Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/52E1349E04D211E9BA47303FC4F9AE02.roa
File: 52E1349E04D211E9BA47303FC4F9AE02.roa (raw, json)
Hash identifier: 9OnoP2abU97XoZW2EGMIKKoQaZ9xK9d2ozmC17zF1j4=
Subject key identifier: 09:4F:F5:2B:E0:04:25:47:AC:F7:E4:54:88:AF:01:37:68:A2:C4:8C
Certificate issuer: /CN=A914EAE4/serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Certificate serial: 2117
Authority key identifier: AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/52E1349E04D211E9BA47303FC4F9AE02.roa
Signing time: Wed 30 Sep 2026 16:31:52 +0000
ROA not before: Wed 30 Sep 2026 16:31:52 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 4813
IP address blocks: 121.10.40.0/24 maxlen: 24
125.88.15.0/24 maxlen: 24
125.88.58.0/24 maxlen: 24
125.88.59.0/24 maxlen: 24
125.88.60.0/23 maxlen: 23
125.88.88.0/24 maxlen: 24
125.88.103.0/24 maxlen: 24
125.88.108.0/23 maxlen: 23
125.88.114.0/24 maxlen: 24
125.88.115.0/24 maxlen: 24
125.88.116.0/22 maxlen: 22
125.88.120.0/23 maxlen: 23
125.88.124.0/22 maxlen: 22
125.88.128.0/20 maxlen: 20
202.96.168.0/24 maxlen: 24
202.103.182.0/24 maxlen: 24
202.105.2.0/23 maxlen: 23
202.105.5.0/24 maxlen: 24
202.105.7.0/24 maxlen: 24
202.105.80.0/22 maxlen: 22
202.105.212.0/23 maxlen: 23
202.105.214.0/24 maxlen: 24
202.105.215.0/24 maxlen: 24
202.105.240.0/22 maxlen: 22
218.13.104.0/22 maxlen: 22
218.13.108.0/22 maxlen: 22
218.13.112.0/22 maxlen: 22
218.13.118.0/23 maxlen: 23
218.13.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 16:13:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8471 (0x2117)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914EAE4, serialNumber=AD56B67187A98BA314084405797BD9656E8AC8BA
Validity
Not Before: Sep 30 16:31:52 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6abd3977-4595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:25:f0:a9:6c:fd:cd:cf:30:b2:41:53:81:fd:
bf:d9:63:3b:88:c6:5f:42:0a:bc:37:1b:3a:03:97:
5c:df:98:78:64:5f:ee:81:a8:0f:54:4f:38:23:e0:
85:75:1c:97:49:b6:b9:3e:59:19:c8:3c:de:cd:60:
49:aa:d9:d6:a9:8d:5b:b1:0c:30:e4:9d:b9:6e:ab:
7d:52:c6:82:c2:08:ad:82:cd:3c:50:b3:16:d4:ce:
a7:10:47:17:4e:b1:53:6c:74:a3:7b:34:e4:dc:26:
8e:89:82:10:3a:dd:22:f4:70:8c:61:f9:13:17:11:
82:46:c9:45:f8:d2:51:dc:7d:a7:3d:1b:d8:df:1c:
6b:2e:cb:fc:a8:18:94:4f:e4:91:e2:98:31:8c:fc:
14:b2:00:2d:24:92:b7:88:c3:9d:03:8f:7d:ad:38:
69:70:a3:9a:4d:c5:45:f8:3a:e9:a1:31:fa:12:74:
72:ff:4a:d0:17:ff:19:7e:99:1f:17:7a:b2:4b:e4:
99:69:32:0d:2f:93:c9:7e:4a:11:48:13:9e:1e:d4:
0e:3a:03:a0:df:06:80:58:cb:30:cb:c9:c9:c5:3b:
52:ee:ca:66:f8:44:f5:be:dc:f9:94:ef:71:68:cb:
96:15:7f:fc:88:e5:e8:df:31:44:f0:6d:e7:44:d7:
fe:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4F:F5:2B:E0:04:25:47:AC:F7:E4:54:88:AF:01:37:68:A2:C4:8C
X509v3 Authority Key Identifier:
keyid:AD:56:B6:71:87:A9:8B:A3:14:08:44:05:79:7B:D9:65:6E:8A:C8:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/rVa2cYepi6MUCEQFeXvZZW6KyLo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rVa2cYepi6MUCEQFeXvZZW6KyLo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/6753B8AE257511E7AC0D172AC4F9AE02/52E1349E04D211E9BA47303FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
