Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04709E8E830211F0B38D771CC4F9AE02.roa
File: 04709E8E830211F0B38D771CC4F9AE02.roa (raw, json)
Hash identifier: 5Vgpc+kzF5Bg9swDwdyEmfSu439bio6v9lh7+EMRX/s=
Subject key identifier: F1:89:34:89:25:5F:D2:CC:5B:70:67:27:B3:41:F9:61:63:FE:CC:09
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DB57
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04709E8E830211F0B38D771CC4F9AE02.roa
Signing time: Tue 03 Mar 2026 05:08:32 +0000
ROA not before: Tue 03 Mar 2026 05:08:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 18002
IP address blocks: 14.102.1.0/24 maxlen: 24
14.102.2.0/23 maxlen: 24
14.102.2.0/24 maxlen: 24
14.102.3.0/24 maxlen: 24
14.102.12.0/23 maxlen: 24
14.102.15.0/24 maxlen: 24
14.102.22.0/23 maxlen: 24
14.102.22.0/24 maxlen: 24
14.102.23.0/24 maxlen: 24
14.102.24.0/22 maxlen: 24
14.102.24.0/24 maxlen: 24
14.102.25.0/24 maxlen: 24
14.102.26.0/24 maxlen: 24
14.102.27.0/24 maxlen: 24
14.102.32.0/22 maxlen: 24
14.102.32.0/24 maxlen: 24
14.102.33.0/24 maxlen: 24
14.102.34.0/24 maxlen: 24
14.102.35.0/24 maxlen: 24
14.102.36.0/23 maxlen: 24
14.102.36.0/24 maxlen: 24
14.102.37.0/24 maxlen: 24
14.102.38.0/24 maxlen: 24
14.102.40.0/22 maxlen: 24
14.102.40.0/24 maxlen: 24
14.102.41.0/24 maxlen: 24
14.102.42.0/24 maxlen: 24
14.102.43.0/24 maxlen: 24
14.102.44.0/24 maxlen: 24
14.102.45.0/24 maxlen: 24
14.102.48.0/24 maxlen: 24
14.102.50.0/24 maxlen: 24
14.102.56.0/23 maxlen: 24
14.102.56.0/24 maxlen: 24
14.102.57.0/24 maxlen: 24
14.102.59.0/24 maxlen: 24
14.102.64.0/22 maxlen: 24
14.102.64.0/24 maxlen: 24
14.102.65.0/24 maxlen: 24
14.102.66.0/24 maxlen: 24
14.102.67.0/24 maxlen: 24
14.102.68.0/22 maxlen: 24
14.102.68.0/24 maxlen: 24
14.102.69.0/24 maxlen: 24
14.102.70.0/24 maxlen: 24
14.102.71.0/24 maxlen: 24
14.102.72.0/22 maxlen: 24
14.102.72.0/24 maxlen: 24
14.102.73.0/24 maxlen: 24
14.102.74.0/24 maxlen: 24
14.102.75.0/24 maxlen: 24
14.102.76.0/23 maxlen: 24
14.102.78.0/24 maxlen: 24
14.102.80.0/23 maxlen: 24
14.102.80.0/24 maxlen: 24
14.102.81.0/24 maxlen: 24
14.102.82.0/24 maxlen: 24
14.102.88.0/24 maxlen: 24
14.102.91.0/24 maxlen: 24
14.102.92.0/23 maxlen: 24
14.102.95.0/24 maxlen: 24
14.102.96.0/23 maxlen: 24
14.102.96.0/24 maxlen: 24
14.102.97.0/24 maxlen: 24
14.102.100.0/23 maxlen: 24
14.102.103.0/24 maxlen: 24
14.102.104.0/22 maxlen: 24
14.102.104.0/24 maxlen: 24
14.102.105.0/24 maxlen: 24
14.102.106.0/23 maxlen: 24
14.102.108.0/22 maxlen: 24
14.102.108.0/24 maxlen: 24
14.102.109.0/24 maxlen: 24
14.102.110.0/24 maxlen: 24
14.102.111.0/24 maxlen: 24
14.102.112.0/22 maxlen: 24
14.102.112.0/24 maxlen: 24
14.102.113.0/24 maxlen: 24
14.102.114.0/24 maxlen: 24
14.102.115.0/24 maxlen: 24
14.102.116.0/22 maxlen: 24
14.102.116.0/24 maxlen: 24
