Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55EE9E7E86ED11F19E006003A7EE528E.roa
File: 55EE9E7E86ED11F19E006003A7EE528E.roa (raw, json)
Hash identifier: gEabbXWgEOpLtnl5wx+/bepOqw7YqeFxVeQEDdbP7ns=
Subject key identifier: F2:E7:EA:70:D7:27:ED:B4:55:D9:92:F8:73:29:14:52:05:31:F6:E2
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F95A
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55EE9E7E86ED11F19E006003A7EE528E.roa
Signing time: Thu 23 Jul 2026 23:22:13 +0000
ROA not before: Thu 23 Jul 2026 23:22:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18002
IP address blocks: 14.102.1.0/24 maxlen: 24
14.102.2.0/23 maxlen: 24
14.102.12.0/23 maxlen: 24
14.102.15.0/24 maxlen: 24
14.102.22.0/23 maxlen: 24
14.102.24.0/22 maxlen: 24
14.102.32.0/22 maxlen: 24
14.102.36.0/23 maxlen: 24
14.102.38.0/24 maxlen: 24
14.102.40.0/22 maxlen: 24
14.102.44.0/24 maxlen: 24
14.102.45.0/24 maxlen: 24
14.102.48.0/24 maxlen: 24
14.102.50.0/24 maxlen: 24
14.102.56.0/23 maxlen: 24
14.102.59.0/24 maxlen: 24
14.102.64.0/22 maxlen: 24
14.102.68.0/22 maxlen: 24
14.102.72.0/22 maxlen: 24
14.102.76.0/23 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/23 maxlen: 24
14.102.82.0/24 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.91.0/24 maxlen: 24
14.102.92.0/23 maxlen: 24
14.102.95.0/24 maxlen: 24
14.102.96.0/23 maxlen: 24
14.102.100.0/23 maxlen: 24
14.102.103.0/24 maxlen: 24
14.102.104.0/22 maxlen: 24
14.102.108.0/22 maxlen: 24
14.102.112.0/22 maxlen: 24
14.102.116.0/22 maxlen: 24
14.102.120.0/22 maxlen: 24
14.102.125.0/24 maxlen: 24
14.102.126.0/23 maxlen: 24
43.251.212.0/22 maxlen: 24
61.14.228.0/24 maxlen: 24
61.14.231.0/24 maxlen: 24
103.5.200.0/23 maxlen: 24
103.47.164.0/24 maxlen: 24
103.59.189.0/24 maxlen: 24
103.87.101.0/24 maxlen: 24
103.87.102.0/23 maxlen: 24
103.158.131.0/24 maxlen: 24
103.160.24.0/24 maxlen: 24
103.160.72.0/23 maxlen: 24
103.173.200.0/24 maxlen: 24
103.175.72.0/24 maxlen: 24
103.175.73.0/24 maxlen: 24
110.172.130.0/23 maxlen: 24
110.172.132.0/24 maxlen: 24
110.172.134.0/23 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.138.0/23 maxlen: 24
110.172.140.0/24 maxlen: 24
110.172.147.0/24 maxlen: 24
110.172.150.0/24 maxlen: 24
110.172.151.0/24 maxlen: 24
110.172.152.0/22 maxlen: 24
110.172.156.0/22 maxlen: 24
110.172.160.0/23 maxlen: 24
110.172.162.0/24 maxlen: 24
110.172.164.0/24 maxlen: 24
110.172.166.0/23 maxlen: 24
110.172.168.0/24 maxlen: 24
110.172.170.0/23 maxlen: 24
110.172.174.0/23 maxlen: 24
110.172.177.0/24 maxlen: 24
110.172.178.0/23 maxlen: 24
110.172.184.0/22 maxlen: 24
111.235.64.0/22 maxlen: 24
114.69.228.0/22 maxlen: 24
114.69.240.0/24 maxlen: 24
114.69.242.0/23 maxlen: 24
114.69.248.0/23 maxlen: 24
114.69.252.0/22 maxlen: 24
118.91.176.0/23 maxlen: 24
118.91.178.0/24 maxlen: 24
118.91.189.0/24 maxlen: 24
118.91.191.0/24 maxlen: 24
202.89.64.0/24 maxlen: 24
202.89.65.0/24 maxlen: 24
202.89.66.0/24 maxlen: 24
202.89.67.0/24 maxlen: 24
202.89.68.0/24 maxlen: 24
202.89.69.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
202.89.71.0/24 maxlen: 24
202.89.72.0/24 maxlen: 24
202.89.74.0/24 maxlen: 24
202.89.76.0/24 maxlen: 24
202.89.77.0/24 maxlen: 24
202.89.78.0/24 maxlen: 24
2402:5b00::/44 maxlen: 44
2402:5b00:20::/44 maxlen: 44
2402:5b00:40::/44 maxlen: 44
2402:5b00:b0::/44 maxlen: 44
2402:5b00:d0::/44 maxlen: 44
2402:5b00:e0::/44 maxlen: 44
2402:5b00:f0::/44 maxlen: 44
