Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/D4B25B928C6B11F09545B981C4F9AE02.roa
File: D4B25B928C6B11F09545B981C4F9AE02.roa (raw, json)
Hash identifier: Vuo+8i5V4Znap+Qs1dOcHdE1nAFejMLQYP5EDIvQcjU=
Subject key identifier: 00:2E:30:55:69:1F:32:FA:FE:15:46:76:CB:43:66:F0:B1:2F:DF:12
Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Certificate serial: 36A6
Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/D4B25B928C6B11F09545B981C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:10:50 +0000
ROA not before: Tue 02 Dec 2025 14:41:47 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 17639
IP address blocks: 103.93.220.0/22 maxlen: 22
111.125.64.0/18 maxlen: 18
111.125.64.0/22 maxlen: 22
111.125.68.0/22 maxlen: 22
111.125.72.0/22 maxlen: 22
111.125.76.0/22 maxlen: 22
111.125.80.0/22 maxlen: 23
111.125.80.0/23 maxlen: 24
111.125.82.0/24 maxlen: 24
111.125.84.0/22 maxlen: 22
111.125.88.0/22 maxlen: 22
111.125.92.0/22 maxlen: 22
111.125.96.0/22 maxlen: 22
111.125.97.0/24 maxlen: 24
111.125.100.0/22 maxlen: 22
111.125.102.0/24 maxlen: 24
111.125.104.0/22 maxlen: 24
111.125.112.0/22 maxlen: 22
111.125.116.0/22 maxlen: 24
111.125.124.0/22 maxlen: 22
111.125.124.0/23 maxlen: 23
111.125.126.0/24 maxlen: 24
120.29.64.0/18 maxlen: 18
120.29.64.0/22 maxlen: 23
120.29.64.0/23 maxlen: 24
120.29.66.0/24 maxlen: 24
120.29.68.0/22 maxlen: 23
120.29.68.0/23 maxlen: 24
120.29.72.0/22 maxlen: 22
120.29.72.0/23 maxlen: 24
120.29.74.0/24 maxlen: 24
120.29.75.0/24 maxlen: 24
120.29.76.0/22 maxlen: 22
120.29.76.0/24 maxlen: 24
120.29.77.0/24 maxlen: 24
120.29.78.0/24 maxlen: 24
120.29.79.0/24 maxlen: 24
120.29.80.0/22 maxlen: 23
120.29.80.0/24 maxlen: 24
120.29.82.0/24 maxlen: 24
120.29.84.0/22 maxlen: 22
120.29.84.0/24 maxlen: 24
120.29.85.0/24 maxlen: 24
120.29.86.0/24 maxlen: 24
120.29.87.0/24 maxlen: 24
120.29.88.0/22 maxlen: 22
120.29.88.0/24 maxlen: 24
120.29.89.0/24 maxlen: 24
120.29.90.0/24 maxlen: 24
120.29.91.0/24 maxlen: 24
120.29.92.0/22 maxlen: 22
120.29.92.0/23 maxlen: 23
120.29.92.0/24 maxlen: 24
120.29.94.0/24 maxlen: 24
120.29.95.0/24 maxlen: 24
120.29.96.0/22 maxlen: 22
120.29.96.0/23 maxlen: 24
120.29.98.0/24 maxlen: 24
120.29.99.0/24 maxlen: 24
120.29.100.0/22 maxlen: 22
120.29.100.0/24 maxlen: 24
120.29.101.0/24 maxlen: 24
120.29.102.0/24 maxlen: 24
120.29.103.0/24 maxlen: 24
120.29.108.0/22 maxlen: 22
120.29.108.0/23 maxlen: 23
120.29.110.0/24 maxlen: 24
120.29.111.0/24 maxlen: 24
120.29.112.0/22 maxlen: 22
120.29.113.0/24 maxlen: 24
120.29.115.0/24 maxlen: 24
120.29.116.0/22 maxlen: 22
120.29.116.0/23 maxlen: 23
120.29.116.0/24 maxlen: 24
120.29.118.0/24 maxlen: 24
120.29.119.0/24 maxlen: 24
120.29.120.0/22 maxlen: 22
120.29.124.0/22 maxlen: 22
121.58.192.0/18 maxlen: 18
121.58.192.0/22 maxlen: 24
121.58.196.0/22 maxlen: 22
121.58.200.0/22 maxlen: 22
