Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04709E8E830211F0B38D771CC4F9AE02.roa
File: 04709E8E830211F0B38D771CC4F9AE02.roa (raw, json)
Hash identifier: nsG2dWQa0lOGQqOAaijOF4o13kMCK3QDk4BAqwGEjoY=
Subject key identifier: 24:E0:3F:0C:27:A3:1C:0F:EB:9C:2E:92:08:C6:5D:A1:DE:B6:CD:5D
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F735
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04709E8E830211F0B38D771CC4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:48:45 +0000
ROA not before: Mon 06 Jul 2026 17:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18002
IP address blocks: 14.102.1.0/24 maxlen: 24
14.102.2.0/23 maxlen: 24
14.102.2.0/24 maxlen: 24
14.102.3.0/24 maxlen: 24
14.102.12.0/23 maxlen: 24
14.102.15.0/24 maxlen: 24
14.102.22.0/23 maxlen: 24
14.102.22.0/24 maxlen: 24
14.102.23.0/24 maxlen: 24
14.102.24.0/22 maxlen: 24
14.102.24.0/24 maxlen: 24
14.102.25.0/24 maxlen: 24
14.102.26.0/24 maxlen: 24
14.102.27.0/24 maxlen: 24
14.102.32.0/22 maxlen: 24
14.102.32.0/24 maxlen: 24
14.102.33.0/24 maxlen: 24
14.102.34.0/24 maxlen: 24
14.102.35.0/24 maxlen: 24
14.102.36.0/23 maxlen: 24
14.102.36.0/24 maxlen: 24
14.102.37.0/24 maxlen: 24
14.102.38.0/24 maxlen: 24
14.102.40.0/22 maxlen: 24
14.102.40.0/24 maxlen: 24
14.102.41.0/24 maxlen: 24
14.102.42.0/24 maxlen: 24
14.102.43.0/24 maxlen: 24
14.102.44.0/24 maxlen: 24
14.102.45.0/24 maxlen: 24
14.102.48.0/24 maxlen: 24
14.102.50.0/24 maxlen: 24
14.102.56.0/23 maxlen: 24
14.102.56.0/24 maxlen: 24
14.102.57.0/24 maxlen: 24
14.102.59.0/24 maxlen: 24
14.102.64.0/22 maxlen: 24
14.102.64.0/24 maxlen: 24
14.102.65.0/24 maxlen: 24
14.102.66.0/24 maxlen: 24
14.102.67.0/24 maxlen: 24
14.102.68.0/22 maxlen: 24
14.102.68.0/24 maxlen: 24
14.102.69.0/24 maxlen: 24
14.102.70.0/24 maxlen: 24
14.102.71.0/24 maxlen: 24
14.102.72.0/22 maxlen: 24
14.102.72.0/24 maxlen: 24
14.102.73.0/24 maxlen: 24
14.102.74.0/24 maxlen: 24
14.102.75.0/24 maxlen: 24
14.102.76.0/23 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/23 maxlen: 24
14.102.80.0/24 maxlen: 24
14.102.81.0/24 maxlen: 24
14.102.82.0/24 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.91.0/24 maxlen: 24
14.102.92.0/23 maxlen: 24
14.102.95.0/24 maxlen: 24
14.102.96.0/23 maxlen: 24
14.102.96.0/24 maxlen: 24
14.102.97.0/24 maxlen: 24
14.102.100.0/23 maxlen: 24
14.102.103.0/24 maxlen: 24
14.102.104.0/22 maxlen: 24
14.102.104.0/24 maxlen: 24
14.102.105.0/24 maxlen: 24
14.102.106.0/23 maxlen: 24
14.102.108.0/22 maxlen: 24
14.102.108.0/24 maxlen: 24
14.102.109.0/24 maxlen: 24
14.102.110.0/24 maxlen: 24
14.102.111.0/24 maxlen: 24
14.102.112.0/22 maxlen: 24
14.102.112.0/24 maxlen: 24
14.102.113.0/24 maxlen: 24
14.102.114.0/24 maxlen: 24
14.102.115.0/24 maxlen: 24
