Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/4CAE21E8A80F11F1B862E5936B11F970.roa
File: 4CAE21E8A80F11F1B862E5936B11F970.roa (raw, json)
Hash identifier: /lRSXnCOe0ZqwnNdFGGDEkdQtTUnWqE6TBZzsRRNdXs=
Subject key identifier: 0E:EF:E8:CC:5A:A4:F8:E7:46:91:C5:8D:42:F9:BE:41:F5:8D:A2:5D
Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial: 0903
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/4CAE21E8A80F11F1B862E5936B11F970.roa
Signing time: Mon 12 Oct 2026 09:42:25 +0000
ROA not before: Mon 12 Oct 2026 09:42:25 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135377
IP address blocks: 45.249.244.0/24 maxlen: 24
45.249.245.0/24 maxlen: 24
45.249.246.0/24 maxlen: 24
45.249.247.0/24 maxlen: 24
101.36.96.0/24 maxlen: 24
101.36.97.0/24 maxlen: 24
101.36.98.0/24 maxlen: 24
101.36.99.0/24 maxlen: 24
101.36.100.0/24 maxlen: 24
101.36.101.0/24 maxlen: 24
101.36.102.0/24 maxlen: 24
101.36.103.0/24 maxlen: 24
101.36.104.0/24 maxlen: 24
101.36.105.0/24 maxlen: 24
101.36.106.0/24 maxlen: 24
101.36.107.0/24 maxlen: 24
101.36.108.0/24 maxlen: 24
101.36.109.0/24 maxlen: 24
101.36.110.0/24 maxlen: 24
101.36.111.0/24 maxlen: 24
101.36.112.0/24 maxlen: 24
101.36.113.0/24 maxlen: 24
101.36.114.0/24 maxlen: 24
101.36.115.0/24 maxlen: 24
101.36.116.0/24 maxlen: 24
101.36.117.0/24 maxlen: 24
101.36.118.0/24 maxlen: 24
101.36.119.0/24 maxlen: 24
101.36.120.0/24 maxlen: 24
101.36.121.0/24 maxlen: 24
101.36.122.0/24 maxlen: 24
101.36.123.0/24 maxlen: 24
101.36.124.0/24 maxlen: 24
101.36.125.0/24 maxlen: 24
101.36.126.0/24 maxlen: 24
101.36.127.0/24 maxlen: 24
103.149.26.0/24 maxlen: 24
103.149.27.0/24 maxlen: 24
103.218.240.0/24 maxlen: 24
103.218.241.0/24 maxlen: 24
103.218.242.0/24 maxlen: 24
103.218.243.0/24 maxlen: 24
103.234.60.0/24 maxlen: 24
103.234.61.0/24 maxlen: 24
103.234.62.0/24 maxlen: 24
118.26.36.0/24 maxlen: 24
118.26.37.0/24 maxlen: 24
118.26.38.0/24 maxlen: 24
118.26.39.0/24 maxlen: 24
118.26.104.0/24 maxlen: 24
118.26.105.0/24 maxlen: 24
118.26.106.0/24 maxlen: 24
118.26.107.0/24 maxlen: 24
118.26.108.0/24 maxlen: 24
118.26.109.0/24 maxlen: 24
118.26.110.0/24 maxlen: 24
118.26.111.0/24 maxlen: 24
118.193.32.0/24 maxlen: 24
118.193.33.0/24 maxlen: 24
118.193.34.0/24 maxlen: 24
118.193.35.0/24 maxlen: 24
118.193.36.0/24 maxlen: 24
118.193.37.0/24 maxlen: 24
118.193.38.0/24 maxlen: 24
118.193.39.0/24 maxlen: 24
118.193.40.0/24 maxlen: 24
118.193.41.0/24 maxlen: 24
