Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFD7765202FC11F0A888CF27C4F9AE02.roa
File: FFD7765202FC11F0A888CF27C4F9AE02.roa (raw, json)
Hash identifier: AdyNTS3w9o9KlCOCCiDaXVXeNFKioB9yXOvvOqJu5D4=
Subject key identifier: 3E:84:DD:6E:BE:99:36:53:C8:62:6F:BC:5E:98:E8:54:67:16:1B:64
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: D887
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFD7765202FC11F0A888CF27C4F9AE02.roa
Signing time: Sun 01 Mar 2026 22:55:15 +0000
ROA not before: Thu 08 May 2025 16:30:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 24554
IP address blocks: 36.255.108.0/22 maxlen: 24
36.255.180.0/22 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.224.172.0/22 maxlen: 24
43.241.116.0/22 maxlen: 24
45.116.44.0/22 maxlen: 24
45.117.48.0/22 maxlen: 22
45.117.48.0/24 maxlen: 24
45.117.49.0/24 maxlen: 24
45.117.50.0/24 maxlen: 24
45.117.51.0/24 maxlen: 24
45.117.108.0/22 maxlen: 24
45.117.148.0/22 maxlen: 22
45.117.148.0/24 maxlen: 24
45.117.149.0/24 maxlen: 24
45.117.150.0/24 maxlen: 24
45.117.151.0/24 maxlen: 24
45.117.248.0/22 maxlen: 22
45.117.248.0/24 maxlen: 24
45.117.249.0/24 maxlen: 24
45.117.250.0/24 maxlen: 24
45.117.251.0/24 maxlen: 24
58.146.96.0/19 maxlen: 24
103.29.208.0/22 maxlen: 24
103.51.208.0/22 maxlen: 24
103.53.60.0/22 maxlen: 22
103.53.60.0/24 maxlen: 24
103.53.61.0/24 maxlen: 24
103.53.62.0/24 maxlen: 24
103.53.63.0/24 maxlen: 24
103.53.232.0/22 maxlen: 22
103.53.232.0/24 maxlen: 24
103.53.233.0/24 maxlen: 24
103.53.234.0/24 maxlen: 24
103.53.235.0/24 maxlen: 24
103.54.104.0/22 maxlen: 24
103.57.172.0/22 maxlen: 24
103.195.76.0/22 maxlen: 24
103.200.100.0/22 maxlen: 24
103.200.212.0/22 maxlen: 24
103.203.60.0/22 maxlen: 24
103.234.212.0/22 maxlen: 22
103.234.212.0/24 maxlen: 24
103.234.213.0/24 maxlen: 24
103.234.214.0/24 maxlen: 24
103.234.215.0/24 maxlen: 24
103.234.240.0/22 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
120.138.0.0/22 maxlen: 24
180.148.32.0/19 maxlen: 24
182.237.128.0/18 maxlen: 24
183.87.0.0/21 maxlen: 22
183.87.0.0/24 maxlen: 24
183.87.1.0/24 maxlen: 24
183.87.2.0/24 maxlen: 24
183.87.3.0/24 maxlen: 24
183.87.4.0/24 maxlen: 24
183.87.5.0/24 maxlen: 24
183.87.6.0/24 maxlen: 24
183.87.7.0/24 maxlen: 24
183.87.8.0/22 maxlen: 22
183.87.8.0/24 maxlen: 24
183.87.9.0/24 maxlen: 24
183.87.10.0/24 maxlen: 24
183.87.11.0/24 maxlen: 24
183.87.16.0/22 maxlen: 22
183.87.16.0/24 maxlen: 24
183.87.17.0/24 maxlen: 24
183.87.18.0/24 maxlen: 24
183.87.19.0/24 maxlen: 24
183.87.20.0/22 maxlen: 22
183.87.20.0/24 maxlen: 24
183.87.21.0/24 maxlen: 24
183.87.22.0/24 maxlen: 24
183.87.23.0/24 maxlen: 24
183.87.24.0/22 maxlen: 22
183.87.24.0/24 maxlen: 24
183.87.25.0/24 maxlen: 24
183.87.26.0/24 maxlen: 24
183.87.27.0/24 maxlen: 24
183.87.28.0/22 maxlen: 22
183.87.28.0/24 maxlen: 24
183.87.29.0/24 maxlen: 24
183.87.30.0/24 maxlen: 24
