Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa
File: 1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa (raw, json)
Hash identifier: gxwJGQjNK24Kfrx14GCyCUGKoF19GApk4WQmC3/gOtM=
Subject key identifier: 5B:46:64:55:C3:A4:A8:2F:B1:0C:C6:8E:97:52:B9:6F:0F:95:34:74
Certificate issuer: /CN=A91CD39D/serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Certificate serial: 0638
Authority key identifier: 56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa
Signing time: Mon 03 Nov 2025 00:14:26 +0000
ROA not before: Mon 03 Nov 2025 00:14:26 +0000
ROA not after: Sun 01 Mar 2026 00:00:00 +0000
asID: 55410
IP address blocks: 42.104.64.0/21 maxlen: 24
42.104.72.0/21 maxlen: 24
42.104.80.0/21 maxlen: 24
42.104.88.0/21 maxlen: 24
42.104.96.0/21 maxlen: 24
42.104.104.0/21 maxlen: 24
42.104.112.0/21 maxlen: 24
42.104.120.0/21 maxlen: 24
42.105.253.0/24 maxlen: 24
43.245.88.0/22 maxlen: 24
103.29.44.0/22 maxlen: 24
112.79.32.0/24 maxlen: 24
118.185.0.0/16 maxlen: 16
118.185.0.0/21 maxlen: 24
118.185.8.0/21 maxlen: 24
118.185.16.0/21 maxlen: 24
118.185.24.0/21 maxlen: 21
118.185.24.0/24 maxlen: 24
118.185.25.0/24 maxlen: 24
118.185.26.0/24 maxlen: 24
118.185.27.0/24 maxlen: 24
118.185.28.0/24 maxlen: 24
118.185.29.0/24 maxlen: 24
118.185.30.0/24 maxlen: 24
118.185.31.0/24 maxlen: 24
118.185.32.0/21 maxlen: 24
118.185.40.0/21 maxlen: 24
118.185.48.0/21 maxlen: 24
118.185.56.0/21 maxlen: 24
118.185.64.0/21 maxlen: 24
118.185.72.0/21 maxlen: 24
118.185.80.0/21 maxlen: 24
118.185.88.0/21 maxlen: 24
118.185.96.0/21 maxlen: 21
118.185.97.0/24 maxlen: 24
118.185.98.0/24 maxlen: 24
118.185.99.0/24 maxlen: 24
118.185.100.0/24 maxlen: 24
118.185.101.0/24 maxlen: 24
118.185.102.0/24 maxlen: 24
118.185.103.0/24 maxlen: 24
118.185.104.0/21 maxlen: 24
118.185.112.0/21 maxlen: 24
118.185.120.0/21 maxlen: 24
118.185.128.0/20 maxlen: 21
118.185.128.0/24 maxlen: 24
118.185.129.0/24 maxlen: 24
118.185.130.0/24 maxlen: 24
118.185.131.0/24 maxlen: 24
118.185.132.0/24 maxlen: 24
118.185.133.0/24 maxlen: 24
118.185.134.0/24 maxlen: 24
118.185.135.0/24 maxlen: 24
118.185.136.0/24 maxlen: 24
118.185.137.0/24 maxlen: 24
118.185.138.0/24 maxlen: 24
118.185.139.0/24 maxlen: 24
118.185.140.0/24 maxlen: 24
118.185.141.0/24 maxlen: 24
118.185.142.0/24 maxlen: 24
118.185.143.0/24 maxlen: 24
118.185.144.0/21 maxlen: 24
118.185.152.0/21 maxlen: 24
118.185.160.0/21 maxlen: 24
118.185.168.0/21 maxlen: 24
118.185.176.0/21 maxlen: 24
118.185.184.0/21 maxlen: 24
118.185.192.0/21 maxlen: 24
118.185.200.0/21 maxlen: 24
118.185.208.0/21 maxlen: 24
118.185.216.0/21 maxlen: 24
118.185.224.0/21 maxlen: 24
118.185.232.0/21 maxlen: 24
118.185.240.0/21 maxlen: 24
118.185.248.0/21 maxlen: 24
122.15.0.0/16 maxlen: 16
122.15.0.0/21 maxlen: 24
122.15.8.0/21 maxlen: 24
122.15.16.0/21 maxlen: 24
