Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4120BE1CCD3A11F19184C35F1166CEF9.roa
File: 4120BE1CCD3A11F19184C35F1166CEF9.roa (raw, json)
Hash identifier: jHSy1/22nEhF6Z6KkvhEORZ7R13g33loHZVAgvw+xjA=
Subject key identifier: 6D:4D:68:DB:12:D0:92:E0:1C:DC:25:26:7D:19:72:57:8E:7C:7E:B8
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FE96
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4120BE1CCD3A11F19184C35F1166CEF9.roa
Signing time: Wed 21 Oct 2026 10:47:28 +0000
ROA not before: Wed 21 Oct 2026 10:47:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45528
IP address blocks: 1.22.0.0/15 maxlen: 15
1.22.0.0/16 maxlen: 24
1.23.0.0/16 maxlen: 24
43.224.164.0/22 maxlen: 24
103.28.180.0/22 maxlen: 24
113.193.0.0/16 maxlen: 24
202.56.117.0/24 maxlen: 24
202.56.118.0/24 maxlen: 24
202.56.119.0/24 maxlen: 24
202.56.120.0/24 maxlen: 24
202.56.121.0/24 maxlen: 24
202.56.123.0/24 maxlen: 24
202.56.124.0/24 maxlen: 24
202.56.126.0/24 maxlen: 24
202.56.127.0/24 maxlen: 24
203.76.128.0/24 maxlen: 24
203.76.129.0/24 maxlen: 24
203.76.130.0/24 maxlen: 24
203.76.131.0/24 maxlen: 24
203.76.132.0/24 maxlen: 24
203.76.133.0/24 maxlen: 24
203.76.134.0/24 maxlen: 24
203.76.135.0/24 maxlen: 24
203.76.136.0/24 maxlen: 24
203.76.137.0/24 maxlen: 24
203.76.138.0/24 maxlen: 24
203.76.140.0/24 maxlen: 24
203.76.142.0/24 maxlen: 24
203.90.64.0/24 maxlen: 24
203.90.65.0/24 maxlen: 24
203.90.66.0/24 maxlen: 24
203.90.68.0/24 maxlen: 24
203.90.69.0/24 maxlen: 24
203.90.76.0/24 maxlen: 24
203.90.77.0/24 maxlen: 24
203.90.78.0/24 maxlen: 24
203.90.79.0/24 maxlen: 24
203.90.80.0/24 maxlen: 24
203.90.82.0/24 maxlen: 24
203.90.85.0/24 maxlen: 24
203.90.86.0/24 maxlen: 24
203.90.87.0/24 maxlen: 24
203.90.88.0/24 maxlen: 24
203.90.89.0/24 maxlen: 24
203.90.90.0/24 maxlen: 24
203.90.91.0/24 maxlen: 24
203.90.92.0/24 maxlen: 24
203.90.94.0/24 maxlen: 24
203.90.95.0/24 maxlen: 24
203.90.96.0/24 maxlen: 24
203.90.97.0/24 maxlen: 24
203.90.98.0/24 maxlen: 24
203.90.99.0/24 maxlen: 24
203.90.100.0/24 maxlen: 24
203.90.101.0/24 maxlen: 24
203.90.102.0/24 maxlen: 24
203.90.103.0/24 maxlen: 24
203.90.104.0/24 maxlen: 24
203.90.105.0/24 maxlen: 24
203.90.109.0/24 maxlen: 24
203.90.110.0/24 maxlen: 24
203.90.111.0/24 maxlen: 24
203.90.112.0/24 maxlen: 24
203.90.113.0/24 maxlen: 24
203.90.114.0/24 maxlen: 24
203.90.115.0/24 maxlen: 24
203.90.116.0/24 maxlen: 24
203.90.117.0/24 maxlen: 24
203.90.118.0/24 maxlen: 24
203.90.119.0/24 maxlen: 24
203.90.120.0/24 maxlen: 24
203.90.123.0/24 maxlen: 24
203.90.124.0/24 maxlen: 24
203.90.125.0/24 maxlen: 24
203.90.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65174 (0xfe96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Oct 21 10:47:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ad89840-35d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fd:33:a0:d1:6d:a3:9a:7c:13:5f:0e:e7:20:
02:7f:fe:84:99:75:05:d7:ba:5a:1f:22:73:f5:2f:
d8:17:f1:c8:5e:41:79:c6:1a:d9:09:b2:ad:fe:f3:
ac:bb:e6:10:0d:4c:70:46:ad:64:50:21:67:54:5d:
5f:a7:ac:a3:85:24:1d:ba:47:86:bf:97:83:3d:cc:
fb:e9:08:e4:ee:75:57:d1:e8:16:82:67:5f:3f:d9:
97:cc:b4:66:fe:d8:9a:74:9f:b8:a1:77:6d:f9:1a:
6a:e8:e5:e2:0b:82:9d:56:38:66:e8:17:18:f6:8c:
1e:77:51:a1:51:5a:b2:a2:c3:70:24:51:5c:c8:2b:
b5:0c:9b:be:96:21:7f:a2:8b:b8:9b:11:81:3e:ba:
69:6c:df:52:72:7c:23:9f:6c:8a:ae:ef:ab:bb:13:
16:f1:ee:2a:a7:9c:15:bc:12:c1:59:04:ef:34:3a:
ed:98:6b:e5:81:79:60:bd:a6:79:9e:75:a4:c1:a3:
b2:28:3d:32:4f:25:b5:06:76:f8:8b:34:ea:13:0b:
fa:ae:04:d8:de:0e:d4:f9:23:b5:26:e9:38:dc:28:
de:61:39:d8:46:6f:40:88:72:7a:a5:08:29:f3:29:
68:7b:a3:37:63:b6:59:52:40:ad:08:22:28:d3:04:
bc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4D:68:DB:12:D0:92:E0:1C:DC:25:26:7D:19:72:57:8E:7C:7E:B8
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/4120BE1CCD3A11F19184C35F1166CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
1.22.0.0/15
43.224.164.0/22
103.28.180.0/22
113.193.0.0/16
202.56.117.0-202.56.121.255
202.56.123.0-202.56.124.255
202.56.126.0/23
203.76.128.0-203.76.138.255
203.76.140.0/24
203.76.142.0/24
203.90.64.0-203.90.66.255
203.90.68.0/23
203.90.76.0-203.90.80.255
203.90.82.0/24
203.90.85.0-203.90.92.255
203.90.94.0-203.90.105.255
203.90.109.0-203.90.120.255
203.90.123.0-203.90.125.255
203.90.127.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:1b:f2:ff:92:a6:b2:18:d3:6a:bd:ee:1a:40:4d:7f:b6:34:
92:85:e1:c1:0b:98:9a:3c:1b:8d:88:9d:f3:19:7e:90:b7:64:
21:f1:2b:89:13:fa:0e:02:d8:9d:b6:ff:00:f9:eb:17:6f:27:
46:8f:b1:de:f8:fa:97:c6:be:93:bf:dd:f8:9c:0b:f7:f1:42:
3e:d8:73:57:f8:0d:cd:ae:0d:e5:e6:93:f5:53:f7:3a:25:2f:
a0:44:37:6a:c4:35:37:a3:49:89:a6:13:57:ca:10:fe:e8:f3:
4d:db:cf:f7:43:2f:58:60:1c:9b:13:5f:42:7f:dd:56:11:3f:
3c:b5:f6:1e:fd:4f:92:56:56:ec:2d:7a:1f:1a:71:26:dc:f9:
01:7e:19:e3:19:48:6a:86:d9:c6:bf:6e:b4:6f:08:2d:e7:f9:
39:a5:4f:04:da:19:f5:e4:18:1e:88:02:fa:2a:58:97:98:94:
5b:e0:43:90:46:3c:82:69:b5:3c:93:a0:41:8a:ee:a8:7d:fc:
42:53:99:e0:53:d8:1c:fe:f4:48:51:ad:10:d2:ff:2f:f3:b2:
15:eb:ab:15:23:a0:23:c5:a9:24:59:24:7f:3f:32:0d:18:0d:
ac:83:4a:74:0e:aa:34:e6:e1:38:50:9a:10:66:9f:72:5d:bb:
7a:19:8d:a1
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgIDAP6WMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MTAyMTEwNDcyOFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmFkODk4NDAtMzVkODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALj9M6DRbaOafBNfDucgAn/+hJl1Bde6Wh8ic/Uv2BfxyF5BecYa2Qmyrf7z
rLvmEA1McEatZFAhZ1RdX6eso4UkHbpHhr+Xgz3M++kI5O51V9HoFoJnXz/Zl8y0
Zv7YmnSfuKF3bfkaaujl4guCnVY4ZugXGPaMHndRoVFasqLDcCRRXMgrtQybvpYh
f6KLuJsRgT66aWzfUnJ8I59siq7vq7sTFvHuKqecFbwSwVkE7zQ67Zhr5YF5YL2m
eZ51pMGjsig9Mk8ltQZ2+Is06hML+q4E2N4O1PkjtSbpONwo3mE52EZvQIhyeqUI
KfMpaHujN2O2WVJArQgiKNMEvAkCAwEAAaOCAxcwggMTMB0GA1UdDgQWBBRtTWjb
EtCS4BzcJSZ9GXJXjnx+uDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzQxMjBCRTFD
Q0QzQTExRjE5MTg0QzM1RjExNjZDRUY5LnJvYTCB1QYIKwYBBQUHAQcBAf8EgcUw
gcIwgb8EAgABMIG4AwMBARYDBAIr4KQDBAJnHLQDAwBxwTAMAwQAyjh1AwQByjh4
MAwDBADKOHsDBADKOHwDBAHKOH4wDAMEB8tMgAMEAMtMigMEAMtMjAMEAMtMjjAM
AwQGy1pAAwQAy1pCAwQBy1pEMAwDBALLWkwDBADLWlADBADLWlIwDAMEAMtaVQME
AMtaXDAMAwQBy1peAwQBy1poMAwDBADLWm0DBADLWngwDAMEAMtaewMEActafAME
AMtafzANBgkqhkiG9w0BAQsFAAOCAQEAsxvy/5KmshjTar3uGkBNf7Y0koXhwQuY
mjwbjYid8xl+kLdkIfEriRP6DgLYnbb/APnrF28nRo+x3vj6l8a+k7/d+JwL9/FC
PthzV/gNza4N5eaT9VP3OiUvoEQ3asQ1N6NJiaYTV8oQ/ujzTdvP90MvWGAcmxNf
Qn/dVhE/PLX2Hv1PklZW7C16HxpxJtz5AX4Z4xlIaobZxr9utG8ILef5OaVPBNoZ
9eQYHogC+ipYl5iUW+BDkEY8gmm1PJOgQYruqH38QlOZ4FPYHP70SFGtENL/L/Oy
FeurFSOgI8WpJFkkfz8yDRgNrINKdA6qNObhOFCaEGafcl27ehmNoQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:32 2026 by rpki-client