Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55EE9E7E86ED11F19E006003A7EE528E.roa
File: 55EE9E7E86ED11F19E006003A7EE528E.roa (raw, json)
Hash identifier: VVTzDYmWtyFeu1Jo7UFbyf/Kw3er7nw0mYZckqk3XSk=
Subject key identifier: CF:AB:9E:78:21:0A:12:B3:FA:60:84:AD:9D:9B:89:49:72:29:C7:9A
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F9CF
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55EE9E7E86ED11F19E006003A7EE528E.roa
Signing time: Tue 28 Jul 2026 10:08:59 +0000
ROA not before: Tue 28 Jul 2026 10:08:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18002
IP address blocks: 14.102.1.0/24 maxlen: 24
14.102.2.0/23 maxlen: 24
14.102.12.0/23 maxlen: 24
14.102.15.0/24 maxlen: 24
14.102.22.0/23 maxlen: 24
14.102.24.0/22 maxlen: 24
14.102.32.0/22 maxlen: 24
14.102.36.0/23 maxlen: 24
14.102.38.0/24 maxlen: 24
14.102.40.0/22 maxlen: 24
14.102.44.0/24 maxlen: 24
14.102.45.0/24 maxlen: 24
14.102.48.0/24 maxlen: 24
14.102.50.0/24 maxlen: 24
14.102.56.0/23 maxlen: 24
14.102.59.0/24 maxlen: 24
14.102.64.0/22 maxlen: 24
14.102.68.0/22 maxlen: 24
14.102.72.0/22 maxlen: 24
14.102.76.0/23 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/23 maxlen: 24
14.102.82.0/24 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.91.0/24 maxlen: 24
14.102.92.0/23 maxlen: 24
14.102.95.0/24 maxlen: 24
14.102.96.0/23 maxlen: 24
14.102.100.0/23 maxlen: 24
14.102.103.0/24 maxlen: 24
14.102.104.0/22 maxlen: 24
14.102.108.0/22 maxlen: 24
14.102.112.0/22 maxlen: 24
14.102.116.0/22 maxlen: 24
14.102.120.0/22 maxlen: 24
14.102.125.0/24 maxlen: 24
14.102.126.0/23 maxlen: 24
43.251.212.0/22 maxlen: 24
61.14.228.0/24 maxlen: 24
61.14.231.0/24 maxlen: 24
103.5.200.0/23 maxlen: 24
103.47.164.0/24 maxlen: 24
103.59.189.0/24 maxlen: 24
103.87.101.0/24 maxlen: 24
103.87.102.0/23 maxlen: 24
103.158.131.0/24 maxlen: 24
103.160.24.0/24 maxlen: 24
103.160.72.0/23 maxlen: 24
103.162.196.0/23 maxlen: 23
103.173.200.0/24 maxlen: 24
103.175.72.0/24 maxlen: 24
103.175.73.0/24 maxlen: 24
110.172.130.0/23 maxlen: 24
110.172.132.0/24 maxlen: 24
110.172.134.0/23 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.138.0/23 maxlen: 24
110.172.140.0/24 maxlen: 24
110.172.147.0/24 maxlen: 24
110.172.150.0/24 maxlen: 24
110.172.151.0/24 maxlen: 24
110.172.152.0/22 maxlen: 24
110.172.156.0/22 maxlen: 24
110.172.160.0/23 maxlen: 24
110.172.162.0/24 maxlen: 24
110.172.164.0/24 maxlen: 24
110.172.166.0/23 maxlen: 24
110.172.168.0/24 maxlen: 24
110.172.170.0/23 maxlen: 24
110.172.174.0/23 maxlen: 24
110.172.177.0/24 maxlen: 24
110.172.178.0/23 maxlen: 24
110.172.184.0/22 maxlen: 24
111.235.64.0/22 maxlen: 24
114.69.228.0/22 maxlen: 24
114.69.240.0/24 maxlen: 24
114.69.242.0/23 maxlen: 24
114.69.248.0/23 maxlen: 24
114.69.252.0/22 maxlen: 24
118.91.176.0/23 maxlen: 24
118.91.178.0/24 maxlen: 24
118.91.189.0/24 maxlen: 24
118.91.191.0/24 maxlen: 24
202.89.64.0/24 maxlen: 24
202.89.65.0/24 maxlen: 24
202.89.66.0/24 maxlen: 24
202.89.67.0/24 maxlen: 24
202.89.68.0/24 maxlen: 24
202.89.69.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
202.89.71.0/24 maxlen: 24
202.89.72.0/24 maxlen: 24
202.89.74.0/24 maxlen: 24
202.89.76.0/24 maxlen: 24
202.89.77.0/24 maxlen: 24
202.89.78.0/24 maxlen: 24
2402:5b00::/44 maxlen: 44
2402:5b00:20::/44 maxlen: 44
2402:5b00:40::/44 maxlen: 44
2402:5b00:b0::/44 maxlen: 44
2402:5b00:d0::/44 maxlen: 44
2402:5b00:e0::/44 maxlen: 44
2402:5b00:f0::/44 maxlen: 44