121.10.40.0/24
125.88.15.0/24
125.88.58.0-125.88.61.255
125.88.88.0/24
125.88.103.0/24
125.88.108.0/23
125.88.114.0-125.88.121.255
125.88.124.0-125.88.143.255
202.96.168.0/24
202.103.182.0/24
202.105.2.0/23
202.105.5.0/24
202.105.7.0/24
202.105.80.0/22
202.105.212.0/22
202.105.240.0/22
218.13.104.0-218.13.115.255
218.13.118.0-218.13.127.255
Signature Algorithm: sha256WithRSAEncryption
62:88:92:73:61:9c:be:58:3c:d4:8c:7b:9f:d7:68:de:b4:21:
47:a4:ac:60:51:25:c6:f9:b2:64:f7:94:3c:c0:02:10:95:64:
5f:72:a0:0a:af:c2:0e:60:a3:3c:3b:b7:9d:36:f7:6a:4d:13:
c0:7e:85:e3:51:0f:d5:a1:b0:8e:8f:ef:0f:20:4d:43:33:ee:
10:01:fd:df:03:35:c2:f9:2c:0f:1d:89:c3:d1:13:0b:3e:27:
c4:e9:5e:7d:ed:79:da:88:ff:4e:87:51:be:25:d9:c1:2e:92:
7f:d4:b6:49:bf:4b:6f:de:97:66:d9:f6:2e:1d:f7:ae:08:18:
b7:92:58:c1:6c:1d:91:d1:d6:d0:8d:40:2e:86:a7:1a:38:de:
8b:33:c0:a3:d9:15:4c:06:12:2a:21:b7:63:4a:76:22:e2:50:
2b:27:4b:e2:39:6c:5d:7c:ac:99:f7:08:f2:e4:2f:80:42:f0:
e2:99:81:c8:59:94:a2:58:18:1f:33:3a:65:a6:f2:d9:50:75:
ec:86:e9:78:d2:21:f7:79:38:30:1b:a6:44:1d:5a:cb:6e:f6:
3a:0a:aa:6c:3e:43:b2:1c:1c:5d:62:ea:6d:a5:3e:6e:f4:57:
0b:4b:89:17:92:1c:cb:c7:be:a1:d5:48:d1:c5:bb:dd:a9:95:
c2:da:79:16
-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgICIRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEVBRTQxMTAvBgNVBAUTKEFENTZCNjcxODdBOThCQTMxNDA4NDQwNTc5N0JEOTY1
NkU4QUM4QkEwHhcNMjYwOTMwMTYzMTUyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJkMzk3Ny00NTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkyXwqWz9zc8wskFTgf2/2WM7iMZfQgq8Nxs6A5dc35h4ZF/ugagPVE84I+CF
dRyXSba5PlkZyDzezWBJqtnWqY1bsQww5J25bqt9UsaCwgitgs08ULMW1M6nEEcX
TrFTbHSjezTk3CaOiYIQOt0i9HCMYfkTFxGCRslF+NJR3H2nPRvY3xxrLsv8qBiU
T+SR4pgxjPwUsgAtJJK3iMOdA499rThpcKOaTcVF+DrpoTH6EnRy/0rQF/8Zfpkf
F3qyS+SZaTINL5PJfkoRSBOeHtQOOgOg3waAWMswy8nJxTtS7spm+ET1vtz5lO9x
aMuWFX/8iOXo3zFE8G3nRNf+2wIDAQABo4IC8zCCAu8wHQYDVR0OBBYEFAlP9Svg
BCVHrPfkVIivATdoosSMMB8GA1UdIwQYMBaAFK1WtnGHqYujFAhEBXl72WVuisi6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC82NzUzQjhBRTI1
NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi9yVmEyY1llcGk2TVVDRVFGZVh2WlpXNkt5
TG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JWYTJjWWVwaTZNVUNFUUZlWHZaWlc2S3lMby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NEVBRTQvNjc1M0I4QUUyNTc1MTFFN0FDMEQxNzJBQzRGOUFFMDIvNTJFMTM0OUUw
NEQyMTFFOUJBNDczMDNGQzRGOUFFMDIucm9hMIGxBggrBgEFBQcBBwEB/wSBoTCB
njCBmwQCAAEwgZQDBAB5CigDBAB9WA8wDAMEAX1YOgMEAX1YPAMEAH1YWAMEAH1Y
ZwMEAX1YbDAMAwQBfVhyAwQBfVh4MAwDBAJ9WHwDBAR9WIADBADKYKgDBADKZ7YD
BAHKaQIDBADKaQUDBADKaQcDBALKaVADBALKadQDBALKafAwDAMEA9oNaAMEAtoN
cDAMAwQB2g12AwQH2g0AMA0GCSqGSIb3DQEBCwUAA4IBAQBiiJJzYZy+WDzUjHuf
12jetCFHpKxgUSXG+bJk95Q8wAIQlWRfcqAKr8IOYKM8O7edNvdqTRPAfoXjUQ/V
obCOj+8PIE1DM+4QAf3fAzXC+SwPHYnD0RMLPifE6V597XnaiP9Oh1G+JdnBLpJ/
1LZJv0tv3pdm2fYuHfeuCBi3kljBbB2R0dbQjUAuhqcaON6LM8Cj2RVMBhIqIbdj
SnYi4lArJ0viOWxdfKyZ9wjy5C+AQvDimYHIWZSiWBgfMzplpvLZUHXshul40iH3
eTgwG6ZEHVrLbvY6CqpsPkOyHBxdYuptpT5u9FcLS4kXkhzLx76h1UjRxbvdqZXC
2nkW
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:41:34 2026 by rpki-client