Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC25F854946C11F08D00EB83C4F9AE02.roa
File: CC25F854946C11F08D00EB83C4F9AE02.roa (raw, json)
Hash identifier: kHE1c18DtnLvDlz4U6Z11z5TIDqKg8dvqAkbU0rGuRw=
Subject key identifier: 66:4A:76:5C:B1:A7:2E:7B:B0:F5:56:E6:70:2C:02:5E:83:AC:33:2E
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DA3D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC25F854946C11F08D00EB83C4F9AE02.roa
Signing time: Sun 01 Mar 2026 23:03:08 +0000
ROA not before: Fri 10 Oct 2025 04:33:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 55824
IP address blocks: 45.118.48.0/21 maxlen: 21
45.118.48.0/22 maxlen: 24
45.118.52.0/22 maxlen: 24
45.118.96.0/22 maxlen: 24
45.118.100.0/22 maxlen: 24
45.118.168.0/22 maxlen: 24
45.118.172.0/22 maxlen: 24
45.118.192.0/22 maxlen: 24
45.118.196.0/22 maxlen: 24
45.118.208.0/22 maxlen: 24
45.118.212.0/22 maxlen: 24
45.119.16.0/22 maxlen: 24
45.119.20.0/22 maxlen: 24
45.119.32.0/22 maxlen: 24
45.119.36.0/22 maxlen: 24
45.119.168.0/22 maxlen: 24
45.119.172.0/22 maxlen: 24
45.124.184.0/22 maxlen: 24
45.124.188.0/22 maxlen: 24
45.125.144.0/22 maxlen: 24
45.125.148.0/22 maxlen: 24
45.125.176.0/22 maxlen: 24
45.125.180.0/22 maxlen: 24
45.127.64.0/24 maxlen: 24
45.127.65.0/24 maxlen: 24
45.127.66.0/24 maxlen: 24
45.127.67.0/24 maxlen: 24
45.127.68.0/24 maxlen: 24
45.127.69.0/24 maxlen: 24
45.127.70.0/24 maxlen: 24
45.127.71.0/24 maxlen: 24
45.127.72.0/24 maxlen: 24
45.127.73.0/24 maxlen: 24
45.127.74.0/24 maxlen: 24
45.127.76.0/24 maxlen: 24
45.127.77.0/24 maxlen: 24
103.58.80.0/22 maxlen: 24
103.58.84.0/22 maxlen: 24
103.58.120.0/22 maxlen: 23
103.58.120.0/24 maxlen: 24
103.58.122.0/23 maxlen: 24
103.58.124.0/22 maxlen: 24
103.58.168.0/22 maxlen: 24
103.58.172.0/22 maxlen: 24
103.58.200.0/22 maxlen: 24
103.58.204.0/22 maxlen: 24
103.58.240.0/22 maxlen: 24
103.58.244.0/22 maxlen: 24
103.59.16.0/22 maxlen: 23
103.59.17.0/24 maxlen: 24
103.59.18.0/23 maxlen: 24
103.59.20.0/22 maxlen: 24
103.59.66.0/24 maxlen: 24
103.59.80.0/22 maxlen: 24
103.59.84.0/22 maxlen: 24
103.59.224.0/22 maxlen: 24
103.59.228.0/22 maxlen: 24
103.60.48.0/22 maxlen: 24
103.60.52.0/22 maxlen: 24
103.68.177.0/24 maxlen: 24
103.88.228.0/24 maxlen: 24
103.127.161.0/24 maxlen: 24
103.194.24.0/24 maxlen: 24
103.194.25.0/24 maxlen: 24
103.194.26.0/24 maxlen: 24
103.194.28.0/22 maxlen: 24
103.194.56.0/22 maxlen: 24
103.194.60.0/22 maxlen: 24