122.15.24.0/21 maxlen: 24
122.15.32.0/21 maxlen: 24
122.15.40.0/21 maxlen: 24
122.15.48.0/21 maxlen: 24
122.15.56.0/21 maxlen: 24
122.15.64.0/21 maxlen: 24
122.15.72.0/21 maxlen: 24
122.15.80.0/21 maxlen: 24
122.15.88.0/21 maxlen: 24
122.15.96.0/21 maxlen: 24
122.15.104.0/21 maxlen: 24
122.15.112.0/21 maxlen: 24
122.15.120.0/21 maxlen: 24
122.15.128.0/21 maxlen: 24
122.15.136.0/21 maxlen: 24
122.15.144.0/21 maxlen: 24
122.15.152.0/21 maxlen: 24
122.15.160.0/21 maxlen: 24
122.15.168.0/21 maxlen: 24
122.15.176.0/21 maxlen: 24
122.15.184.0/21 maxlen: 24
122.15.192.0/21 maxlen: 24
122.15.200.0/21 maxlen: 24
122.15.208.0/21 maxlen: 24
122.15.216.0/21 maxlen: 24
122.15.224.0/21 maxlen: 24
122.15.232.0/21 maxlen: 24
122.15.240.0/21 maxlen: 24
122.15.248.0/21 maxlen: 24
123.63.0.0/16 maxlen: 16
123.63.0.0/21 maxlen: 24
123.63.8.0/21 maxlen: 24
123.63.16.0/21 maxlen: 24
123.63.24.0/21 maxlen: 24
123.63.32.0/21 maxlen: 24
123.63.40.0/21 maxlen: 24
123.63.48.0/21 maxlen: 24
123.63.56.0/21 maxlen: 24
123.63.64.0/21 maxlen: 24
123.63.72.0/21 maxlen: 24
123.63.80.0/21 maxlen: 24
123.63.88.0/21 maxlen: 24
123.63.96.0/21 maxlen: 24
123.63.104.0/21 maxlen: 24
123.63.112.0/21 maxlen: 24
123.63.120.0/21 maxlen: 24
123.63.128.0/18 maxlen: 18
123.63.128.0/20 maxlen: 24
123.63.144.0/21 maxlen: 24
123.63.152.0/21 maxlen: 24
123.63.160.0/19 maxlen: 19
123.63.160.0/21 maxlen: 24
123.63.168.0/21 maxlen: 24
123.63.176.0/21 maxlen: 24
123.63.184.0/21 maxlen: 24
123.63.192.0/18 maxlen: 18
123.63.192.0/21 maxlen: 24
123.63.200.0/21 maxlen: 24
123.63.208.0/21 maxlen: 24
123.63.216.0/21 maxlen: 24
123.63.224.0/19 maxlen: 19
123.63.224.0/21 maxlen: 24
123.63.232.0/21 maxlen: 24
123.63.240.0/21 maxlen: 24
123.63.248.0/21 maxlen: 24
124.247.192.0/24 maxlen: 24
124.247.193.0/24 maxlen: 24
124.247.194.0/24 maxlen: 24
124.247.198.0/24 maxlen: 24
124.247.199.0/24 maxlen: 24
124.247.201.0/24 maxlen: 24
124.247.203.0/24 maxlen: 24
124.247.204.0/24 maxlen: 24
124.247.205.0/24 maxlen: 24
124.247.224.0/24 maxlen: 24
124.247.228.0/24 maxlen: 24
124.247.229.0/24 maxlen: 24
124.247.230.0/24 maxlen: 24
124.247.231.0/24 maxlen: 24
124.247.232.0/24 maxlen: 24
124.247.233.0/24 maxlen: 24
124.247.234.0/24 maxlen: 24
124.247.235.0/24 maxlen: 24
124.247.236.0/24 maxlen: 24
182.19.0.0/19 maxlen: 19
182.19.0.0/20 maxlen: 24
182.19.16.0/20 maxlen: 24
182.19.32.0/19 maxlen: 19
182.19.32.0/20 maxlen: 24
182.19.48.0/20 maxlen: 24
182.19.64.0/20 maxlen: 24
182.19.80.0/21 maxlen: 24
182.19.88.0/21 maxlen: 24
182.19.96.0/19 maxlen: 24
223.196.18.0/24 maxlen: 24
223.196.25.0/24 maxlen: 24
223.196.36.0/24 maxlen: 24
223.196.39.0/24 maxlen: 24
2400:5200:401::/48 maxlen: 48
2400:5200:402::/48 maxlen: 48
2400:5200:403::/48 maxlen: 48
2400:5200:404::/48 maxlen: 48
2400:5200:c00::/40 maxlen: 48
