Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4848A8C83A0411F086BFFE49C4F9AE02.roa
File: 4848A8C83A0411F086BFFE49C4F9AE02.roa (raw, json)
Hash identifier: e3lNwVR4ce5bl7YMQQud5v6wNAeBqYYfP2Sy+IKkDGI=
Subject key identifier: 33:25:E1:66:B5:2F:75:B5:69:CB:E8:1B:D1:31:20:90:44:F1:A4:80
Certificate issuer: /CN=A9186214/serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Certificate serial: 3BAA
Authority key identifier: F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4848A8C83A0411F086BFFE49C4F9AE02.roa
Signing time: Thu 20 Aug 2026 16:24:26 +0000
ROA not before: Thu 20 Aug 2026 16:24:26 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 4787
IP address blocks: 45.126.80.0/22 maxlen: 22
101.50.16.0/21 maxlen: 21
101.50.16.0/24 maxlen: 24
101.50.24.0/21 maxlen: 21
101.50.24.0/24 maxlen: 24
101.128.64.0/18 maxlen: 24
103.61.248.0/22 maxlen: 22
103.86.148.0/22 maxlen: 22
103.86.148.0/23 maxlen: 23
103.86.149.0/24 maxlen: 24
103.86.150.0/23 maxlen: 23
103.86.150.0/24 maxlen: 24
103.86.152.0/22 maxlen: 22
103.86.152.0/24 maxlen: 24
103.86.156.0/22 maxlen: 22
103.86.156.0/24 maxlen: 24
103.86.160.0/22 maxlen: 22
103.87.76.0/22 maxlen: 22
103.87.76.0/24 maxlen: 24
103.87.80.0/22 maxlen: 22
103.87.80.0/24 maxlen: 24
103.87.84.0/22 maxlen: 22
103.87.84.0/24 maxlen: 24
103.87.152.0/22 maxlen: 22
103.87.152.0/24 maxlen: 24
103.109.152.0/22 maxlen: 22
103.109.152.0/24 maxlen: 24
103.109.156.0/22 maxlen: 22
103.109.156.0/24 maxlen: 24
103.109.160.0/22 maxlen: 22
103.109.160.0/24 maxlen: 24
103.109.164.0/22 maxlen: 22
103.109.164.0/24 maxlen: 24
103.109.168.0/22 maxlen: 22
103.109.168.0/24 maxlen: 24
103.109.188.0/22 maxlen: 22
103.109.188.0/24 maxlen: 24
103.109.192.0/22 maxlen: 22
103.109.192.0/24 maxlen: 24
103.109.196.0/22 maxlen: 22
103.109.196.0/24 maxlen: 24
103.109.200.0/22 maxlen: 22
103.109.200.0/24 maxlen: 24
103.111.184.0/22 maxlen: 22
103.111.184.0/24 maxlen: 24
103.111.188.0/22 maxlen: 22
103.111.188.0/24 maxlen: 24
103.111.200.0/22 maxlen: 22
103.111.200.0/24 maxlen: 24
103.111.204.0/22 maxlen: 22
103.111.204.0/24 maxlen: 24
103.111.208.0/22 maxlen: 22
103.111.208.0/24 maxlen: 24
103.111.212.0/22 maxlen: 22
103.111.212.0/24 maxlen: 24
103.113.48.0/22 maxlen: 22
103.113.48.0/24 maxlen: 24
103.113.52.0/22 maxlen: 22
103.113.52.0/24 maxlen: 24
103.113.72.0/22 maxlen: 22
103.113.72.0/24 maxlen: 24
103.113.76.0/22 maxlen: 22
103.113.76.0/24 maxlen: 24
103.113.116.0/22 maxlen: 22
103.113.116.0/24 maxlen: 24
103.113.120.0/22 maxlen: 22
103.113.120.0/24 maxlen: 24
103.113.128.0/22 maxlen: 22
103.113.128.0/24 maxlen: 24
103.113.132.0/22 maxlen: 22
103.113.132.0/24 maxlen: 24
103.114.80.0/22 maxlen: 22
103.114.80.0/24 maxlen: 24
103.114.84.0/22 maxlen: 22