183.87.31.0/24 maxlen: 24
183.87.224.0/20 maxlen: 24
202.177.224.0/19 maxlen: 19
202.177.224.0/22 maxlen: 22
202.177.224.0/24 maxlen: 24
202.177.225.0/24 maxlen: 24
202.177.226.0/24 maxlen: 24
202.177.227.0/24 maxlen: 24
202.177.228.0/22 maxlen: 22
202.177.228.0/24 maxlen: 24
202.177.229.0/24 maxlen: 24
202.177.230.0/24 maxlen: 24
202.177.231.0/24 maxlen: 24
202.177.232.0/22 maxlen: 22
202.177.232.0/24 maxlen: 24
202.177.233.0/24 maxlen: 24
202.177.234.0/24 maxlen: 24
202.177.235.0/24 maxlen: 24
202.177.236.0/22 maxlen: 22
202.177.236.0/24 maxlen: 24
202.177.237.0/24 maxlen: 24
202.177.238.0/24 maxlen: 24
202.177.239.0/24 maxlen: 24
202.177.240.0/22 maxlen: 22
202.177.240.0/24 maxlen: 24
202.177.241.0/24 maxlen: 24
202.177.242.0/24 maxlen: 24
202.177.243.0/24 maxlen: 24
202.177.244.0/22 maxlen: 22
202.177.244.0/24 maxlen: 24
202.177.245.0/24 maxlen: 24
202.177.246.0/24 maxlen: 24
202.177.247.0/24 maxlen: 24
202.177.248.0/22 maxlen: 22
202.177.248.0/24 maxlen: 24
202.177.249.0/24 maxlen: 24
202.177.250.0/24 maxlen: 24
202.177.251.0/24 maxlen: 24
202.177.252.0/22 maxlen: 22
202.177.252.0/24 maxlen: 24
202.177.253.0/24 maxlen: 24
202.177.254.0/24 maxlen: 24
202.177.255.0/24 maxlen: 24
2402:b00::/32 maxlen: 32
2402:b00::/40 maxlen: 48
2402:b00:100::/40 maxlen: 48
2402:b00:200::/40 maxlen: 48
2402:b00:fffb::/48 maxlen: 48
2402:b00:fffc::/48 maxlen: 48
2402:b00:fffd::/48 maxlen: 48
2402:b00:fffe::/48 maxlen: 48
2402:b00:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 07:20:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55431 (0xd887)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 8 16:30:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a4c3d3-1c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:95:84:66:8e:67:18:b9:95:0d:48:75:40:
0f:8e:fe:16:98:79:14:a3:04:81:ba:ef:10:93:4d:
44:3c:3b:86:5b:67:34:58:e0:40:69:2b:ba:cb:b0:
40:6a:7f:84:8d:78:11:46:b0:b2:dd:6d:e0:05:f4:
a0:05:3b:42:10:e8:2b:f9:a0:b3:d9:85:f2:b6:90:
fc:b1:1b:14:56:ce:a3:14:b9:aa:35:6a:1e:cb:4b:
d3:1c:ef:6b:48:ac:da:31:c4:b8:10:b2:fa:85:04:
ea:e5:7b:77:d7:56:48:e5:bf:a9:de:9f:c3:b8:8d:
50:7b:e7:7c:24:0e:ff:59:08:19:ec:83:28:03:f6:
02:f0:f8:e8:69:e8:c2:f7:cf:8f:f5:3b:0b:54:05:
3e:c1:03:b4:6f:0f:59:c2:30:8e:3a:24:60:d8:4c:
bf:d6:57:6e:55:54:69:39:44:2f:bf:73:a5:71:10:
35:d7:3c:ca:25:c0:4d:41:31:85:65:5b:a2:3c:ff:
b5:20:65:ae:30:cd:e0:25:6a:b7:cb:07:21:e1:92:
17:33:35:25:ff:40:b8:86:55:88:0a:9f:62:54:58:
cf:49:a3:04:25:19:17:cc:08:24:38:75:26:38:da:
ab:68:f7:19:23:13:2a:ab:a7:45:69:e8:31:3b:f5:
cc:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:84:DD:6E:BE:99:36:53:C8:62:6F:BC:5E:98:E8:54:67:16:1B:64
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFD7765202FC11F0A888CF27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.108.0/22
36.255.180.0-36.255.187.255
43.224.172.0/22
43.241.116.0/22
45.116.44.0/22
45.117.48.0/22
