Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
File: 4DEF33661FBE11EF97E7974FC4F9AE02.roa (raw, json)
Hash identifier: kfN6FFsYi8JvdxIk4yjahvMYHzpMGjlFpQPNf29NRr8=
Subject key identifier: BA:D2:5B:AF:AE:09:2D:E8:B5:5B:0C:A2:78:C4:04:A7:F0:D6:82:70
Certificate issuer: /CN=A9148D01/serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Certificate serial: 07B8
Authority key identifier: 7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
Signing time: Thu 23 Jul 2026 05:23:23 +0000
ROA not before: Thu 23 Jul 2026 05:23:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17762
IP address blocks: 49.248.0.0/17 maxlen: 21
49.248.0.0/18 maxlen: 24
49.248.64.0/19 maxlen: 24
49.248.96.0/22 maxlen: 22
49.248.96.0/23 maxlen: 24
49.248.104.0/21 maxlen: 24
49.248.112.0/20 maxlen: 23
49.248.112.0/21 maxlen: 24
49.248.120.0/22 maxlen: 24
49.248.124.0/23 maxlen: 24
49.248.126.0/24 maxlen: 24
49.248.128.0/18 maxlen: 18
49.248.128.0/21 maxlen: 23
49.248.129.0/24 maxlen: 24
49.248.135.0/24 maxlen: 24
49.248.136.0/21 maxlen: 23
49.248.136.0/24 maxlen: 24
49.248.138.0/23 maxlen: 24
49.248.140.0/22 maxlen: 24
49.248.144.0/22 maxlen: 24
49.248.148.0/23 maxlen: 24
49.248.151.0/24 maxlen: 24
49.248.152.0/21 maxlen: 24
49.248.160.0/19 maxlen: 24
49.248.192.0/19 maxlen: 24
49.248.246.0/23 maxlen: 24
49.248.248.0/21 maxlen: 24
103.3.40.0/24 maxlen: 24
103.3.41.0/24 maxlen: 24
103.3.43.0/24 maxlen: 24
103.8.148.0/22 maxlen: 24
114.143.0.0/16 maxlen: 24
123.252.128.0/18 maxlen: 21
123.252.128.0/22 maxlen: 22
123.252.128.0/23 maxlen: 24
123.252.131.0/24 maxlen: 24
123.252.133.0/24 maxlen: 24
123.252.134.0/23 maxlen: 24
123.252.136.0/21 maxlen: 22
123.252.136.0/23 maxlen: 24
123.252.138.0/24 maxlen: 24
123.252.140.0/22 maxlen: 24
123.252.144.0/20 maxlen: 24
123.252.160.0/19 maxlen: 24
123.252.192.0/18 maxlen: 24
202.149.192.0/19 maxlen: 19
202.149.192.0/22 maxlen: 22
202.149.192.0/24 maxlen: 24
202.149.193.0/24 maxlen: 24
202.149.196.0/24 maxlen: 24
202.149.198.0/24 maxlen: 24
202.149.199.0/24 maxlen: 24
202.149.201.0/24 maxlen: 24
202.149.202.0/24 maxlen: 24
202.149.203.0/24 maxlen: 24
202.149.204.0/22 maxlen: 22
202.149.204.0/23 maxlen: 23
202.149.207.0/24 maxlen: 24
202.149.210.0/24 maxlen: 24
202.149.212.0/22 maxlen: 22
202.149.214.0/24 maxlen: 24
202.149.217.0/24 maxlen: 24
202.149.218.0/24 maxlen: 24
202.149.219.0/24 maxlen: 24
202.149.220.0/22 maxlen: 22
202.149.222.0/23 maxlen: 23
202.149.222.0/24 maxlen: 24
202.149.223.0/24 maxlen: 24
202.189.224.0/19 maxlen: 24
2402:d400::/32 maxlen: 32
2402:d400::/44 maxlen: 48
2402:d400:40::/48 maxlen: 48
2402:d400:41::/48 maxlen: 48
2402:d400:44::/48 maxlen: 48
2402:d400:3e2::/48 maxlen: 48
2402:d400:3e3::/48 maxlen: 48
2402:d400:3e4::/48 maxlen: 48
2402:d400:3e5::/48 maxlen: 48
2402:d400:3e6::/48 maxlen: 48
2402:d400:fa00::/44 maxlen: 48