2402:5b00:110::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 31 Jul 2026 15:26:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63834 (0xf95a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 23 23:22:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a62a225-6fb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:0c:9e:05:f3:13:50:36:28:b9:80:70:2a:87:
d6:d4:8a:bc:5e:99:12:ba:95:75:6f:75:6f:29:db:
f4:4c:8a:27:51:24:ea:b9:1b:31:ea:c3:2d:40:34:
a7:cb:67:82:60:0f:ac:d4:3f:21:7f:e3:1a:e2:ce:
14:44:ac:f3:f0:e8:08:49:2d:f8:93:5e:0e:cf:46:
e3:dd:47:33:9a:69:7c:f8:ce:64:8b:76:51:ae:f2:
ac:d0:2a:61:a9:9d:d4:aa:43:5d:1b:66:34:bb:f8:
63:13:69:f3:2a:5f:89:b6:02:33:29:51:0a:0f:89:
3a:3b:0f:26:bd:58:29:c8:c1:61:9f:b1:95:93:83:
9e:36:6b:4c:b6:1f:33:db:1c:d6:5a:92:39:06:2d:
c7:44:73:dd:8f:4c:d6:36:14:43:b2:a7:00:2c:eb:
f0:28:88:9e:74:d2:12:24:52:dd:dc:d4:b0:e5:d4:
7e:20:82:e8:d4:ba:ba:e0:65:8b:c0:20:e9:be:11:
54:4e:7b:ba:a0:53:c5:85:6b:6b:c8:cf:b5:e1:e6:
ff:3c:7a:8f:de:0d:e3:fa:4a:69:c9:bf:9c:d1:4c:
7f:14:1b:38:fc:b9:75:ef:fd:9e:4e:d5:e0:fc:7b:
1f:8b:5c:3a:96:48:c6:8d:47:67:4d:64:1a:5f:13:
70:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E7:EA:70:D7:27:ED:B4:55:D9:92:F8:73:29:14:52:05:31:F6:E2
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/55EE9E7E86ED11F19E006003A7EE528E.roa
sbgp-ipAddrBlock: critical
IPv4:
14.102.1.0-14.102.3.255
14.102.12.0/23
14.102.15.0/24
14.102.22.0-14.102.27.255
14.102.32.0-14.102.38.255
14.102.40.0-14.102.45.255
14.102.48.0/24
14.102.50.0/24
14.102.56.0/23
14.102.59.0/24
14.102.64.0-14.102.78.255
14.102.80.0-14.102.82.255
14.102.88.0/24
14.102.91.0-14.102.93.255
14.102.95.0-14.102.97.255
14.102.100.0/23
14.102.103.0-14.102.123.255
14.102.125.0-14.102.127.255
43.251.212.0/22
61.14.228.0/24
61.14.231.0/24
103.5.200.0/23
103.47.164.0/24
103.59.189.0/24
103.87.101.0-103.87.103.255
103.158.131.0/24
103.160.24.0/24
103.160.72.0/23
103.173.200.0/24
103.175.72.0/23
110.172.130.0-110.172.132.255
110.172.134.0-110.172.136.255
110.172.138.0-110.172.140.255
110.172.147.0/24
110.172.150.0-110.172.162.255
110.172.164.0/24
110.172.166.0-110.172.168.255
110.172.170.0/23
110.172.174.0/23
110.172.177.0-110.172.179.255
110.172.184.0/22
111.235.64.0/22
114.69.228.0/22
114.69.240.0/24
114.69.242.0/23
114.69.248.0/23
114.69.252.0/22
118.91.176.0-118.91.178.255
118.91.189.0/24
118.91.191.0/24
202.89.64.0-202.89.72.255
202.89.74.0/24
202.89.76.0-202.89.78.255
IPv6:
2402:5b00::/44
2402:5b00:20::/44
2402:5b00:40::/44
2402:5b00:b0::/44
2402:5b00:d0::-2402:5b00:ff:ffff:ffff:ffff:ffff:ffff
2402:5b00:110::/44
Signature Algorithm: sha256WithRSAEncryption
b1:39:aa:68:58:90:ea:7d:07:2c:b4:c3:25:eb:95:2f:4f:00:
27:31:2c:ee:ef:70:c6:9b:53:b0:e8:ae:af:a5:7c:5b:a6:30:
f2:b3:ca:a3:b3:53:c5:66:05:01:85:fe:b6:e1:30:54:1b:71:
cb:97:f0:39:c6:0e:4f:35:d4:9a:48:48:5d:b9:40:09:98:36:
64:20:e1:43:88:e9:d4:4b:32:0c:6a:0f:e1:58:de:f5:58:f0:
05:03:50:7c:7b:af:b4:e1:27:42:08:ca:92:b6:87:cc:cc:f2:
cc:ef:27:6e:be:49:55:5a:e9:fe:2f:71:08:51:5e:08:c2:3c:
d8:c0:87:67:1f:bd:66:36:31:46:f0:80:bf:3f:82:0b:2d:30:
6e:44:94:9a:5b:f7:06:f6:4b:a2:a3:c4:a9:e0:82:8a:3e:03:
85:fa:40:aa:5c:e1:1e:45:ea:9b:31:84:93:c5:b1:6c:03:a8:
e0:42:1b:09:15:1e:a2:da:24:1e:c9:79:86:b9:5a:6f:d7:4e:
d7:82:f9:6d:0d:e9:44:84:c0:c0:b3:c5:eb:e3:d8:6d:b4:a4:
54:11:4c:f6:5d:8f:11:a4:4e:f4:e5:32:f0:c8:94:c7:dd:97:
b9:98:1c:67:19:71:79:bf:4e:f6:69:75:bf:76:5f:13:ea:be:
74:28:c7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:23:52 2026 by rpki-client