Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/B305D4F4D4D911F0990CAE1CC4F9AE02.roa
File: B305D4F4D4D911F0990CAE1CC4F9AE02.roa (raw, json)
Hash identifier: WxWTWJ/XU+5a7F5CKHub9rL/f65J4kMT+zVAopSr/ew=
Subject key identifier: A5:16:25:76:B6:B6:AB:68:A4:AD:72:46:C5:4F:D7:C1:80:5B:4B:35
Certificate issuer: /CN=A9182CFC/serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405
Certificate serial: 3570
Authority key identifier: 80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/B305D4F4D4D911F0990CAE1CC4F9AE02.roa
Signing time: Sun 22 Mar 2026 15:10:36 +0000
ROA not before: Sun 22 Mar 2026 15:10:35 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 9892
IP address blocks: 114.129.33.0/24 maxlen: 24
114.129.36.0/22 maxlen: 22
114.129.36.0/24 maxlen: 24
114.129.38.0/24 maxlen: 24
114.129.40.0/23 maxlen: 23
114.129.41.0/24 maxlen: 24
114.129.45.0/24 maxlen: 24
114.129.46.0/24 maxlen: 24
114.129.47.0/24 maxlen: 24
123.100.235.0/24 maxlen: 24
123.100.236.0/22 maxlen: 22
123.100.236.0/24 maxlen: 24
123.100.237.0/24 maxlen: 24
123.100.238.0/23 maxlen: 23
123.100.241.0/24 maxlen: 24
123.100.244.0/23 maxlen: 23
123.100.244.0/24 maxlen: 24
123.100.245.0/24 maxlen: 24
123.100.251.0/24 maxlen: 24
123.100.252.0/24 maxlen: 24
202.157.128.0/21 maxlen: 21
202.157.136.0/22 maxlen: 22
202.157.142.0/23 maxlen: 23
202.157.148.0/24 maxlen: 24
202.157.152.0/24 maxlen: 24
202.157.160.0/20 maxlen: 20
202.157.160.0/21 maxlen: 21
202.157.168.0/21 maxlen: 21
202.160.120.0/24 maxlen: 24
202.160.121.0/24 maxlen: 24
202.160.122.0/24 maxlen: 24
202.160.123.0/24 maxlen: 24
203.142.16.0/21 maxlen: 21
203.142.27.0/24 maxlen: 24
2404:4800::/48 maxlen: 48
2404:4800:1::/48 maxlen: 48
2404:4800:2::/48 maxlen: 48
2404:4800:3::/48 maxlen: 48
2404:4800:20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl
rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:27:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13680 (0x3570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182CFC, serialNumber=8027E0EF54D00B61F7136F09719BFCF4C4533405
Validity
Not Before: Mar 22 15:10:35 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c0066b-1ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:ac:fe:d0:e2:c1:53:b6:88:45:70:0e:b3:
5d:92:54:15:30:b8:f1:56:18:b9:83:b2:a7:73:04:
de:da:8c:17:71:a7:52:22:2f:5d:34:2d:68:e9:14:
23:7a:5b:cd:24:92:9c:db:91:6a:f4:b4:6a:fa:45:
d8:5c:84:53:49:f2:5c:0f:ed:c9:f2:0e:ed:94:d2:
7d:39:ab:fe:36:8c:9d:28:a8:67:3c:ed:be:29:fc:
fe:00:1c:47:39:67:66:ce:2b:7d:95:59:81:80:c8:
b4:93:42:0d:8a:2a:7c:70:04:b5:a7:ff:9c:86:e1:
56:e3:7a:f8:ad:6b:0b:28:36:2a:35:76:77:a4:81:
18:07:b7:c6:4e:44:40:58:0e:9b:a5:81:25:87:0d:
0f:e2:3e:09:ac:3a:95:c6:1f:24:69:ad:fd:3e:74:
9c:8c:23:a5:6c:b6:d7:28:97:0b:d5:3e:28:0a:a0:
fe:36:80:1f:66:f5:34:d8:82:95:6d:6a:62:95:92:
43:ae:2c:5f:ad:84:00:ea:10:1d:aa:3d:2f:65:5a:
12:b5:b0:cc:ea:84:3b:e2:81:f1:c5:6e:18:b3:0a:
a0:e4:1e:67:f7:12:81:cd:4e:e8:8e:d3:23:24:03:
f6:bb:58:1b:16:73:84:e0:c8:62:00:37:0a:30:97:
c9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:16:25:76:B6:B6:AB:68:A4:AD:72:46:C5:4F:D7:C1:80:5B:4B:35
X509v3 Authority Key Identifier:
keyid:80:27:E0:EF:54:D0:0B:61:F7:13:6F:09:71:9B:FC:F4:C4:53:34:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/gCfg71TQC2H3E28JcZv89MRTNAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gCfg71TQC2H3E28JcZv89MRTNAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182CFC/BF84B5741D8611E2A76344DE08B02CD2/B305D4F4D4D911F0990CAE1CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
114.129.33.0/24
114.129.36.0-114.129.41.255
114.129.45.0-114.129.47.255
123.100.235.0-123.100.239.255
123.100.241.0/24
123.100.244.0/23
123.100.251.0-123.100.252.255
202.157.128.0-202.157.139.255
202.157.142.0/23
202.157.148.0/24
202.157.152.0/24
202.157.160.0/20
202.160.120.0/22
203.142.16.0/21
203.142.27.0/24
IPv6:
2404:4800::/46
2404:4800:20::/48
Signature Algorithm: sha256WithRSAEncryption
08:36:4b:29:62:41:77:77:5d:98:68:a7:90:1b:84:fe:51:6d:
6c:a0:43:f3:75:f1:5a:7e:7b:0d:62:22:b6:b0:d3:84:f9:72:
bf:e7:b4:28:0d:4c:f8:83:26:0f:53:08:f0:1f:3e:01:de:e4:
07:f1:38:63:42:0c:91:2a:f1:bd:09:0b:74:d2:6c:d3:73:f4:
b1:38:55:4a:77:8c:a8:d7:af:df:13:25:8a:a7:ca:ae:e4:86:
3a:3a:a9:ae:aa:a0:82:fc:10:a5:30:24:67:45:1c:18:42:48:
93:c2:7c:c0:68:a5:19:df:c4:11:6b:ff:df:28:aa:3b:68:da:
fd:f1:a8:b4:60:73:e3:56:e6:f2:3a:99:15:5f:b8:76:c0:31:
1f:28:c5:77:24:f9:3f:a7:c3:63:1d:58:b9:98:ce:6a:f9:47:
7c:d9:f3:83:85:09:cc:8f:8c:38:23:b5:9a:87:3e:5e:91:ed:
86:86:4a:85:ad:fe:20:03:1e:7e:b1:eb:76:a8:cb:30:15:4e:
e5:7f:6b:45:a8:b2:61:ad:60:06:9c:e6:d6:60:4f:87:76:0d:
d8:23:7e:dc:35:eb:ba:bd:a4:df:23:0f:3f:2d:19:29:ec:83:
a7:97:b4:09:a0:9e:2b:7c:76:07:07:fa:2f:b4:31:e0:46:52:
11:5f:5e:b8
-----BEGIN CERTIFICATE-----
MIIF1zCCBL+gAwIBAgICNXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODJDRkMxMTAvBgNVBAUTKDgwMjdFMEVGNTREMDBCNjFGNzEzNkYwOTcxOUJGQ0Y0
QzQ1MzM0MDUwHhcNMjYwMzIyMTUxMDM1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWMwMDY2Yi0xYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsfGs/tDiwVO2iEVwDrNdklQVMLjxVhi5g7KncwTe2owXcadSIi9dNC1o6RQj
elvNJJKc25Fq9LRq+kXYXIRTSfJcD+3J8g7tlNJ9Oav+NoydKKhnPO2+Kfz+ABxH
OWdmzit9lVmBgMi0k0INiip8cAS1p/+chuFW43r4rWsLKDYqNXZ3pIEYB7fGTkRA
WA6bpYElhw0P4j4JrDqVxh8kaa39PnScjCOlbLbXKJcL1T4oCqD+NoAfZvU02IKV
bWpilZJDrixfrYQA6hAdqj0vZVoStbDM6oQ74oHxxW4Yswqg5B5n9xKBzU7ojtMj
JAP2u1gbFnOE4MhiADcKMJfJ4QIDAQABo4IC+zCCAvcwHQYDVR0OBBYEFKUWJXa2
tqtopK1yRsVP18GAW0s1MB8GA1UdIwQYMBaAFIAn4O9U0Ath9xNvCXGb/PTEUzQF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkNGQy9CRjg0QjU3NDFE
ODYxMUUyQTc2MzQ0REUwOEIwMkNEMi9nQ2ZnNzFUUUMySDNFMjhKY1p2ODlNUlRO
QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2dDZmc3MVRRQzJIM0UyOEpjWnY4OU1SVE5BVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODJDRkMvQkY4NEI1NzQxRDg2MTFFMkE3NjM0NERFMDhCMDJDRDIvQjMwNUQ0RjRE
NEQ5MTFGMDk5MENBRTFDQzRGOUFFMDIucm9hMIG5BggrBgEFBQcBBwEB/wSBqTCB
pjCBiQQCAAEwgYIDBABygSEwDAMEAnKBJAMEAXKBKDAMAwQAcoEtAwQEcoEgMAwD
BAB7ZOsDBAR7ZOADBAB7ZPEDBAF7ZPQwDAMEAHtk+wMEAHtk/DAMAwQHyp2AAwQC
yp2IAwQByp2OAwQAyp2UAwQAyp2YAwQEyp2gAwQCyqB4AwQDy44QAwQAy44bMBgE
AgACMBIDBwIkBEgAAAADBwAkBEgAACAwDQYJKoZIhvcNAQELBQADggEBAAg2Syli
QXd3XZhop5AbhP5RbWygQ/N18Vp+ew1iIraw04T5cr/ntCgNTPiDJg9TCPAfPgHe
5AfxOGNCDJEq8b0JC3TSbNNz9LE4VUp3jKjXr98TJYqnyq7khjo6qa6qoIL8EKUw
JGdFHBhCSJPCfMBopRnfxBFr/98oqjto2v3xqLRgc+NW5vI6mRVfuHbAMR8oxXck
+T+nw2MdWLmYzmr5R3zZ84OFCcyPjDgjtZqHPl6R7YaGSoWt/iADHn6x63aoyzAV
TuV/a0WosmGtYAac5tZgT4d2Ddgjftw167q9pN8jDz8tGSnsg6eXtAmgnit8dgcH
+i+0MeBGUhFfXrg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:54:04 2026 by rpki-client