2400:5200:1000::/40 maxlen: 48
2400:5200:1400::/40 maxlen: 48
2400:5200:1800::/40 maxlen: 48
2400:5200:1c00::/40 maxlen: 48
2400:5200:2000::/36 maxlen: 48
2400:5200:3000::/36 maxlen: 48
2400:5200:4000::/36 maxlen: 48
2400:5200:5000::/36 maxlen: 48
2400:5200:6000::/36 maxlen: 48
2400:5200:7000::/36 maxlen: 48
2400:5200:8000::/36 maxlen: 48
2400:5200:9000::/36 maxlen: 48
2400:5200:a000::/36 maxlen: 48
2400:5200:b000::/36 maxlen: 48
2400:5200:c000::/36 maxlen: 48
2400:5200:d000::/36 maxlen: 48
2400:5200:e000::/36 maxlen: 48
2400:5200:f000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 12 Nov 2025 00:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1592 (0x638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CD39D, serialNumber=56B983E46BCBA115FF2265FE491909C7D74147F3
Validity
Not Before: Nov 3 00:14:26 2025 GMT
Not After : Mar 1 00:00:00 2026 GMT
Subject: CN=6907f3e2-e21a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:a4:64:7d:4d:c8:bf:ce:85:a4:6e:ae:6c:
ea:c4:91:5d:3c:5d:7e:e8:71:55:cc:f7:33:df:4a:
9d:f1:b2:5e:a5:94:b3:f0:ee:76:4d:e7:f5:4c:fa:
50:ff:99:29:3a:d4:93:d2:3f:4b:27:9d:e8:58:6b:
6d:44:79:9b:80:3a:3c:47:20:71:79:00:64:a7:fc:
f6:6d:3b:66:79:92:22:e3:d9:f0:68:46:d3:9d:a8:
8c:e2:c7:12:60:02:ee:41:6e:49:44:ce:5a:d8:25:
ed:77:39:e1:88:5a:81:37:5c:3a:85:5e:10:5c:ee:
1c:3a:5f:66:48:68:ac:f9:68:5c:17:6f:74:c0:46:
00:cf:57:34:82:d1:88:b9:34:4e:84:22:8a:6b:01:
f2:c9:7d:49:8d:88:52:0b:0a:a2:0a:64:94:2a:ba:
07:cc:ac:07:d2:b0:b9:ae:a6:00:39:12:5d:e5:ec:
9c:10:2a:76:ec:ec:cf:a2:38:c8:d6:14:a2:15:b7:
30:72:4f:0e:c6:9c:82:ff:77:eb:2f:3b:54:3a:79:
92:aa:49:67:9d:d8:8f:2a:24:79:b4:1c:d4:10:fb:
c1:a9:e2:8e:b2:40:ab:aa:24:5c:a7:cd:fb:58:d0:
9e:70:38:f1:74:c5:93:45:7e:2c:0f:ab:a7:23:ef:
97:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:46:64:55:C3:A4:A8:2F:B1:0C:C6:8E:97:52:B9:6F:0F:95:34:74
X509v3 Authority Key Identifier:
keyid:56:B9:83:E4:6B:CB:A1:15:FF:22:65:FE:49:19:09:C7:D7:41:47:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/VrmD5GvLoRX_ImX-SRkJx9dBR_M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VrmD5GvLoRX_ImX-SRkJx9dBR_M.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD39D/DE7D2F944E7611ECA5720B79C4F9AE02/1E4EDD1A038411EF9EA1DE1DC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.104.64.0/18
42.105.253.0/24
43.245.88.0/22
103.29.44.0/22
112.79.32.0/24
118.185.0.0/16
122.15.0.0/16
123.63.0.0/16
124.247.192.0-124.247.194.255
124.247.198.0/23
124.247.201.0/24
124.247.203.0-124.247.205.255
124.247.224.0/24
124.247.228.0-124.247.236.255
182.19.0.0/17
223.196.18.0/24
223.196.25.0/24
223.196.36.0/24
223.196.39.0/24
IPv6:
2400:5200:401::-2400:5200:404:ffff:ffff:ffff:ffff:ffff
2400:5200:c00::/40
2400:5200:1000::/40
2400:5200:1400::/40
2400:5200:1800::/40
2400:5200:1c00::/40