103.114.84.0/24 maxlen: 24
103.114.108.0/22 maxlen: 22
103.114.108.0/24 maxlen: 24
103.114.112.0/22 maxlen: 22
103.114.112.0/24 maxlen: 24
103.114.116.0/22 maxlen: 22
103.114.116.0/24 maxlen: 24
103.114.120.0/22 maxlen: 22
103.114.120.0/24 maxlen: 24
103.114.136.0/22 maxlen: 22
103.114.136.0/24 maxlen: 24
103.114.140.0/22 maxlen: 22
103.118.96.0/22 maxlen: 22
103.118.96.0/24 maxlen: 24
103.118.100.0/22 maxlen: 22
103.118.100.0/24 maxlen: 24
103.118.104.0/22 maxlen: 22
103.118.104.0/24 maxlen: 24
103.118.108.0/22 maxlen: 22
103.118.108.0/24 maxlen: 24
103.118.128.0/22 maxlen: 22
103.118.128.0/24 maxlen: 24
103.118.132.0/22 maxlen: 22
103.118.132.0/24 maxlen: 24
103.118.136.0/22 maxlen: 22
103.118.136.0/24 maxlen: 24
103.118.140.0/22 maxlen: 22
103.118.140.0/24 maxlen: 24
103.118.224.0/22 maxlen: 22
103.118.224.0/24 maxlen: 24
103.118.228.0/22 maxlen: 22
103.118.228.0/24 maxlen: 24
103.118.232.0/22 maxlen: 22
103.118.232.0/24 maxlen: 24
103.118.236.0/22 maxlen: 22
103.118.236.0/24 maxlen: 24
103.119.4.0/22 maxlen: 22
103.119.4.0/24 maxlen: 24
103.119.8.0/22 maxlen: 22
103.119.8.0/24 maxlen: 24
103.119.36.0/22 maxlen: 22
103.119.36.0/24 maxlen: 24
103.119.40.0/22 maxlen: 22
103.119.40.0/24 maxlen: 24
103.121.96.0/22 maxlen: 22
103.121.96.0/24 maxlen: 24
103.121.100.0/22 maxlen: 22
103.121.100.0/24 maxlen: 24
103.121.108.0/22 maxlen: 22
103.121.108.0/24 maxlen: 24
103.121.132.0/22 maxlen: 22
103.121.132.0/24 maxlen: 24
103.121.136.0/22 maxlen: 22
103.121.136.0/24 maxlen: 24
103.121.144.0/22 maxlen: 22
103.121.144.0/24 maxlen: 24
103.121.168.0/22 maxlen: 22
103.121.168.0/24 maxlen: 24
103.121.180.0/22 maxlen: 22
103.121.180.0/24 maxlen: 24
103.121.244.0/22 maxlen: 22
103.121.244.0/24 maxlen: 24
103.129.4.0/22 maxlen: 22
103.129.4.0/24 maxlen: 24
103.129.20.0/22 maxlen: 22
103.129.20.0/24 maxlen: 24
103.129.24.0/22 maxlen: 22
103.129.24.0/24 maxlen: 24
103.129.40.0/22 maxlen: 22
103.129.40.0/24 maxlen: 24
103.129.48.0/22 maxlen: 22
103.129.48.0/24 maxlen: 24
103.129.56.0/22 maxlen: 22
103.129.56.0/24 maxlen: 24
103.129.68.0/22 maxlen: 22
103.129.68.0/24 maxlen: 24
116.206.232.0/22 maxlen: 22
116.206.232.0/24 maxlen: 24
116.206.236.0/22 maxlen: 22
116.206.236.0/24 maxlen: 24
116.206.240.0/22 maxlen: 22
116.206.240.0/24 maxlen: 24
125.208.128.0/18 maxlen: 18
175.158.32.0/19 maxlen: 19
175.158.32.0/21 maxlen: 21
175.158.32.0/22 maxlen: 22
175.158.32.0/24 maxlen: 24
202.158.0.0/17 maxlen: 17
210.210.128.0/18 maxlen: 24
2001:d10::/48 maxlen: 48
2403:3440::/32 maxlen: 32
2403:3440::/48 maxlen: 48
2403:34c0::/32 maxlen: 32
2403:34c0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 15:32:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15274 (0x3baa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186214, serialNumber=F3DB9F162008BD666CBF8C99607814CFAB24D7E7