103.194.136.0/22 maxlen: 24
103.194.140.0/22 maxlen: 24
103.194.200.0/22 maxlen: 24
103.194.204.0/22 maxlen: 24
103.194.216.0/22 maxlen: 24
103.194.220.0/22 maxlen: 24
103.213.16.0/22 maxlen: 24
103.213.20.0/22 maxlen: 24
103.218.144.0/22 maxlen: 24
103.218.148.0/22 maxlen: 24
220.156.190.0/23 maxlen: 24
2001:df1:5200::/48 maxlen: 48
2001:df3:1e00::/48 maxlen: 48
2406:f00:3::/48 maxlen: 48
2406:f00:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:27:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55869 (0xda3d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 10 04:33:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c5ac-d518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:06:ed:16:0e:26:ba:89:c5:3b:32:90:6e:24:
9f:a9:95:d0:1a:ac:0e:88:ae:01:04:8a:65:8f:ae:
52:77:18:12:f9:7c:26:3e:21:9a:77:a6:9d:c8:da:
6a:ac:13:1c:54:74:c9:96:8c:04:59:83:01:73:31:
30:9c:45:97:02:81:02:e3:b2:62:8d:d0:df:17:4b:
02:79:30:a0:45:39:74:36:9f:17:6c:85:3f:09:b5:
2a:12:50:db:9c:cf:03:9d:51:3b:71:b0:5b:2f:70:
57:7a:45:66:85:78:c9:40:f9:33:52:f2:eb:86:65:
3a:28:64:a5:ae:e0:6e:6a:fe:0f:f1:22:e1:91:ca:
52:70:bb:57:58:9f:6e:7f:2b:aa:a4:0e:b5:9d:26:
75:dd:c5:f2:fb:5f:9e:c0:10:78:86:97:c6:d8:05:
f8:c0:82:fb:f9:1c:4e:72:d2:ea:de:1b:4d:bd:8a:
a7:40:01:24:cd:b3:3a:a3:f7:d5:0a:75:11:b8:cb:
97:d9:e1:87:be:6f:f9:2a:20:38:10:5b:ad:bf:54:
ba:a8:9c:ef:3f:fa:78:2c:72:17:c0:9b:67:d0:ae:
e1:a8:be:61:5a:b6:6f:10:43:c5:fa:e8:78:72:7d:
01:02:27:1d:50:f9:b2:d2:60:77:a0:6f:ba:6a:3d:
f2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:4A:76:5C:B1:A7:2E:7B:B0:F5:56:E6:70:2C:02:5E:83:AC:33:2E
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/CC25F854946C11F08D00EB83C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.118.48.0/21
45.118.96.0/21
45.118.168.0/21
45.118.192.0/21
45.118.208.0/21
45.119.16.0/21
45.119.32.0/21
45.119.168.0/21
45.124.184.0/21
45.125.144.0/21
45.125.176.0/21
45.127.64.0-45.127.74.255
45.127.76.0/23
103.58.80.0/21
103.58.120.0/21
103.58.168.0/21
103.58.200.0/21
103.58.240.0/21
103.59.16.0/21
103.59.66.0/24
103.59.80.0/21
103.59.224.0/21
103.60.48.0/21
103.68.177.0/24
103.88.228.0/24
103.127.161.0/24
103.194.24.0-103.194.26.255
103.194.28.0/22
103.194.56.0/21
103.194.136.0/21
103.194.200.0/21
103.194.216.0/21
103.213.16.0/21
103.218.144.0/21
220.156.190.0/23
IPv6:
2001:df1:5200::/48
2001:df3:1e00::/48
2406:f00:3::/48
2406:f00:7::/48
Signature Algorithm: sha256WithRSAEncryption