2402:d400:fa10::/44 maxlen: 48
2402:d400:fa20::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 05:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1976 (0x7b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9148D01, serialNumber=7E36AB1C044321B74CF678263E0524FD34179BBD
Validity
Not Before: Jul 23 05:23:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a61a54a-bceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c3:61:3e:4d:f1:1d:bf:db:53:af:1f:b7:c4:
e9:4c:ff:17:b1:b2:b8:93:a2:f2:5d:2c:a1:9e:51:
b8:ab:72:67:90:50:25:94:d8:aa:cf:58:c1:5d:c2:
c9:78:cb:ba:8f:72:4c:3f:84:c3:d2:8e:69:56:d0:
13:e4:68:76:a9:ab:4a:7f:b3:b7:94:37:72:a5:8d:
d5:58:db:1c:ab:ad:32:41:4b:1a:bb:9d:92:37:f9:
8b:f7:73:e8:8e:41:5d:2d:86:fc:f4:4a:a7:43:bc:
60:39:30:ad:97:9e:04:36:a3:f8:62:34:0d:40:b4:
b4:f1:18:bb:34:9d:2c:1e:4b:5f:3e:c5:35:0c:c3:
9c:00:1a:da:52:91:1e:dc:71:eb:dc:48:d0:2e:dc:
df:d3:0f:bc:38:cb:5f:89:82:06:b9:d8:5c:79:2b:
12:ff:bb:42:7a:f4:a7:0b:4f:83:47:cd:0f:ef:67:
1e:21:c2:9f:e0:0c:b9:bb:ba:24:bb:b1:47:90:d8:
2d:67:bc:c8:b6:6b:5b:17:4e:d8:4b:3f:7d:9b:84:
e8:12:f8:79:4c:04:52:76:1b:d2:dc:19:be:07:2d:
65:36:6f:b1:14:00:95:39:da:6c:1e:ce:c1:d7:cb:
1d:b2:5b:b1:44:96:8f:3d:31:e6:09:77:ea:76:ee:
7b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D2:5B:AF:AE:09:2D:E8:B5:5B:0C:A2:78:C4:04:A7:F0:D6:82:70
X509v3 Authority Key Identifier:
keyid:7E:36:AB:1C:04:43:21:B7:4C:F6:78:26:3E:05:24:FD:34:17:9B:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/fjarHARDIbdM9ngmPgUk_TQXm70.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fjarHARDIbdM9ngmPgUk_TQXm70.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D01/E92519FA990B11EBA355CB53C4F9AE02/4DEF33661FBE11EF97E7974FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.248.0.0-49.248.223.255
49.248.246.0-49.248.255.255
103.3.40.0/23
103.3.43.0/24
103.8.148.0/22
114.143.0.0/16
123.252.128.0/17
202.149.192.0/19
202.189.224.0/19
IPv6:
2402:d400::/32
Signature Algorithm: sha256WithRSAEncryption
45:97:95:e0:88:af:b1:58:19:27:e5:bc:1e:31:5d:26:1c:fa:
19:c7:c6:ef:63:44:38:2f:6c:36:fa:b0:80:31:17:5c:c3:bb:
3e:f0:6b:69:a8:8b:91:44:f0:b3:6a:c3:33:9a:d0:fb:43:5c:
b1:6f:30:3c:f1:9c:fc:68:a2:54:21:9c:f4:29:48:fa:2b:a8:
b3:3e:0e:f9:39:79:23:d0:0b:f8:bd:b3:d0:50:48:87:79:5e:
c4:9a:45:26:f2:f0:8b:2e:35:07:c7:92:f8:20:4b:ec:92:66:
ad:8b:28:d1:44:36:18:8c:d0:62:83:2a:46:ec:5b:68:f8:a7:
ad:9a:72:12:8b:bb:3d:20:7b:0d:be:16:1b:63:2a:66:f3:3d:
cc:53:17:7e:2f:d9:00:18:68:b7:75:16:0b:53:24:ee:68:23:
d8:55:fc:06:85:6a:51:61:fa:b3:c2:08:21:2f:8c:0b:48:0e:
bc:28:e0:08:8d:eb:60:f2:16:02:f2:d6:15:3e:be:2a:7b:9c:
dd:e9:85:b8:07:ea:65:4d:cf:53:5b:8d:e1:c4:f5:39:95:4b:
37:5e:a2:8b:73:d4:72:76:1c:93:71:d2:a9:cb:13:fe:d5:44:
e3:1b:52:13:46:5b:1a:9a:70:5c:c0:42:a8:b4:5f:54:4e:4f:
dd:4e:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:43 2026 by rpki-client