24 maxlen: 24
103.203.60.0/22 maxlen: 24
103.204.160.0/22 maxlen: 24
103.205.172.0/22 maxlen: 22
103.205.172.0/24 maxlen: 24
103.205.173.0/24 maxlen: 24
103.205.174.0/24 maxlen: 24
103.205.175.0/24 maxlen: 24
103.220.40.0/22 maxlen: 24
103.221.248.0/22 maxlen: 24
103.226.140.0/22 maxlen: 24
103.226.144.0/22 maxlen: 24
103.226.188.0/22 maxlen: 24
103.226.204.0/22 maxlen: 24
103.226.236.0/22 maxlen: 24
103.226.240.0/22 maxlen: 24
103.234.212.0/22 maxlen: 22
103.234.212.0/24 maxlen: 24
103.234.213.0/24 maxlen: 24
103.234.214.0/24 maxlen: 24
103.234.215.0/24 maxlen: 24
103.234.240.0/22 maxlen: 22
103.234.240.0/24 maxlen: 24
103.234.241.0/24 maxlen: 24
103.234.242.0/24 maxlen: 24
103.234.243.0/24 maxlen: 24
111.125.217.0/24 maxlen: 24
111.125.218.0/23 maxlen: 24
111.125.224.0/24 maxlen: 24
111.125.226.0/24 maxlen: 24
111.125.228.0/24 maxlen: 24
111.125.233.0/24 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
111.125.252.0/22 maxlen: 24
124.66.172.0/22 maxlen: 24
175.100.176.0/20 maxlen: 24
183.87.226.0/24 maxlen: 24
183.87.229.0/24 maxlen: 24
183.87.230.0/24 maxlen: 24
183.87.232.0/24 maxlen: 24
183.87.233.0/24 maxlen: 24
183.87.235.0/24 maxlen: 24
183.87.237.0/24 maxlen: 24
183.87.238.0/24 maxlen: 24
202.168.144.0/22 maxlen: 24
2001:df6:fb80::/48 maxlen: 48
2406:9e00:20::/48 maxlen: 48
2406:9e00:21::/48 maxlen: 48
2406:9e00:22::/48 maxlen: 48
2406:9e00:23::/48 maxlen: 48
2406:9e00:24::/48 maxlen: 48
2406:9e00:25::/48 maxlen: 48
2406:9e00:26::/48 maxlen: 48
2406:9e00:27::/48 maxlen: 48
2406:9e00:28::/48 maxlen: 48
2406:9e00:29::/48 maxlen: 48
2406:9e00:2a::/48 maxlen: 48
2406:9e00:2b::/48 maxlen: 48
2406:9e00:2c::/48 maxlen: 48
2406:9e00:2d::/48 maxlen: 48
2406:9e00:2e::/48 maxlen: 48
2406:9e00:2f::/48 maxlen: 48
2406:9e00:30::/48 maxlen: 48
2406:9e00:31::/48 maxlen: 48
2406:9e00:32::/48 maxlen: 48
2406:9e00:33::/48 maxlen: 48
2406:9e00:34::/48 maxlen: 48
2406:9e00:35::/48 maxlen: 48
2406:9e00:36::/48 maxlen: 48
2406:9e00:37::/48 maxlen: 48
2406:9e00:38::/48 maxlen: 48
2406:9e00:39::/48 maxlen: 48
2406:9e00:3a::/48 maxlen: 48
2406:9e00:3b::/48 maxlen: 48
2406:9e00:3c::/48 maxlen: 48
2406:9e00:3d::/48 maxlen: 48
2406:9e00:3e::/48 maxlen: 48
2406:9e00:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 15:19:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60647 (0xece7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 12 11:11:23 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a2be95b-581e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:e3:18:4a:db:31:38:bb:c0:6d:fe:1e:d0:
50:28:90:2e:2f:38:ae:f7:60:42:c2:ca:96:79:c6:
8a:31:1f:b3:45:04:7c:8c:b9:3e:c7:62:85:47:8a:
8d:e7:fe:9e:57:85:c5:af:55:c4:ad:b6:74:9a:05:
50:61:cb:85:c4:c9:bc:0e:75:8a:12:2a:4a:00:97:
a8:88:c0:ec:4b:c6:86:dc:86:1f:cc:2e:11:16:ae:
4f:1b:66:d0:5e:56:b2:70:7d:a2:6b:98:ae:a1:e2:
57:b1:f9:28:9b:5c:66:02:36:87:a9:e6:e9:ed:d1:
