Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89CC3F16872611F0BA88085BC4F9AE02.roa
File: 89CC3F16872611F0BA88085BC4F9AE02.roa (raw, json)
Hash identifier: nujvQURHtNgTMnMQv2pVSRB76yoe20zj8tyCMM5sEYA=
Subject key identifier: 5A:03:C5:03:DC:59:60:36:59:6B:12:98:BC:D9:DC:12:97:ED:74:73
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D9EB
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89CC3F16872611F0BA88085BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 23:01:42 +0000
ROA not before: Mon 01 Sep 2025 11:26:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133720
IP address blocks: 43.241.124.0/24 maxlen: 24
43.241.125.0/24 maxlen: 24
43.241.126.0/24 maxlen: 24
43.241.127.0/24 maxlen: 24
43.255.220.0/22 maxlen: 24
45.249.40.0/22 maxlen: 24
103.6.184.0/22 maxlen: 24
103.25.168.0/22 maxlen: 24
103.39.244.0/22 maxlen: 24
103.49.240.0/22 maxlen: 24
103.61.108.0/24 maxlen: 24
103.74.16.0/22 maxlen: 24
103.87.52.0/22 maxlen: 24
103.174.198.0/24 maxlen: 24
103.212.92.0/22 maxlen: 24
103.230.148.0/22 maxlen: 24
103.240.8.0/22 maxlen: 24
103.248.28.0/22 maxlen: 24
103.249.248.0/22 maxlen: 24
139.5.24.0/22 maxlen: 24
139.5.28.0/22 maxlen: 24
139.5.44.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55787 (0xd9eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 1 11:26:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c556-18e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:4e:30:43:34:b4:2b:e0:09:3d:aa:f0:21:4a:
e7:11:bc:b3:ca:b1:d8:28:18:21:d1:ca:61:81:41:
21:06:fb:3c:2c:7a:34:09:5c:ac:6c:9f:eb:86:43:
11:9f:d4:fd:b0:c3:b3:55:6e:53:1a:cb:02:8b:71:
bf:52:49:4c:2c:d6:91:da:4d:44:7a:fe:2b:be:25:
06:55:73:4b:20:c0:e8:96:0b:91:db:de:7e:e4:2a:
fe:76:26:7f:d7:36:e3:48:f8:36:b8:3a:d9:d7:ab:
60:e9:d8:aa:4d:de:41:c1:38:33:cd:f8:74:90:fb:
02:57:ee:47:56:73:6a:bb:2c:a6:96:42:96:18:37:
f7:9e:fe:59:1f:3c:ae:c0:b1:39:ed:aa:75:ce:66:
89:0a:3e:e5:39:1b:cc:cf:d4:06:7d:be:6c:19:ea:
31:84:2c:f3:3c:77:66:14:19:28:ea:71:ba:6f:c9:
5a:87:4f:4e:f3:2d:98:90:cf:74:96:83:d7:16:e0:
b6:82:c1:fa:fc:38:d5:bc:3a:ee:4b:a9:26:bc:10:
e3:41:50:e8:60:86:45:72:f6:04:82:80:ed:94:30:
af:51:f2:a4:45:22:a9:24:73:7d:cc:17:7b:f6:82:
99:e1:69:aa:8b:15:64:83:f8:14:19:17:73:d6:60:
20:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:C5:03:DC:59:60:36:59:6B:12:98:BC:D9:DC:12:97:ED:74:73
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/89CC3F16872611F0BA88085BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.241.124.0/22
43.255.220.0/22