14.102.116.0/22 maxlen: 24
14.102.116.0/24 maxlen: 24
14.102.117.0/24 maxlen: 24
14.102.118.0/24 maxlen: 24
14.102.119.0/24 maxlen: 24
14.102.120.0/22 maxlen: 24
14.102.120.0/24 maxlen: 24
14.102.121.0/24 maxlen: 24
14.102.122.0/24 maxlen: 24
14.102.123.0/24 maxlen: 24
14.102.125.0/24 maxlen: 24
14.102.126.0/23 maxlen: 24
14.102.126.0/24 maxlen: 24
14.102.127.0/24 maxlen: 24
43.251.212.0/22 maxlen: 24
61.14.228.0/24 maxlen: 24
61.14.231.0/24 maxlen: 24
103.5.200.0/23 maxlen: 24
103.59.189.0/24 maxlen: 24
103.87.101.0/24 maxlen: 24
103.87.102.0/23 maxlen: 24
103.158.131.0/24 maxlen: 24
103.160.24.0/24 maxlen: 24
103.160.72.0/23 maxlen: 24
103.173.200.0/24 maxlen: 24
103.175.72.0/24 maxlen: 24
103.175.73.0/24 maxlen: 24
110.172.130.0/23 maxlen: 24
110.172.132.0/24 maxlen: 24
110.172.134.0/23 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.138.0/23 maxlen: 24
110.172.140.0/24 maxlen: 24
110.172.147.0/24 maxlen: 24
110.172.150.0/24 maxlen: 24
110.172.151.0/24 maxlen: 24
110.172.152.0/22 maxlen: 24
110.172.156.0/22 maxlen: 24
110.172.160.0/23 maxlen: 24
110.172.162.0/24 maxlen: 24
110.172.164.0/24 maxlen: 24
110.172.166.0/23 maxlen: 24
110.172.168.0/24 maxlen: 24
110.172.170.0/23 maxlen: 24
110.172.174.0/23 maxlen: 24
110.172.177.0/24 maxlen: 24
110.172.178.0/23 maxlen: 24
110.172.184.0/22 maxlen: 24
111.235.64.0/22 maxlen: 24
114.69.228.0/22 maxlen: 24
114.69.240.0/24 maxlen: 24
114.69.242.0/23 maxlen: 24
114.69.248.0/23 maxlen: 24
114.69.252.0/22 maxlen: 24
118.91.176.0/23 maxlen: 24
118.91.178.0/24 maxlen: 24
118.91.189.0/24 maxlen: 24
118.91.191.0/24 maxlen: 24
202.89.64.0/24 maxlen: 24
202.89.65.0/24 maxlen: 24
202.89.66.0/24 maxlen: 24
202.89.67.0/24 maxlen: 24
202.89.68.0/24 maxlen: 24
202.89.69.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
202.89.71.0/24 maxlen: 24
202.89.72.0/24 maxlen: 24
202.89.74.0/24 maxlen: 24
202.89.76.0/24 maxlen: 24
202.89.77.0/24 maxlen: 24
202.89.78.0/24 maxlen: 24
2402:5b00::/44 maxlen: 44
2402:5b00:20::/44 maxlen: 44
2402:5b00:40::/44 maxlen: 44
2402:5b00:b0::/44 maxlen: 44
2402:5b00:d0::/44 maxlen: 44
2402:5b00:e0::/44 maxlen: 44
2402:5b00:f0::/44 maxlen: 44
2402:5b00:110::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63285 (0xf735)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4bea7d-5f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:87:3e:80:2d:6d:12:03:4a:5e:18:1e:b4:33:
c2:ad:0f:ee:01:a1:50:c7:44:39:1b:c5:23:33:71:
c8:00:c6:55:d5:3d:67:93:f3:b2:ce:53:4b:ff:97:
5b:54:d4:8f:ff:06:6e:5b:8b:a7:72:24:18:48:54:
3f:90:ae:da:b3:a2:35:da:e9:01:3f:a9:a8:45:7b:
ef:1a:11:81:83:c1:10:a8:31:d1:66:c5:e0:5d:4d:
d3:b0:c0:ca:c2:a0:31:bb:fe:36:60:71:08:ba:30:
93:9a:47:5e:c8:c4:65:93:1b:86:17:1e:d0:04:77:
d3:73:68:d0:0c:95:43:c8:a3:4d:1f:9d:29:6f:6b:
21:bd:68:b0:83:4b:60:79:72:fd:62:05:53:27:90:
fa:ed:5b:91:b7:e4:04:66:34:aa:13:13:97:21:e1:
a4:81:ef:d3:c8:30:97:66:0c:2b:51:2c:32:57:0e:
e3:20:5a:2d:3c:2f:ab:b6:7c:eb:2b:7e:7d:20:16:
4b:a3:b0:cf:cd:68:38:ba:f8:0f:92:b0:3a:77:bf:
7a:72:0d:e9:ac:0f:87:f1:c4:50:d1:07:5d:05:95:
03:11:2e:63:7b:0a:56:bf:8f:e3:80:00:36:ed:6b:
22:55:f4:87:8e:da:a8:68:d5:11:12:29:4f:92:d4:
37:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:E0:3F:0C:27:A3:1C:0F:EB:9C:2E:92:08:C6:5D:A1:DE:B6:CD:5D
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04709E8E830211F0B38D771CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.102.1.0-14.102.3.255
14.102.12.0/23
14.102.15.0/24
14.102.22.0-14.102.27.255
14.102.32.0-14.102.38.255
14.102.40.0-14.102.45.255
14.102.48.0/24
14.102.50.0/24
14.102.56.0/23
14.102.59.0/24
14.102.64.0-14.102.78.255
14.102.80.0-14.102.82.255
14.102.88.0/24
14.102.91.0-14.102.93.255
14.102.95.0-14.102.97.255
14.102.100.0/23
14.102.103.0-14.102.123.255
14.102.125.0-14.102.127.255
43.251.212.0/22
61.14.228.0/24
61.14.231.0/24
103.5.200.0/23
103.59.189.0/24
103.87.101.0-103.87.103.255
103.158.131.0/24
103.160.24.0/24
103.160.72.0/23
103.173.200.0/24
103.175.72.0/23
110.172.130.0-110.172.132.255
110.172.134.0-110.172.136.255
110.172.138.0-110.172.140.255
110.172.147.0/24
110.172.150.0-110.172.162.255
110.172.164.0/24
110.172.166.0-110.172.168.255
110.172.170.0/23
110.172.174.0/23
110.172.177.0-110.172.179.255
110.172.184.0/22
111.235.64.0/22
114.69.228.0/22
114.69.240.0/24
114.69.242.0/23
114.69.248.0/23
114.69.252.0/22
118.91.176.0-118.91.178.255
118.91.189.0/24
118.91.191.0/24
202.89.64.0-202.89.72.255
202.89.74.0/24
202.89.76.0-202.89.78.255
IPv6:
2402:5b00::/44
2402:5b00:20::/44
2402:5b00:40::/44
2402:5b00:b0::/44
2402:5b00:d0::-2402:5b00:ff:ffff:ffff:ffff:ffff:ffff
2402:5b00:110::/44
Signature Algorithm: sha256WithRSAEncryption
9d:35:c2:63:fc:ae:12:77:fb:28:5f:dd:69:16:89:f0:50:1d:
41:9c:81:c7:cf:ad:8b:dc:c4:e6:1b:ae:67:90:f5:06:c7:39:
b4:bf:10:4a:fc:cb:10:c9:fc:55:ec:8f:6c:fe:1f:e3:9c:6b:
00:b3:96:a6:30:bd:1e:9e:ed:84:3f:4f:d2:48:e0:38:24:83:
48:bb:4f:ec:89:2a:d0:6a:94:8c:59:76:6b:aa:04:6e:f4:44:
ef:6a:80:f2:9f:59:88:7f:d6:00:ec:6e:1e:7c:c7:b7:d9:2d:
d0:e4:bc:aa:48:27:55:b4:d3:aa:ae:69:d9:e5:c8:93:66:b2:
91:c9:20:b1:92:48:90:82:bd:44:c2:6b:d5:4f:bf:fa:08:21:
5a:64:e6:d7:43:fa:eb:83:f2:70:3b:eb:82:88:9c:89:57:c1:
17:b7:a2:f8:34:ec:0f:cc:78:ef:83:56:0f:ec:e5:e7:6c:d7:
bc:d7:12:dc:26:c4:e5:c9:a8:13:ce:f6:05:da:0e:44:12:bc:
ee:22:be:23:90:98:48:c5:62:c6:82:b7:18:11:c4:aa:d5:2d:
8f:2b:4a:4e:83:9d:5c:e0:6b:4a:c5:96:b6:15:95:7f:11:9e:
ad:bd:2f:36:7f:15:5d:b2:9d:6c:9c:28:ad:e0:8e:1e:83:ef:
b0:96:04:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:38:42 2026 by rpki-client