2400:5200:2000::-2400:5200:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
53:c0:02:03:e2:0d:d9:d9:b1:9f:91:5b:80:a5:b5:98:37:ac:
f0:04:24:b2:56:6f:8b:63:49:f7:77:59:3c:af:fb:a6:a3:6f:
c7:42:c0:23:76:69:bf:2f:e8:67:83:21:2f:df:58:d7:a6:05:
90:36:c8:f5:f1:50:30:6a:b3:b3:75:15:f7:a2:4b:df:8e:16:
86:ed:1a:1f:56:73:06:f1:00:e7:29:a6:18:41:a5:15:2d:90:
53:c5:ac:60:d5:aa:92:3a:76:d7:8b:a7:ce:fb:da:48:9b:6e:
5e:25:5a:a6:9b:33:7d:13:4c:dd:51:fa:d8:ec:c0:a2:80:bc:
a6:93:44:62:ad:72:f2:5b:0d:fd:ce:5a:43:37:1b:c9:75:46:
47:31:86:d2:0d:79:24:d2:e3:d7:3c:fc:af:5a:40:58:99:32:
84:f5:e4:12:7e:e2:24:64:a5:c4:dc:00:55:59:0b:b0:e9:d5:
c2:ab:a9:67:72:bc:e4:7a:b0:b3:4c:1e:dd:2d:d1:c2:6c:b4:
5f:cf:1d:80:8d:0d:13:7f:2f:db:0a:54:89:8a:7e:d3:23:b3:
09:1e:1d:9c:9f:51:95:c3:f3:41:52:74:e0:08:48:0e:01:e9:
3e:1f:1e:33:25:c7:ee:78:6f:26:a0:11:8e:d6:48:c8:c7:a4:
66:d1:c9:48
-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Q0QzOUQxMTAvBgNVBAUTKDU2Qjk4M0U0NkJDQkExMTVGRjIyNjVGRTQ5MTkwOUM3
RDc0MTQ3RjMwHhcNMjUxMTAzMDAxNDI2WhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OTA3ZjNlMi1lMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvOOkZH1NyL/OhaRurmzqxJFdPF1+6HFVzPcz30qd8bJepZSz8O52Tef1TPpQ
/5kpOtST0j9LJ53oWGttRHmbgDo8RyBxeQBkp/z2bTtmeZIi49nwaEbTnaiM4scS
YALuQW5JRM5a2CXtdznhiFqBN1w6hV4QXO4cOl9mSGis+WhcF290wEYAz1c0gtGI
uTROhCKKawHyyX1JjYhSCwqiCmSUKroHzKwH0rC5rqYAORJd5eycECp27OzPojjI
1hSiFbcwck8OxpyC/3frLztUOnmSqklnndiPKiR5tBzUEPvBqeKOskCrqiRcp837
WNCecDjxdMWTRX4sD6unI++XpQIDAQABo4IDcDCCA2wwHQYDVR0OBBYEFFtGZFXD
pKgvsQzGjpdSuW8PlTR0MB8GA1UdIwQYMBaAFFa5g+Rry6EV/yJl/kkZCcfXQUfz
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDM5RC9ERTdEMkY5NDRF
NzYxMUVDQTU3MjBCNzlDNEY5QUUwMi9Wcm1ENUd2TG9SWF9JbVgtU1JrSng5ZEJS
X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1ZybUQ1R3ZMb1JYX0ltWC1TUmtKeDlkQlJfTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Q0QzOUQvREU3RDJGOTQ0RTc2MTFFQ0E1NzIwQjc5QzRGOUFFMDIvMUU0RUREMUEw
Mzg0MTFFRjlFQTFERTFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgfkGCCsGAQUFBwEHAQH/
BIHpMIHmMIGOBAIAATCBhwMEBipoQAMEACpp/QMEAiv1WAMEAmcdLAMEAHBPIAMD
AHa5AwMAeg8DAwB7PzAMAwQGfPfAAwQAfPfCAwQBfPfGAwQAfPfJMAwDBAB898sD
BAF898wDBAB89+AwDAMEAnz35AMEAHz37AMEB7YTAAMEAN/EEgMEAN/EGQMEAN/E
JAMEAN/EJzBTBAIAAjBNMBIDBwAkAFIABAEDBwAkAFIABAQDBgAkAFIADAMGACQA
UgAQAwYAJABSABQDBgAkAFIAGAMGACQAUgAcMA8DBgUkAFIAIAMFACQAUgAwDQYJ
KoZIhvcNAQELBQADggEBAFPAAgPiDdnZsZ+RW4CltZg3rPAEJLJWb4tjSfd3WTyv
+6ajb8dCwCN2ab8v6GeDIS/fWNemBZA2yPXxUDBqs7N1FfeiS9+OFobtGh9Wcwbx
AOcpphhBpRUtkFPFrGDVqpI6dteLp8772kibbl4lWqabM30TTN1R+tjswKKAvKaT
RGKtcvJbDf3OWkM3G8l1RkcxhtINeSTS49c8/K9aQFiZMoT15BJ+4iRkpcTcAFVZ
C7Dp1cKrqWdyvOR6sLNMHt0t0cJstF/PHYCNDRN/L9sKVImKftMjswkeHZyfUZXD
80FSdOAISA4B6T4fHjMlx+54byagEY7WSMjHpGbRyUg=
-----END CERTIFICATE-----
Generated at Wed Nov 5 13:34:57 2025 by rpki-client