Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/A0121BD4871711EA924C6626C4F9AE02.roa
File: A0121BD4871711EA924C6626C4F9AE02.roa (raw, json)
Hash identifier: 4dz6u7lCrjj5/MzYGmOqNAqWxY8TJrQQStauQPorXsA=
Subject key identifier: 0B:31:3C:EA:82:6B:2D:3F:28:5C:CB:12:62:82:59:77:89:83:27:BA
Certificate issuer: /CN=A917225D/serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Certificate serial: 359A
Authority key identifier: FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/A0121BD4871711EA924C6626C4F9AE02.roa
Signing time: Fri 14 Aug 2026 15:10:59 +0000
ROA not before: Fri 14 Aug 2026 15:10:59 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 23673
IP address blocks: 43.230.192.0/22 maxlen: 22
43.230.192.0/24 maxlen: 24
43.230.193.0/24 maxlen: 24
43.230.194.0/24 maxlen: 24
43.230.195.0/24 maxlen: 24
103.197.240.0/22 maxlen: 24
103.206.68.0/22 maxlen: 24
103.239.52.0/22 maxlen: 22
103.239.52.0/24 maxlen: 24
103.239.53.0/24 maxlen: 24
103.239.54.0/24 maxlen: 24
103.239.55.0/24 maxlen: 24
110.235.240.0/20 maxlen: 20
110.235.240.0/24 maxlen: 24
110.235.241.0/24 maxlen: 24
110.235.242.0/24 maxlen: 24
110.235.243.0/24 maxlen: 24
110.235.244.0/24 maxlen: 24
110.235.245.0/24 maxlen: 24
110.235.246.0/24 maxlen: 24
110.235.247.0/24 maxlen: 24
110.235.248.0/24 maxlen: 24
110.235.249.0/24 maxlen: 24
110.235.250.0/24 maxlen: 24
110.235.251.0/24 maxlen: 24
110.235.252.0/24 maxlen: 24
110.235.253.0/24 maxlen: 24
110.235.254.0/24 maxlen: 24
110.235.255.0/24 maxlen: 24
124.248.160.0/19 maxlen: 19
124.248.160.0/24 maxlen: 24
124.248.161.0/24 maxlen: 24
124.248.162.0/24 maxlen: 24
124.248.163.0/24 maxlen: 24
124.248.164.0/24 maxlen: 24
124.248.165.0/24 maxlen: 24
124.248.166.0/24 maxlen: 24
124.248.167.0/24 maxlen: 24
124.248.168.0/24 maxlen: 24
124.248.169.0/24 maxlen: 24
124.248.170.0/24 maxlen: 24
124.248.171.0/24 maxlen: 24
124.248.172.0/24 maxlen: 24
124.248.173.0/24 maxlen: 24
124.248.174.0/24 maxlen: 24
124.248.175.0/24 maxlen: 24
124.248.176.0/24 maxlen: 24
124.248.177.0/24 maxlen: 24
124.248.178.0/24 maxlen: 24
124.248.179.0/24 maxlen: 24
124.248.180.0/24 maxlen: 24
124.248.181.0/24 maxlen: 24
124.248.182.0/24 maxlen: 24
124.248.183.0/24 maxlen: 24
124.248.184.0/24 maxlen: 24
124.248.185.0/24 maxlen: 24
124.248.186.0/24 maxlen: 24
124.248.187.0/24 maxlen: 24
124.248.188.0/24 maxlen: 24
124.248.189.0/24 maxlen: 24
124.248.190.0/24 maxlen: 24
124.248.191.0/24 maxlen: 24
202.62.32.0/19 maxlen: 19
202.62.32.0/24 maxlen: 24
202.62.33.0/24 maxlen: 24
202.62.34.0/24 maxlen: 24
202.62.35.0/24 maxlen: 24
202.62.36.0/24 maxlen: 24
202.62.37.0/24 maxlen: 24
202.62.38.0/24 maxlen: 24
202.62.39.0/24 maxlen: 24
202.62.40.0/24 maxlen: 24
202.62.41.0/24 maxlen: 24
202.62.42.0/24 maxlen: 24
202.62.43.0/24 maxlen: 24
202.62.44.0/24 maxlen: 24
202.62.45.0/24 maxlen: 24
202.62.46.0/24 maxlen: 24
202.62.47.0/24 maxlen: 24
202.62.48.0/24 maxlen: 24
202.62.49.0/24 maxlen: 24
202.62.50.0/24 maxlen: 24
202.62.51.0/24 maxlen: 24
202.62.52.0/24 maxlen: 24
202.62.53.0/24 maxlen: 24
202.62.54.0/24 maxlen: 24
202.62.55.0/24 maxlen: 24
202.62.56.0/24 maxlen: 24
202.62.57.0/24 maxlen: 24
202.62.58.0/24 maxlen: 24
202.62.59.0/24 maxlen: 24
202.62.60.0/24 maxlen: 24
202.62.61.0/24 maxlen: 24
202.62.62.0/24 maxlen: 24
202.62.63.0/24 maxlen: 24
203.189.128.0/19 maxlen: 19
203.189.128.0/24 maxlen: 24
