Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5244B24E2CE411F1A71D9A0FA1833773.roa
File: 5244B24E2CE411F1A71D9A0FA1833773.roa (raw, json)
Hash identifier: IWZlHVubI9X5xgd5xesa8ro3IcEFCAfo3biwNn8oTuQ=
Subject key identifier: D3:6E:87:4A:19:F0:D9:51:49:AF:52:A7:66:51:39:8E:E2:67:49:87
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DD4E
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5244B24E2CE411F1A71D9A0FA1833773.roa
Signing time: Tue 31 Mar 2026 09:30:57 +0000
ROA not before: Tue 31 Mar 2026 09:30:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17439
IP address blocks: 43.225.0.0/22 maxlen: 24
45.64.12.0/24 maxlen: 24
45.251.76.0/22 maxlen: 24
49.213.48.0/23 maxlen: 24
103.19.52.0/22 maxlen: 24
103.35.164.0/23 maxlen: 23
103.48.50.0/23 maxlen: 23
103.48.50.0/24 maxlen: 24
103.48.51.0/24 maxlen: 24
103.55.244.0/22 maxlen: 24
103.70.160.0/22 maxlen: 24
103.83.220.0/22 maxlen: 24
103.96.95.0/24 maxlen: 24
103.100.80.0/22 maxlen: 24
103.115.194.0/24 maxlen: 24
103.116.60.0/22 maxlen: 24
103.138.136.0/22 maxlen: 24
103.143.38.0/24 maxlen: 24
103.165.78.0/23 maxlen: 24
103.170.114.0/24 maxlen: 24
103.171.44.0/23 maxlen: 24
103.174.54.0/23 maxlen: 23
103.175.22.0/24 maxlen: 24
103.175.23.0/24 maxlen: 24
103.175.163.0/24 maxlen: 24
103.181.20.0/23 maxlen: 24
103.214.114.0/24 maxlen: 24
103.214.115.0/24 maxlen: 24
103.214.122.0/23 maxlen: 24
103.225.99.0/24 maxlen: 24
103.226.224.0/24 maxlen: 24
103.228.103.0/24 maxlen: 24
103.235.104.0/22 maxlen: 22
103.239.136.0/22 maxlen: 24
103.247.97.0/24 maxlen: 24
103.247.98.0/24 maxlen: 24
137.59.204.0/22 maxlen: 24
202.66.172.0/22 maxlen: 24
203.112.136.0/21 maxlen: 24
203.112.144.0/21 maxlen: 24
2001:df0:3a00::/48 maxlen: 48
2001:df2:f980::/48 maxlen: 48
2407:e9c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 11:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56654 (0xdd4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 31 09:30:57 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69cb9451-a06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1e:53:97:40:16:ba:97:45:4e:6c:71:4e:2a:
2c:91:73:1c:b4:02:7b:b6:26:c9:12:ef:cf:bb:85:
08:40:2e:a7:c7:ec:d3:41:70:04:c8:d0:1c:09:49:
5f:bd:63:3b:c0:c7:9d:2f:ee:57:b6:83:31:bb:cc:
93:3d:fe:e6:0c:13:fb:41:1e:58:fb:90:07:d8:c8:
04:a0:a0:48:fd:ca:2c:23:3f:a2:19:5a:b9:62:6d:
4d:42:73:c6:53:ae:bd:49:f5:ba:71:3c:41:16:aa:
13:e1:ab:8f:a5:a1:4d:9f:ad:f7:14:1e:13:b4:25:
3d:4e:e9:03:72:26:b7:96:50:0b:7c:de:cb:92:51:
a4:5d:fc:d1:09:c3:00:f1:1e:d7:61:75:81:58:e8:
20:63:e7:35:90:2a:b3:8d:2d:53:73:52:e4:4a:eb:
0e:46:ce:ac:1e:ca:29:62:6c:a7:a8:a3:a6:37:16:
26:96:90:b4:02:0a:d2:c5:1f:b9:53:53:d2:32:a4:
9e:36:a0:c0:64:fd:e2:54:5e:32:0b:7e:97:6b:c4:
fd:32:93:15:ce:bb:34:f6:53:8c:02:e3:77:53:b4:
2a:3e:99:04:90:51:59:6c:e4:9e:0c:97:77:d6:f3:
1d:c9:79:b2:22:ea:63:81:72:56:6b:96:74:4f:cc:
40:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6E:87:4A:19:F0:D9:51:49:AF:52:A7:66:51:39:8E:E2:67:49:87
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/5244B24E2CE411F1A71D9A0FA1833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.225.0.0/22