Validity
Not Before: Aug 20 16:24:26 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a872a3a-53a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4b:44:44:8e:73:9e:c8:00:2b:eb:87:0a:23:
a8:9f:0a:42:f5:42:43:58:95:b2:53:0b:60:31:6d:
91:9d:36:7e:c2:6a:ae:0e:fe:9a:52:38:c7:23:12:
26:51:10:e3:1d:2e:16:22:15:0b:b8:20:23:a4:50:
a8:f2:07:97:03:c0:0f:27:1f:07:f2:e2:ca:8e:54:
52:de:36:7f:3b:f4:2e:87:c4:af:9d:dd:91:3a:fd:
73:60:66:c9:cc:ca:1c:73:64:ae:a6:9b:30:ec:47:
ef:9e:69:f3:f0:6d:4d:53:ff:36:70:ab:90:ed:45:
dd:6f:01:b1:eb:82:95:7f:7f:a5:4f:6b:b8:24:2f:
c8:5a:c5:ef:0c:a8:ab:3e:f2:4d:6d:21:5d:45:04:
fd:b7:30:f8:bd:47:18:0e:92:50:b7:b3:18:3d:f3:
fd:96:1e:c0:26:ee:75:4d:78:c0:26:1f:6e:bd:be:
79:a4:8f:5c:d1:aa:32:37:82:98:f0:e3:98:b4:70:
22:ac:c8:b3:32:7e:7c:ea:f2:4e:99:0d:cd:f1:81:
58:6e:48:32:e6:9a:04:de:cd:48:4a:6e:d7:ed:92:
b5:51:5a:d0:e6:bd:29:bb:9b:63:34:e7:40:57:4d:
d7:8e:74:89:19:26:fa:a6:56:8a:db:57:a5:90:8b:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:25:E1:66:B5:2F:75:B5:69:CB:E8:1B:D1:31:20:90:44:F1:A4:80
X509v3 Authority Key Identifier:
keyid:F3:DB:9F:16:20:08:BD:66:6C:BF:8C:99:60:78:14:CF:AB:24:D7:E7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/89ufFiAIvWZsv4yZYHgUz6sk1-c.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/89ufFiAIvWZsv4yZYHgUz6sk1-c.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/C65D5364331A11E4AF2AB37CC4F9AE02/4848A8C83A0411F086BFFE49C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.126.80.0/22
101.50.16.0/20
101.128.64.0/18
103.61.248.0/22
103.86.148.0-103.86.163.255
103.87.76.0-103.87.87.255
103.87.152.0/22
103.109.152.0-103.109.171.255
103.109.188.0-103.109.203.255
103.111.184.0/21
103.111.200.0-103.111.215.255
103.113.48.0/21
103.113.72.0/21
103.113.116.0-103.113.123.255
103.113.128.0/21
103.114.80.0/21
103.114.108.0-103.114.123.255
103.114.136.0/21
103.118.96.0/20
103.118.128.0/20
103.118.224.0/20
103.119.4.0-103.119.11.255
103.119.36.0-103.119.43.255
103.121.96.0/21
103.121.108.0/22
103.121.132.0-103.121.139.255
103.121.144.0/22
103.121.168.0/22
103.121.180.0/22
103.121.244.0/22
103.129.4.0/22
103.129.20.0-103.129.27.255
103.129.40.0/22
103.129.48.0/22
103.129.56.0/22
103.129.68.0/22
116.206.232.0-116.206.243.255
125.208.128.0/18
175.158.32.0/19
202.158.0.0/17
210.210.128.0/18
IPv6:
2001:d10::/48
2403:3440::/32
2403:34c0::/32
Signature Algorithm: sha256WithRSAEncryption
0e:02:8b:ec:78:33:fc:cc:d1:ad:34:a0:0e:5d:ca:56:dd:7e:
e5:39:31:f6:d2:dc:2f:53:e6:c7:3a:9d:e7:3d:3c:18:b6:8d:
1b:5e:50:02:bd:d1:0e:08:bd:22:ba:b6:0e:6d:d7:9c:53:55:
fb:13:ea:90:b4:7c:cb:1e:aa:d0:8b:f4:75:f8:fd:37:5a:30:
47:a8:5a:7b:92:5e:b1:9e:78:d3:5d:fc:9d:9b:a0:78:e1:75:
33:14:27:d2:a4:25:1c:05:bf:22:8e:93:14:48:8a:50:c2:a0:
3f:bf:9e:79:84:1c:ad:0d:d0:2f:80:db:7c:80:d0:f2:17:78:
c4:89:ad:0b:bd:c0:7f:7c:db:a0:c3:dc:df:c4:5c:ed:a3:49:
ec:3d:ed:7c:97:59:47:18:ab:bd:ce:ed:4e:2d:1d:19:82:6f:
1b:c9:ed:9a:cd:2b:a9:97:d0:20:f7:0b:6c:8b:f2:dd:db:05:
f0:80:58:18:72:19:64:55:58:32:89:db:3c:f0:79:e4:e9:13:
81:16:4c:5c:ce:ec:3b:f8:5c:73:91:19:9a:f8:24:ed:05:bb:
d6:68:46:73:cd:cc:72:65:79:f5:59:56:10:01:10:f5:71:0b:
a7:da:d3:e2:8d:2c:82:bb:ca:1a:85:e4:09:6a:fe:65:78:94:
80:17:d9:ae
-----BEGIN CERTIFICATE-----
MIIGtTCCBZ2gAwIBAgICO6owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODYyMTQxMTAvBgNVBAUTKEYzREI5RjE2MjAwOEJENjY2Q0JGOEM5OTYwNzgxNENG
QUIyNEQ3RTcwHhcNMjYwODIwMTYyNDI2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTg3MmEzYS01M2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7UtERI5znsgAK+uHCiOonwpC9UJDWJWyUwtgMW2RnTZ+wmquDv6aUjjHIxIm
URDjHS4WIhULuCAjpFCo8geXA8APJx8H8uLKjlRS3jZ/O/Quh8Svnd2ROv1zYGbJ
zMocc2Suppsw7Efvnmnz8G1NU/82cKuQ7UXdbwGx64KVf3+lT2u4JC/IWsXvDKir
PvJNbSFdRQT9tzD4vUcYDpJQt7MYPfP9lh7AJu51TXjAJh9uvb55pI9c0aoyN4KY
8OOYtHAirMizMn586vJOmQ3N8YFYbkgy5poE3s1ISm7X7ZK1UVrQ5r0pu5tjNOdA
V03XjnSJGSb6plaK21elkIuN4QIDAQABo4ID2TCCA9UwHQYDVR0OBBYEFDMl4Wa1
L3W1acvoG9ExIJBE8aSAMB8GA1UdIwQYMBaAFPPbnxYgCL1mbL+MmWB4FM+rJNfn
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9DNjVENTM2NDMz
MUExMUU0QUYyQUIzN0NDNEY5QUUwMi84OXVmRmlBSXZXWnN2NHlaWUhnVXo2c2sx
LWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzg5dWZGaUFJdldac3Y0eVpZSGdVejZzazEtYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODYyMTQvQzY1RDUzNjQzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvNDg0OEE4Qzgz
QTA0MTFGMDg2QkZGRTQ5QzRGOUFFMDIucm9hMIIBlgYIKwYBBQUHAQcBAf8EggGF
MIIBgTCCAV4EAgABMIIBVgMEAi1+UAMEBGUyEAMEBmWAQAMEAmc9+DAMAwQCZ1aU
AwQCZ1agMAwDBAJnV0wDBANnV1ADBAJnV5gwDAMEA2dtmAMEAmdtqDAMAwQCZ228
AwQCZ23IAwQDZ2+4MAwDBANnb8gDBANnb9ADBANncTADBANncUgwDAMEAmdxdAME
AmdxeAMEA2dxgAMEA2dyUDAMAwQCZ3JsAwQCZ3J4AwQDZ3KIAwQEZ3ZgAwQEZ3aA
AwQEZ3bgMAwDBAJndwQDBAJndwgwDAMEAmd3JAMEAmd3KAMEA2d5YAMEAmd5bDAM
AwQCZ3mEAwQCZ3mIAwQCZ3mQAwQCZ3moAwQCZ3m0AwQCZ3n0AwQCZ4EEMAwDBAJn
gRQDBAJngRgDBAJngSgDBAJngTADBAJngTgDBAJngUQwDAMEA3TO6AMEAnTO8AME
Bn3QgAMEBa+eIAMEB8qeAAMEBtLSgDAdBAIAAjAXAwcAIAENEAAAAwUAJAM0QAMF
ACQDNMAwDQYJKoZIhvcNAQELBQADggEBAA4Ci+x4M/zM0a00oA5dylbdfuU5MfbS
3C9T5sc6nec9PBi2jRteUAK90Q4IvSK6tg5t15xTVfsT6pC0fMseqtCL9HX4/Tda
MEeoWnuSXrGeeNNd/J2boHjhdTMUJ9KkJRwFvyKOkxRIilDCoD+/nnmEHK0N0C+A
23yA0PIXeMSJrQu9wH9826DD3N/EXO2jSew97XyXWUcYq73O7U4tHRmCbxvJ7ZrN
K6mX0CD3C2yL8t3bBfCAWBhyGWRVWDKJ2zzweeTpE4EWTFzO7Dv4XHORGZr4JO0F
u9ZoRnPNzHJlefVZVhABEPVxC6fa0+KNLIK7yhqF5Alq/mV4lIAX2a4=
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:50:51 2026 by rpki-client