Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/A225B08645C411F0BF201021C4F9AE02.roa
File: A225B08645C411F0BF201021C4F9AE02.roa (raw, json)
Hash identifier: tk+QeZ4UPLzaOPuRtLxQp0dWF4db1YYy867aIGMRWto=
Subject key identifier: 9F:B8:62:C9:DD:B2:9B:4A:D9:84:10:FF:DF:4C:F8:EA:9D:F2:87:BA
Certificate issuer: /CN=A91275FD/serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Certificate serial: 287C
Authority key identifier: 4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/A225B08645C411F0BF201021C4F9AE02.roa
Signing time: Fri 24 Jul 2026 03:03:28 +0000
ROA not before: Tue 10 Jun 2025 06:32:09 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 23944
IP address blocks: 45.127.164.0/22 maxlen: 22
61.9.36.0/22 maxlen: 22
61.9.36.0/24 maxlen: 24
61.9.37.0/24 maxlen: 24
61.9.38.0/24 maxlen: 24
61.9.39.0/24 maxlen: 24
61.9.40.0/22 maxlen: 22
61.9.40.0/24 maxlen: 24
61.9.41.0/24 maxlen: 24
61.9.42.0/24 maxlen: 24
61.9.43.0/24 maxlen: 24
61.9.44.0/22 maxlen: 22
61.9.44.0/24 maxlen: 24
61.9.45.0/24 maxlen: 24
61.9.46.0/24 maxlen: 24
61.9.47.0/24 maxlen: 24
61.9.60.0/22 maxlen: 22
61.9.60.0/24 maxlen: 24
61.9.62.0/23 maxlen: 24
61.9.100.0/22 maxlen: 22
61.9.100.0/24 maxlen: 24
61.9.101.0/24 maxlen: 24
61.9.102.0/24 maxlen: 24
61.9.103.0/24 maxlen: 24
61.9.104.0/22 maxlen: 22
61.9.104.0/24 maxlen: 24
61.9.105.0/24 maxlen: 24
61.9.106.0/24 maxlen: 24
61.9.107.0/24 maxlen: 24
61.9.108.0/22 maxlen: 22
61.9.108.0/24 maxlen: 24
61.9.109.0/24 maxlen: 24
61.9.110.0/24 maxlen: 24
61.9.111.0/24 maxlen: 24
61.9.112.0/22 maxlen: 22
61.9.112.0/24 maxlen: 24
61.9.113.0/24 maxlen: 24
61.9.114.0/24 maxlen: 24
61.9.115.0/24 maxlen: 24
61.9.116.0/22 maxlen: 22
61.9.116.0/24 maxlen: 24
61.9.117.0/24 maxlen: 24
61.9.118.0/24 maxlen: 24
61.9.119.0/24 maxlen: 24
61.9.120.0/22 maxlen: 22
61.9.120.0/24 maxlen: 24
61.9.121.0/24 maxlen: 24
61.9.122.0/24 maxlen: 24
61.9.123.0/24 maxlen: 24
61.9.124.0/22 maxlen: 22
61.9.124.0/24 maxlen: 24
61.9.125.0/24 maxlen: 24
61.9.126.0/24 maxlen: 24
61.9.127.0/24 maxlen: 24
103.196.104.0/22 maxlen: 22
111.68.32.0/19 maxlen: 24
114.108.192.0/18 maxlen: 24
124.158.48.0/20 maxlen: 20
124.158.48.0/22 maxlen: 22
124.158.52.0/22 maxlen: 22
124.158.56.0/22 maxlen: 22
124.158.56.0/24 maxlen: 24
124.158.57.0/24 maxlen: 24
124.158.60.0/22 maxlen: 22
182.18.192.0/18 maxlen: 24
202.128.48.0/20 maxlen: 20
202.128.48.0/22 maxlen: 22
202.128.48.0/24 maxlen: 24
202.128.49.0/24 maxlen: 24
202.128.50.0/23 maxlen: 24
202.128.52.0/22 maxlen: 22
202.128.52.0/24 maxlen: 24
202.128.53.0/24 maxlen: 24
202.128.54.0/24 maxlen: 24