121.58.204.0/22 maxlen: 24
121.58.208.0/22 maxlen: 24
121.58.212.0/22 maxlen: 24
121.58.216.0/22 maxlen: 22
121.58.220.0/22 maxlen: 22
121.58.224.0/22 maxlen: 22
121.58.228.0/22 maxlen: 24
121.58.232.0/22 maxlen: 22
121.58.232.0/24 maxlen: 24
121.58.233.0/24 maxlen: 24
121.58.234.0/23 maxlen: 24
121.58.236.0/22 maxlen: 22
121.58.236.0/23 maxlen: 24
121.58.238.0/24 maxlen: 24
121.58.239.0/24 maxlen: 24
121.58.240.0/22 maxlen: 23
121.58.240.0/24 maxlen: 24
121.58.242.0/23 maxlen: 24
121.58.244.0/22 maxlen: 24
121.58.248.0/22 maxlen: 24
121.58.252.0/22 maxlen: 22
123.253.136.0/22 maxlen: 22
123.253.136.0/24 maxlen: 24
123.253.137.0/24 maxlen: 24
123.253.139.0/24 maxlen: 24
202.69.160.0/19 maxlen: 19
202.69.160.0/24 maxlen: 24
202.69.161.0/24 maxlen: 24
202.69.162.0/24 maxlen: 24
202.69.164.0/22 maxlen: 24
202.69.168.0/22 maxlen: 24
202.69.172.0/22 maxlen: 24
202.69.176.0/22 maxlen: 24
202.69.180.0/22 maxlen: 24
202.69.184.0/22 maxlen: 24
202.69.188.0/22 maxlen: 24
210.4.96.0/19 maxlen: 19
210.4.96.0/22 maxlen: 22
210.4.96.0/24 maxlen: 24
210.4.97.0/24 maxlen: 24
210.4.98.0/24 maxlen: 24
210.4.99.0/24 maxlen: 24
210.4.100.0/22 maxlen: 22
210.4.101.0/24 maxlen: 24
210.4.102.0/24 maxlen: 24
210.4.104.0/22 maxlen: 22
210.4.105.0/24 maxlen: 24
210.4.106.0/24 maxlen: 24
210.4.107.0/24 maxlen: 24
210.4.108.0/22 maxlen: 22
210.4.108.0/24 maxlen: 24
210.4.109.0/24 maxlen: 24
210.4.112.0/22 maxlen: 22
210.4.112.0/24 maxlen: 24
210.4.113.0/24 maxlen: 24
210.4.114.0/24 maxlen: 24
210.4.115.0/24 maxlen: 24
210.4.116.0/22 maxlen: 22
210.4.117.0/24 maxlen: 24
210.4.118.0/24 maxlen: 24
210.4.119.0/24 maxlen: 24
210.4.120.0/22 maxlen: 22
210.4.120.0/24 maxlen: 24
210.4.121.0/24 maxlen: 24
210.4.122.0/24 maxlen: 24
210.4.123.0/24 maxlen: 24
210.4.124.0/22 maxlen: 22
210.4.124.0/24 maxlen: 24
210.4.125.0/24 maxlen: 24
210.4.126.0/24 maxlen: 24
210.4.127.0/24 maxlen: 24
2405:3200::/32 maxlen: 32
2405:3200::/36 maxlen: 36
2405:3200:2::/48 maxlen: 48
2405:3200:101::/48 maxlen: 48
2405:3200:107::/48 maxlen: 48
2405:3200:108::/48 maxlen: 48
2405:3200:111::/48 maxlen: 48
2405:3200:112::/48 maxlen: 48
2405:3200:120::/48 maxlen: 48
2405:3200:121::/48 maxlen: 48
2405:3200:122::/48 maxlen: 48
2405:3200:130::/48 maxlen: 48
2405:3200:131::/48 maxlen: 48
2405:3200:132::/48 maxlen: 48
2405:3200:140::/48 maxlen: 48
2405:3200:141::/48 maxlen: 48
2405:3200:142::/48 maxlen: 48
2405:3200:150::/48 maxlen: 48
2405:3200:151::/48 maxlen: 48
2405:3200:152::/48 maxlen: 48
2405:3200:160::/48 maxlen: 48
2405:3200:161::/48 maxlen: 48
2405:3200:162::/48 maxlen: 48
2405:3200:501::/48 maxlen: 48
2405:3200:504::/48 maxlen: 48
2405:3200:505::/48 maxlen: 48
2405:3200:506::/48 maxlen: 48
2405:3200:600::/40 maxlen: 40
2405:3200:610::/48 maxlen: 48
2405:3200:700::/48 maxlen: 48
2405:3200:710::/48 maxlen: 48
2405:3200:1000::/36 maxlen: 36