2402:5b00:110::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 15:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63951 (0xf9cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 28 10:08:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a687fbb-6572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c6:29:d4:8c:ef:64:11:27:63:e9:31:f8:8f:
e0:dc:bd:fb:de:fd:0e:a7:f0:7c:f3:6d:4e:51:85:
27:f8:79:6e:64:51:78:f9:f1:2c:d3:f2:36:e3:a7:
a2:93:f9:5e:08:5a:1e:68:c4:35:7f:97:54:61:8a:
14:ab:0e:74:03:f1:ed:6c:d4:de:1d:f1:cd:0a:f6:
13:f3:ff:41:1a:58:2e:e1:98:f9:c9:1f:cf:6d:32:
0c:d6:f6:a1:25:52:61:1c:b0:9b:83:47:e2:f6:e8:
3f:d1:83:7a:6a:ba:8a:1d:d1:1c:81:67:5c:88:6d:
37:2f:66:fc:54:55:ba:e2:12:f4:f7:2a:16:9d:e6:
06:66:0d:eb:ba:81:5e:7b:74:6c:2b:66:b2:34:47:
1b:26:46:53:7f:2e:71:7d:e4:91:84:81:2d:37:fa:
80:20:20:f8:e0:86:5d:28:89:3d:b4:a3:bf:74:7e:
c9:1b:1a:58:65:5e:5d:62:d0:84:5a:8a:14:37:93:
10:7d:43:cf:7c:c1:5d:f8:66:68:1d:f4:79:05:12:
08:1e:03:f1:34:ab:77:eb:b7:d2:70:22:cb:2e:85:
5d:45:ee:d7:a9:2b:5a:64:ba:f3:49:3c:f0:b1:7d:
40:c9:51:22:b0:42:72:5f:4a:29:d8:00:5b:1a:33:
64:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:AB:9E:78:21:0A:12:B3:FA:60:84:AD:9D:9B:89:49:72:29:C7:9A
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55EE9E7E86ED11F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
14.102.1.0-14.102.3.255
14.102.12.0/23
14.102.15.0/24
14.102.22.0-14.102.27.255
14.102.32.0-14.102.38.255
14.102.40.0-14.102.45.255
14.102.48.0/24
14.102.50.0/24
14.102.56.0/23
14.102.59.0/24
14.102.64.0-14.102.78.255
14.102.80.0-14.102.82.255
14.102.88.0/24
14.102.91.0-14.102.93.255
14.102.95.0-14.102.97.255
14.102.100.0/23
14.102.103.0-14.102.123.255
14.102.125.0-14.102.127.255
43.251.212.0/22
61.14.228.0/24
61.14.231.0/24
103.5.200.0/23
103.47.164.0/24
103.59.189.0/24
103.87.101.0-103.87.103.255
103.158.131.0/24
103.160.24.0/24
103.160.72.0/23
103.162.196.0/23
103.173.200.0/24
103.175.72.0/23
110.172.130.0-110.172.132.255
110.172.134.0-110.172.136.255
110.172.138.0-110.172.140.255
110.172.147.0/24
110.172.150.0-110.172.162.255
110.172.164.0/24
110.172.166.0-110.172.168.255
110.172.170.0/23
110.172.174.0/23
110.172.177.0-110.172.179.255
110.172.184.0/22
111.235.64.0/22
114.69.228.0/22
114.69.240.0/24
114.69.242.0/23
114.69.248.0/23
114.69.252.0/22
118.91.176.0-118.91.178.255
118.91.189.0/24
118.91.191.0/24
202.89.64.0-202.89.72.255
202.89.74.0/24
202.89.76.0-202.89.78.255
IPv6:
2402:5b00::/44
2402:5b00:20::/44
2402:5b00:40::/44
2402:5b00:b0::/44
2402:5b00:d0::-2402:5b00:ff:ffff:ffff:ffff:ffff:ffff
2402:5b00:110::/44
Signature Algorithm: sha256WithRSAEncryption
3b:fc:6e:09:65:7e:4d:1b:b3:fe:d9:71:dd:4f:3c:5a:6a:af:
d9:19:bb:b2:e3:14:49:8e:27:f5:55:64:ec:84:0e:2c:5e:dc:
b0:ef:09:ef:0a:8f:b3:60:7a:6a:4d:31:b9:83:09:b2:6d:d4:
68:ff:5f:8d:fe:9f:39:3c:10:3c:e2:79:6e:50:82:ad:ff:17:
ce:9e:2a:82:d0:b9:aa:f1:0e:6f:09:0d:c1:9a:fc:23:3e:06:
15:84:ab:58:eb:f6:a1:05:24:1d:65:99:98:3b:1c:4c:d9:bb:
bf:50:e0:60:c3:67:6f:b7:20:1c:8d:67:02:ca:8e:1d:a4:0b:
53:85:97:8b:55:53:31:a7:1a:cb:a1:39:7b:93:c3:7e:ab:7f:
d2:45:cc:c7:5c:24:1e:3e:39:33:b1:89:53:c3:25:63:c9:b0:
3a:83:8a:6f:ff:b9:3d:21:be:64:b8:e6:70:4a:17:5e:82:c0:
43:ad:55:ab:31:bb:a3:af:fd:ba:ca:f2:dc:c6:f6:ba:74:11:
09:eb:aa:83:71:47:7a:77:e6:7f:98:45:63:8e:8d:f3:75:a4:
43:15:d4:e7:ea:bf:ad:35:6e:c4:31:fe:05:d2:04:04:91:29:
12:ec:96:b1:9d:31:45:1c:5f:6c:a3:72:23:0c:5a:ce:d3:9b:
9d:6e:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:21:28 2026 by rpki-client