202.128.55.0/24 maxlen: 24
202.128.56.0/23 maxlen: 24
202.128.60.0/22 maxlen: 22
202.128.60.0/24 maxlen: 24
202.128.61.0/24 maxlen: 24
202.128.62.0/24 maxlen: 24
202.128.63.0/24 maxlen: 24
2404:3c00:1000::/36 maxlen: 36
2404:3c00:2000::/36 maxlen: 44
2404:3c00:3000::/36 maxlen: 44
2404:3c00:4000::/36 maxlen: 44
2404:3c00:5000::/36 maxlen: 44
2404:3c00:6000::/36 maxlen: 44
2404:3c00:7000::/36 maxlen: 44
2404:3c00:8000::/36 maxlen: 44
2404:3c00:9000::/36 maxlen: 44
2404:3c00:a000::/36 maxlen: 44
2404:3c00:b000::/36 maxlen: 44
2404:3c00:c000::/36 maxlen: 44
2404:3c00:d000::/36 maxlen: 44
2404:3c00:e000::/36 maxlen: 44
2404:3c00:f000::/36 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10364 (0x287c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91275FD, serialNumber=4E10F13F295FBF2B359C84DDD1651BC851AA8AF5
Validity
Not Before: Jun 10 06:32:09 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=6a62d600-0112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:43:ab:cd:be:b3:c8:1a:98:8d:11:c6:4d:
d2:1d:48:e5:4a:51:a0:e3:8d:cb:1a:cc:71:32:4b:
c6:89:d9:01:25:f2:1e:6a:64:73:d8:66:3f:f7:9c:
2d:15:cc:b0:b4:f7:07:5c:7b:e4:db:89:fd:1e:ca:
d4:50:6e:7a:b7:6a:e8:a8:5d:f8:41:ea:0b:6d:a2:
b3:2c:ff:6f:f8:de:c2:0b:81:22:ba:87:04:fe:50:
2e:c2:3b:b6:66:86:8b:f2:bb:42:54:e3:e7:92:c3:
0a:70:cb:6f:f1:03:54:1b:86:72:5b:b9:e6:f7:2c:
59:47:f6:bc:b4:e9:b1:3d:f5:1e:dd:fc:f3:37:2f:
8c:49:5f:e9:66:44:54:e7:42:2f:49:93:45:50:79:
26:29:0b:c3:b5:e7:16:dc:7d:12:93:e9:e1:82:ff:
24:fd:1c:9d:45:de:bd:62:8b:8f:ce:36:c8:be:98:
7b:54:cc:8f:ac:2d:37:cc:22:2f:81:08:66:08:ad:
b3:a8:8e:46:c7:0b:3c:f5:4e:46:e2:d9:7c:6d:f9:
88:3c:51:14:f2:60:ad:49:f4:fb:1f:8e:fc:02:68:
e9:6f:d3:9b:ab:2b:ed:f2:38:13:fd:1d:f5:9e:f7:
c8:08:4e:22:b9:7c:57:16:06:57:f8:94:3c:bc:b2:
c0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B8:62:C9:DD:B2:9B:4A:D9:84:10:FF:DF:4C:F8:EA:9D:F2:87:BA
X509v3 Authority Key Identifier:
keyid:4E:10:F1:3F:29:5F:BF:2B:35:9C:84:DD:D1:65:1B:C8:51:AA:8A:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/ThDxPylfvys1nITd0WUbyFGqivU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThDxPylfvys1nITd0WUbyFGqivU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91275FD/E1EFD9B6DECE11E4A14F0068C4F9AE02/A225B08645C411F0BF201021C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.127.164.0/22
61.9.36.0-61.9.47.255
61.9.60.0/22
61.9.100.0-61.9.127.255
103.196.104.0/22
111.68.32.0/19
114.108.192.0/18
124.158.48.0/20
182.18.192.0/18
202.128.48.0/20
IPv6:
2404:3c00:1000::-2404:3c00:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
