Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/22F72E28725311EBA9C51756C4F9AE02.roa
File: 22F72E28725311EBA9C51756C4F9AE02.roa (raw, json)
Hash identifier: POpr8wQqUbcrtsin7090l3LSjMlxCYgCxYONDuDwzEA=
Subject key identifier: EC:B3:E1:E8:E2:48:34:C5:F9:79:29:40:48:50:55:FB:8D:AF:6C:C5
Certificate issuer: /CN=A91B477B/serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9
Certificate serial: 0734
Authority key identifier: 1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/22F72E28725311EBA9C51756C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:30:38 +0000
ROA not before: Tue 08 Jul 2025 23:03:44 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 18018
IP address blocks: 110.50.224.0/23 maxlen: 23
110.50.224.0/24 maxlen: 24
110.50.225.0/24 maxlen: 24
110.50.226.0/23 maxlen: 23
110.50.226.0/24 maxlen: 24
110.50.227.0/24 maxlen: 24
110.50.228.0/23 maxlen: 23
110.50.228.0/24 maxlen: 24
110.50.229.0/24 maxlen: 24
110.50.230.0/23 maxlen: 23
110.50.230.0/24 maxlen: 24
110.50.231.0/24 maxlen: 24
110.50.232.0/24 maxlen: 24
110.50.233.0/24 maxlen: 24
110.50.234.0/24 maxlen: 24
110.50.235.0/24 maxlen: 24
110.50.236.0/24 maxlen: 24
110.50.237.0/24 maxlen: 24
110.50.238.0/24 maxlen: 24
110.50.239.0/24 maxlen: 24
114.141.216.0/21 maxlen: 21
114.141.216.0/24 maxlen: 24
114.141.217.0/24 maxlen: 24
114.141.218.0/24 maxlen: 24
114.141.219.0/24 maxlen: 24
114.141.220.0/24 maxlen: 24
114.141.221.0/24 maxlen: 24
114.141.222.0/24 maxlen: 24
114.141.223.0/24 maxlen: 24
202.129.220.0/24 maxlen: 24
202.129.221.0/24 maxlen: 24
202.129.222.0/23 maxlen: 23
202.129.222.0/24 maxlen: 24
202.129.223.0/24 maxlen: 24
202.151.34.0/23 maxlen: 24
202.165.60.0/24 maxlen: 24
202.165.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl
rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B477B, serialNumber=1FC4DFD00DAC34A8EB8463D3951C22A345837AC9
Validity
Not Before: Jul 8 23:03:44 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a4316d-0c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:29:db:3c:5e:eb:0f:39:41:bf:f4:fb:53:
6b:94:ff:d5:6b:3d:97:52:85:7e:66:51:7e:0a:9c:
6b:3c:9e:7a:a6:39:1a:35:57:21:9a:e9:b7:78:ab:
d6:3c:1e:81:e7:67:bb:fc:64:3d:eb:cf:d9:8c:34:
bc:43:44:34:23:ca:6b:93:29:57:90:43:da:68:37:
5f:ca:72:10:44:53:c6:5b:9d:39:2f:87:4e:6e:85:
cc:d7:30:c9:44:67:37:cb:b2:0f:ed:3d:26:fc:c4:
8f:e9:9d:5a:76:8f:00:69:60:db:6f:f0:c7:5e:85:
31:78:5e:c1:1e:ff:03:9e:6d:71:2a:05:a8:33:fd:
b0:2c:db:30:eb:ea:1d:79:ae:ff:c9:ce:98:3d:ec:
d9:41:ed:8c:85:0f:1b:b8:a2:a2:16:be:93:04:95:
28:98:82:d2:57:20:f0:cf:7f:8b:4a:ff:ec:d1:26:
b1:e9:29:80:5a:5d:a2:f9:5c:33:f0:33:a7:e1:77:
cb:71:1c:cd:bb:02:24:43:89:e3:69:e2:65:af:f3:
d4:d0:50:cc:53:32:58:f0:c9:23:7d:ee:ac:24:ab:
68:71:6c:57:6f:40:40:b0:57:99:72:ed:2c:70:a0:
a8:34:c1:d4:78:62:a6:b9:45:17:44:9e:7b:35:16:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B3:E1:E8:E2:48:34:C5:F9:79:29:40:48:50:55:FB:8D:AF:6C:C5
X509v3 Authority Key Identifier:
keyid:1F:C4:DF:D0:0D:AC:34:A8:EB:84:63:D3:95:1C:22:A3:45:83:7A:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/H8Tf0A2sNKjrhGPTlRwio0WDesk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H8Tf0A2sNKjrhGPTlRwio0WDesk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B477B/1C256270725011EBB648F84EC4F9AE02/22F72E28725311EBA9C51756C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
110.50.224.0/20
114.141.216.0/21
202.129.220.0/22
202.151.34.0/23
202.165.60.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:42:21:b7:09:23:8a:94:c7:be:4e:c7:17:3d:fc:07:b4:1d:
a5:17:9d:6f:c9:88:31:51:86:48:59:fe:26:23:4f:b2:71:fe:
09:db:67:ae:c6:7e:f3:39:3c:f1:91:df:f3:95:31:65:00:0f:
1a:28:d0:97:71:b3:60:7c:d7:e8:8d:4a:6f:a2:32:ec:87:24:
04:5e:b8:6e:8f:6f:b7:c0:21:1c:36:4d:59:50:96:e5:0c:73:
93:59:6d:1a:d8:f6:b5:e7:14:58:4b:df:ac:63:77:d7:f4:b1:
65:10:47:87:9c:de:78:65:a2:3e:a7:63:62:cd:0e:67:d6:3e:
05:bc:24:a4:28:db:56:1b:05:34:22:9c:c7:fe:d1:59:67:5a:
13:db:0f:83:16:84:4d:d8:72:e2:a6:70:fc:2d:4a:4d:8f:72:
53:99:8c:13:69:57:8c:ef:24:5d:2d:3e:a6:6a:8f:71:d8:ab:
ba:aa:dc:d9:78:31:ee:79:26:3b:71:8b:94:6b:81:ef:d3:d4:
74:e2:0a:7d:bf:86:82:39:cd:a7:fb:cf:8b:e8:28:b7:37:8e:
5a:d1:79:f6:44:50:7d:e0:63:78:55:4e:74:df:68:d4:11:4c:
6f:f8:fd:ea:16:77:af:d4:aa:bf:0b:61:38:92:97:ac:2e:ad:
b3:f0:12:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:49 2026 by rpki-client