45.64.12.0/24
45.251.76.0/22
49.213.48.0/23
103.19.52.0/22
103.35.164.0/23
103.48.50.0/23
103.55.244.0/22
103.70.160.0/22
103.83.220.0/22
103.96.95.0/24
103.100.80.0/22
103.115.194.0/24
103.116.60.0/22
103.138.136.0/22
103.143.38.0/24
103.165.78.0/23
103.170.114.0/24
103.171.44.0/23
103.174.54.0/23
103.175.22.0/23
103.175.163.0/24
103.181.20.0/23
103.214.114.0/23
103.214.122.0/23
103.225.99.0/24
103.226.224.0/24
103.228.103.0/24
103.235.104.0/22
103.239.136.0/22
103.247.97.0-103.247.98.255
137.59.204.0/22
202.66.172.0/22
203.112.136.0-203.112.151.255
IPv6:
2001:df0:3a00::/48
2001:df2:f980::/48
2407:e9c0::/48
Signature Algorithm: sha256WithRSAEncryption
12:92:4a:71:ab:b9:9c:22:b4:75:7c:29:a9:30:95:65:47:b3:
89:75:d8:91:e4:9b:16:95:c9:d8:51:45:50:02:fd:1b:a7:bf:
cc:3d:af:f8:d7:f1:52:10:69:e7:62:de:6c:be:6e:8a:af:ba:
18:04:37:8e:50:b7:82:85:5f:ac:23:73:3c:14:47:ed:fe:53:
0e:0c:63:28:d1:7a:20:e5:9c:44:65:6a:88:95:d1:c1:f6:09:
e1:14:a2:f7:9a:0b:8f:fb:18:bf:39:af:ce:a3:1d:ae:b8:0b:
75:bd:bd:7f:45:3a:97:0e:d3:5c:16:a4:13:63:70:33:4a:f0:
f1:53:c0:2b:0b:6f:84:53:67:58:a9:66:9c:a6:86:bc:5b:ae:
ee:2a:94:09:af:ef:85:ed:29:74:dd:4f:0b:fd:bc:a5:35:6e:
41:25:09:ad:27:5a:0c:05:c6:a5:bb:80:03:3f:0d:7f:69:35:
aa:2c:26:a5:a9:b6:cb:91:a7:49:39:33:2d:b4:ff:41:e4:c1:
c5:80:2e:62:29:ec:32:b0:11:8b:fc:84:76:3d:ad:f1:48:1f:
65:89:24:14:91:c7:3d:8c:d0:73:94:7b:32:5a:d3:49:62:dd:
94:3c:aa:15:2c:1f:1f:ea:1b:ad:91:cd:cf:17:ea:77:eb:27:
c0:cf:53:9a
-----BEGIN CERTIFICATE-----
MIIGPjCCBSagAwIBAgIDAN1OMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDMzMTA5MzA1N1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjljYjk0NTEtYTA2ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMYeU5dAFrqXRU5scU4qLJFzHLQCe7YmyRLvz7uFCEAup8fs00FwBMjQHAlJ
X71jO8DHnS/uV7aDMbvMkz3+5gwT+0EeWPuQB9jIBKCgSP3KLCM/ohlauWJtTUJz
xlOuvUn1unE8QRaqE+Grj6WhTZ+t9xQeE7QlPU7pA3Imt5ZQC3zey5JRpF380QnD
APEe12F1gVjoIGPnNZAqs40tU3NS5ErrDkbOrB7KKWJsp6ijpjcWJpaQtAIK0sUf
uVNT0jKknjagwGT94lReMgt+l2vE/TKTFc67NPZTjALjd1O0Kj6ZBJBRWWzkngyX
d9bzHcl5siLqY4FyVmuWdE/MQGcCAwEAAaOCA2EwggNdMB0GA1UdDgQWBBTTbodK
GfDZUUmvUqdmUTmO4mdJhzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzUyNDRCMjRF
MkNFNDExRjFBNzFEOUEwRkExODMzNzczLnJvYTCCAR4GCCsGAQUFBwEHAQH/BIIB
DTCCAQkwgeMEAgABMIHcAwQCK+EAAwQALUAMAwQCLftMAwQBMdUwAwQCZxM0AwQB
ZyOkAwQBZzAyAwQCZzf0AwQCZ0agAwQCZ1PcAwQAZ2BfAwQCZ2RQAwQAZ3PCAwQC
Z3Q8AwQCZ4qIAwQAZ48mAwQBZ6VOAwQAZ6pyAwQBZ6ssAwQBZ642AwQBZ68WAwQA
Z6+jAwQBZ7UUAwQBZ9ZyAwQBZ9Z6AwQAZ+FjAwQAZ+LgAwQAZ+RnAwQCZ+toAwQC
Z++IMAwDBABn92EDBABn92IDBAKJO8wDBALKQqwwDAMEA8twiAMEA8twkDAhBAIA
AjAbAwcAIAEN8DoAAwcAIAEN8vmAAwcAJAfpwAAAMA0GCSqGSIb3DQEBCwUAA4IB
AQASkkpxq7mcIrR1fCmpMJVlR7OJddiR5JsWlcnYUUVQAv0bp7/MPa/41/FSEGnn
Yt5svm6Kr7oYBDeOULeChV+sI3M8FEft/lMODGMo0Xog5ZxEZWqIldHB9gnhFKL3
mguP+xi/Oa/Oox2uuAt1vb1/RTqXDtNcFqQTY3AzSvDxU8ArC2+EU2dYqWacpoa8
W67uKpQJr++F7Sl03U8L/bylNW5BJQmtJ1oMBcalu4ADPw1/aTWqLCalqbbLkadJ
OTMttP9B5MHFgC5iKewysBGL/IR2Pa3xSB9liSQUkcc9jNBzlHsyWtNJYt2UPKoV
LB8f6hutkc3PF+p36yfAz1Oa
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:25 2026 by rpki-client