Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D4990FE281511F1B249CBD5BB833773.roa
File: 3D4990FE281511F1B249CBD5BB833773.roa (raw, json)
Hash identifier: xXk20RajnXv0WaFT3B9A6y5EgquVw+KYQL3iWdOdadw=
Subject key identifier: E1:3F:82:5D:79:63:63:E1:0D:1F:B4:EA:B5:06:E2:4B:3F:77:6C:5B
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DC8F
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D4990FE281511F1B249CBD5BB833773.roa
Signing time: Wed 25 Mar 2026 06:38:31 +0000
ROA not before: Wed 25 Mar 2026 06:38:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137085
IP address blocks: 27.123.240.0/23 maxlen: 24
43.225.248.0/22 maxlen: 24
43.228.164.0/23 maxlen: 24
43.230.148.0/22 maxlen: 24
43.248.152.0/22 maxlen: 24
43.248.240.0/22 maxlen: 24
43.251.92.0/22 maxlen: 23
43.251.93.0/24 maxlen: 24
43.251.94.0/24 maxlen: 24
43.251.95.0/24 maxlen: 24
45.120.160.0/22 maxlen: 24
45.248.0.0/22 maxlen: 24
45.248.172.0/22 maxlen: 24
103.37.98.0/23 maxlen: 24
103.40.200.0/22 maxlen: 24
103.43.32.0/22 maxlen: 24
103.54.27.0/24 maxlen: 24
103.55.60.0/22 maxlen: 24
103.68.20.0/22 maxlen: 24
103.68.140.0/23 maxlen: 24
103.69.239.0/24 maxlen: 24
103.72.196.0/24 maxlen: 24
103.91.72.0/24 maxlen: 24
103.91.73.0/24 maxlen: 24
103.91.74.0/24 maxlen: 24
103.91.75.0/24 maxlen: 24
103.91.76.0/22 maxlen: 24
103.92.107.0/24 maxlen: 24
103.93.39.0/24 maxlen: 24
103.100.4.0/24 maxlen: 24
103.101.112.0/22 maxlen: 24
103.106.28.0/22 maxlen: 24
103.113.110.0/23 maxlen: 24
103.120.108.0/24 maxlen: 24
103.120.152.0/24 maxlen: 24
103.120.153.0/24 maxlen: 24
103.124.174.0/24 maxlen: 24
103.138.9.0/24 maxlen: 24
103.139.143.0/24 maxlen: 24
103.152.158.0/24 maxlen: 24
103.154.8.0/23 maxlen: 24
103.154.56.0/23 maxlen: 24
103.155.237.0/24 maxlen: 24
103.156.121.0/24 maxlen: 24
103.157.188.0/23 maxlen: 24
103.158.90.0/23 maxlen: 24
103.159.104.0/23 maxlen: 24
103.160.25.0/24 maxlen: 24
103.164.140.0/24 maxlen: 24
103.165.88.0/23 maxlen: 24
103.167.154.0/23 maxlen: 24
103.167.182.0/23 maxlen: 24
103.167.224.0/23 maxlen: 24
103.167.238.0/23 maxlen: 24
103.168.60.0/23 maxlen: 24
103.169.242.0/24 maxlen: 24
103.169.243.0/24 maxlen: 24
103.170.38.0/23 maxlen: 24
103.170.52.0/23 maxlen: 24
103.170.84.0/23 maxlen: 24
103.178.117.0/24 maxlen: 24
103.179.50.0/23 maxlen: 24
103.181.66.0/24 maxlen: 24
103.181.119.0/24 maxlen: 24
103.184.205.0/24 maxlen: 24
103.198.172.0/22 maxlen: 24
103.204.70.0/24 maxlen: 24
103.206.51.0/24 maxlen: 24
103.206.96.0/23 maxlen: 24
103.216.140.0/22 maxlen: 24
103.217.132.0/22 maxlen: 24
103.224.144.0/22 maxlen: 24
103.225.188.0/22 maxlen: 24
103.232.232.0/22 maxlen: 24
103.248.92.0/22 maxlen: 24
103.248.172.0/22 maxlen: 24
110.172.24.0/23 maxlen: 24
157.119.80.0/22 maxlen: 24
202.4.169.0/24 maxlen: 24
210.79.134.0/24 maxlen: 24
2001:df0:47c0::/48 maxlen: 48
2001:df1:1980::/48 maxlen: 48
2001:df1:ed40::/48 maxlen: 48
2001:df2:3ac0::/48 maxlen: 48
2001:df2:3f40::/48 maxlen: 48