118.193.42.0/24 maxlen: 24
118.193.43.0/24 maxlen: 24
118.193.44.0/24 maxlen: 24
118.193.45.0/24 maxlen: 24
118.193.46.0/24 maxlen: 24
118.193.47.0/24 maxlen: 24
118.193.56.0/24 maxlen: 24
118.193.57.0/24 maxlen: 24
118.193.58.0/24 maxlen: 24
118.193.59.0/24 maxlen: 24
118.193.60.0/24 maxlen: 24
118.193.61.0/24 maxlen: 24
118.193.62.0/24 maxlen: 24
118.193.63.0/24 maxlen: 24
118.193.64.0/24 maxlen: 24
118.193.65.0/24 maxlen: 24
118.193.66.0/24 maxlen: 24
118.193.67.0/24 maxlen: 24
118.193.68.0/24 maxlen: 24
118.193.69.0/24 maxlen: 24
118.193.70.0/24 maxlen: 24
118.193.71.0/24 maxlen: 24
118.193.72.0/24 maxlen: 24
118.193.73.0/24 maxlen: 24
118.193.74.0/24 maxlen: 24
118.193.75.0/24 maxlen: 24
118.193.76.0/24 maxlen: 24
118.193.77.0/24 maxlen: 24
118.193.78.0/24 maxlen: 24
118.193.79.0/24 maxlen: 24
118.194.228.0/24 maxlen: 24
118.194.229.0/24 maxlen: 24
118.194.230.0/24 maxlen: 24
118.194.231.0/24 maxlen: 24
118.194.232.0/24 maxlen: 24
118.194.233.0/24 maxlen: 24
118.194.234.0/24 maxlen: 24
118.194.235.0/24 maxlen: 24
118.194.236.0/24 maxlen: 24
118.194.237.0/24 maxlen: 24
118.194.238.0/24 maxlen: 24
118.194.239.0/24 maxlen: 24
118.194.248.0/24 maxlen: 24
118.194.249.0/24 maxlen: 24
118.194.250.0/24 maxlen: 24
118.194.251.0/24 maxlen: 24
118.194.252.0/24 maxlen: 24
118.194.253.0/24 maxlen: 24
118.194.254.0/24 maxlen: 24
118.194.255.0/24 maxlen: 24
123.58.192.0/24 maxlen: 24
123.58.193.0/24 maxlen: 24
123.58.194.0/24 maxlen: 24
123.58.195.0/24 maxlen: 24
123.58.196.0/24 maxlen: 24
123.58.197.0/24 maxlen: 24
123.58.198.0/24 maxlen: 24
123.58.199.0/24 maxlen: 24
123.58.200.0/24 maxlen: 24
123.58.201.0/24 maxlen: 24
123.58.203.0/24 maxlen: 24
123.58.204.0/24 maxlen: 24
123.58.205.0/24 maxlen: 24
123.58.206.0/24 maxlen: 24
123.58.207.0/24 maxlen: 24
123.58.208.0/24 maxlen: 24
123.58.209.0/24 maxlen: 24
123.58.210.0/24 maxlen: 24
123.58.211.0/24 maxlen: 24
123.58.212.0/24 maxlen: 24
123.58.213.0/24 maxlen: 24
123.58.214.0/24 maxlen: 24
123.58.215.0/24 maxlen: 24
123.58.216.0/24 maxlen: 24
123.58.217.0/24 maxlen: 24
123.58.218.0/24 maxlen: 24
123.58.219.0/24 maxlen: 24
123.58.220.0/24 maxlen: 24
123.58.221.0/24 maxlen: 24
123.58.222.0/24 maxlen: 24
123.58.223.0/24 maxlen: 24
150.107.36.0/24 maxlen: 24
150.107.37.0/24 maxlen: 24
150.107.38.0/24 maxlen: 24
150.107.39.0/24 maxlen: 24
2001:df3:9500::/48 maxlen: 48
2404:82c0::/42 maxlen: 42
2404:82c0:40::/48 maxlen: 48