ba:c8:e9:5c:45:ec:c6:7e:f5:c5:af:fb:89:3c:eb:b0:00:7e:
06:c0:93:ca:02:51:10:dc:b9:ac:53:e0:78:13:71:51:1f:cf:
3e:44:15:c8:fa:fc:b1:88:20:62:79:54:36:47:1d:56:85:43:
3a:fe:90:8b:a8:7e:d5:59:9a:06:90:82:78:e2:13:c3:e7:4a:
b1:43:73:c4:af:3c:b0:2a:47:21:66:07:85:1b:05:3a:d5:83:
c1:4b:82:0f:be:00:64:a3:17:f4:eb:0a:28:e0:0f:60:75:70:
c9:c5:6f:b7:a6:8c:03:8f:88:9b:8a:f5:6f:88:9c:ed:37:6d:
1c:f5:4c:fb:36:23:d6:b1:82:a2:88:df:90:e1:96:64:43:40:
cc:11:a4:da:f6:ea:04:67:4b:5e:b7:7e:77:b1:1a:73:f0:04:
96:fb:c2:f4:87:a6:c4:75:ff:42:c5:1b:8a:e3:c3:7e:e7:30:
13:a7:87:31:c9:be:ad:91:8c:8c:78:d6:25:db:9d:6e:36:bf:
3b:03:54:57:2e:75:04:d7:ea:ea:83:c4:7d:77:bd:18:20:d7:
ae:90:2e:99:0e:f0:e6:9b:c6:2b:af:87:6e:4d:ce:bd:7d:ed:
a2:00:c3:d7:e0:e8:8b:a0:e1:d2:96:2c:2f:b6:65:61:0e:f9:
3a:89:12:54
-----BEGIN CERTIFICATE-----
MIIGTTCCBTWgAwIBAgIDANo9MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MTAxMDA0MzM0MVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGM1YWMtZDUxODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMIG7RYOJrqJxTsykG4kn6mV0BqsDoiuAQSKZY+uUncYEvl8Jj4hmnemncja
aqwTHFR0yZaMBFmDAXMxMJxFlwKBAuOyYo3Q3xdLAnkwoEU5dDafF2yFPwm1KhJQ
25zPA51RO3GwWy9wV3pFZoV4yUD5M1Ly64ZlOihkpa7gbmr+D/Ei4ZHKUnC7V1if
bn8rqqQOtZ0mdd3F8vtfnsAQeIaXxtgF+MCC+/kcTnLS6t4bTb2Kp0ABJM2zOqP3
1Qp1EbjLl9nhh75v+SogOBBbrb9Uuqic7z/6eCxyF8CbZ9Cu4ai+YVq2bxBDxfro
eHJ9AQInHVD5stJgd6Bvumo98kECAwEAAaOCA3AwggNsMB0GA1UdDgQWBBRmSnZc
sacue7D1VuZwLAJeg6wzLjAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0NDMjVGODU0
OTQ2QzExRjA4RDAwRUI4M0M0RjlBRTAyLnJvYTCCAS0GCCsGAQUFBwEHAQH/BIIB
HDCCARgwgekEAgABMIHiAwQDLXYwAwQDLXZgAwQDLXaoAwQDLXbAAwQDLXbQAwQD
LXcQAwQDLXcgAwQDLXeoAwQDLXy4AwQDLX2QAwQDLX2wMAwDBAYtf0ADBAAtf0oD
BAEtf0wDBANnOlADBANnOngDBANnOqgDBANnOsgDBANnOvADBANnOxADBABnO0ID
BANnO1ADBANnO+ADBANnPDADBABnRLEDBABnWOQDBABnf6EwDAMEA2fCGAMEAGfC
GgMEAmfCHAMEA2fCOAMEA2fCiAMEA2fCyAMEA2fC2AMEA2fVEAMEA2fakAMEAdyc
vjAqBAIAAjAkAwcAIAEN8VIAAwcAIAEN8x4AAwcAJAYPAAADAwcAJAYPAAAHMA0G
CSqGSIb3DQEBCwUAA4IBAQC6yOlcRezGfvXFr/uJPOuwAH4GwJPKAlEQ3LmsU+B4
E3FRH88+RBXI+vyxiCBieVQ2Rx1WhUM6/pCLqH7VWZoGkIJ44hPD50qxQ3PErzyw
KkchZgeFGwU61YPBS4IPvgBkoxf06woo4A9gdXDJxW+3powDj4ibivVviJztN20c
9Uz7NiPWsYKiiN+Q4ZZkQ0DMEaTa9uoEZ0tet353sRpz8ASW+8L0h6bEdf9CxRuK
48N+5zATp4cxyb6tkYyMeNYl251uNr87A1RXLnUE1+rqg8R9d70YINeukC6ZDvDm
m8Yrr4duTc69fe2iAMPX4OiLoOHSliwvtmVhDvk6iRJU
-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:11 2026 by rpki-client