45.117.108.0/22
45.117.148.0/22
45.117.248.0/22
58.146.96.0/19
103.29.208.0/22
103.51.208.0/22
103.53.60.0/22
103.53.232.0/22
103.54.104.0/22
103.57.172.0/22
103.195.76.0/22
103.200.100.0/22
103.200.212.0/22
103.203.60.0/22
103.234.212.0/22
103.234.240.0/22
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
120.138.0.0/22
180.148.32.0/19
182.237.128.0/18
183.87.0.0-183.87.11.255
183.87.16.0/20
183.87.224.0/20
202.177.224.0/19
IPv6:
2402:b00::/32
Signature Algorithm: sha256WithRSAEncryption
99:b1:35:70:7e:f9:66:6c:28:1e:a5:7f:f7:05:9c:4e:cf:17:
cb:6a:36:56:ea:ed:2b:8e:f2:86:11:bd:89:63:4a:88:15:db:
ae:ea:39:0b:1b:29:9d:0b:5f:dd:93:e6:11:ce:e1:d7:f3:33:
7c:39:02:14:5d:db:62:6d:35:ff:d7:46:65:12:9e:80:3c:2b:
2a:ae:5c:b6:9a:ff:28:64:02:d4:13:5f:61:cf:46:49:49:5a:
1c:e9:e0:57:cb:c9:6f:0f:82:4d:e1:4d:cd:d7:93:2d:f0:41:
fc:03:50:a0:97:16:d3:fc:47:fd:0a:62:96:83:20:fb:f2:65:
27:e4:09:a5:c0:b3:12:4b:dc:92:f8:5d:b7:2d:a9:24:31:63:
6f:73:4e:6c:7b:e4:9d:a8:24:e1:f4:3d:4b:5b:4d:ea:d1:d4:
5f:78:da:db:f8:f2:d6:5a:c5:db:44:17:4a:d6:6d:79:9e:02:
75:27:63:26:6f:10:be:a8:a7:a6:2a:3b:86:21:49:0a:6b:06:
a7:bf:b8:08:f4:81:e9:c3:b1:73:f2:89:9f:c9:d8:b3:21:c0:
1a:5e:48:89:b1:fe:b7:2b:b5:35:a9:64:f8:6f:63:2e:38:ba:
fa:a9:db:ee:2d:56:bd:f7:ee:f1:e4:af:cb:cd:41:e0:d9:be:
8c:c5:0e:2b
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIDANiHMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI1MDUwODE2MzAzMloXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjlhNGMzZDMtMWM2MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALunlYRmjmcYuZUNSHVAD47+Fph5FKMEgbrvEJNNRDw7hltnNFjgQGkrusuw
QGp/hI14EUawst1t4AX0oAU7QhDoK/mgs9mF8raQ/LEbFFbOoxS5qjVqHstL0xzv
a0is2jHEuBCy+oUE6uV7d9dWSOW/qd6fw7iNUHvnfCQO/1kIGeyDKAP2AvD46Gno
wvfPj/U7C1QFPsEDtG8PWcIwjjokYNhMv9ZXblVUaTlEL79zpXEQNdc8yiXATUEx
hWVbojz/tSBlrjDN4CVqt8sHIeGSFzM1Jf9AuIZViAqfYlRYz0mjBCUZF8wIJDh1
Jjjaq2j3GSMTKqunRWnoMTv1zJ8CAwEAAaOCA0YwggNCMB0GA1UdDgQWBBQ+hN1u
vpk2U8hib7xemOhUZxYbZDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZGRDc3NjUy
MDJGQzExRjBBODg4Q0YyN0M0RjlBRTAyLnJvYTCCAQMGCCsGAQUFBwEHAQH/BIHz
MIHwMIHeBAIAATCB1wMEAiT/bDAMAwQCJP+0AwQCJP+4AwQCK+CsAwQCK/F0AwQC
LXQsAwQCLXUwAwQCLXVsAwQCLXWUAwQCLXX4AwQFOpJgAwQCZx3QAwQCZzPQAwQC
ZzU8AwQCZzXoAwQCZzZoAwQCZzmsAwQCZ8NMAwQCZ8hkAwQCZ8jUAwQCZ8s8AwQC
Z+rUAwQCZ+rwAwQAb33sMAwDBABvffEDBABvffIDBABvffkDBAJ4igADBAW0lCAD
BAa27YAwCwMDALdXAwQCt1cIAwQEt1cQAwQEt1fgAwQFyrHgMA0EAgACMAcDBQAk
AgsAMA0GCSqGSIb3DQEBCwUAA4IBAQCZsTVwfvlmbCgepX/3BZxOzxfLajZW6u0r
jvKGEb2JY0qIFduu6jkLGymdC1/dk+YRzuHX8zN8OQIUXdtibTX/10ZlEp6APCsq
rly2mv8oZALUE19hz0ZJSVoc6eBXy8lvD4JN4U3N15Mt8EH8A1CglxbT/Ef9CmKW
gyD78mUn5AmlwLMSS9yS+F23LakkMWNvc05se+SdqCTh9D1LW03q0dRfeNrb+PLW
WsXbRBdK1m15ngJ1J2MmbxC+qKemKjuGIUkKawanv7gI9IHpw7Fz8omfydizIcAa
XkiJsf63K7U1qWT4b2MuOLr6qdvuLVa99+7x5K/LzUHg2b6MxQ4r
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:08:53 2026 by rpki-client