af:8f:2a:68:b2:bc:86:02:b8:ac:82:3d:7e:a5:ec:
78:47:56:a6:eb:f0:75:2b:5a:2d:3f:35:0c:84:c2:
0d:40:35:8e:71:2d:35:a8:51:3b:43:96:15:a4:6b:
46:d2:aa:0a:eb:09:e7:8a:20:f3:3b:ef:19:1b:e9:
d2:5c:f2:4c:7a:d9:7e:b0:66:24:c1:72:38:dc:b7:
3f:c7:5d:a0:c2:e9:ca:d6:57:f3:49:d3:6f:c3:0c:
56:7c:ba:34:46:9b:1e:8d:16:11:cf:ae:57:14:75:
87:f1:f6:fc:8a:1c:7a:66:4a:d9:1a:92:e5:bb:a4:
43:ec:11:02:b6:5b:81:08:52:56:6a:51:d1:22:4b:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4C:F4:3B:D0:15:99:46:B7:1E:F2:48:11:95:BA:E7:B1:DD:9E:D9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3790507E121E11F1BBA0F6E81C3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.108.0/22
36.255.180.0-36.255.187.255
43.224.172.0/23
43.231.132.0/22
43.231.212.0/22
43.231.236.0/22
43.231.252.0/22
43.247.136.0/22
45.112.8.0/22
45.114.80.0/22
45.115.56.0/22
45.117.108.0/22
45.251.12.0/22
59.152.56.0/22
59.153.0.0/22
59.153.120.0/22
103.8.164.0/22
103.29.156.0/22
103.36.26.0/23
103.53.232.0/22
103.54.104.0/22
103.57.172.0/22
103.60.208.0/22
103.75.60.0/23
103.83.216.0/22
103.102.92.0/22
103.114.0.0/22
103.119.188.0/22
103.131.184.0/22
103.136.174.0/24
103.148.138.0/23
103.155.212.0/23
103.156.212.0/23
103.163.194.0/23
103.169.164.0/23
103.176.240.0/23
103.179.212.0/23
103.181.86.0/24
103.183.54.0/23
103.197.224.0/22
103.198.164.0/22
103.200.100.0-103.200.107.255
103.200.212.0/22
103.203.60.0/22
103.204.160.0/22
103.205.172.0/22
103.220.40.0/22
103.221.248.0/22
103.226.140.0-103.226.147.255
103.226.188.0/22
103.226.204.0/22
103.226.236.0-103.226.243.255
103.234.212.0/22
103.234.240.0/22
111.125.217.0-111.125.219.255
111.125.224.0/24
111.125.226.0/24
111.125.228.0/24
111.125.233.0/24
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
111.125.252.0/22
124.66.172.0/22
175.100.176.0/20
183.87.226.0/24
183.87.229.0-183.87.230.255
183.87.232.0/23
183.87.235.0/24
183.87.237.0-183.87.238.255
202.168.144.0/22
IPv6:
2001:df6:fb80::/48
2406:9e00:20::/43
Signature Algorithm: sha256WithRSAEncryption
84:cc:d3:db:42:20:05:bf:84:1e:6c:14:99:80:d3:f5:10:80:
1c:9c:ec:bd:bb:57:7a:0f:f6:09:d7:a1:ea:19:7c:b1:bc:98:
ab:bf:0e:02:bb:6c:6c:9f:be:ab:66:40:ec:2b:70:48:1f:30:
1c:3c:8c:db:58:7a:84:ad:d6:75:a8:f2:1a:91:44:dd:9b:db:
fd:93:8d:f3:31:fc:79:4f:9a:c8:61:2e:0c:61:42:22:ed:ab:
fa:1c:02:8c:f6:93:b5:56:d1:76:0c:30:fb:ec:0a:ef:de:12:
44:e0:f9:c2:67:ff:56:bc:63:18:37:7b:53:a6:49:bf:67:84:
e0:86:8c:17:69:fa:66:82:59:4d:3a:4c:bc:bb:f8:73:20:9c:
48:1e:87:64:35:fa:ff:53:32:b9:8f:83:09:1b:87:2f:e5:c3:
78:36:f4:37:3b:39:a8:e5:4d:0b:c1:86:98:d8:31:f1:ff:96:
fd:64:bb:4a:d8:bf:21:cf:13:4b:27:3f:9a:cc:d3:0e:65:eb:
8c:ed:2e:78:b0:3f:a9:ba:80:f8:d7:ae:ed:c8:1d:11:2f:80:
09:79:05:fb:1a:7e:a7:c2:5f:e5:6c:bd:c3:92:6d:41:dd:52:
8c:3b:5d:03:c0:12:e5:2b:f1:7d:65:c9:a7:56:b9:11:30:0c:
a7:34:57:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:21:52 2026 by rpki-client