Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960A0F5C3B0C11F1B3BAF144A1833773.roa
File: 960A0F5C3B0C11F1B3BAF144A1833773.roa (raw, json)
Hash identifier: IQ79Z3sgKT1GQABLNzex0tefqmYgObACktgP3he2Y7I=
Subject key identifier: 1E:CA:A7:34:59:2C:DB:0F:14:7C:A8:4A:96:2D:0E:76:BC:3C:A9:A1
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FD1D
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960A0F5C3B0C11F1B3BAF144A1833773.roa
Signing time: Tue 22 Sep 2026 12:54:27 +0000
ROA not before: Tue 22 Sep 2026 12:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133275
IP address blocks: 43.228.220.0/22 maxlen: 24
43.248.236.0/22 maxlen: 24
43.249.52.0/22 maxlen: 24
45.115.4.0/22 maxlen: 24
45.119.136.0/22 maxlen: 24
45.119.140.0/22 maxlen: 24
45.125.60.0/22 maxlen: 24
103.36.124.0/22 maxlen: 24
103.46.192.0/23 maxlen: 24
103.46.194.0/23 maxlen: 24
103.47.168.0/22 maxlen: 24
103.47.236.0/22 maxlen: 24
103.59.192.0/22 maxlen: 24
103.59.196.0/22 maxlen: 24
103.86.40.0/22 maxlen: 24
103.95.120.0/22 maxlen: 24
103.124.12.0/22 maxlen: 24
103.146.32.0/23 maxlen: 24
103.152.22.0/24 maxlen: 24
103.153.180.0/23 maxlen: 24
103.173.201.0/24 maxlen: 24
103.176.162.0/23 maxlen: 24
103.182.154.0/23 maxlen: 24
103.193.196.0/22 maxlen: 24
103.196.52.0/22 maxlen: 24
103.197.116.0/22 maxlen: 24
103.207.172.0/22 maxlen: 24
103.208.200.0/22 maxlen: 24
103.215.248.0/22 maxlen: 24
103.216.88.0/22 maxlen: 24
103.243.4.0/24 maxlen: 24
103.248.116.0/22 maxlen: 24
116.204.188.0/22 maxlen: 24
137.59.240.0/22 maxlen: 24
157.119.124.0/22 maxlen: 24
157.119.216.0/24 maxlen: 24
157.119.217.0/24 maxlen: 24
157.119.218.0/24 maxlen: 24
157.119.219.0/24 maxlen: 24
175.111.132.0/22 maxlen: 24
210.16.80.0/22 maxlen: 24
220.158.160.0/22 maxlen: 24
2001:df5:9ac0::/48 maxlen: 48
2404:4340::/32 maxlen: 32
2404:4340::/33 maxlen: 33
2404:4340::/48 maxlen: 48
2404:4340:1::/48 maxlen: 48
2404:4340:2::/48 maxlen: 48
2404:4340:3::/48 maxlen: 48
2404:4340:4::/48 maxlen: 48
2404:4340:5::/48 maxlen: 48
2404:4340:6::/48 maxlen: 48
2404:4340:7::/48 maxlen: 48
2404:4340:f::/48 maxlen: 48
2404:4340:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 06:44:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64797 (0xfd1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Sep 22 12:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ab27a83-2f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:2c:d5:40:82:22:5c:6f:7a:a9:d3:e3:b6:
b6:f6:51:e4:2d:9b:a7:55:e5:88:55:42:a9:43:01:
31:2f:9c:f6:7d:b3:cb:6e:ea:3b:cb:34:98:bd:9f:
81:8b:8b:4d:9c:b5:13:bd:af:d6:74:f6:e5:bc:2f:
45:a3:f5:01:53:56:26:81:c9:f5:8f:ea:68:26:57:
68:79:b7:37:19:32:bc:71:09:51:24:28:2d:4a:c7:
35:5d:cd:31:fc:da:42:3e:2d:a3:dc:71:fa:cb:ed:
f2:03:ff:a6:9f:82:5a:5e:e8:46:7e:62:1d:40:33:
5f:db:b3:78:31:74:e4:cc:08:6a:cd:c6:59:9d:fa:
28:95:60:b4:c6:fd:58:19:7e:2b:7f:b3:ba:ad:36:
1b:dc:30:d5:b7:de:33:b7:e7:23:86:23:d7:f6:11:
c4:85:44:02:82:66:27:7b:97:42:48:73:97:c8:aa:
b3:14:65:ce:3a:19:f0:09:6d:06:cb:28:ee:4a:51:
b4:5f:14:a7:e1:82:ca:a5:77:a7:ea:5b:cb:d1:97:
ef:e7:71:40:60:1c:ce:a3:7b:7c:0b:42:b0:6b:d3:
22:ea:dd:c4:3d:ce:1b:ed:5e:f0:0f:e5:c5:5d:35:
4f:b0:cf:c5:16:b9:94:f7:71:cd:4f:da:d1:5c:e7:
26:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CA:A7:34:59:2C:DB:0F:14:7C:A8:4A:96:2D:0E:76:BC:3C:A9:A1
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960A0F5C3B0C11F1B3BAF144A1833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.228.220.0/22
43.248.236.0/22
43.249.52.0/22
45.115.4.0/22
45.119.136.0/21
45.125.60.0/22
103.36.124.0/22
103.46.192.0/22
103.47.168.0/22
103.47.236.0/22
103.59.192.0/21
103.86.40.0/22
103.95.120.0/22
103.124.12.0/22
103.146.32.0/23
103.152.22.0/24
103.153.180.0/23
103.173.201.0/24
103.176.162.0/23
103.182.154.0/23
103.193.196.0/22
103.196.52.0/22
103.197.116.0/22
103.207.172.0/22
103.208.200.0/22
103.215.248.0/22
103.216.88.0/22
103.243.4.0/24
103.248.116.0/22
116.204.188.0/22
137.59.240.0/22
157.119.124.0/22
157.119.216.0/22
175.111.132.0/22
210.16.80.0/22
220.158.160.0/22
IPv6:
2001:df5:9ac0::/48
2404:4340::/32
Signature Algorithm: sha256WithRSAEncryption
ae:67:4a:8a:df:02:60:8e:87:5c:22:0c:42:6e:b4:b6:bc:ae:
c8:4e:ff:e8:97:b7:05:f6:a4:ec:f5:91:7f:e6:cd:7d:da:c3:
e3:f1:31:b4:1b:af:da:35:71:b4:f6:95:6f:c7:1a:54:dc:90:
b2:60:c3:30:02:ad:32:7f:16:cd:61:bb:ed:cc:92:e0:4b:5f:
de:44:d5:88:32:b9:95:54:9f:01:d1:66:81:d1:54:e3:76:fe:
37:f2:09:08:e5:c5:81:de:c7:d6:1b:22:88:d3:a8:19:71:d7:
3d:58:2c:ad:55:00:f5:e9:41:45:11:6a:f7:7e:da:78:85:93:
45:2d:a8:43:3e:89:60:80:2b:ea:56:59:16:90:16:06:d4:32:
4c:f9:d6:5a:60:ef:7c:52:a4:16:ac:dc:48:56:6a:36:cb:7f:
7a:44:7e:fe:5a:cd:7c:d1:81:e3:aa:c2:4f:20:45:17:f2:2f:
d3:60:09:53:43:98:67:34:7d:30:a3:45:d4:1e:da:92:e0:82:
da:a3:ff:8b:84:37:21:a9:2c:e7:da:7f:96:e5:e3:22:a1:79:
ad:16:6e:f2:cc:c4:69:80:5b:41:93:56:eb:89:39:97:95:b7:
dc:0b:ad:c4:35:cd:b0:24:46:0c:c6:9f:62:a1:f6:9e:22:53:
8b:05:47:fe
-----BEGIN CERTIFICATE-----
MIIGLTCCBRWgAwIBAgIDAP0dMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDkyMjEyNTQyN1oXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmFiMjdhODMtMmY4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKnpLNVAgiJcb3qp0+O2tvZR5C2bp1XliFVCqUMBMS+c9n2zy27qO8s0mL2f
gYuLTZy1E72v1nT25bwvRaP1AVNWJoHJ9Y/qaCZXaHm3NxkyvHEJUSQoLUrHNV3N
MfzaQj4to9xx+svt8gP/pp+CWl7oRn5iHUAzX9uzeDF05MwIas3GWZ36KJVgtMb9
WBl+K3+zuq02G9ww1bfeM7fnI4Yj1/YRxIVEAoJmJ3uXQkhzl8iqsxRlzjoZ8Alt
Bsso7kpRtF8Up+GCyqV3p+pby9GX7+dxQGAczqN7fAtCsGvTIurdxD3OG+1e8A/l
xV01T7DPxRa5lPdxzU/a0VznJq0CAwEAAaOCA1AwggNMMB0GA1UdDgQWBBQeyqc0
WSzbDxR8qEqWLQ52vDypoTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk2MEEwRjVD
M0IwQzExRjFCM0JBRjE0NEExODMzNzczLnJvYTCCAQ0GCCsGAQUFBwEHAQH/BIH9
MIH6MIHfBAIAATCB2AMEAivk3AMEAiv47AMEAiv5NAMEAi1zBAMEAy13iAMEAi19
PAMEAmckfAMEAmcuwAMEAmcvqAMEAmcv7AMEA2c7wAMEAmdWKAMEAmdfeAMEAmd8
DAMEAWeSIAMEAGeYFgMEAWeZtAMEAGetyQMEAWewogMEAWe2mgMEAmfBxAMEAmfE
NAMEAmfFdAMEAmfPrAMEAmfQyAMEAmfX+AMEAmfYWAMEAGfzBAMEAmf4dAMEAnTM
vAMEAok78AMEAp13fAMEAp132AMEAq9vhAMEAtIQUAMEAtyeoDAWBAIAAjAQAwcA
IAEN9ZrAAwUAJARDQDANBgkqhkiG9w0BAQsFAAOCAQEArmdKit8CYI6HXCIMQm60
tryuyE7/6Je3Bfak7PWRf+bNfdrD4/ExtBuv2jVxtPaVb8caVNyQsmDDMAKtMn8W
zWG77cyS4Etf3kTViDK5lVSfAdFmgdFU43b+N/IJCOXFgd7H1hsiiNOoGXHXPVgs
rVUA9elBRRFq937aeIWTRS2oQz6JYIAr6lZZFpAWBtQyTPnWWmDvfFKkFqzcSFZq
Nst/ekR+/lrNfNGB46rCTyBFF/Iv02AJU0OYZzR9MKNF1B7akuCC2qP/i4Q3Iaks
59p/luXjIqF5rRZu8szEaYBbQZNW64k5l5W33AutxDXNsCRGDMafYqH2niJTiwVH
/g==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:34:16 2026 by rpki-client