Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/CEFDECF850B011F0B9262D4FC4F9AE02.roa
File: CEFDECF850B011F0B9262D4FC4F9AE02.roa (raw, json)
Hash identifier: M7Twy19LjGj2zYAkQBPKqFxpHK+7jtbWBpYW+TQys+s=
Subject key identifier: 70:EA:2F:EC:EB:20:EC:AB:54:3A:03:DB:BC:E1:7C:5E:A0:16:DE:E6
Certificate issuer: /CN=A91A09BF/serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567
Certificate serial: 0C39
Authority key identifier: 78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/CEFDECF850B011F0B9262D4FC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:36:56 +0000
ROA not before: Thu 20 Nov 2025 18:38:54 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 9729
IP address blocks: 202.85.128.0/20 maxlen: 20
202.85.128.0/24 maxlen: 24
202.85.129.0/24 maxlen: 24
202.85.131.0/24 maxlen: 24
202.85.132.0/24 maxlen: 24
202.85.137.0/24 maxlen: 24
202.85.138.0/24 maxlen: 24
202.85.140.0/24 maxlen: 24
202.85.144.0/20 maxlen: 24
202.85.164.0/23 maxlen: 23
202.85.165.0/24 maxlen: 24
202.85.166.0/23 maxlen: 23
202.85.167.0/24 maxlen: 24
202.85.168.0/22 maxlen: 22
202.85.169.0/24 maxlen: 24
202.85.170.0/24 maxlen: 24
202.85.171.0/24 maxlen: 24
202.85.172.0/22 maxlen: 22
202.85.172.0/24 maxlen: 24
202.85.180.0/22 maxlen: 22
202.85.181.0/24 maxlen: 24
202.85.184.0/22 maxlen: 22
202.85.188.0/24 maxlen: 24
202.85.190.0/24 maxlen: 24
202.85.191.0/24 maxlen: 24
203.194.128.0/21 maxlen: 21
203.194.133.0/24 maxlen: 24
203.194.135.0/24 maxlen: 24
203.194.136.0/21 maxlen: 21
203.194.136.0/24 maxlen: 24
203.194.140.0/22 maxlen: 24
203.194.144.0/21 maxlen: 21
203.194.144.0/24 maxlen: 24
203.194.145.0/24 maxlen: 24
203.194.146.0/24 maxlen: 24
203.194.148.0/24 maxlen: 24
203.194.149.0/24 maxlen: 24
203.194.152.0/21 maxlen: 21
203.194.153.0/24 maxlen: 24
203.194.159.0/24 maxlen: 24
203.194.160.0/22 maxlen: 24
203.194.164.0/22 maxlen: 22
203.194.168.0/22 maxlen: 22
203.194.168.0/24 maxlen: 24
203.194.169.0/24 maxlen: 24
203.194.170.0/24 maxlen: 24
203.194.171.0/24 maxlen: 24
203.194.176.0/22 maxlen: 22
203.194.176.0/24 maxlen: 24
203.194.177.0/24 maxlen: 24
203.194.179.0/24 maxlen: 24
203.194.183.0/24 maxlen: 24
203.194.186.0/23 maxlen: 24
203.194.188.0/22 maxlen: 22
203.194.188.0/24 maxlen: 24
203.194.192.0/21 maxlen: 21
203.194.196.0/24 maxlen: 24
203.194.199.0/24 maxlen: 24
203.194.200.0/22 maxlen: 22
203.194.200.0/23 maxlen: 23
203.194.204.0/22 maxlen: 22
203.194.206.0/24 maxlen: 24
203.194.208.0/22 maxlen: 22
203.194.208.0/24 maxlen: 24
203.194.209.0/24 maxlen: 24
203.194.211.0/24 maxlen: 24
