Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3790507E121E11F1BBA0F6E81C3D8C67.roa
File: 3790507E121E11F1BBA0F6E81C3D8C67.roa (raw, json)
Hash identifier: apgij4czxqUPNg/JyG7cPVLHBTXleiho83ciJeZVqEY=
Subject key identifier: 9C:E1:1A:5D:42:B6:5F:C9:5C:C3:66:3B:E4:8C:AE:F0:AD:72:31:A1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DB3B
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3790507E121E11F1BBA0F6E81C3D8C67.roa
Signing time: Sun 01 Mar 2026 23:07:25 +0000
ROA not before: Wed 25 Feb 2026 07:47:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55352
IP address blocks: 36.255.180.0/22 maxlen: 22
36.255.180.0/24 maxlen: 24
36.255.181.0/24 maxlen: 24
36.255.182.0/24 maxlen: 24
36.255.183.0/24 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.231.132.0/22 maxlen: 24
43.231.212.0/22 maxlen: 24
43.231.236.0/22 maxlen: 24
43.231.252.0/22 maxlen: 24
43.247.136.0/22 maxlen: 24
45.112.8.0/22 maxlen: 24
45.114.80.0/22 maxlen: 24
45.115.56.0/24 maxlen: 24
45.115.57.0/24 maxlen: 24
45.115.58.0/24 maxlen: 24
45.115.59.0/24 maxlen: 24
45.117.108.0/22 maxlen: 24
45.251.12.0/24 maxlen: 24
45.251.13.0/24 maxlen: 24
45.251.14.0/24 maxlen: 24
45.251.15.0/24 maxlen: 24
59.152.56.0/22 maxlen: 22
59.152.56.0/24 maxlen: 24
59.152.57.0/24 maxlen: 24
59.152.58.0/24 maxlen: 24
59.152.59.0/24 maxlen: 24
59.153.0.0/22 maxlen: 24
59.153.120.0/22 maxlen: 24
103.8.164.0/22 maxlen: 24
103.29.156.0/22 maxlen: 24
103.36.26.0/24 maxlen: 24
103.36.27.0/24 maxlen: 24
103.57.172.0/22 maxlen: 22
103.57.172.0/24 maxlen: 24
103.57.173.0/24 maxlen: 24
103.57.174.0/24 maxlen: 24
103.57.175.0/24 maxlen: 24
103.60.208.0/22 maxlen: 24
103.75.60.0/23 maxlen: 24
103.83.216.0/22 maxlen: 22
103.83.216.0/24 maxlen: 24
103.83.217.0/24 maxlen: 24
103.83.218.0/24 maxlen: 24
103.83.219.0/24 maxlen: 24
103.102.92.0/22 maxlen: 24
103.114.0.0/22 maxlen: 24
103.119.188.0/22 maxlen: 24
103.131.184.0/22 maxlen: 22
103.131.184.0/24 maxlen: 24
103.131.185.0/24 maxlen: 24
103.131.186.0/24 maxlen: 24
103.131.187.0/24 maxlen: 24
103.136.174.0/24 maxlen: 24
103.155.212.0/23 maxlen: 24
103.156.212.0/23 maxlen: 24
103.163.194.0/23 maxlen: 24
103.169.164.0/24 maxlen: 24
103.169.165.0/24 maxlen: 24
103.176.240.0/23 maxlen: 24
103.179.212.0/23 maxlen: 24
103.181.86.0/24 maxlen: 24
103.183.54.0/23 maxlen: 24
103.197.224.0/22 maxlen: 24
103.198.164.0/22 maxlen: 24
103.200.100.0/22 maxlen: 22
103.200.100.0/24 maxlen: 24
103.200.101.0/24 maxlen: 24
103.200.102.0/24 maxlen: 24
103.200.103.0/24 maxlen: 24
103.200.104.0/22 maxlen: 24
103.200.212.0/22 maxlen: 22
103.200.212.0/24 maxlen: 24
103.200.213.0/24 maxlen: 24
