Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
File: E44FF288EE9811EF88F8B953C4F9AE02.roa (raw, json)
Hash identifier: afV6U8t3veePRtjOVBHBCot2VaYRsKobn1zoWsCBuT0=
Subject key identifier: F7:A9:CD:24:DB:11:D1:3C:EF:60:E9:3A:A8:35:2A:A9:4A:C0:DB:4F
Certificate issuer: /CN=A9145446/serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Certificate serial: 2B25
Authority key identifier: 7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
Signing time: Fri 14 Aug 2026 16:23:15 +0000
ROA not before: Fri 14 Aug 2026 16:23:15 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 23930
IP address blocks: 43.243.126.0/24 maxlen: 24
43.243.127.0/24 maxlen: 24
103.38.214.0/24 maxlen: 24
103.38.215.0/24 maxlen: 24
116.93.0.0/23 maxlen: 23
116.93.1.0/24 maxlen: 24
116.93.4.0/23 maxlen: 23
116.93.4.0/24 maxlen: 24
116.93.5.0/24 maxlen: 24
116.93.6.0/24 maxlen: 24
116.93.7.0/24 maxlen: 24
116.93.8.0/23 maxlen: 23
116.93.8.0/24 maxlen: 24
116.93.9.0/24 maxlen: 24
116.93.10.0/23 maxlen: 23
116.93.10.0/24 maxlen: 24
116.93.11.0/24 maxlen: 24
116.93.12.0/23 maxlen: 23
116.93.12.0/24 maxlen: 24
116.93.13.0/24 maxlen: 24
116.93.15.0/24 maxlen: 24
116.93.16.0/23 maxlen: 23
116.93.17.0/24 maxlen: 24
116.93.18.0/23 maxlen: 23
116.93.18.0/24 maxlen: 24
116.93.20.0/24 maxlen: 24
116.93.21.0/24 maxlen: 24
116.93.22.0/23 maxlen: 23
116.93.23.0/24 maxlen: 24
116.93.24.0/22 maxlen: 22
116.93.24.0/23 maxlen: 23
116.93.24.0/24 maxlen: 24
116.93.25.0/24 maxlen: 24
116.93.26.0/23 maxlen: 23
116.93.26.0/24 maxlen: 24
116.93.27.0/24 maxlen: 24
116.93.28.0/23 maxlen: 23
116.93.28.0/24 maxlen: 24
116.93.29.0/24 maxlen: 24
116.93.30.0/23 maxlen: 23
116.93.30.0/24 maxlen: 24
116.93.31.0/24 maxlen: 24
116.93.32.0/23 maxlen: 23
116.93.32.0/24 maxlen: 24
116.93.33.0/24 maxlen: 24
116.93.34.0/23 maxlen: 23
116.93.34.0/24 maxlen: 24
116.93.36.0/23 maxlen: 23
116.93.36.0/24 maxlen: 24
116.93.37.0/24 maxlen: 24
116.93.38.0/23 maxlen: 23
116.93.38.0/24 maxlen: 24
116.93.39.0/24 maxlen: 24
116.93.40.0/24 maxlen: 24
116.93.41.0/24 maxlen: 24
116.93.42.0/24 maxlen: 24
116.93.43.0/24 maxlen: 24
116.93.44.0/24 maxlen: 24
116.93.45.0/24 maxlen: 24
116.93.46.0/23 maxlen: 23
116.93.47.0/24 maxlen: 24
116.93.48.0/23 maxlen: 23
116.93.49.0/24 maxlen: 24
116.93.50.0/23 maxlen: 23
116.93.51.0/24 maxlen: 24
116.93.52.0/24 maxlen: 24
116.93.54.0/23 maxlen: 23
116.93.54.0/24 maxlen: 24
116.93.61.0/24 maxlen: 24
116.93.62.0/24 maxlen: 24
116.93.63.0/24 maxlen: 24
116.93.64.0/24 maxlen: 24
116.93.65.0/24 maxlen: 24
116.93.66.0/24 maxlen: 24
116.93.67.0/24 maxlen: 24
116.93.71.0/24 maxlen: 24
116.93.74.0/24 maxlen: 24
116.93.75.0/24 maxlen: 24
116.93.78.0/24 maxlen: 24
116.93.79.0/24 maxlen: 24
116.93.80.0/23 maxlen: 23