45.249.40.0/22
103.6.184.0/22
103.25.168.0/22
103.39.244.0/22
103.49.240.0/22
103.61.108.0/24
103.74.16.0/22
103.87.52.0/22
103.174.198.0/24
103.212.92.0/22
103.230.148.0/22
103.240.8.0/22
103.248.28.0/22
103.249.248.0/22
139.5.24.0/21
139.5.44.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:4e:55:89:ad:e0:ae:d4:18:28:66:88:d3:f9:7a:87:74:3f:
44:92:35:fb:28:3b:98:20:3f:06:6d:b3:2d:3a:3b:86:3f:96:
65:5e:99:d6:16:f1:e8:7b:66:73:9d:7d:91:1b:98:31:95:27:
52:8d:56:be:a9:33:95:a5:15:1d:ef:56:44:1d:51:5f:14:51:
63:4f:6f:6c:31:31:01:ef:42:51:87:d1:ff:a0:71:f3:3e:f9:
8e:06:fa:77:c3:50:cb:2d:5a:f1:62:12:fe:cb:63:f5:70:c0:
21:6e:6e:8c:44:43:b8:69:6c:3e:60:de:91:7a:29:2d:f8:b6:
34:76:48:da:ff:a0:5a:53:10:cc:23:6a:40:d1:95:54:6c:1d:
d6:b0:6b:88:85:74:02:75:5c:86:a3:db:56:9a:7e:d1:3f:36:
bc:37:3d:45:07:37:78:5f:13:6d:b6:d7:e7:5b:b5:23:b9:25:
3d:09:e9:61:b0:fb:eb:5e:d6:8b:96:8c:cf:34:b6:6b:09:56:
5a:74:55:c8:89:d9:c5:be:30:26:a5:c6:41:2f:30:5c:da:0b:
e4:10:39:62:cc:5e:de:12:61:c1:52:8f:44:42:f1:5a:32:07:
32:9d:35:48:ba:d7:3d:96:d4:fe:4c:53:9c:19:ce:62:dd:3b:
74:05:f5:a7
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIDANnrMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDkwMTExMjY0NFoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGM1NTYtMThlMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAPFOMEM0tCvgCT2q8CFK5xG8s8qx2CgYIdHKYYFBIQb7PCx6NAlcrGyf64ZD
EZ/U/bDDs1VuUxrLAotxv1JJTCzWkdpNRHr+K74lBlVzSyDA6JYLkdvefuQq/nYm
f9c240j4Nrg62derYOnYqk3eQcE4M834dJD7AlfuR1ZzarssppZClhg3957+WR88
rsCxOe2qdc5miQo+5TkbzM/UBn2+bBnqMYQs8zx3ZhQZKOpxum/JWodPTvMtmJDP
dJaD1xbgtoLB+vw41bw67kupJrwQ40FQ6GCGRXL2BIKA7ZQwr1HypEUiqSRzfcwX
e/aCmeFpqosVZIP4FBkXc9ZgIM0CAwEAAaOCAscwggLDMB0GA1UdDgQWBBRaA8UD
3FlgNllrEpi82dwSl+10czAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzg5Q0MzRjE2
ODcyNjExRjBCQTg4MDg1QkM0RjlBRTAyLnJvYTCBhQYIKwYBBQUHAQcBAf8EdjB0
MHIEAgABMGwDBAIr8XwDBAIr/9wDBAIt+SgDBAJnBrgDBAJnGagDBAJnJ/QDBAJn
MfADBABnPWwDBAJnShADBAJnVzQDBABnrsYDBAJn1FwDBAJn5pQDBAJn8AgDBAJn
+BwDBAJn+fgDBAOLBRgDBAKLBSwwDQYJKoZIhvcNAQELBQADggEBAGxOVYmt4K7U
GChmiNP5eod0P0SSNfsoO5ggPwZtsy06O4Y/lmVemdYW8eh7ZnOdfZEbmDGVJ1KN
Vr6pM5WlFR3vVkQdUV8UUWNPb2wxMQHvQlGH0f+gcfM++Y4G+nfDUMstWvFiEv7L
Y/VwwCFuboxEQ7hpbD5g3pF6KS34tjR2SNr/oFpTEMwjakDRlVRsHdawa4iFdAJ1
XIaj21aaftE/Nrw3PUUHN3hfE2221+dbtSO5JT0J6WGw++te1ouWjM80tmsJVlp0
VciJ2cW+MCalxkEvMFzaC+QQOWLMXt4SYcFSj0RC8VoyBzKdNUi61z2W1P5MU5wZ
zmLdO3QF9ac=
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:19 2026 by rpki-client