2001:df3:1340::/48 maxlen: 48
2001:df3:6ec0::/48 maxlen: 48
2400:d660::/32 maxlen: 32
2401:bba0::/32 maxlen: 32
2405:e100:a::/48 maxlen: 48
2405:e100:b::/48 maxlen: 48
2405:e100:c::/48 maxlen: 48
2405:e100:d::/48 maxlen: 48
2405:e100:e::/48 maxlen: 48
2405:e100:f::/48 maxlen: 48
2405:e100:1d::/48 maxlen: 48
2405:e100:1e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 14:54:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56463 (0xdc8f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 25 06:38:31 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69c382e7-6c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:55:90:ce:86:ab:88:8c:30:15:22:d8:2e:
f0:8d:4c:83:a8:3c:56:0e:ea:71:06:a5:0a:b5:e4:
58:bb:44:ca:19:e3:64:2a:ee:2f:31:dd:bb:f3:cc:
c3:ea:b5:bb:20:5c:41:30:10:33:3e:c2:4f:08:91:
37:10:78:f0:49:01:b8:39:4f:fa:a5:95:23:7e:3a:
ec:93:8a:7f:2c:f2:41:10:de:e3:59:6a:97:48:dc:
83:19:ca:48:9f:9e:aa:ad:43:ef:cc:07:8d:c7:08:
ef:e8:55:03:63:59:7b:67:cf:a6:27:85:7b:bc:3b:
73:45:3f:43:25:88:28:fc:ac:ed:e4:a6:79:ab:25:
9a:59:12:40:95:46:3a:e6:93:0f:d9:90:39:9b:e4:
60:30:b3:8c:71:19:1a:a0:c6:6d:d9:41:d9:b4:9c:
2a:19:0a:88:bd:a7:4c:97:36:b1:c0:41:20:5d:9e:
90:4d:0e:ef:c8:93:68:4d:d1:6b:0f:74:34:29:c7:
b7:1c:03:03:bc:92:4b:37:b7:90:ce:41:22:a7:07:
c5:6f:ee:0f:2f:d2:d3:8b:f7:5b:30:6a:c0:a2:d3:
c7:46:d2:90:bd:ea:54:7e:06:50:3e:28:15:1c:63:
87:bd:3f:c3:53:43:99:b7:14:af:07:c3:0d:44:01:
82:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:3F:82:5D:79:63:63:E1:0D:1F:B4:EA:B5:06:E2:4B:3F:77:6C:5B
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3D4990FE281511F1B249CBD5BB833773.roa
sbgp-ipAddrBlock: critical
IPv4:
27.123.240.0/23
43.225.248.0/22
43.228.164.0/23
43.230.148.0/22
43.248.152.0/22
43.248.240.0/22
43.251.92.0/22
45.120.160.0/22
45.248.0.0/22
45.248.172.0/22
103.37.98.0/23
103.40.200.0/22
103.43.32.0/22
103.54.27.0/24
103.55.60.0/22
103.68.20.0/22
103.68.140.0/23
103.69.239.0/24
103.72.196.0/24
103.91.72.0/21
103.92.107.0/24
103.93.39.0/24
103.100.4.0/24
103.101.112.0/22
103.106.28.0/22
103.113.110.0/23
103.120.108.0/24
103.120.152.0/23
103.124.174.0/24
103.138.9.0/24
103.139.143.0/24
103.152.158.0/24
103.154.8.0/23
103.154.56.0/23
103.155.237.0/24
103.156.121.0/24
103.157.188.0/23
103.158.90.0/23
103.159.104.0/23
103.160.25.0/24
103.164.140.0/24
103.165.88.0/23
103.167.154.0/23
103.167.182.0/23
103.167.224.0/23
103.167.238.0/23
103.168.60.0/23
103.169.242.0/23
103.170.38.0/23
103.170.52.0/23
103.170.84.0/23
103.178.117.0/24
103.179.50.0/23
103.181.66.0/24
103.181.119.0/24
103.184.205.0/24
103.198.172.0/22
103.204.70.0/24
103.206.51.0/24
103.206.96.0/23
103.216.140.0/22
103.217.132.0/22
103.224.144.0/22
103.225.188.0/22
103.232.232.0/22
103.248.92.0/22
103.248.172.0/22
110.172.24.0/23
157.119.80.0/22
202.4.169.0/24
210.79.134.0/24
IPv6:
2001:df0:47c0::/48
2001:df1:1980::/48
2001:df1:ed40::/48
2001:df2:3ac0::/48
2001:df2:3f40::/48
2001:df3:1340::/48
2001:df3:6ec0::/48
2400:d660::/32