2404:82c0:41::/48 maxlen: 48
2404:82c0:42::/48 maxlen: 48
2404:82c0:43::/48 maxlen: 48
2404:82c0:44::/48 maxlen: 48
2404:82c0:45::/48 maxlen: 48
2404:82c0:46::/48 maxlen: 48
2404:82c0:47::/48 maxlen: 48
2404:82c0:48::/48 maxlen: 48
2404:82c0:49::/48 maxlen: 48
2404:82c0:4a::/48 maxlen: 48
2404:82c0:4b::/48 maxlen: 48
2404:82c0:4c::/48 maxlen: 48
2404:82c0:4d::/48 maxlen: 48
2404:82c0:4e::/48 maxlen: 48
2404:82c0:4f::/48 maxlen: 48
2404:82c0:50::/48 maxlen: 48
2404:82c0:51::/48 maxlen: 48
2404:82c0:52::/48 maxlen: 48
2404:82c0:53::/48 maxlen: 48
2404:82c0:54::/48 maxlen: 48
2404:82c0:55::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 27 Oct 2026 21:10:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2307 (0x903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Validity
Not Before: Oct 12 09:42:25 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6accab80-6c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:b6:67:23:d7:75:a6:72:74:dc:9f:b0:4a:
c1:ce:06:fc:c1:c0:56:af:56:5a:e3:59:fd:52:51:
f0:fc:63:d7:c4:cc:79:8d:3b:5c:30:88:d4:81:34:
6b:69:ad:56:58:82:46:58:98:5a:3b:f2:1b:3f:63:
c0:71:9e:f2:ce:42:a9:5b:41:56:b2:b1:c0:a6:ad:
96:e3:2b:6c:78:3f:93:f8:c1:9e:ab:97:09:15:36:
e4:b7:c6:fb:cc:58:e3:03:3c:f2:8f:16:98:db:ed:
8a:c1:23:e2:07:53:ee:3b:3f:db:69:a5:95:66:9f:
da:8b:18:1c:8b:7e:52:9a:78:26:06:27:87:95:a4:
79:8e:77:51:d8:28:97:e2:5e:bd:81:0b:f8:e9:a6:
d4:4e:6f:dc:7d:7c:f2:47:79:79:5d:53:51:5b:dc:
7d:b3:e6:14:b1:17:2c:47:41:b5:b4:27:89:b3:8b:
28:15:04:6f:45:3e:9c:b3:35:69:15:a7:78:1c:4b:
b5:e0:c8:71:54:7c:11:19:6a:32:df:9f:15:a8:2e:
f8:70:13:f9:18:e5:6f:73:57:de:d2:4d:a8:20:dc:
0f:e6:27:74:c0:37:15:6b:0d:58:c9:79:c8:a7:c2:
3e:76:67:fe:fd:16:0f:9f:f1:c7:00:6d:cb:8a:db:
43:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EF:E8:CC:5A:A4:F8:E7:46:91:C5:8D:42:F9:BE:41:F5:8D:A2:5D
X509v3 Authority Key Identifier:
keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/4CAE21E8A80F11F1B862E5936B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
45.249.244.0/22
101.36.96.0/19
103.149.26.0/23
103.218.240.0/22
103.234.60.0-103.234.62.255
118.26.36.0/22
118.26.104.0/21
118.193.32.0/20
118.193.56.0-118.193.79.255
118.194.228.0-118.194.239.255
118.194.248.0/21
123.58.192.0-123.58.201.255
123.58.203.0-123.58.223.255
150.107.36.0/22
IPv6:
2001:df3:9500::/48
2404:82c0::-2404:82c0:55:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
