Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
File: 4DEF33661FBE11EF97E7974FC4F9AE02.roa (raw, json)
Hash identifier: kyVueBILNRn14xtrsjiXrhVGSlkpiTpTchoVVswAH6M=
Subject key identifier: A8:E5:7E:7E:68:C9:14:6B:B5:7F:BD:1A:03:E1:0F:DB:BF:C2:50:99
Certificate issuer: /CN=A9148D01/serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Certificate serial: 07DB
Authority key identifier: 7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
Signing time: Thu 17 Sep 2026 07:35:18 +0000
ROA not before: Thu 17 Sep 2026 07:35:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17762
IP address blocks: 49.248.0.0/17 maxlen: 21
49.248.0.0/18 maxlen: 24
49.248.64.0/19 maxlen: 24
49.248.96.0/22 maxlen: 22
49.248.96.0/23 maxlen: 24
49.248.104.0/21 maxlen: 24
49.248.112.0/20 maxlen: 23
49.248.112.0/21 maxlen: 24
49.248.120.0/22 maxlen: 24
49.248.124.0/23 maxlen: 24
49.248.126.0/24 maxlen: 24
49.248.128.0/18 maxlen: 18
49.248.128.0/21 maxlen: 23
49.248.129.0/24 maxlen: 24
49.248.135.0/24 maxlen: 24
49.248.136.0/21 maxlen: 23
49.248.136.0/24 maxlen: 24
49.248.138.0/23 maxlen: 24
49.248.140.0/22 maxlen: 24
49.248.144.0/22 maxlen: 24
49.248.148.0/23 maxlen: 24
49.248.151.0/24 maxlen: 24
49.248.152.0/21 maxlen: 24
49.248.160.0/19 maxlen: 24
49.248.192.0/19 maxlen: 24
49.248.246.0/23 maxlen: 24
49.248.248.0/21 maxlen: 24
103.3.40.0/24 maxlen: 24
103.3.41.0/24 maxlen: 24
103.3.43.0/24 maxlen: 24
103.8.148.0/22 maxlen: 24
114.143.0.0/16 maxlen: 24
123.252.128.0/18 maxlen: 21
123.252.128.0/22 maxlen: 22
123.252.128.0/23 maxlen: 24
123.252.131.0/24 maxlen: 24
123.252.133.0/24 maxlen: 24
123.252.134.0/23 maxlen: 24
123.252.136.0/21 maxlen: 22
123.252.136.0/23 maxlen: 24
123.252.138.0/24 maxlen: 24
123.252.140.0/22 maxlen: 24
123.252.144.0/20 maxlen: 24
123.252.160.0/19 maxlen: 24
123.252.192.0/18 maxlen: 24
202.149.192.0/19 maxlen: 19
202.149.192.0/22 maxlen: 22
202.149.192.0/24 maxlen: 24
202.149.193.0/24 maxlen: 24
202.149.196.0/24 maxlen: 24
202.149.198.0/24 maxlen: 24
202.149.199.0/24 maxlen: 24
202.149.201.0/24 maxlen: 24
202.149.202.0/24 maxlen: 24
202.149.203.0/24 maxlen: 24
202.149.204.0/22 maxlen: 22
202.149.204.0/23 maxlen: 23
202.149.207.0/24 maxlen: 24
202.149.210.0/24 maxlen: 24
202.149.212.0/22 maxlen: 22
202.149.214.0/24 maxlen: 24
202.149.217.0/24 maxlen: 24
202.149.218.0/24 maxlen: 24
202.149.219.0/24 maxlen: 24
