Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/8C2F4DBA8D3111EFA61E9282C4F9AE02.roa
File: 8C2F4DBA8D3111EFA61E9282C4F9AE02.roa (raw, json)
Hash identifier: bBolaE4J+ODeMaCpkUYIkQ/PrlqstuijFxA7VnkQpuo=
Subject key identifier: 5A:03:6F:2A:DE:88:62:1C:76:D6:63:D3:BE:D8:33:B5:53:27:BF:76
Certificate issuer: /CN=A918404E/serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Certificate serial: 09C2
Authority key identifier: 9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/8C2F4DBA8D3111EFA61E9282C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:16:00 +0000
ROA not before: Thu 27 Nov 2025 11:25:25 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 132115
IP address blocks: 45.117.200.0/24 maxlen: 24
45.117.201.0/24 maxlen: 24
45.117.202.0/24 maxlen: 24
45.117.203.0/24 maxlen: 24
45.117.204.0/24 maxlen: 24
45.117.205.0/24 maxlen: 24
45.117.206.0/24 maxlen: 24
45.117.207.0/24 maxlen: 24
45.126.160.0/24 maxlen: 24
45.126.161.0/24 maxlen: 24
45.126.162.0/24 maxlen: 24
45.126.163.0/24 maxlen: 24
103.24.188.0/24 maxlen: 24
103.24.189.0/24 maxlen: 24
103.24.190.0/24 maxlen: 24
103.24.191.0/24 maxlen: 24
103.57.236.0/24 maxlen: 24
103.57.237.0/24 maxlen: 24
103.57.238.0/24 maxlen: 24
103.57.239.0/24 maxlen: 24
103.57.240.0/24 maxlen: 24
103.57.241.0/24 maxlen: 24
103.57.242.0/24 maxlen: 24
103.57.243.0/24 maxlen: 24
103.57.244.0/24 maxlen: 24
103.57.245.0/24 maxlen: 24
103.57.246.0/24 maxlen: 24
103.57.247.0/24 maxlen: 24
103.70.208.0/24 maxlen: 24
103.70.209.0/24 maxlen: 24
103.70.210.0/24 maxlen: 24
103.70.211.0/24 maxlen: 24
103.75.192.0/24 maxlen: 24
103.75.193.0/24 maxlen: 24
103.75.194.0/24 maxlen: 24
103.75.195.0/24 maxlen: 24
103.225.176.0/24 maxlen: 24
103.225.177.0/24 maxlen: 24
103.225.178.0/24 maxlen: 24
103.225.179.0/24 maxlen: 24
103.244.4.0/24 maxlen: 24
103.244.5.0/24 maxlen: 24
103.244.6.0/24 maxlen: 24
103.244.7.0/24 maxlen: 24
150.107.10.0/24 maxlen: 24
150.107.11.0/24 maxlen: 24
150.129.124.0/24 maxlen: 24
150.129.125.0/24 maxlen: 24
150.129.126.0/24 maxlen: 24
150.129.127.0/24 maxlen: 24
202.142.64.0/24 maxlen: 24
202.142.65.0/24 maxlen: 24
202.142.66.0/24 maxlen: 24
202.142.67.0/24 maxlen: 24
202.142.68.0/24 maxlen: 24
202.142.69.0/24 maxlen: 24
202.142.70.0/24 maxlen: 24
202.142.71.0/24 maxlen: 24
202.142.72.0/24 maxlen: 24
202.142.73.0/24 maxlen: 24
202.142.74.0/24 maxlen: 24
202.142.75.0/24 maxlen: 24
202.142.76.0/24 maxlen: 24
202.142.77.0/24 maxlen: 24
202.142.78.0/24 maxlen: 24
202.142.79.0/24 maxlen: 24
202.142.81.0/24 maxlen: 24
202.142.83.0/24 maxlen: 24
202.142.85.0/24 maxlen: 24
202.142.86.0/24 maxlen: 24
202.142.87.0/24 maxlen: 24
202.142.89.0/24 maxlen: 24
202.142.90.0/24 maxlen: 24
202.142.91.0/24 maxlen: 24
202.142.92.0/24 maxlen: 24
202.142.93.0/24 maxlen: 24
202.142.95.0/24 maxlen: 24
202.142.96.0/24 maxlen: 24
202.142.97.0/24 maxlen: 24
202.142.98.0/24 maxlen: 24
202.142.99.0/24 maxlen: 24
202.142.100.0/24 maxlen: 24
202.142.101.0/24 maxlen: 24
202.142.102.0/24 maxlen: 24