14.102.117.0/24 maxlen: 24
14.102.118.0/24 maxlen: 24
14.102.119.0/24 maxlen: 24
14.102.120.0/22 maxlen: 24
14.102.120.0/24 maxlen: 24
14.102.121.0/24 maxlen: 24
14.102.122.0/24 maxlen: 24
14.102.123.0/24 maxlen: 24
14.102.125.0/24 maxlen: 24
14.102.126.0/23 maxlen: 24
14.102.126.0/24 maxlen: 24
14.102.127.0/24 maxlen: 24
43.251.212.0/22 maxlen: 24
61.14.228.0/24 maxlen: 24
61.14.231.0/24 maxlen: 24
103.5.200.0/23 maxlen: 24
103.59.189.0/24 maxlen: 24
103.87.101.0/24 maxlen: 24
103.87.102.0/23 maxlen: 24
103.158.131.0/24 maxlen: 24
103.160.24.0/24 maxlen: 24
103.160.72.0/23 maxlen: 24
103.173.200.0/24 maxlen: 24
103.175.72.0/24 maxlen: 24
103.175.73.0/24 maxlen: 24
110.172.130.0/23 maxlen: 24
110.172.132.0/24 maxlen: 24
110.172.134.0/23 maxlen: 24
110.172.136.0/24 maxlen: 24
110.172.138.0/23 maxlen: 24
110.172.140.0/24 maxlen: 24
110.172.147.0/24 maxlen: 24
110.172.150.0/24 maxlen: 24
110.172.151.0/24 maxlen: 24
110.172.152.0/22 maxlen: 24
110.172.156.0/22 maxlen: 24
110.172.160.0/23 maxlen: 24
110.172.162.0/24 maxlen: 24
110.172.164.0/24 maxlen: 24
110.172.166.0/23 maxlen: 24
110.172.168.0/24 maxlen: 24
110.172.170.0/23 maxlen: 24
110.172.174.0/23 maxlen: 24
110.172.177.0/24 maxlen: 24
110.172.178.0/23 maxlen: 24
110.172.184.0/22 maxlen: 24
111.235.64.0/22 maxlen: 24
114.69.228.0/22 maxlen: 24
114.69.240.0/24 maxlen: 24
114.69.242.0/23 maxlen: 24
114.69.248.0/23 maxlen: 24
114.69.252.0/22 maxlen: 24
118.91.176.0/23 maxlen: 24
118.91.178.0/24 maxlen: 24
118.91.189.0/24 maxlen: 24
118.91.191.0/24 maxlen: 24
202.89.64.0/24 maxlen: 24
202.89.65.0/24 maxlen: 24
202.89.66.0/24 maxlen: 24
202.89.67.0/24 maxlen: 24
202.89.68.0/24 maxlen: 24
202.89.69.0/24 maxlen: 24
202.89.70.0/24 maxlen: 24
202.89.71.0/24 maxlen: 24
202.89.72.0/24 maxlen: 24
202.89.74.0/24 maxlen: 24
202.89.76.0/24 maxlen: 24
202.89.77.0/24 maxlen: 24
202.89.78.0/24 maxlen: 24
2402:5b00::/44 maxlen: 44
2402:5b00:20::/44 maxlen: 44
2402:5b00:40::/44 maxlen: 44
2402:5b00:b0::/44 maxlen: 44
2402:5b00:d0::/44 maxlen: 44
2402:5b00:e0::/44 maxlen: 44
2402:5b00:f0::/44 maxlen: 44
2402:5b00:110::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 06:19:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56151 (0xdb57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Mar 3 05:08:32 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69a66cd0-9ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:56:98:9f:99:4e:a2:8b:b5:d7:d0:32:e6:9a:
6e:b4:cd:78:2d:0e:ab:c9:99:b1:ef:00:e2:1d:fc:
10:b0:a2:10:f6:26:95:89:90:e6:f1:a1:3d:39:15:
5c:6a:e3:0e:d3:7b:cb:72:b3:be:8f:c6:4f:1b:a6:
15:b9:85:5b:3b:2d:db:8d:fa:d6:b5:50:57:5a:36:
ec:ce:37:5a:58:7d:0a:57:aa:c3:ad:4f:b5:9d:43:
28:2f:31:99:a7:1d:68:f9:c7:06:e7:7e:55:0c:ba:
47:86:4f:c9:4f:64:9e:5b:19:30:ff:8c:61:9e:f2:
ee:1c:d4:ab:d2:5c:71:0d:a6:51:c4:06:36:3d:dd:
ee:b1:03:19:3c:01:fc:3e:8c:11:cf:60:22:a7:b7:
3f:d4:3d:42:6b:75:66:30:22:64:29:d8:73:3b:fc:
0d:0a:c5:17:15:d6:01:ec:43:25:32:9b:f4:4a:55:
42:a8:b4:48:11:e8:de:54:90:f0:cd:0b:59:b1:aa:
fc:1b:5c:c7:5b:a9:82:81:5a:fc:ab:39:de:05:0b:
69:df:f6:94:58:ab:4d:87:4f:3e:97:51:c6:b9:e1:
cb:03:17:c2:9c:99:ef:90:42:1d:af:30:4e:89:b4:
01:db:ca:13:22:c0:be:39:df:19:eb:91:33:cd:af:
b9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:89:34:89:25:5F:D2:CC:5B:70:67:27:B3:41:F9:61:63:FE:CC:09
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/04709E8E830211F0B38D771CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
14.102.1.0-14.102.3.255
14.102.12.0/23
14.102.15.0/24
14.102.22.0-14.102.27.255
14.102.32.0-14.102.38.255
14.102.40.0-14.102.45.255
14.102.48.0/24
14.102.50.0/24
14.102.56.0/23
14.102.59.0/24
14.102.64.0-14.102.78.255
14.102.80.0-14.102.82.255
14.102.88.0/24
14.102.91.0-14.102.93.255
14.102.95.0-14.102.97.255
14.102.100.0/23
14.102.103.0-14.102.123.255
14.102.125.0-14.102.127.255
43.251.212.0/22
61.14.228.0/24
61.14.231.0/24
103.5.200.0/23
103.59.189.0/24
103.87.101.0-103.87.103.255
103.158.131.0/24
103.160.24.0/24
103.160.72.0/23
103.173.200.0/24
103.175.72.0/23
110.172.130.0-110.172.132.255
110.172.134.0-110.172.136.255
110.172.138.0-110.172.140.255
110.172.147.0/24
110.172.150.0-110.172.162.255
110.172.164.0/24
110.172.166.0-110.172.168.255
110.172.170.0/23
110.172.174.0/23
110.172.177.0-110.172.179.255
110.172.184.0/22
111.235.64.0/22
114.69.228.0/22
114.69.240.0/24
114.69.242.0/23
114.69.248.0/23
114.69.252.0/22
118.91.176.0-118.91.178.255
118.91.189.0/24
118.91.191.0/24
202.89.64.0-202.89.72.255
202.89.74.0/24
202.89.76.0-202.89.78.255
IPv6:
2402:5b00::/44
2402:5b00:20::/44
2402:5b00:40::/44
2402:5b00:b0::/44
2402:5b00:d0::-2402:5b00:ff:ffff:ffff:ffff:ffff:ffff
2402:5b00:110::/44
Signature Algorithm: sha256WithRSAEncryption
a5:25:04:0d:7d:c7:4e:f3:9e:ac:84:5a:0c:53:f4:66:c3:41:
bc:57:17:0a:c3:40:8a:0a:5d:87:33:fa:a5:f4:a8:19:d0:24:
63:3f:db:f8:7f:cc:dd:2b:91:e8:00:e2:59:37:54:c6:c4:7e:
11:b9:8b:10:77:b1:ae:44:a7:2c:b7:1b:4b:00:c5:e3:45:f7:
6a:58:43:79:c5:38:09:ef:f2:a2:ca:b7:6f:80:18:fc:06:3b:
15:c2:54:10:93:54:d8:e9:51:11:70:c8:92:41:90:b8:bf:34:
bc:6e:d6:ba:dc:1a:6d:2a:6b:62:2a:76:53:b8:1d:22:3c:45:
06:9b:14:f4:db:89:bc:5e:07:cd:a4:cb:90:1f:93:80:24:0e:
f5:65:91:37:6f:49:63:bf:ce:3a:c9:03:86:88:c3:7b:f4:f1:
4f:8d:56:55:0a:27:00:13:73:15:71:26:a2:38:d6:94:79:65:
41:0b:59:24:7f:f2:97:bd:b8:86:eb:50:41:f7:03:7a:2a:f8:
b5:1e:72:a5:d0:06:63:52:0e:9e:40:90:68:9d:63:13:3d:90:
79:ba:01:5f:55:39:44:b8:ce:92:c6:e8:de:ea:34:79:3e:8c:
e5:25:bf:b8:b7:e7:40:81:82:5b:1e:44:29:17:8c:7a:51:12:
c0:f1:99:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:58:46 2026 by rpki-client