Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4DAB8044C20F11F1A7A0B0065011F970.roa
File: 4DAB8044C20F11F1A7A0B0065011F970.roa (raw, json)
Hash identifier: fjaHeNqS05e4hsankLcHXud1l6FISaO3t558eDsl6Dk=
Subject key identifier: E9:37:35:EB:5B:8B:6E:9E:63:7D:92:4B:9C:6F:BB:21:FC:1D:C2:71
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3F55
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4DAB8044C20F11F1A7A0B0065011F970.roa
Signing time: Thu 22 Oct 2026 04:48:45 +0000
ROA not before: Thu 22 Oct 2026 04:48:45 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 23576
IP address blocks: 43.250.152.0/23 maxlen: 23
43.250.154.0/23 maxlen: 23
49.50.176.0/21 maxlen: 21
49.50.184.0/23 maxlen: 23
49.50.186.0/23 maxlen: 23
49.236.132.0/22 maxlen: 22
49.236.144.0/21 maxlen: 21
61.97.176.0/20 maxlen: 20
61.247.192.0/20 maxlen: 20
61.247.208.0/22 maxlen: 22
61.247.216.0/22 maxlen: 22
61.247.220.0/24 maxlen: 24
61.247.221.0/24 maxlen: 24
101.79.64.0/23 maxlen: 23
101.79.66.0/23 maxlen: 23
103.6.172.0/24 maxlen: 24
103.6.173.0/24 maxlen: 24
103.6.174.0/23 maxlen: 23
103.6.174.0/24 maxlen: 24
103.6.175.0/24 maxlen: 24
110.93.144.0/21 maxlen: 21
110.93.144.0/22 maxlen: 22
110.93.148.0/22 maxlen: 22
110.93.152.0/21 maxlen: 21
111.91.128.0/21 maxlen: 21
111.91.128.0/22 maxlen: 22
111.91.132.0/22 maxlen: 22
111.91.136.0/24 maxlen: 24
111.91.137.0/24 maxlen: 24
111.91.138.0/23 maxlen: 23
111.91.140.0/22 maxlen: 22
114.111.32.0/20 maxlen: 20
125.209.192.0/20 maxlen: 20
125.209.192.0/21 maxlen: 21
125.209.200.0/21 maxlen: 21
125.209.208.0/20 maxlen: 20
125.209.208.0/22 maxlen: 22
125.209.212.0/22 maxlen: 22
125.209.216.0/22 maxlen: 22
125.209.220.0/22 maxlen: 22
125.209.224.0/20 maxlen: 20
125.209.224.0/22 maxlen: 22
125.209.228.0/22 maxlen: 22
125.209.232.0/22 maxlen: 22
125.209.236.0/22 maxlen: 22
125.209.240.0/21 maxlen: 21
125.209.240.0/23 maxlen: 23
125.209.242.0/23 maxlen: 23
125.209.244.0/23 maxlen: 23
125.209.246.0/23 maxlen: 23
125.209.248.0/24 maxlen: 24
125.209.249.0/24 maxlen: 24
125.209.250.0/23 maxlen: 23
125.209.250.0/24 maxlen: 24
125.209.251.0/24 maxlen: 24
125.209.252.0/23 maxlen: 23
125.209.252.0/24 maxlen: 24
125.209.253.0/24 maxlen: 24
125.209.254.0/23 maxlen: 23
175.158.0.0/19 maxlen: 19
175.158.0.0/20 maxlen: 20
175.158.8.0/21 maxlen: 21
175.158.8.0/22 maxlen: 22
175.158.10.0/23 maxlen: 23
175.158.10.0/24 maxlen: 24
175.158.11.0/24 maxlen: 24
175.158.12.0/22 maxlen: 22
175.158.16.0/20 maxlen: 20
202.131.24.0/22 maxlen: 22
202.131.28.0/22 maxlen: 22
202.179.176.0/22 maxlen: 22
202.179.180.0/22 maxlen: 22
210.89.160.0/20 maxlen: 20
210.89.160.0/21 maxlen: 21
210.89.168.0/21 maxlen: 21
210.89.176.0/21 maxlen: 21
210.89.184.0/21 maxlen: 21