116.93.80.0/24 maxlen: 24
116.93.85.0/24 maxlen: 24
116.93.87.0/24 maxlen: 24
116.93.88.0/24 maxlen: 24
116.93.90.0/24 maxlen: 24
116.93.91.0/24 maxlen: 24
116.93.93.0/24 maxlen: 24
116.93.94.0/24 maxlen: 24
116.93.96.0/24 maxlen: 24
116.93.97.0/24 maxlen: 24
116.93.98.0/24 maxlen: 24
116.93.100.0/24 maxlen: 24
116.93.102.0/24 maxlen: 24
116.93.105.0/24 maxlen: 24
116.93.106.0/24 maxlen: 24
116.93.107.0/24 maxlen: 24
116.93.108.0/24 maxlen: 24
116.93.109.0/24 maxlen: 24
116.93.110.0/24 maxlen: 24
116.93.111.0/24 maxlen: 24
116.93.112.0/24 maxlen: 24
116.93.114.0/24 maxlen: 24
116.93.115.0/24 maxlen: 24
116.93.117.0/24 maxlen: 24
116.93.118.0/24 maxlen: 24
116.93.119.0/24 maxlen: 24
116.93.120.0/24 maxlen: 24
116.93.121.0/24 maxlen: 24
116.93.122.0/24 maxlen: 24
116.93.124.0/24 maxlen: 24
116.93.126.0/24 maxlen: 24
116.93.127.0/24 maxlen: 24
121.127.0.0/24 maxlen: 24
121.127.1.0/24 maxlen: 24
121.127.6.0/24 maxlen: 24
121.127.7.0/24 maxlen: 24
121.127.8.0/24 maxlen: 24
121.127.9.0/24 maxlen: 24
121.127.10.0/24 maxlen: 24
121.127.11.0/24 maxlen: 24
121.127.12.0/23 maxlen: 23
121.127.12.0/24 maxlen: 24
121.127.13.0/24 maxlen: 24
121.127.14.0/23 maxlen: 23
121.127.14.0/24 maxlen: 24
121.127.15.0/24 maxlen: 24
121.127.16.0/24 maxlen: 24
121.127.17.0/24 maxlen: 24
121.127.18.0/24 maxlen: 24
121.127.20.0/23 maxlen: 23
121.127.20.0/24 maxlen: 24
121.127.21.0/24 maxlen: 24
121.127.22.0/23 maxlen: 23
121.127.22.0/24 maxlen: 24
121.127.23.0/24 maxlen: 24
121.127.26.0/23 maxlen: 23
121.127.26.0/24 maxlen: 24
121.127.27.0/24 maxlen: 24
121.127.28.0/23 maxlen: 23
121.127.28.0/24 maxlen: 24
121.127.29.0/24 maxlen: 24
121.127.30.0/23 maxlen: 23
121.127.30.0/24 maxlen: 24
121.127.31.0/24 maxlen: 24
203.99.232.0/21 maxlen: 21
203.99.232.0/23 maxlen: 23
203.99.232.0/24 maxlen: 24
203.99.233.0/24 maxlen: 24
203.99.234.0/24 maxlen: 24
203.99.235.0/24 maxlen: 24
203.99.236.0/24 maxlen: 24
203.99.237.0/24 maxlen: 24
203.99.238.0/23 maxlen: 23
203.99.238.0/24 maxlen: 24
203.99.239.0/24 maxlen: 24
203.208.24.0/23 maxlen: 23
203.208.24.0/24 maxlen: 24
203.208.25.0/24 maxlen: 24
203.208.26.0/24 maxlen: 24
203.208.27.0/24 maxlen: 24
203.208.28.0/24 maxlen: 24
203.208.29.0/24 maxlen: 24
203.208.30.0/24 maxlen: 24
203.208.31.0/24 maxlen: 24
2401:9800::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 10:56:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11045 (0x2b25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145446, serialNumber=7D65EBE14C3046E73E3986957302A26E081F1AF8
Validity
Not Before: Aug 14 16:23:15 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6a7f40f2-48f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:c6:b6:fd:c2:74:ef:8d:74:de:d9:64:76:2a:
2c:ef:e2:3e:3d:9f:41:5b:6b:f9:fb:ca:07:56:68:
79:c7:e3:bf:af:27:26:7e:8f:9a:4f:59:88:eb:68:
c4:5b:27:aa:38:f1:5f:29:ad:8f:59:53:1e:33:25:
d4:4f:7f:65:66:6d:e0:9a:f3:2f:63:a3:43:43:cf:
82:3b:14:89:5a:e9:42:d8:8f:6c:27:a7:d6:60:d7:
75:ab:b0:a7:f1:ee:cb:11:40:31:03:d8:ec:6b:4a:
2c:60:c9:7e:55:c2:7a:67:bc:0f:26:8b:ba:3c:ad:
fc:bf:70:be:51:d2:c2:4e:fe:c6:8c:0b:ac:38:ee:
64:0d:dd:f7:ea:ca:ac:95:23:f9:dd:e4:81:cd:69:
7b:31:4f:ee:4f:4a:83:1f:7c:5d:1b:81:5a:80:d8:
1f:8e:b9:ed:37:2a:70:bb:6b:f2:5c:a7:e4:50:a2:
6b:da:6e:03:a8:59:28:06:ed:e5:8d:8d:59:2c:ae:
37:01:92:8f:32:11:90:fd:21:8c:e9:2c:47:ad:89:
4e:84:00:b9:8a:0d:0f:c2:e9:58:c2:fe:34:c3:c2:
23:2b:ad:46:f6:93:f6:49:31:61:bd:76:d6:83:ef:
14:48:79:93:0b:90:a4:0d:02:3d:5d:77:19:ce:0b:
16:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:A9:CD:24:DB:11:D1:3C:EF:60:E9:3A:A8:35:2A:A9:4A:C0:DB:4F
X509v3 Authority Key Identifier:
keyid:7D:65:EB:E1:4C:30:46:E7:3E:39:86:95:73:02:A2:6E:08:1F:1A:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/fWXr4UwwRuc-OYaVcwKibggfGvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWXr4UwwRuc-OYaVcwKibggfGvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145446/ACA2E75C1FC511E5B450DD62C4F9AE02/E44FF288EE9811EF88F8B953C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.243.126.0/23
103.38.214.0/23
116.93.0.0/23
116.93.4.0-116.93.13.255
116.93.15.0-116.93.52.255
116.93.54.0/23
116.93.61.0-116.93.67.255
116.93.71.0/24
116.93.74.0/23
116.93.78.0-116.93.81.255
116.93.85.0/24
116.93.87.0-116.93.88.255
116.93.90.0/23
116.93.93.0-116.93.94.255
116.93.96.0-116.93.98.255
116.93.100.0/24
116.93.102.0/24
116.93.105.0-116.93.112.255
116.93.114.0/23
116.93.117.0-116.93.122.255
116.93.124.0/24
116.93.126.0/23
121.127.0.0/23
121.127.6.0-121.127.18.255
121.127.20.0/22
121.127.26.0-121.127.31.255
203.99.232.0/21
203.208.24.0/21
IPv6:
2401:9800::/32
Signature Algorithm: sha256WithRSAEncryption
02:0a:65:f1:d9:02:8b:a1:68:3c:9b:ce:b2:6c:ac:0d:a2:4e:
c7:9b:71:f2:c4:9d:50:23:3d:aa:71:51:e2:65:8b:6f:2a:d1:
10:61:0b:81:74:81:f6:32:30:9a:f1:e2:46:da:76:69:39:ee:
a5:28:03:91:e5:c2:0e:30:89:82:48:ff:a9:e2:4f:a2:82:90:
9f:ae:01:ff:ad:26:89:14:6d:1e:d4:87:03:7e:51:8a:18:ed:
9d:1f:65:1d:52:92:d4:0b:25:9e:35:61:ad:bf:07:22:8e:5f:
d3:3b:36:c3:8c:6b:c5:30:97:94:bc:83:42:8c:ac:52:91:3d:
da:56:76:6d:64:57:ec:4f:8b:7a:80:58:ea:17:9b:cb:2c:e1:
91:74:84:50:a7:17:f6:75:48:9d:b7:61:2a:4d:38:b3:d1:44:
e6:bf:4a:77:90:e7:00:67:da:86:7d:80:8b:8b:0b:14:51:b7:
0c:c1:99:47:3a:d7:e1:fc:41:52:24:b9:44:a6:f4:25:15:52:
4c:7a:74:c3:a5:e4:c4:0e:a7:ec:1b:2a:0e:c4:cf:5c:32:ef:
8d:58:3d:1b:56:b1:c0:95:f9:fc:3f:22:60:1b:7c:0a:13:37:
77:74:fd:3d:d0:34:97:5c:8d:5e:46:ef:cf:c1:ff:6a:78:8f:
4f:f7:b0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 01:55:10 2026 by rpki-client