203.194.212.0/22 maxlen: 22
203.194.212.0/23 maxlen: 23
203.194.216.0/22 maxlen: 22
203.194.216.0/24 maxlen: 24
203.194.217.0/24 maxlen: 24
203.194.218.0/24 maxlen: 24
203.194.219.0/24 maxlen: 24
203.194.220.0/22 maxlen: 22
203.194.220.0/24 maxlen: 24
203.194.221.0/24 maxlen: 24
203.194.223.0/24 maxlen: 24
203.194.224.0/22 maxlen: 22
203.194.224.0/24 maxlen: 24
203.194.227.0/24 maxlen: 24
203.194.228.0/22 maxlen: 22
203.194.228.0/24 maxlen: 24
203.194.232.0/22 maxlen: 22
203.194.232.0/24 maxlen: 24
203.194.233.0/24 maxlen: 24
203.194.236.0/22 maxlen: 24
203.194.240.0/22 maxlen: 22
203.194.244.0/22 maxlen: 22
203.194.244.0/24 maxlen: 24
203.194.248.0/21 maxlen: 21
203.194.251.0/24 maxlen: 24
203.194.255.0/24 maxlen: 24
210.184.96.0/22 maxlen: 22
210.184.97.0/24 maxlen: 24
210.184.99.0/24 maxlen: 24
210.184.100.0/22 maxlen: 22
210.184.108.0/22 maxlen: 22
210.184.110.0/24 maxlen: 24
210.184.112.0/21 maxlen: 21
210.184.113.0/24 maxlen: 24
210.184.114.0/24 maxlen: 24
210.184.120.0/24 maxlen: 24
210.184.121.0/24 maxlen: 24
210.184.122.0/24 maxlen: 24
210.184.124.0/24 maxlen: 24
210.184.127.0/24 maxlen: 24
210.184.128.0/17 maxlen: 17
210.184.128.0/21 maxlen: 21
210.184.136.0/22 maxlen: 22
210.184.137.0/24 maxlen: 24
210.184.139.0/24 maxlen: 24
210.184.142.0/24 maxlen: 24
210.184.152.0/22 maxlen: 22
210.184.156.0/23 maxlen: 23
210.184.158.0/23 maxlen: 23
210.184.164.0/22 maxlen: 22
210.184.167.0/24 maxlen: 24
210.184.168.0/22 maxlen: 22
210.184.172.0/23 maxlen: 23
210.184.174.0/23 maxlen: 23
210.184.178.0/23 maxlen: 23
210.184.178.0/24 maxlen: 24
210.184.180.0/22 maxlen: 22
210.184.180.0/24 maxlen: 24
210.184.184.0/22 maxlen: 22
210.184.189.0/24 maxlen: 24
210.184.190.0/23 maxlen: 23
210.184.190.0/24 maxlen: 24
210.184.192.0/24 maxlen: 24
210.184.193.0/24 maxlen: 24
210.184.194.0/24 maxlen: 24
210.184.196.0/22 maxlen: 22
210.184.196.0/24 maxlen: 24
210.184.197.0/24 maxlen: 24
210.184.198.0/23 maxlen: 24
210.184.200.0/22 maxlen: 22
210.184.200.0/24 maxlen: 24
210.184.201.0/24 maxlen: 24
210.184.202.0/24 maxlen: 24
210.184.203.0/24 maxlen: 24
210.184.204.0/22 maxlen: 22
210.184.208.0/24 maxlen: 24
210.184.209.0/24 maxlen: 24
210.184.210.0/24 maxlen: 24
210.184.211.0/24 maxlen: 24
210.184.212.0/24 maxlen: 24
210.184.213.0/24 maxlen: 24
210.184.214.0/24 maxlen: 24
210.184.215.0/24 maxlen: 24
210.184.216.0/24 maxlen: 24
210.184.217.0/24 maxlen: 24
210.184.218.0/24 maxlen: 24
210.184.219.0/24 maxlen: 24
210.184.220.0/24 maxlen: 24
210.184.221.0/24 maxlen: 24
210.184.222.0/24 maxlen: 24