103.200.214.0/24 maxlen: 24
103.200.215.0/24 maxlen: 24
103.204.160.0/22 maxlen: 24
103.205.172.0/22 maxlen: 22
103.205.172.0/24 maxlen: 24
103.205.173.0/24 maxlen: 24
103.205.174.0/24 maxlen: 24
103.205.175.0/24 maxlen: 24
103.220.40.0/22 maxlen: 24
103.221.248.0/22 maxlen: 24
103.226.140.0/22 maxlen: 24
103.226.144.0/22 maxlen: 24
103.226.188.0/22 maxlen: 24
103.226.204.0/22 maxlen: 24
103.226.236.0/22 maxlen: 24
103.226.240.0/22 maxlen: 24
103.234.212.0/22 maxlen: 22
103.234.212.0/24 maxlen: 24
103.234.213.0/24 maxlen: 24
103.234.214.0/24 maxlen: 24
103.234.215.0/24 maxlen: 24
103.234.240.0/22 maxlen: 22
103.234.240.0/24 maxlen: 24
103.234.241.0/24 maxlen: 24
103.234.242.0/24 maxlen: 24
103.234.243.0/24 maxlen: 24
111.125.217.0/24 maxlen: 24
111.125.218.0/23 maxlen: 24
111.125.224.0/24 maxlen: 24
111.125.226.0/24 maxlen: 24
111.125.228.0/24 maxlen: 24
111.125.233.0/24 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
111.125.252.0/22 maxlen: 24
124.66.172.0/22 maxlen: 24
175.100.176.0/20 maxlen: 24
202.168.144.0/22 maxlen: 24
2001:df6:fb80::/48 maxlen: 48
2406:9e00:20::/48 maxlen: 48
2406:9e00:21::/48 maxlen: 48
2406:9e00:22::/48 maxlen: 48
2406:9e00:23::/48 maxlen: 48
2406:9e00:24::/48 maxlen: 48
2406:9e00:25::/48 maxlen: 48
2406:9e00:26::/48 maxlen: 48
2406:9e00:27::/48 maxlen: 48
2406:9e00:28::/48 maxlen: 48
2406:9e00:29::/48 maxlen: 48
2406:9e00:2a::/48 maxlen: 48
2406:9e00:2b::/48 maxlen: 48
2406:9e00:2c::/48 maxlen: 48
2406:9e00:2d::/48 maxlen: 48
2406:9e00:2e::/48 maxlen: 48
2406:9e00:2f::/48 maxlen: 48
2406:9e00:30::/48 maxlen: 48
2406:9e00:31::/48 maxlen: 48
2406:9e00:32::/48 maxlen: 48
2406:9e00:33::/48 maxlen: 48
2406:9e00:34::/48 maxlen: 48
2406:9e00:35::/48 maxlen: 48
2406:9e00:36::/48 maxlen: 48
2406:9e00:37::/48 maxlen: 48
2406:9e00:38::/48 maxlen: 48
2406:9e00:39::/48 maxlen: 48
2406:9e00:3a::/48 maxlen: 48
2406:9e00:3b::/48 maxlen: 48
2406:9e00:3c::/48 maxlen: 48
2406:9e00:3d::/48 maxlen: 48
2406:9e00:3e::/48 maxlen: 48
2406:9e00:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56123 (0xdb3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Feb 25 07:47:22 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c6ad-d48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0d:bd:8a:46:9d:1d:fa:97:80:96:9e:10:c3:
3c:70:bb:42:5c:c3:97:a7:4e:bf:99:75:bd:44:20:
b1:0c:9b:45:98:57:aa:84:85:ff:58:2b:c6:34:4c:
6a:22:28:63:fe:1e:a6:9e:ab:d4:1a:eb:8e:73:df:
7b:26:ac:a7:ad:8b:34:34:48:da:5e:db:c3:a2:1c:
ce:63:3f:ad:61:be:05:f9:bf:9a:1f:9b:5c:20:6c:
f5:be:7b:8a:cd:9b:00:68:c1:04:d1:1e:43:22:08:
10:cf:30:16:8a:d1:d9:3f:eb:06:71:f4:d6:f4:5b:
ef:88:72:e5:96:9d:b9:77:ff:8d:81:af:c7:6d:31:
22:ea:71:c9:7f:64:3a:83:ad:e4:3d:35:1c:85:f8:
44:fd:67:6b:83:c7:9c:a9:1e:f1:6c:49:3f:69:98:
82:29:68:6b:f6:58:f1:53:2a:13:2e:f2:72:1a:7f:
2a:20:74:2e:82:d5:99:ed:a8:fb:26:2a:db:47:ec:
0e:26:a8:90:31:4f:c4:c7:3b:54:00:66:72:13:20:
9f:32:d6:6e:e2:0e:3c:3c:44:67:2e:df:07:de:7f:
43:1f:b0:fd:24:f5:61:73:06:c9:bd:b4:a2:a0:90:
f4:46:a5:16:26:0b:39:7c:40:77:e2:81:13:a5:94:
5b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E1:1A:5D:42:B6:5F:C9:5C:C3:66:3B:E4:8C:AE:F0:AD:72:31:A1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3790507E121E11F1BBA0F6E81C3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.180.0-36.255.187.255
43.231.132.0/22
43.231.212.0/22
43.231.236.0/22
43.231.252.0/22
43.247.136.0/22
45.112.8.0/22
45.114.80.0/22
45.115.56.0/22
45.117.108.0/22
45.251.12.0/22
59.152.56.0/22
59.153.0.0/22
59.153.120.0/22
103.8.164.0/22
103.29.156.0/22
103.36.26.0/23
103.57.172.0/22
103.60.208.0/22
103.75.60.0/23
103.83.216.0/22
103.102.92.0/22
103.114.0.0/22
103.119.188.0/22
103.131.184.0/22
103.136.174.0/24
103.155.212.0/23
103.156.212.0/23
103.163.194.0/23
103.169.164.0/23
103.176.240.0/23
103.179.212.0/23
103.181.86.0/24
103.183.54.0/23
103.197.224.0/22
103.198.164.0/22
103.200.100.0-103.200.107.255
103.200.212.0/22
103.204.160.0/22
103.205.172.0/22
103.220.40.0/22
103.221.248.0/22
103.226.140.0-103.226.147.255
103.226.188.0/22
103.226.204.0/22
103.226.236.0-103.226.243.255
103.234.212.0/22
103.234.240.0/22
111.125.217.0-111.125.219.255
111.125.224.0/24
111.125.226.0/24
111.125.228.0/24
111.125.233.0/24
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
111.125.252.0/22
124.66.172.0/22
175.100.176.0/20
202.168.144.0/22
IPv6:
2001:df6:fb80::/48
2406:9e00:20::/43
Signature Algorithm: sha256WithRSAEncryption
57:72:50:90:08:ea:8a:ab:1f:9e:71:4c:9a:96:ee:f1:00:a0:
3e:d4:9c:87:a7:db:98:62:a2:54:04:2f:20:55:28:e5:08:49:
e8:7e:ad:4d:4c:7a:d5:05:c2:76:94:e3:37:08:a8:de:d0:b1:
bb:c5:b0:94:5d:27:d4:88:67:1a:12:e9:7b:91:a2:90:9c:c4:
fa:a6:0e:a9:e9:e3:95:dc:f8:f5:a1:d5:46:e0:d8:b7:6f:3a:
5b:e0:2d:88:6c:e5:0c:93:26:2f:41:9d:fe:3c:ff:a1:64:84:
0a:30:b7:95:b3:cb:d3:68:1d:ac:ed:80:e8:32:8e:11:9e:eb:
de:90:c4:57:29:45:15:19:46:a1:1a:d7:93:1c:61:f1:80:fc:
25:b4:f8:1b:44:73:9f:da:85:52:42:41:da:f1:ec:fd:b0:1e:
58:b7:18:85:83:2b:f9:48:88:51:38:4f:8b:1a:96:c0:4b:e3:
d5:7d:c8:d9:e9:44:4c:54:e2:77:ca:e7:11:82:07:f6:14:a4:
51:be:35:57:57:11:3f:47:11:14:d9:fb:1f:cd:b0:91:fc:6c:
d6:3a:e4:b3:39:b4:2b:d5:34:74:9c:c0:47:96:f6:cb:a5:61:
4b:a0:27:f9:80:5f:14:ff:d8:c3:21:20:a5:e4:db:7c:de:42:
02:be:eb:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:05:48 2026 by rpki-client