Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
File: F6810AC0D0DC11EA9B1DF432C4F9AE02.roa (raw, json)
Hash identifier: zkzY1rKegM6NQQe7mOjFJys4MtW8mm7qlKs6iHooBhE=
Subject key identifier: 57:B7:AC:7F:6F:DC:75:EC:5D:31:99:4E:EC:7E:F9:F7:CE:80:DB:66
Certificate issuer: /CN=A91733A8/serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Certificate serial: 0A13
Authority key identifier: 8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
Signing time: Wed 22 Apr 2026 14:08:26 +0000
ROA not before: Wed 22 Apr 2026 14:08:25 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 9260
IP address blocks: 43.245.204.0/24 maxlen: 24
43.245.205.0/24 maxlen: 24
43.245.206.0/24 maxlen: 24
43.245.207.0/24 maxlen: 24
103.31.80.0/22 maxlen: 22
103.31.80.0/23 maxlen: 24
103.31.82.0/24 maxlen: 24
103.31.83.0/24 maxlen: 24
125.209.64.0/18 maxlen: 18
125.209.64.0/24 maxlen: 24
125.209.65.0/24 maxlen: 24
125.209.66.0/24 maxlen: 24
125.209.67.0/24 maxlen: 24
125.209.68.0/24 maxlen: 24
125.209.69.0/24 maxlen: 24
125.209.70.0/24 maxlen: 24
125.209.71.0/24 maxlen: 24
125.209.72.0/24 maxlen: 24
125.209.73.0/24 maxlen: 24
125.209.74.0/24 maxlen: 24
125.209.75.0/24 maxlen: 24
125.209.76.0/24 maxlen: 24
125.209.77.0/24 maxlen: 24
125.209.78.0/24 maxlen: 24
125.209.79.0/24 maxlen: 24
125.209.80.0/24 maxlen: 24
125.209.81.0/24 maxlen: 24
125.209.82.0/24 maxlen: 24
125.209.83.0/24 maxlen: 24
125.209.84.0/24 maxlen: 24
125.209.85.0/24 maxlen: 24
125.209.86.0/24 maxlen: 24
125.209.87.0/24 maxlen: 24
125.209.88.0/24 maxlen: 24
125.209.89.0/24 maxlen: 24
125.209.90.0/24 maxlen: 24
125.209.91.0/24 maxlen: 24
125.209.92.0/24 maxlen: 24
125.209.93.0/24 maxlen: 24
125.209.94.0/24 maxlen: 24
125.209.95.0/24 maxlen: 24
125.209.96.0/24 maxlen: 24
125.209.97.0/24 maxlen: 24
125.209.98.0/24 maxlen: 24
125.209.99.0/24 maxlen: 24
125.209.100.0/24 maxlen: 24
125.209.101.0/24 maxlen: 24
125.209.102.0/24 maxlen: 24
125.209.103.0/24 maxlen: 24
125.209.104.0/24 maxlen: 24
125.209.105.0/24 maxlen: 24
125.209.106.0/24 maxlen: 24
125.209.107.0/24 maxlen: 24
125.209.108.0/24 maxlen: 24
125.209.109.0/24 maxlen: 24
125.209.110.0/24 maxlen: 24
125.209.111.0/24 maxlen: 24
125.209.112.0/24 maxlen: 24
125.209.113.0/24 maxlen: 24
125.209.114.0/24 maxlen: 24
125.209.115.0/24 maxlen: 24
125.209.116.0/24 maxlen: 24
125.209.117.0/24 maxlen: 24
