Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/37B1E57EFD6D11F09CB822DF526F56BC.roa
File: 37B1E57EFD6D11F09CB822DF526F56BC.roa (raw, json)
Hash identifier: WYg+X3i5ZbnKmk1klqaoBmRlWqoIuE89ORiTg8qOXDo=
Subject key identifier: 92:42:CC:D3:43:06:94:71:72:15:B0:A6:06:48:C5:DB:36:78:0B:2C
Certificate issuer: /CN=A912176D/serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Certificate serial: 08BC
Authority key identifier: 96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/37B1E57EFD6D11F09CB822DF526F56BC.roa
Signing time: Thu 29 Jan 2026 23:49:58 +0000
ROA not before: Thu 29 Jan 2026 23:49:57 +0000
ROA not after: Tue 01 Dec 2026 00:00:00 +0000
asID: 55720
IP address blocks: 14.192.67.0/24 maxlen: 24
14.192.68.0/24 maxlen: 24
14.192.69.0/24 maxlen: 24
43.231.6.0/24 maxlen: 24
43.231.7.0/24 maxlen: 24
45.116.160.0/24 maxlen: 24
45.116.161.0/24 maxlen: 24
45.116.162.0/24 maxlen: 24
45.116.163.0/24 maxlen: 24
45.120.52.0/24 maxlen: 24
45.120.53.0/24 maxlen: 24
45.120.54.0/24 maxlen: 24
45.120.55.0/24 maxlen: 24
61.4.97.0/24 maxlen: 24
61.4.98.0/24 maxlen: 24
61.4.99.0/24 maxlen: 24
61.4.100.0/22 maxlen: 24
61.4.104.0/22 maxlen: 24
61.4.109.0/24 maxlen: 24
61.4.110.0/24 maxlen: 24
103.4.28.0/24 maxlen: 24
103.4.29.0/24 maxlen: 24
103.4.30.0/24 maxlen: 24
103.4.31.0/24 maxlen: 24
103.15.104.0/24 maxlen: 24
103.15.105.0/24 maxlen: 24
103.15.106.0/24 maxlen: 24
103.15.107.0/24 maxlen: 24
103.21.88.0/24 maxlen: 24
103.21.89.0/24 maxlen: 24
103.21.90.0/24 maxlen: 24
103.21.91.0/24 maxlen: 24
103.23.46.0/24 maxlen: 24
103.23.47.0/24 maxlen: 24
103.71.176.0/24 maxlen: 24
103.71.177.0/24 maxlen: 24
103.71.178.0/24 maxlen: 24
103.71.179.0/24 maxlen: 24
103.243.212.0/24 maxlen: 24
103.243.213.0/24 maxlen: 24
103.243.214.0/24 maxlen: 24
103.243.215.0/24 maxlen: 24
103.246.112.0/24 maxlen: 24
103.246.113.0/24 maxlen: 24
103.246.114.0/24 maxlen: 24
118.107.216.0/24 maxlen: 24
118.107.217.0/24 maxlen: 24
118.107.218.0/24 maxlen: 24
118.107.219.0/24 maxlen: 24
118.107.220.0/24 maxlen: 24
118.107.221.0/24 maxlen: 24
118.107.222.0/24 maxlen: 24
118.107.223.0/24 maxlen: 24
150.107.76.0/24 maxlen: 24
150.107.77.0/24 maxlen: 24
150.107.78.0/24 maxlen: 24
150.107.79.0/24 maxlen: 24
202.9.36.0/24 maxlen: 24
202.9.39.0/24 maxlen: 24
202.73.12.0/24 maxlen: 24
202.73.13.0/24 maxlen: 24
202.73.14.0/24 maxlen: 24
202.73.15.0/24 maxlen: 24
202.87.220.0/24 maxlen: 24
202.87.221.0/24 maxlen: 24
202.87.222.0/24 maxlen: 24
202.87.223.0/24 maxlen: 24
223.25.240.0/24 maxlen: 24
223.25.241.0/24 maxlen: 24
223.25.242.0/24 maxlen: 24
223.25.243.0/24 maxlen: 24
223.25.244.0/24 maxlen: 24
223.25.245.0/24 maxlen: 24
223.25.246.0/24 maxlen: 24
223.25.247.0/24 maxlen: 24
2402:9500::/32 maxlen: 32
2402:9500::/48 maxlen: 48
2402:9500:a00::/48 maxlen: 48
2402:9500:b00::/48 maxlen: 48
2402:9500:c00::/48 maxlen: 48
2402:9500:d00::/48 maxlen: 48
2402:9500:1000::/48 maxlen: 48
2402:9500:2000::/48 maxlen: 48
2402:9500:3000::/48 maxlen: 48
2402:9500:4000::/48 maxlen: 48
2402:9500:5000::/48 maxlen: 48
2402:9500:6000::/48 maxlen: 48
2402:9500:7000::/48 maxlen: 48
2402:9500:8000::/48 maxlen: 48