2401:bba0::/32
2405:e100:a::-2405:e100:f:ffff:ffff:ffff:ffff:ffff
2405:e100:1d::-2405:e100:1e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5f:e3:ef:93:33:ce:82:a8:db:33:24:0c:4d:a3:0c:24:36:82:
93:1f:14:63:a5:05:3c:23:10:92:6b:1e:c3:61:81:53:6b:16:
f1:4f:28:d7:ba:e3:9e:d0:24:e0:4a:82:8d:2a:2b:f9:1c:ff:
67:d4:5a:01:b8:46:05:e6:6b:95:5a:03:56:32:ff:1a:b0:de:
73:b3:3f:ae:46:85:2e:82:79:6e:c8:27:b2:0c:8e:f1:1b:bb:
f4:f9:4f:d6:54:09:8c:c3:9f:1d:0f:92:d9:8f:50:76:e3:2b:
18:58:48:38:4b:bf:71:ad:a4:86:4e:70:22:b4:38:ed:14:1a:
90:69:ed:ce:07:63:44:3c:2e:ea:81:84:24:2f:ca:f2:f2:49:
5a:9e:9f:db:e5:bb:f5:0f:2a:8f:e0:cb:07:6c:2f:e3:c6:74:
3d:97:f0:95:e3:85:4c:ab:57:fc:ae:d9:c9:8b:fe:8e:e1:89:
d5:6e:3d:68:fc:86:1e:30:6c:78:eb:29:a4:34:48:ce:24:89:
96:76:4b:7f:99:7e:fd:45:fc:e1:09:ad:9c:0c:af:a7:41:85:
ef:7d:59:e7:51:ea:c9:51:29:a1:00:8f:a7:0d:5c:f0:90:50:
68:75:79:ec:2c:7d:58:11:07:c2:ec:d7:2c:d5:8c:3b:db:69:
60:26:7b:a8
-----BEGIN CERTIFICATE-----
MIIHaDCCBlCgAwIBAgIDANyPMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDMyNTA2MzgzMVoXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjljMzgyZTctNmMxNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOj3VZDOhquIjDAVItgu8I1Mg6g8Vg7qcQalCrXkWLtEyhnjZCruLzHdu/PM
w+q1uyBcQTAQMz7CTwiRNxB48EkBuDlP+qWVI3467JOKfyzyQRDe41lql0jcgxnK
SJ+eqq1D78wHjccI7+hVA2NZe2fPpieFe7w7c0U/QyWIKPys7eSmeaslmlkSQJVG
OuaTD9mQOZvkYDCzjHEZGqDGbdlB2bScKhkKiL2nTJc2scBBIF2ekE0O78iTaE3R
aw90NCnHtxwDA7ySSze3kM5BIqcHxW/uDy/S04v3WzBqwKLTx0bSkL3qVH4GUD4o
FRxjh70/w1NDmbcUrwfDDUQBgg8CAwEAAaOCBIswggSHMB0GA1UdDgQWBBThP4Jd
eWNj4Q0ftOq1BuJLP3dsWzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzNENDk5MEZF
MjgxNTExRjFCMjQ5Q0JENUJCODMzNzczLnJvYTCCAkgGCCsGAQUFBwEHAQH/BIIC
NzCCAjMwggGyBAIAATCCAaoDBAEbe/ADBAIr4fgDBAEr5KQDBAIr5pQDBAIr+JgD
BAIr+PADBAIr+1wDBAIteKADBAIt+AADBAIt+KwDBAFnJWIDBAJnKMgDBAJnKyAD
BABnNhsDBAJnNzwDBAJnRBQDBAFnRIwDBABnRe8DBABnSMQDBANnW0gDBABnXGsD
BABnXScDBABnZAQDBAJnZXADBAJnahwDBAFncW4DBABneGwDBAFneJgDBABnfK4D
BABnigkDBABni48DBABnmJ4DBAFnmggDBAFnmjgDBABnm+0DBABnnHkDBAFnnbwD
BAFnnloDBAFnn2gDBABnoBkDBABnpIwDBAFnpVgDBAFnp5oDBAFnp7YDBAFnp+AD
BAFnp+4DBAFnqDwDBAFnqfIDBAFnqiYDBAFnqjQDBAFnqlQDBABnsnUDBAFnszID
BABntUIDBABntXcDBABnuM0DBAJnxqwDBABnzEYDBABnzjMDBAFnzmADBAJn2IwD
BAJn2YQDBAJn4JADBAJn4bwDBAJn6OgDBAJn+FwDBAJn+KwDBAFurBgDBAKdd1AD
BADKBKkDBADST4YwewQCAAIwdQMHACABDfBHwAMHACABDfEZgAMHACABDfHtQAMH
ACABDfI6wAMHACABDfI/QAMHACABDfMTQAMHACABDfNuwAMFACQA1mADBQAkAbug
MBIDBwEkBeEAAAoDBwQkBeEAAAAwEgMHACQF4QAAHQMHACQF4QAAHjANBgkqhkiG
9w0BAQsFAAOCAQEAX+PvkzPOgqjbMyQMTaMMJDaCkx8UY6UFPCMQkmsew2GBU2sW
8U8o17rjntAk4EqCjSor+Rz/Z9RaAbhGBeZrlVoDVjL/GrDec7M/rkaFLoJ5bsgn
sgyO8Ru79PlP1lQJjMOfHQ+S2Y9QduMrGFhIOEu/ca2khk5wIrQ47RQakGntzgdj
RDwu6oGEJC/K8vJJWp6f2+W79Q8qj+DLB2wv48Z0PZfwleOFTKtX/K7ZyYv+juGJ
1W49aPyGHjBseOsppDRIziSJlnZLf5l+/UX84QmtnAyvp0GF731Z51HqyVEpoQCP
pw1c8JBQaHV57Cx9WBEHwuzXLNWMO9tpYCZ7qA==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:17:00 2026 by rpki-client