125.209.118.0/24 maxlen: 24
125.209.119.0/24 maxlen: 24
125.209.120.0/21 maxlen: 21
125.209.120.0/24 maxlen: 24
125.209.121.0/24 maxlen: 24
125.209.122.0/24 maxlen: 24
125.209.123.0/24 maxlen: 24
125.209.124.0/24 maxlen: 24
125.209.125.0/24 maxlen: 24
125.209.126.0/24 maxlen: 24
125.209.127.0/24 maxlen: 24
202.141.224.0/19 maxlen: 19
202.141.224.0/20 maxlen: 20
202.141.224.0/21 maxlen: 21
202.141.224.0/22 maxlen: 24
202.141.228.0/24 maxlen: 24
202.141.229.0/24 maxlen: 24
202.141.231.0/24 maxlen: 24
202.141.232.0/24 maxlen: 24
202.141.233.0/24 maxlen: 24
202.141.234.0/24 maxlen: 24
202.141.235.0/24 maxlen: 24
202.141.237.0/24 maxlen: 24
202.141.238.0/24 maxlen: 24
202.141.239.0/24 maxlen: 24
202.141.240.0/24 maxlen: 24
202.141.241.0/24 maxlen: 24
202.141.242.0/24 maxlen: 24
202.141.243.0/24 maxlen: 24
202.141.245.0/24 maxlen: 24
202.141.246.0/24 maxlen: 24
202.141.247.0/24 maxlen: 24
202.141.248.0/24 maxlen: 24
202.141.249.0/24 maxlen: 24
202.141.250.0/24 maxlen: 24
202.141.251.0/24 maxlen: 24
202.141.252.0/24 maxlen: 24
202.141.253.0/24 maxlen: 24
202.141.254.0/24 maxlen: 24
202.141.255.0/24 maxlen: 24
202.142.160.0/19 maxlen: 19
202.142.160.0/21 maxlen: 21
202.142.160.0/24 maxlen: 24
202.142.161.0/24 maxlen: 24
202.142.162.0/24 maxlen: 24
202.142.163.0/24 maxlen: 24
202.142.164.0/24 maxlen: 24
202.142.165.0/24 maxlen: 24
202.142.166.0/24 maxlen: 24
202.142.167.0/24 maxlen: 24
202.142.168.0/24 maxlen: 24
202.142.169.0/24 maxlen: 24
202.142.170.0/24 maxlen: 24
202.142.171.0/24 maxlen: 24
202.142.172.0/24 maxlen: 24
202.142.173.0/24 maxlen: 24
202.142.174.0/24 maxlen: 24
202.142.175.0/24 maxlen: 24
202.142.176.0/24 maxlen: 24
202.142.177.0/24 maxlen: 24
202.142.178.0/24 maxlen: 24
202.142.179.0/24 maxlen: 24
202.142.180.0/24 maxlen: 24
202.142.181.0/24 maxlen: 24
202.142.182.0/24 maxlen: 24
202.142.183.0/24 maxlen: 24
202.142.184.0/24 maxlen: 24
202.142.185.0/24 maxlen: 24
202.142.186.0/24 maxlen: 24
202.142.187.0/24 maxlen: 24
202.142.188.0/24 maxlen: 24
202.142.189.0/24 maxlen: 24
202.142.190.0/24 maxlen: 24
202.142.191.0/24 maxlen: 24
2401:8e00::/32 maxlen: 32
2401:8e00:800::/48 maxlen: 48
2401:8e00:2000::/38 maxlen: 38
2401:8e00:2400::/38 maxlen: 38
2401:8e00:2800::/48 maxlen: 48
2401:8e00:3400::/38 maxlen: 38
2401:8e00:4000::/36 maxlen: 36
2401:8e00:4000::/38 maxlen: 38
2401:8e00:4004::/48 maxlen: 48