ca:76:b2:a7:1e:eb:d7:9f:13:8c:66:fd:f0:da:f4:30:aa:cc:
50:2c:bd:34:71:4b:36:24:b8:1d:d4:2c:0c:5a:5e:de:b4:ef:
d1:c3:43:5a:e4:a6:3f:38:66:e8:9b:74:53:9f:1c:88:b5:03:
21:81:8b:a7:ad:15:3a:12:31:28:5f:6d:35:86:fc:ca:eb:5f:
14:e1:41:ea:32:fd:a1:12:1f:fa:99:fa:ff:f1:16:b2:db:5d:
69:6e:06:75:51:7f:dc:9d:66:98:2b:55:95:1a:0e:d3:0a:10:
34:75:d1:6b:f4:76:e8:25:16:0a:16:9a:9b:24:e7:b8:f3:d9:
57:db:5d:30:d4:c4:31:b2:0d:00:06:59:3f:b5:90:cc:aa:a3:
c4:cf:54:61:e7:3d:1c:3d:77:2d:e1:16:a6:ab:8e:92:9c:cc:
1e:3c:b7:45:a0:87:fc:70:56:34:8a:98:72:89:3a:1d:95:66:
0e:31:bc:ca:bb:df:80:d8:31:e7:80:6f:67:4c:2b:94:6f:77:
89:f3:be:6c:ec:12:13:5c:e3:74:2f:66:e3:cc:bb:d9:e6:ad:
22:2a:21:0c:a9:a3:fc:b5:ff:ce:55:64:b9:75:f5:74:3c:15:
be:ca:f5:dd:75:99:b7:cb:38:f4:63:4c:db:bd:a6:4d:90:d3:
85:cb:94:dd
-----BEGIN CERTIFICATE-----
MIIF2TCCBMGgAwIBAgICCQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz
ODEzRTVFRjgwHhcNMjYxMDEyMDk0MjI1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YWNjYWI4MC02YzlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxLO2ZyPXdaZydNyfsErBzgb8wcBWr1Za41n9UlHw/GPXxMx5jTtcMIjUgTRr
aa1WWIJGWJhaO/IbP2PAcZ7yzkKpW0FWsrHApq2W4ytseD+T+MGeq5cJFTbkt8b7
zFjjAzzyjxaY2+2KwSPiB1PuOz/baaWVZp/aixgci35SmngmBieHlaR5jndR2CiX
4l69gQv46abUTm/cfXzyR3l5XVNRW9x9s+YUsRcsR0G1tCeJs4soFQRvRT6cszVp
Fad4HEu14MhxVHwRGWoy358VqC74cBP5GOVvc1fe0k2oINwP5id0wDcVaw1YyXnI
p8I+dmf+/RYPn/HHAG3LittDbQIDAQABo4IC/TCCAvkwHQYDVR0OBBYEFA7v6Mxa
pPjnRpHFjUL5vkH1jaJdMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE
RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y
dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODZFOEEvM0I0NzZFN0MyREZGMTFFQjg2OEE5MTM1QzRGOUFFMDIvNENBRTIxRThB
ODBGMTFGMUI4NjJFNTkzNkIxMUY5NzAucm9hMIG7BggrBgEFBQcBBwEB/wSBqzCB
qDCBggQCAAEwfAMEAi359AMEBWUkYAMEAWeVGgMEAmfa8DAMAwQCZ+o8AwQAZ+o+
AwQCdhokAwQDdhpoAwQEdsEgMAwDBAN2wTgDBAR2wUAwDAMEAnbC5AMEBHbC4AME
A3bC+DAMAwQGezrAAwQBezrIMAwDBAB7OssDBAV7OsADBAKWayQwIQQCAAIwGwMH
ACABDfOVADAQAwUGJASCwAMHASQEgsAAVDANBgkqhkiG9w0BAQsFAAOCAQEAynay
px7r158TjGb98Nr0MKrMUCy9NHFLNiS4HdQsDFpe3rTv0cNDWuSmPzhm6Jt0U58c
iLUDIYGLp60VOhIxKF9tNYb8yutfFOFB6jL9oRIf+pn6//EWsttdaW4GdVF/3J1m
mCtVlRoO0woQNHXRa/R26CUWChaamyTnuPPZV9tdMNTEMbINAAZZP7WQzKqjxM9U
Yec9HD13LeEWpquOkpzMHjy3RaCH/HBWNIqYcok6HZVmDjG8yrvfgNgx54BvZ0wr
lG93ifO+bOwSE1zjdC9m48y72eatIiohDKmj/LX/zlVkuXX1dDwVvsr13XWZt8s4
9GNM272mTZDThcuU3Q==
-----END CERTIFICATE-----
Generated at Thu Oct 22 08:27:51 2026 by rpki-client