202.142.103.0/24 maxlen: 24
202.142.104.0/24 maxlen: 24
202.142.105.0/24 maxlen: 24
202.142.106.0/24 maxlen: 24
202.142.107.0/24 maxlen: 24
202.142.110.0/24 maxlen: 24
202.142.112.0/24 maxlen: 24
202.142.113.0/24 maxlen: 24
202.142.114.0/24 maxlen: 24
202.142.115.0/24 maxlen: 24
202.142.118.0/24 maxlen: 24
202.142.119.0/24 maxlen: 24
202.142.120.0/24 maxlen: 24
202.142.123.0/24 maxlen: 24
202.142.124.0/24 maxlen: 24
202.142.125.0/24 maxlen: 24
202.142.126.0/24 maxlen: 24
202.142.127.0/24 maxlen: 24
2406:3c80::/48 maxlen: 48
2406:3c80:1::/48 maxlen: 48
2406:3c80:2::/48 maxlen: 48
2406:3c80:3::/48 maxlen: 48
2406:3c80:4::/48 maxlen: 48
2406:3c80:5::/48 maxlen: 48
2406:3c80:6::/48 maxlen: 48
2406:3c80:7::/48 maxlen: 48
2406:3c80:8::/48 maxlen: 48
2406:3c80:9::/48 maxlen: 48
2406:3c80:a::/48 maxlen: 48
2406:3c80:b::/48 maxlen: 48
2406:3c80:c::/48 maxlen: 48
2406:3c80:d::/48 maxlen: 48
2406:3c80:e::/48 maxlen: 48
2406:3c80:f::/48 maxlen: 48
2406:3c80:18::/48 maxlen: 48
2406:3c80:400::/48 maxlen: 48
2406:3c80:401::/48 maxlen: 48
2406:3c80:402::/48 maxlen: 48
2406:3c80:403::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 20:25:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2498 (0x9c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918404E, serialNumber=9C7C776F6BF6003283F0CAB43E2DC61494997162
Validity
Not Before: Nov 27 11:25:25 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48260-b011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:55:28:7f:53:1d:15:36:67:65:fb:9b:a3:99:
d6:b9:dc:1d:b2:2f:30:12:e3:cf:34:fe:54:17:fe:
04:04:41:e6:8d:ed:7b:54:d3:ec:ef:94:29:d3:a0:
b2:e2:e3:c6:73:6a:6d:97:9c:7a:11:2c:ed:57:80:
61:c3:ac:f4:8b:9c:f4:ac:50:49:3c:cc:45:ea:e7:
bd:77:bc:b3:03:d9:9a:ee:b6:0e:17:62:5d:a2:c3:
f7:1d:cb:f1:dd:1c:91:24:3d:f8:99:d1:bb:fa:cc:
2f:a8:aa:95:55:63:50:e7:51:f8:c2:ae:ec:72:e9:
b1:50:c0:25:35:e3:dd:3a:3e:a9:81:dc:e2:0a:8a:
8c:a8:ba:01:66:e3:6e:63:e6:b7:81:83:fb:de:7f:
2b:f7:90:75:5f:6e:3e:0a:7e:40:14:c6:22:0f:8a:
a6:c0:90:95:27:20:64:ba:e9:6b:74:8b:86:14:7e:
04:c7:64:ec:66:25:63:5d:6d:36:0c:7f:fe:5a:74:
c9:08:64:56:a0:54:9a:2c:9c:3e:f7:c5:ad:be:70:
2d:a8:bd:2f:a9:f0:bf:fc:7f:27:a2:10:99:3d:87:
a5:e0:c6:35:44:02:0b:11:2d:68:59:b2:ea:ca:da:
b2:3d:d8:69:d1:0f:bb:8b:85:82:a8:ed:30:3b:ee:
fe:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:03:6F:2A:DE:88:62:1C:76:D6:63:D3:BE:D8:33:B5:53:27:BF:76
X509v3 Authority Key Identifier:
keyid:9C:7C:77:6F:6B:F6:00:32:83:F0:CA:B4:3E:2D:C6:14:94:99:71:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nHx3b2v2ADKD8Mq0Pi3GFJSZcWI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918404E/BC030C76F1DA11EAAFC6C70AC4F9AE02/8C2F4DBA8D3111EFA61E9282C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.117.200.0/21
45.126.160.0/22
103.24.188.0/22
103.57.236.0-103.57.247.255
103.70.208.0/22
103.75.192.0/22
103.225.176.0/22
103.244.4.0/22
150.107.10.0/23
150.129.124.0/22
202.142.64.0/20
202.142.81.0/24
202.142.83.0/24
202.142.85.0-202.142.87.255