211.188.44.0/24 maxlen: 24
211.188.46.0/24 maxlen: 24
223.130.192.0/22 maxlen: 22
223.130.196.0/22 maxlen: 22
223.130.200.0/22 maxlen: 22
223.130.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16213 (0x3f55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Oct 22 04:48:45 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6ad995ad-0731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:41:18:8a:bb:d4:21:28:1b:a5:70:3d:86:95:
6f:52:14:cb:74:33:da:a0:70:e6:c7:1d:cc:f3:2a:
6e:05:17:4f:08:9c:14:2b:28:d8:e9:01:1d:c8:f4:
d9:66:f9:62:31:7e:12:a0:d0:5a:31:0e:b1:ac:dc:
c7:6a:f7:1c:b9:a0:be:80:dd:92:92:6d:e5:a5:86:
df:6d:54:27:77:a7:26:22:9b:01:7d:a8:ed:2c:09:
ed:99:fe:d3:3c:4e:48:8b:52:c2:ba:4f:ad:e8:dc:
07:ea:fb:7a:e4:f0:bb:49:80:a8:67:90:78:6c:f5:
a1:ce:42:04:95:61:bc:1a:5c:96:8b:22:da:51:aa:
18:4c:29:a1:8a:b9:51:53:a1:f0:eb:3c:e5:74:66:
db:05:82:96:8c:08:93:f8:1f:e3:7c:59:23:c9:72:
c6:97:13:88:c1:6a:bf:b9:7f:a5:bf:a7:56:15:2f:
a8:21:2b:26:0d:3e:f5:ac:65:da:a1:a6:46:88:75:
e5:42:4f:84:4a:b6:05:51:5e:c3:1f:c5:ea:23:a5:
84:9b:82:ed:f8:b0:a5:71:79:92:bb:ed:0a:6d:b7:
22:bd:17:4e:35:32:f4:9b:69:96:96:e3:13:a2:a8:
a2:d1:ba:a3:9a:b9:8f:53:bf:b3:66:5f:95:cc:3c:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:37:35:EB:5B:8B:6E:9E:63:7D:92:4B:9C:6F:BB:21:FC:1D:C2:71
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4DAB8044C20F11F1A7A0B0065011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
43.250.152.0/22
49.50.176.0-49.50.187.255
49.236.132.0/22
49.236.144.0/21
61.97.176.0/20
61.247.192.0-61.247.211.255
61.247.216.0-61.247.221.255
101.79.64.0/22
103.6.172.0/22
110.93.144.0/20
111.91.128.0/20
114.111.32.0/20
125.209.192.0/18
175.158.0.0/19
202.131.24.0/21
202.179.176.0/21
210.89.160.0/19
211.188.44.0/24
211.188.46.0/24
223.130.192.0/20
Signature Algorithm: sha256WithRSAEncryption
50:4b:03:89:03:18:2c:7b:8c:d0:8e:ea:dd:22:b9:03:0f:bb:
0e:b7:ed:79:d4:cb:47:63:23:f4:ce:ac:68:a6:e3:73:d8:e6:
33:91:34:40:b6:0b:34:b7:d5:a3:3b:83:06:25:d2:38:a1:92:
4c:02:9e:7d:d5:63:6d:af:a1:d9:40:cd:27:fd:57:37:df:9f:
bd:31:3a:0f:81:ea:15:9e:88:8e:7a:d5:3e:a3:7f:fb:e8:dc:
3a:3c:9f:7a:29:51:e5:e3:49:18:9d:b5:f7:a3:c5:a9:78:aa:
ff:51:32:a1:ec:03:60:bb:08:ad:e1:a8:0a:4c:06:75:66:01:
24:cc:bb:34:b1:15:f1:90:43:9f:a3:a7:aa:72:d8:0c:a1:f8:
7a:6d:11:e2:95:8c:df:03:a6:d4:31:99:5c:d9:fe:a2:f6:51:
f8:08:8c:5e:a7:45:02:e5:53:65:30:6d:f3:70:6b:36:0d:98:
1c:51:04:2a:7b:6b:f9:38:6a:c5:d1:ea:79:b7:f9:5d:8c:89:
16:e0:43:2c:83:66:02:b7:86:13:17:37:9d:94:e0:a7:70:fe:
1b:29:6f:57:ea:69:af:30:c9:94:32:96:72:62:25:7d:ab:f3:
f4:de:c0:11:90:ca:a1:2b:b4:05:e0:75:a0:8c:d2:df:81:f8:
52:c9:43:34
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:37 2026 by rpki-client