203.189.129.0/24 maxlen: 24
203.189.130.0/24 maxlen: 24
203.189.131.0/24 maxlen: 24
203.189.132.0/22 maxlen: 24
203.189.136.0/23 maxlen: 24
203.189.138.0/23 maxlen: 24
203.189.140.0/23 maxlen: 24
203.189.142.0/23 maxlen: 24
203.189.144.0/22 maxlen: 24
203.189.148.0/22 maxlen: 24
203.189.152.0/23 maxlen: 24
203.189.154.0/23 maxlen: 24
203.189.156.0/23 maxlen: 24
203.189.158.0/23 maxlen: 24
2402:c100::/32 maxlen: 32
2402:c100::/48 maxlen: 48
2402:c100:c00::/48 maxlen: 48
2402:c100:c01::/48 maxlen: 48
2402:c100:c02::/48 maxlen: 48
2402:c100:c000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 14:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13722 (0x359a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917225D, serialNumber=FFE2A03729F32D32227A99C925158C82CA54B957
Validity
Not Before: Aug 14 15:10:59 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7f3003-3439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:d8:af:b3:84:58:ef:66:f4:bd:b1:4d:f8:
11:24:3c:7a:5f:c0:52:8c:95:2d:87:67:8f:98:cf:
2d:dc:18:24:90:8c:af:a6:fe:cc:f5:6c:59:7c:d4:
8d:0d:58:30:d3:a8:61:ab:b2:7d:35:ca:40:8c:4f:
78:88:07:41:3d:62:65:80:7b:c3:f1:02:a9:bb:00:
2d:d5:8c:45:19:fd:14:dc:7e:30:6f:9e:51:0b:a1:
6c:0b:60:89:12:13:89:5e:0d:10:be:0f:82:b0:f6:
3c:7a:0d:41:f9:1f:69:72:36:dd:ff:05:55:8f:cc:
50:25:86:e2:3b:9f:40:43:9d:39:7e:f2:79:bb:0e:
04:44:97:8f:d3:a6:09:2f:04:fd:84:e6:e2:30:c5:
ec:28:b4:a1:05:43:c3:8d:49:ce:d1:02:57:c6:3b:
30:d0:18:78:01:ff:67:e7:65:e5:90:45:16:fb:60:
de:6a:85:3d:d8:2b:28:b5:69:ee:d3:4a:39:71:49:
ba:77:a8:12:ba:3f:ad:37:87:b6:eb:6a:d2:43:12:
31:a0:bf:59:f2:ae:86:e4:8f:03:d3:1d:40:85:86:
0d:15:99:8b:ba:5a:7b:52:da:26:3f:7b:a8:a8:a2:
ff:aa:d7:0f:81:b8:43:68:47:17:e9:87:c1:7d:50:
a4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:31:3C:EA:82:6B:2D:3F:28:5C:CB:12:62:82:59:77:89:83:27:BA
X509v3 Authority Key Identifier:
keyid:FF:E2:A0:37:29:F3:2D:32:22:7A:99:C9:25:15:8C:82:CA:54:B9:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/_-KgNynzLTIiepnJJRWMgspUuVc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_-KgNynzLTIiepnJJRWMgspUuVc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917225D/1F5508301D8411E2917BD0D908B02CD2/A0121BD4871711EA924C6626C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.230.192.0/22
103.197.240.0/22
103.206.68.0/22
103.239.52.0/22
110.235.240.0/20
124.248.160.0/19
202.62.32.0/19
203.189.128.0/19
IPv6:
2402:c100::/32
Signature Algorithm: sha256WithRSAEncryption
03:25:97:fe:fc:9f:ac:b3:92:8e:ff:71:5a:e4:4c:d4:6e:6e:
94:fc:84:81:84:32:01:f1:6a:5b:bd:0d:9d:b6:ec:66:f2:af:
39:ae:44:c2:08:de:a9:0b:68:f0:99:46:a0:fd:1f:f5:24:58:
c2:8f:33:6a:09:9b:35:8d:57:f3:1c:2f:00:cc:13:b1:ae:92:
f1:f8:d4:e4:89:ed:d2:d9:bf:f9:48:d8:8e:16:de:d8:3a:24:
57:f1:4b:0b:d7:f8:a4:7e:ac:8d:d6:a2:eb:47:b5:7d:2d:c9:
42:5c:93:a4:45:3d:59:64:a9:df:7d:af:f5:b9:bd:8a:71:fd:
c2:96:96:4d:93:f0:1d:38:a6:4a:1e:aa:01:01:db:3a:ee:01:
82:62:e5:7c:9b:4f:fb:51:7e:41:8e:b5:e1:d8:4b:ef:de:76:
c4:39:8a:af:4c:4b:da:6c:a2:f7:45:fd:e8:0d:05:ef:a2:54:
d1:0c:29:1b:16:cf:dc:82:37:cc:09:3f:e5:a5:86:b1:ae:22:
7e:91:a7:b4:a8:10:4e:b8:ba:15:2a:20:9e:c7:cb:18:45:8b:
42:6c:d6:8e:10:83:01:4c:0f:04:40:99:5d:3f:06:7e:63:42:
8a:f2:5e:b5:f3:29:19:83:11:67:c6:9e:10:69:c4:07:20:a3:
02:14:39:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:33:50 2026 by rpki-client