2405:3200:1200:50::/64 maxlen: 64
2405:3200:1201::/48 maxlen: 48
2405:3200:1202::/48 maxlen: 48
2405:3200:1203::/48 maxlen: 48
2405:3200:1300::/48 maxlen: 48
2405:3200:5002::/48 maxlen: 48
2405:3200:7200::/48 maxlen: 48
2405:3200:b001::/48 maxlen: 48
2405:3200:b100::/48 maxlen: 48
2405:3200:b101::/48 maxlen: 48
2405:3200:e001::/48 maxlen: 48
2405:3200:e100::/48 maxlen: 48
2405:3200:e101::/48 maxlen: 48
2405:3200:f000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 22:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13990 (0x36a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0
Validity
Not Before: Dec 2 14:41:47 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a4812a-2e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:94:73:f5:fc:5d:1d:93:ab:0a:2f:27:74:b4:
3b:96:01:1c:6d:50:7a:c8:60:15:46:02:94:81:34:
3a:15:82:b0:b1:bb:0a:4f:5b:62:51:bc:85:1e:6f:
e2:d0:c3:cd:4f:10:5e:8f:a1:54:30:e6:22:30:3a:
2b:61:3a:a8:74:ed:7a:11:35:e7:0f:50:12:6d:b6:
56:0b:f4:e8:60:6f:3c:a7:f9:46:e8:4a:ac:71:e1:
8f:b9:22:33:0d:0f:6f:6a:3b:26:2a:05:2f:a0:13:
6a:a1:b6:bd:6c:28:29:44:a6:a2:44:97:1f:01:43:
f7:75:06:49:9d:49:e8:ea:69:9e:71:4f:15:b8:32:
9a:56:c6:c5:1a:04:7d:be:90:0f:73:28:f7:db:d4:
44:41:7b:9a:0b:0b:36:bc:74:ba:c3:39:77:b5:51:
ef:47:c5:fc:5b:07:71:2a:e2:97:bf:ee:c4:a0:11:
46:5e:70:36:b7:9b:9c:75:4c:fb:d4:da:6c:9a:b2:
71:91:7b:29:e4:e3:28:6d:29:b0:cc:14:ee:2c:d3:
cc:5f:2d:e7:e5:7f:fb:53:b2:92:8b:3d:f2:5a:12:
6f:0a:8a:4e:9a:25:a9:75:44:5b:23:e1:cd:b1:3b:
ed:3b:57:16:aa:a5:b5:43:44:fb:51:5d:34:97:0a:
48:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2E:30:55:69:1F:32:FA:FE:15:46:76:CB:43:66:F0:B1:2F:DF:12
X509v3 Authority Key Identifier:
keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/D4B25B928C6B11F09545B981C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
103.93.220.0/22
111.125.64.0/18
120.29.64.0/18
121.58.192.0/18
123.253.136.0/22
202.69.160.0/19
210.4.96.0/19
IPv6:
2405:3200::/32
Signature Algorithm: sha256WithRSAEncryption
84:50:e8:a0:fb:5e:4a:f0:f8:90:6d:1d:1a:17:d4:ed:3f:51:
84:93:b4:cb:75:9b:ff:fd:5b:07:6d:2f:df:11:e0:43:1b:08:
44:b2:94:76:ac:7d:d1:08:79:d8:9b:fe:bb:5c:73:6b:45:9e:
b5:0e:7c:2b:2a:89:3a:7f:58:76:57:c8:cc:0e:70:de:3a:59:
b4:b3:de:a8:9e:c4:82:95:19:3a:ae:84:bd:f9:a7:a6:97:4a:
f5:f0:41:fa:b5:2b:45:4e:0c:3e:f2:e7:ee:c2:20:29:b5:67:
3b:bc:6a:41:83:94:22:f8:4e:e0:45:4a:c0:67:24:8b:50:d2:
fa:1e:1a:71:45:16:40:91:ca:bd:3a:a6:b2:f3:8d:96:d8:72:
77:ad:cb:41:63:86:27:05:1e:e8:b1:59:e4:0d:79:c1:f2:f9:
04:13:43:34:c9:0d:f6:78:e9:a9:ed:3a:a1:2d:22:d4:72:69:
b2:10:0a:04:69:31:96:60:b3:e0:ce:88:35:24:34:40:b4:f2:
12:05:ae:32:0c:e4:35:77:8f:5d:c9:44:ea:22:6c:11:46:17:
50:07:0f:1c:9e:ce:8f:99:f0:0f:91:f3:f1:6d:c3:d3:5f:5b:
a3:11:e0:7d:79:49:e5:16:90:99:fc:45:03:8c:fe:37:1d:9e:
7f:95:0f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:58:43 2026 by rpki-client