2401:8e00:4005::/48 maxlen: 48
2401:8e00:4006::/48 maxlen: 48
2401:8e00:400f::/48 maxlen: 48
2401:8e00:5000::/36 maxlen: 36
2401:8e00:6000::/36 maxlen: 36
2401:8e00:7000::/36 maxlen: 36
2401:8e00:8000::/48 maxlen: 48
2401:8e00:8004::/48 maxlen: 48
2401:8e00:9000::/40 maxlen: 40
2401:8e00:d000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 05 May 2026 20:11:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2579 (0xa13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91733A8, serialNumber=8DC66A64753643B0E70FB9B2BD4009CBEC705441
Validity
Not Before: Apr 22 14:08:25 2026 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69e8d659-af1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7a:d5:f3:72:0e:ef:db:6c:d7:f9:20:dc:e0:
47:2e:26:f1:ec:15:97:3f:70:1a:67:c3:c6:9e:de:
19:26:5e:7f:49:9e:79:d0:fa:0f:dd:8b:95:51:c8:
67:8b:9a:8a:aa:1f:ea:c6:d7:af:a7:9c:79:f6:f6:
8a:da:53:e9:30:b3:8c:9c:88:0a:df:60:6e:2a:49:
15:c6:fa:df:00:1a:52:45:5f:58:b8:ce:64:d5:b9:
43:8a:e7:84:72:ba:78:4a:92:42:7a:d6:41:5a:1f:
7b:e3:4e:2b:e5:ce:83:c0:c4:97:5f:d5:82:0d:61:
ee:3c:e5:00:82:07:11:75:90:23:fb:54:e0:98:19:
a1:c6:59:ce:c1:9d:b2:6c:2c:b9:72:42:b0:15:a8:
d7:6a:55:eb:88:05:34:14:ca:23:e3:50:b4:e6:f6:
37:1a:0b:68:57:1e:8d:92:78:eb:2f:2a:43:67:41:
d0:af:0d:6b:83:8c:46:11:01:8c:55:1a:37:5c:32:
d3:4a:04:61:18:bb:c0:0b:4d:b0:9a:d1:49:1f:7c:
b5:97:6e:c6:2c:c3:d8:07:c3:f4:bf:f4:12:54:4e:
8f:82:8b:41:af:61:e2:90:5b:ca:f2:e8:28:bb:7f:
14:7f:15:f9:ff:63:d2:41:99:3f:b5:af:41:7a:f2:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B7:AC:7F:6F:DC:75:EC:5D:31:99:4E:EC:7E:F9:F7:CE:80:DB:66
X509v3 Authority Key Identifier:
keyid:8D:C6:6A:64:75:36:43:B0:E7:0F:B9:B2:BD:40:09:CB:EC:70:54:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/jcZqZHU2Q7DnD7myvUAJy-xwVEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jcZqZHU2Q7DnD7myvUAJy-xwVEE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91733A8/14202384A1B411EAAF2E630FC4F9AE02/F6810AC0D0DC11EA9B1DF432C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
43.245.204.0/22
103.31.80.0/22
125.209.64.0/18
202.141.224.0/19
202.142.160.0/19
IPv6:
2401:8e00::/32
Signature Algorithm: sha256WithRSAEncryption
05:ad:6b:31:07:16:8e:d7:36:22:b1:42:c8:4f:c9:4c:db:05:
9f:0d:4a:8c:7c:43:87:ab:1a:13:6d:1e:f7:2f:39:f0:4c:7f:
b7:e1:82:ee:03:0c:31:c1:ed:a2:e4:d3:c0:da:85:cb:9a:05:
7a:bb:ea:56:11:8d:62:57:3b:97:61:b2:c1:09:c3:91:95:bb:
74:d6:9a:62:39:a3:df:e0:57:54:39:e1:3e:d3:65:db:5a:60:
e2:75:18:6f:c9:3c:37:7a:dd:f6:af:45:9b:30:7d:cd:c1:8e:
6c:f1:f7:3a:93:95:ef:df:3a:a1:6b:90:52:4a:87:5d:f9:37:
2b:72:72:47:14:fb:36:2c:c9:a0:71:24:22:6c:ab:50:88:1d:
0b:ce:1f:77:fe:54:b0:d4:b6:bb:6c:9d:36:36:9c:e5:be:be:
74:77:83:ae:98:9c:71:4e:0a:f2:a3:4e:69:4d:71:61:86:d2:
52:86:cd:08:d9:88:ce:d5:71:f5:99:b4:80:b9:7a:b2:d4:83:
e7:c7:c1:33:32:8f:79:23:50:16:f7:dd:67:cb:ec:c1:e8:5f:
8d:bd:da:60:0a:c3:ea:11:ce:76:75:a3:48:ad:5c:32:66:4a:
67:01:3f:7a:38:3e:9d:ad:44:de:f4:14:ad:cb:46:ab:7f:8f:
b4:f1:da:22
-----BEGIN CERTIFICATE-----
MIIFYzCCBEugAwIBAgICChMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzMzQTgxMTAvBgNVBAUTKDhEQzY2QTY0NzUzNjQzQjBFNzBGQjlCMkJENDAwOUNC
RUM3MDU0NDEwHhcNMjYwNDIyMTQwODI1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWU4ZDY1OS1hZjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApHrV83IO79ts1/kg3OBHLibx7BWXP3AaZ8PGnt4ZJl5/SZ550PoP3YuVUchn
i5qKqh/qxtevp5x59vaK2lPpMLOMnIgK32BuKkkVxvrfABpSRV9YuM5k1blDiueE
crp4SpJCetZBWh97404r5c6DwMSXX9WCDWHuPOUAggcRdZAj+1TgmBmhxlnOwZ2y
bCy5ckKwFajXalXriAU0FMoj41C05vY3GgtoVx6NknjrLypDZ0HQrw1rg4xGEQGM
VRo3XDLTSgRhGLvAC02wmtFJH3y1l27GLMPYB8P0v/QSVE6PgotBr2HikFvK8ugo
u38UfxX5/2PSQZk/ta9BevJO1wIDAQABo4IChzCCAoMwHQYDVR0OBBYEFFe3rH9v
3HXsXTGZTux++ffOgNtmMB8GA1UdIwQYMBaAFI3GamR1NkOw5w+5sr1ACcvscFRB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzNBOC8xNDIwMjM4NEEx
QjQxMUVBQUYyRTYzMEZDNEY5QUUwMi9qY1pxWkhVMlE3RG5EN215dlVBSnkteHdW
RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2pjWnFaSFUyUTdEbkQ3bXl2VUFKeS14d1ZFRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NzMzQTgvMTQyMDIzODRBMUI0MTFFQUFGMkU2MzBGQzRGOUFFMDIvRjY4MTBBQzBE
MERDMTFFQTlCMURGNDMyQzRGOUFFMDIucm9hMEYGCCsGAQUFBwEHAQH/BDcwNTAk
BAIAATAeAwQCK/XMAwQCZx9QAwQGfdFAAwQFyo3gAwQFyo6gMA0EAgACMAcDBQAk
AY4AMA0GCSqGSIb3DQEBCwUAA4IBAQAFrWsxBxaO1zYisULIT8lM2wWfDUqMfEOH
qxoTbR73LznwTH+34YLuAwwxwe2i5NPA2oXLmgV6u+pWEY1iVzuXYbLBCcORlbt0
1ppiOaPf4FdUOeE+02XbWmDidRhvyTw3et32r0WbMH3NwY5s8fc6k5Xv3zqha5BS
Sodd+TcrcnJHFPs2LMmgcSQibKtQiB0Lzh93/lSw1La7bJ02Npzlvr50d4OumJxx
Tgryo05pTXFhhtJShs0I2YjO1XH1mbSAuXqy1IPnx8EzMo95I1AW991ny+zB6F+N
vdpgCsPqEc52daNIrVwyZkpnAT96OD6drUTe9BSty0arf4+08doi
-----END CERTIFICATE-----
Generated at Wed Apr 29 02:24:27 2026 by rpki-client