20:0d:3e:80:d2:6f:0b:23:0f:1d:80:77:c5:ae:fe:9a:5b:c8:
76:fe:ab:08:a4:47:17:07:d4:e9:29:03:7a:5d:f9:b7:1a:3d:
bf:f6:e4:43:1a:f6:58:82:c5:27:d1:4b:94:fc:6a:33:9f:29:
ea:4c:5e:dc:c0:a7:65:59:be:28:6b:53:55:60:fa:4c:92:84:
21:eb:dd:dc:53:5d:23:30:d5:7e:c2:44:b9:02:5d:49:a4:18:
cb:2a:40:e5:72:5d:ef:43:96:c8:4a:7d:e4:ea:52:f6:80:b8:
4a:f5:8e:06:01:e5:8e:f8:5b:b9:88:b2:3a:39:18:42:04:23:
3e:2e:17:c6:8a:fb:af:03:5d:a1:1d:c7:d1:42:6b:64:cf:0b:
78:e5:df:02:29:0b:dd:04:bc:38:39:22:23:f8:e1:7c:40:3d:
f7:b6:45:02:ec:c6:ef:5d:66:6c:8f:b4:d4:18:4c:29:40:e6:
b8:8f:aa:22:f6:03:82:cb:6d:ca:4e:3c:39:57:aa:4a:1e:53:
1c:ac:1b:bb:37:a5:d3:d0:02:2e:f3:90:3e:e5:7e:f6:3e:00:
99:ef:19:00:2e:a6:b2:b5:fd:47:4d:b9:96:eb:2c:f0:55:2f:
41:de:26:10:c8:8a:ac:45:67:08:3e:49:32:c9:c0:57:3a:1a:
1a:da:16:75
-----BEGIN CERTIFICATE-----
MIIFmzCCBIOgAwIBAgICKHwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjc1RkQxMTAvBgNVBAUTKDRFMTBGMTNGMjk1RkJGMkIzNTlDODREREQxNjUxQkM4
NTFBQThBRjUwHhcNMjUwNjEwMDYzMjA5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTYyZDYwMC0wMTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuCdDq82+s8gamI0Rxk3SHUjlSlGg443LGsxxMkvGidkBJfIeamRz2GY/95wt
FcywtPcHXHvk24n9HsrUUG56t2roqF34QeoLbaKzLP9v+N7CC4EiuocE/lAuwju2
ZoaL8rtCVOPnksMKcMtv8QNUG4ZyW7nm9yxZR/a8tOmxPfUe3fzzNy+MSV/pZkRU
50IvSZNFUHkmKQvDtecW3H0Sk+nhgv8k/RydRd69YouPzjbIvph7VMyPrC03zCIv
gQhmCK2zqI5Gxws89U5G4tl8bfmIPFEU8mCtSfT7H478Amjpb9Obqyvt8jgT/R31
nvfICE4iuXxXFgZX+JQ8vLLAJQIDAQABo4ICvzCCArswHQYDVR0OBBYEFJ+4Ysnd
sptK2YQQ/99M+Oqd8oe6MB8GA1UdIwQYMBaAFE4Q8T8pX78rNZyE3dFlG8hRqor1
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzVGRC9FMUVGRDlCNkRF
Q0UxMUU0QTE0RjAwNjhDNEY5QUUwMi9UaER4UHlsZnZ5czFuSVRkMFdVYnlGR3Fp
dlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RoRHhQeWxmdnlzMW5JVGQwV1VieUZHcWl2VS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Mjc1RkQvRTFFRkQ5QjZERUNFMTFFNEExNEYwMDY4QzRGOUFFMDIvQTIyNUIwODY0
NUM0MTFGMEJGMjAxMDIxQzRGOUFFMDIucm9hMH4GCCsGAQUFBwEHAQH/BG8wbTBS
BAIAATBMAwQCLX+kMAwDBAI9CSQDBAQ9CSADBAI9CTwwDAMEAj0JZAMEBz0JAAME
AmfEaAMEBW9EIAMEBnJswAMEBHyeMAMEBrYSwAMEBMqAMDAXBAIAAjARMA8DBgQk
BDwAEAMFACQEPAAwDQYJKoZIhvcNAQELBQADggEBACANPoDSbwsjDx2Ad8Wu/ppb
yHb+qwikRxcH1OkpA3pd+bcaPb/25EMa9liCxSfRS5T8ajOfKepMXtzAp2VZvihr
U1Vg+kyShCHr3dxTXSMw1X7CRLkCXUmkGMsqQOVyXe9DlshKfeTqUvaAuEr1jgYB
5Y74W7mIsjo5GEIEIz4uF8aK+68DXaEdx9FCa2TPC3jl3wIpC90EvDg5IiP44XxA
Pfe2RQLsxu9dZmyPtNQYTClA5riPqiL2A4LLbcpOPDlXqkoeUxysG7s3pdPQAi7z
kD7lfvY+AJnvGQAuprK1/UdNuZbrLPBVL0HeJhDIiqxFZwg+STLJwFc6GhraFnU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:24:25 2026 by rpki-client