202.149.220.0/22 maxlen: 22
202.149.222.0/23 maxlen: 23
202.149.222.0/24 maxlen: 24
202.149.223.0/24 maxlen: 24
202.189.224.0/19 maxlen: 24
2402:d400::/32 maxlen: 32
2402:d400::/44 maxlen: 48
2402:d400:40::/48 maxlen: 48
2402:d400:41::/48 maxlen: 48
2402:d400:43::/48 maxlen: 48
2402:d400:44::/48 maxlen: 48
2402:d400:3e0::/48 maxlen: 48
2402:d400:3e1::/48 maxlen: 48
2402:d400:3e2::/48 maxlen: 48
2402:d400:3e3::/48 maxlen: 48
2402:d400:3e4::/48 maxlen: 48
2402:d400:3e5::/48 maxlen: 48
2402:d400:3e6::/48 maxlen: 48
2402:d400:fa00::/44 maxlen: 48
2402:d400:fa10::/44 maxlen: 48
2402:d400:fa20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:55:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2011 (0x7db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D01, serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Validity
Not Before: Sep 17 07:35:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6aab9836-8f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:d2:68:ae:2a:76:5a:f1:36:46:3a:dd:2d:
7a:c9:43:28:28:12:93:24:e2:9a:3f:3d:64:ae:6a:
e4:47:cf:09:88:4a:c6:a2:c9:5d:ac:4c:de:b5:ec:
1d:fc:49:07:39:cd:90:00:a0:39:33:de:09:a6:92:
88:72:b4:5b:cf:e9:ff:66:97:bb:5a:5e:1e:84:c2:
51:6f:ec:5f:81:64:84:8f:97:97:72:a4:f9:40:4e:
69:e5:26:89:cf:06:7c:b9:46:62:99:34:83:0a:7d:
7e:59:d0:65:e5:3f:c9:76:3b:74:c5:93:07:dc:df:
8e:f7:69:49:0e:16:72:e8:44:57:0c:dc:2f:a3:ab:
ec:6d:f4:f1:13:1d:37:12:d3:95:34:66:26:52:4e:
89:28:34:5d:b7:47:0f:9b:54:29:80:ed:5e:b2:1f:
19:aa:9d:5d:b0:88:31:ba:9e:c1:eb:21:0c:e1:18:
cc:67:cc:08:b8:65:30:12:78:d5:d0:21:c2:90:05:
de:ba:a4:59:95:e3:43:65:5b:06:85:eb:3a:02:e3:
6d:66:7e:97:04:34:e3:d9:01:cd:33:44:38:30:d1:
ac:1d:4c:1c:97:98:c4:7d:e9:29:8e:d3:92:6e:5b:
52:05:e2:04:99:40:19:0b:04:b6:e1:f9:7d:40:55:
54:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E5:7E:7E:68:C9:14:6B:B5:7F:BD:1A:03:E1:0F:DB:BF:C2:50:99
X509v3 Authority Key Identifier:
keyid:7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.248.0.0-49.248.223.255
49.248.246.0-49.248.255.255
103.3.40.0/23
103.3.43.0/24
103.8.148.0/22
114.143.0.0/16
123.252.128.0/17
202.149.192.0/19
202.189.224.0/19
IPv6:
2402:d400::/32
Signature Algorithm: sha256WithRSAEncryption
03:9b:b0:f0:3e:a7:75:46:30:f8:30:7a:28:15:5d:47:84:1a:
75:e4:c2:bf:36:77:67:23:13:8e:89:e1:19:4f:c7:63:ea:b2:
1e:34:9a:92:4f:82:22:69:aa:27:2a:3c:cf:71:dc:92:8a:64:
51:82:67:24:e7:38:09:f8:4d:4b:79:e2:fb:38:d2:f1:08:a7:
54:05:29:52:d5:05:6c:d1:22:de:f4:d8:7a:92:52:d2:36:67:
e3:9c:a7:fd:38:d1:0c:f2:cc:35:3f:04:cc:79:2d:21:c4:08:
6b:5d:18:e6:c9:2d:b9:81:cd:7f:1d:1a:57:ec:51:4a:cf:61:
20:8d:6d:22:e5:93:c6:95:6b:53:8a:0c:14:3a:60:84:f8:98:
b3:0d:53:55:fe:5d:73:7a:cb:05:8b:e6:1f:dc:29:00:36:e1:
16:77:8b:df:5e:a6:f8:5d:05:e8:91:11:bb:00:72:e9:3f:d7:
26:e6:8a:a2:53:a8:08:19:f7:95:47:a5:ff:60:22:2a:a2:26:
e5:e6:30:77:9e:a0:31:5a:2e:c2:d5:bb:d3:78:48:29:72:68:
d0:99:b9:96:6c:60:95:87:99:7a:c4:c8:d4:43:b5:d6:1c:9c:
8f:ce:0a:c2:7b:ec:0e:55:6e:54:7c:9a:ff:d9:3e:1f:c9:b2:
3c:07:f2:fd
-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgICB9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDhEMDExMTAvBgNVBAUTKDdFMzZBQjFDMDQ0MzIxQjc0Q0Y2NzgyNjNFMDUyNEZE
MzQxNzlCQkQwHhcNMjYwOTE3MDczNTE4WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFiOTgzNi04ZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzanSaK4qdlrxNkY63S16yUMoKBKTJOKaPz1krmrkR88JiErGosldrEzetewd
/EkHOc2QAKA5M94JppKIcrRbz+n/Zpe7Wl4ehMJRb+xfgWSEj5eXcqT5QE5p5SaJ
zwZ8uUZimTSDCn1+WdBl5T/Jdjt0xZMH3N+O92lJDhZy6ERXDNwvo6vsbfTxEx03
EtOVNGYmUk6JKDRdt0cPm1QpgO1esh8Zqp1dsIgxup7B6yEM4RjMZ8wIuGUwEnjV
0CHCkAXeuqRZleNDZVsGhes6AuNtZn6XBDTj2QHNM0Q4MNGsHUwcl5jEfekpjtOS
bltSBeIEmUAZCwS24fl9QFVUYQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFKjlfn5o
yRRrtX+9GgPhD9u/wlCZMB8GA1UdIwQYMBaAFH42qxwEQyG3TPZ4Jj4FJP00F5u9
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OEQwMS9FOTI1MTlGQTk5
MEIxMUVCQTM1NUNCNTNDNEY5QUUwMi9mamFySEFSREliZE05bmdtUGdVa19UUVht
NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZqYXJIQVJESWJkTTluZ21QZ1VrX1RRWG03MC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDhEMDEvRTkyNTE5RkE5OTBCMTFFQkEzNTVDQjUzQzRGOUFFMDIvNERFRjMzNjYx
RkJFMTFFRjk3RTc5NzRGQzRGOUFFMDIucm9hMGsGCCsGAQUFBwEHAQH/BFwwWjBJ
BAIAATBDMAsDAwMx+AMEBTH4wDALAwQBMfj2AwMAMfgDBAFnAygDBABnAysDBAJn
CJQDAwByjwMEB3v8gAMEBcqVwAMEBcq94DANBAIAAjAHAwUAJALUADANBgkqhkiG
9w0BAQsFAAOCAQEAA5uw8D6ndUYw+DB6KBVdR4QadeTCvzZ3ZyMTjonhGU/HY+qy
HjSakk+CImmqJyo8z3HckopkUYJnJOc4CfhNS3ni+zjS8QinVAUpUtUFbNEi3vTY
epJS0jZn45yn/TjRDPLMNT8EzHktIcQIa10Y5sktuYHNfx0aV+xRSs9hII1tIuWT
xpVrU4oMFDpghPiYsw1TVf5dc3rLBYvmH9wpADbhFneL316m+F0F6JERuwBy6T/X
JuaKolOoCBn3lUel/2AiKqIm5eYwd56gMVouwtW703hIKXJo0Jm5lmxglYeZesTI
1EO11hycj84KwnvsDlVuVHya/9k+H8myPAfy/Q==
-----END CERTIFICATE-----
Generated at Sat Sep 26 15:02:45 2026 by rpki-client