202.142.89.0-202.142.93.255
202.142.95.0-202.142.107.255
202.142.110.0/24
202.142.112.0/22
202.142.118.0-202.142.120.255
202.142.123.0-202.142.127.255
IPv6:
2406:3c80::/44
2406:3c80:18::/48
2406:3c80:400::/46
Signature Algorithm: sha256WithRSAEncryption
1f:ff:79:20:36:48:11:3a:fa:e9:6a:95:3a:88:7f:eb:3f:03:
21:ae:2a:5c:26:a9:90:73:f5:06:a4:5a:d7:74:10:bb:8d:23:
48:1a:2f:17:55:3f:b9:92:cc:cc:40:1f:1c:6a:ed:e1:18:9f:
74:65:32:bf:9d:0d:19:b6:da:db:60:cd:0a:0f:58:1a:86:b3:
97:35:0b:10:a7:90:12:58:f6:3e:f2:dc:a7:3a:c9:94:46:c9:
8a:d2:53:03:8d:7a:69:b0:e8:72:98:93:2f:c1:42:88:73:15:
f1:a0:78:bd:83:94:9d:be:d8:24:ed:b8:21:d3:ec:1c:78:7c:
74:4f:a1:40:b4:f1:44:5c:e1:c3:07:d5:f0:95:46:c8:fc:a1:
49:15:a9:84:08:04:37:1d:be:05:3a:d3:2a:35:5d:e2:bc:ac:
71:14:40:89:7d:e6:7b:27:f8:dd:85:50:5d:bf:45:74:d5:fd:
ce:4d:db:dd:d5:98:d8:d1:72:50:32:e3:60:3c:cc:aa:af:42:
81:8a:db:ba:14:af:17:f6:ce:28:71:f7:32:56:b6:bf:83:40:
07:cc:dc:29:20:01:48:a7:92:96:32:b0:3d:c0:01:a1:60:4c:
03:11:86:f8:a1:bd:34:cb:04:af:f6:f1:ee:dc:a1:79:a8:1e:
45:15:12:c5
-----BEGIN CERTIFICATE-----
MIIGBjCCBO6gAwIBAgICCcIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwNEUxMTAvBgNVBAUTKDlDN0M3NzZGNkJGNjAwMzI4M0YwQ0FCNDNFMkRDNjE0
OTQ5OTcxNjIwHhcNMjUxMTI3MTEyNTI1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODI2MC1iMDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuFUof1MdFTZnZfubo5nWudwdsi8wEuPPNP5UF/4EBEHmje17VNPs75Qp06Cy
4uPGc2ptl5x6ESztV4Bhw6z0i5z0rFBJPMxF6ue9d7yzA9ma7rYOF2JdosP3Hcvx
3RyRJD34mdG7+swvqKqVVWNQ51H4wq7scumxUMAlNePdOj6pgdziCoqMqLoBZuNu
Y+a3gYP73n8r95B1X24+Cn5AFMYiD4qmwJCVJyBkuulrdIuGFH4Ex2TsZiVjXW02
DH/+WnTJCGRWoFSaLJw+98WtvnAtqL0vqfC//H8nohCZPYel4MY1RAILES1oWbLq
ytqyPdhp0Q+7i4WCqO0wO+7+8wIDAQABo4IDKjCCAyYwHQYDVR0OBBYEFFoDbyre
iGIcdtZj077YM7VTJ792MB8GA1UdIwQYMBaAFJx8d29r9gAyg/DKtD4txhSUmXFi
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDA0RS9CQzAzMEM3NkYx
REExMUVBQUZDNkM3MEFDNEY5QUUwMi9uSHgzYjJ2MkFES0Q4TXEwUGkzR0ZKU1pj
V0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL25IeDNiMnYyQURLRDhNcTBQaTNHRkpTWmNXSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODQwNEUvQkMwMzBDNzZGMURBMTFFQUFGQzZDNzBBQzRGOUFFMDIvOEMyRjREQkE4
RDMxMTFFRkE2MUU5MjgyQzRGOUFFMDIucm9hMIHoBggrBgEFBQcBBwEB/wSB2DCB
1TCBrwQCAAEwgagDBAMtdcgDBAItfqADBAJnGLwwDAMEAmc57AMEA2c58AMEAmdG
0AMEAmdLwAMEAmfhsAMEAmf0BAMEAZZrCgMEApaBfAMEBMqOQAMEAMqOUQMEAMqO
UzAMAwQAyo5VAwQDyo5QMAwDBADKjlkDBAHKjlwwDAMEAMqOXwMEAsqOaAMEAMqO
bgMEAsqOcDAMAwQByo52AwQAyo54MAwDBADKjnsDBAfKjgAwIQQCAAIwGwMHBCQG
PIAAAAMHACQGPIAAGAMHAiQGPIAEADANBgkqhkiG9w0BAQsFAAOCAQEAH/95IDZI
ETr66WqVOoh/6z8DIa4qXCapkHP1BqRa13QQu40jSBovF1U/uZLMzEAfHGrt4Rif
dGUyv50NGbba22DNCg9YGoazlzULEKeQElj2PvLcpzrJlEbJitJTA416abDocpiT
L8FCiHMV8aB4vYOUnb7YJO24IdPsHHh8dE+hQLTxRFzhwwfV8JVGyPyhSRWphAgE
Nx2+BTrTKjVd4ryscRRAiX3meyf43YVQXb9FdNX9zk3b3dWY2NFyUDLjYDzMqq9C
gYrbuhSvF/bOKHH3Mla2v4NAB8zcKSABSKeSljKwPcABoWBMAxGG+KG9NMsEr/bx
7tyheageRRUSxQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:58:39 2026 by rpki-client