210.184.223.0/24 maxlen: 24
210.184.224.0/24 maxlen: 24
210.184.225.0/24 maxlen: 24
210.184.226.0/24 maxlen: 24
210.184.240.0/24 maxlen: 24
210.184.241.0/24 maxlen: 24
210.184.242.0/23 maxlen: 24
210.184.248.0/21 maxlen: 22
210.184.248.0/23 maxlen: 24
210.184.251.0/24 maxlen: 24
210.184.254.0/24 maxlen: 24
2403:2400::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl
rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 02 Apr 2026 18:43:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3129 (0xc39)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A09BF, serialNumber=7870F240BC4516E39A9C25958CF97B194BE76567
Validity
Not Before: Nov 20 18:38:54 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a45d18-2800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d2:7d:5e:5a:75:20:8a:dd:82:52:5a:4f:89:
72:0f:69:1f:c5:d0:dc:19:f2:d1:af:ba:c1:50:26:
54:a4:31:fc:2a:1c:5b:b7:2b:94:9c:00:30:3c:ea:
49:c6:21:9a:0b:c4:10:9b:c0:c9:9e:7a:58:e4:28:
25:09:01:82:a0:e9:97:26:cd:23:df:26:91:44:a6:
9c:d5:18:c3:9b:5d:fd:54:4c:fe:e3:7b:59:50:85:
54:28:b4:72:55:8a:2f:a9:58:6c:20:41:c5:dd:fc:
7d:5d:c6:88:bf:d4:71:e7:77:91:10:91:0d:10:7a:
39:e1:7f:3a:0a:0b:b5:f9:9b:25:d5:8e:72:ff:2d:
2b:15:19:38:de:73:b4:1c:52:43:16:66:c8:84:4b:
12:83:a7:81:6e:51:35:02:99:79:b9:80:52:af:9b:
03:1f:f6:10:17:38:79:f9:4d:2e:69:bc:aa:55:87:
61:25:c4:11:7f:b2:53:d3:af:53:9a:d8:54:b0:dc:
27:35:76:bd:8d:9a:c4:c5:a6:07:04:93:43:e7:fa:
e0:c6:63:ec:5e:45:fa:1c:8b:05:ad:33:3e:dc:f5:
28:e5:17:ef:4b:c3:fd:f8:ef:0b:99:ec:76:b7:d2:
22:05:0d:81:cd:08:fe:58:e6:30:3e:d4:17:e8:5c:
7a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EA:2F:EC:EB:20:EC:AB:54:3A:03:DB:BC:E1:7C:5E:A0:16:DE:E6
X509v3 Authority Key Identifier:
keyid:78:70:F2:40:BC:45:16:E3:9A:9C:25:95:8C:F9:7B:19:4B:E7:65:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/eHDyQLxFFuOanCWVjPl7GUvnZWc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eHDyQLxFFuOanCWVjPl7GUvnZWc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A09BF/D13DA1D42DFC11EABC1B6B82C4F9AE02/CEFDECF850B011F0B9262D4FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.85.128.0/19
202.85.164.0-202.85.175.255
202.85.180.0-202.85.188.255
202.85.190.0/23
203.194.128.0-203.194.171.255
203.194.176.0/22
203.194.183.0/24
203.194.186.0-203.194.255.255
210.184.96.0/21
210.184.108.0-210.184.122.255
210.184.124.0/24
210.184.127.0-210.184.255.255
IPv6:
2403:2400::/32
Signature Algorithm: sha256WithRSAEncryption
76:0d:4a:8d:5c:73:7a:2a:b1:de:94:8a:9b:c0:1e:2c:71:ac:
60:08:8b:22:29:b6:35:48:de:e7:22:33:86:39:67:c4:3c:df:
22:db:e6:10:d3:fd:a6:da:fb:75:08:3c:d3:16:ed:9c:ce:9e:
8b:35:21:17:d1:31:f0:a9:fc:fb:aa:5f:e8:28:b8:4d:5a:2b:
c9:38:72:44:28:a6:89:a9:5c:af:f9:8e:57:1b:65:df:49:a1:
2b:2e:9c:5a:34:1c:0e:0a:0b:57:bb:a7:10:30:e9:5c:8e:bd:
34:34:eb:dd:b4:f3:a4:f1:5c:48:62:49:4d:88:b3:5b:13:2d:
3f:5d:f3:cb:c5:5a:4c:73:59:65:d9:e4:2f:7f:cf:6b:4a:aa:
01:87:26:d8:66:79:23:6b:b2:cc:a7:42:99:10:4c:61:54:57:
be:45:00:ab:d3:bf:d2:03:76:1d:59:b0:96:be:f3:b6:3b:df:
44:a0:87:80:0b:f2:0b:b2:71:7d:ce:75:20:59:5b:37:4d:44:
d6:e7:03:f9:ac:97:74:60:4c:63:0e:35:f4:c9:21:e1:83:ec:
43:be:1a:bb:40:4c:17:3c:a7:45:59:ef:f0:83:21:96:6b:d5:
e1:a4:2e:ec:5d:b8:03:70:b5:7e:04:eb:25:b0:04:06:46:07:
65:21:00:e6
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgICDDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTA5QkYxMTAvBgNVBAUTKDc4NzBGMjQwQkM0NTE2RTM5QTlDMjU5NThDRjk3QjE5
NEJFNzY1NjcwHhcNMjUxMTIwMTgzODU0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NWQxOC0yODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAutJ9Xlp1IIrdglJaT4lyD2kfxdDcGfLRr7rBUCZUpDH8KhxbtyuUnAAwPOpJ
xiGaC8QQm8DJnnpY5CglCQGCoOmXJs0j3yaRRKac1RjDm139VEz+43tZUIVUKLRy
VYovqVhsIEHF3fx9XcaIv9Rx53eREJENEHo54X86Cgu1+Zsl1Y5y/y0rFRk43nO0
HFJDFmbIhEsSg6eBblE1Apl5uYBSr5sDH/YQFzh5+U0uabyqVYdhJcQRf7JT069T
mthUsNwnNXa9jZrExaYHBJND5/rgxmPsXkX6HIsFrTM+3PUo5RfvS8P9+O8Lmex2
t9IiBQ2BzQj+WOYwPtQX6Fx6/QIDAQABo4IC4jCCAt4wHQYDVR0OBBYEFHDqL+zr
IOyrVDoD27zhfF6gFt7mMB8GA1UdIwQYMBaAFHhw8kC8RRbjmpwllYz5exlL52Vn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDlCRi9EMTNEQTFENDJE
RkMxMUVBQkMxQjZCODJDNEY5QUUwMi9lSER5UUx4RkZ1T2FuQ1dWalBsN0dVdm5a
V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2VIRHlRTHhGRnVPYW5DV1ZqUGw3R1V2blpXYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTA5QkYvRDEzREExRDQyREZDMTFFQUJDMUI2QjgyQzRGOUFFMDIvQ0VGREVDRjg1
MEIwMTFGMEI5MjYyRDRGQzRGOUFFMDIucm9hMIGgBggrBgEFBQcBBwEB/wSBkDCB
jTB8BAIAATB2AwQFylWAMAwDBALKVaQDBATKVaAwDAMEAspVtAMEAMpVvAMEAcpV
vjAMAwQHy8KAAwQCy8KoAwQCy8KwAwQAy8K3MAsDBAHLwroDAwDLwgMEA9K4YDAM
AwQC0rhsAwQA0rh6AwQA0rh8MAsDBADSuH8DAwDSuDANBAIAAjAHAwUAJAMkADAN
BgkqhkiG9w0BAQsFAAOCAQEAdg1KjVxzeiqx3pSKm8AeLHGsYAiLIim2NUje5yIz
hjlnxDzfItvmENP9ptr7dQg80xbtnM6eizUhF9Ex8Kn8+6pf6Ci4TVoryThyRCim
ialcr/mOVxtl30mhKy6cWjQcDgoLV7unEDDpXI69NDTr3bTzpPFcSGJJTYizWxMt
P13zy8VaTHNZZdnkL3/Pa0qqAYcm2GZ5I2uyzKdCmRBMYVRXvkUAq9O/0gN2HVmw
lr7ztjvfRKCHgAvyC7Jxfc51IFlbN01E1ucD+ayXdGBMYw419Mkh4YPsQ74au0BM
FzynRVnv8IMhlmvV4aQu7F24A3C1fgTrJbAEBkYHZSEA5g==
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:48 2026 by rpki-client