2402:9500:9000::/48 maxlen: 48
2402:9500:e000::/48 maxlen: 48
2402:9500:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 25 Feb 2026 20:24:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2236 (0x8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A912176D, serialNumber=96F42E19F69D596A0318921590A17DD53233E595
Validity
Not Before: Jan 29 23:49:57 2026 GMT
Not After : Dec 1 00:00:00 2026 GMT
Subject: CN=697bf225-da4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:96:e2:d3:ce:74:02:9e:ab:bb:ce:bd:b9:fe:
aa:e4:35:2c:bc:9a:24:ae:fd:aa:dd:7f:6b:e2:a0:
d7:c0:85:5a:da:5b:59:7f:52:b3:ba:ff:ec:32:26:
46:81:bf:2e:ae:0e:5c:33:9c:3e:40:1c:df:fd:a1:
06:de:18:d1:72:35:3b:f2:48:63:be:6c:02:d0:8c:
fe:d4:1b:ce:35:96:66:fa:f9:4f:ac:28:df:6b:03:
1f:23:91:3e:6f:5b:3f:7f:0d:d8:8c:4c:d7:d7:46:
f1:4b:c4:24:04:9d:09:ee:46:8d:d4:80:80:35:e5:
8d:57:fb:e9:8e:ac:3f:8e:cc:d3:92:3c:a0:01:9e:
b7:73:f6:da:44:cc:6c:5b:02:67:d7:65:2e:0f:17:
42:ef:50:af:93:c7:9d:c0:d9:fb:4d:9d:0f:99:82:
b8:2f:ec:3a:98:98:c7:02:a2:a0:14:5f:f6:01:a7:
8d:06:b5:05:6d:e4:12:d1:64:1b:87:cc:d9:cc:86:
8e:b7:69:d9:bb:10:4e:2a:9b:05:35:5c:54:61:e3:
45:eb:c1:7b:5f:ee:29:5c:3e:bf:93:a1:e6:ff:df:
ea:ed:f8:7b:ea:97:d8:aa:02:11:6a:b3:9f:0c:91:
42:a8:06:5b:a6:7e:b3:e4:6c:40:f9:3b:db:5b:c9:
c8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:42:CC:D3:43:06:94:71:72:15:B0:A6:06:48:C5:DB:36:78:0B:2C
X509v3 Authority Key Identifier:
keyid:96:F4:2E:19:F6:9D:59:6A:03:18:92:15:90:A1:7D:D5:32:33:E5:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/lvQuGfadWWoDGJIVkKF91TIz5ZU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lvQuGfadWWoDGJIVkKF91TIz5ZU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912176D/93D17CD006A011EBB4090859C4F9AE02/37B1E57EFD6D11F09CB822DF526F56BC.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.192.67.0-14.192.69.255
43.231.6.0/23
45.116.160.0/22
45.120.52.0/22
61.4.97.0-61.4.107.255
61.4.109.0-61.4.110.255
103.4.28.0/22
103.15.104.0/22
103.21.88.0/22
103.23.46.0/23
103.71.176.0/22
103.243.212.0/22
103.246.112.0-103.246.114.255
118.107.216.0/21
150.107.76.0/22
202.9.36.0/24
202.9.39.0/24
202.73.12.0/22
202.87.220.0/22
223.25.240.0/21
IPv6:
2402:9500::/32
Signature Algorithm: sha256WithRSAEncryption
20:2f:df:bd:63:41:8e:97:37:87:b5:e8:ba:81:b2:4a:15:03:
7c:24:2b:a4:16:31:03:80:55:0e:1f:06:78:9a:09:8c:a4:c5:
a8:5b:27:75:1f:db:f8:e0:6c:b9:3a:4b:4f:8e:6f:1b:b6:2c:
5d:a7:f0:57:b1:61:21:c5:15:af:6a:a7:29:76:c9:fc:02:43:
c9:73:9f:b0:46:6d:c9:27:df:b9:88:78:36:2f:1e:81:d6:2f:
d1:37:4d:29:7a:d0:ea:56:3d:0e:97:a5:71:a5:0d:8a:9b:ac:
e9:07:e4:e8:6a:74:18:91:4e:e4:ec:a0:ba:16:25:0a:af:0d:
3e:8b:9c:b2:7c:de:05:07:3b:46:a4:53:50:bc:da:4a:01:a6:
30:2e:63:f9:49:1c:fa:03:d0:e5:3e:06:94:79:19:39:7f:e2:
6a:7c:9e:bd:88:92:13:48:d6:2f:78:a4:2f:2c:a1:d0:7e:cc:
45:82:dd:1b:f7:c0:8c:23:60:a6:61:b7:60:c1:0b:05:d4:d0:
ef:ec:4e:68:04:ac:d7:6e:05:f8:66:c8:c2:ab:8f:c4:42:d4:
d6:df:93:c5:0d:a0:b9:36:a9:25:b7:df:b5:e1:b0:99:c8:af:
da:86:31:1b:02:78:e0:1a:75:10:85:41:ff:b0:e8:cc:41:25:
57:a5:5e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 18:12:53 2026 by rpki-client