Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FAF62A4A39311F18BE5B59D4011F970.roa
File: 1FAF62A4A39311F18BE5B59D4011F970.roa (raw, json)
Hash identifier: gnCwpc9BDagWoYzMEZAY2a+ToNY3LdrPnJVWer+4Njg=
Subject key identifier: BD:BA:5A:46:C9:B2:D3:60:75:BF:DF:AA:BF:E1:CF:91:12:C7:00:E6
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: FB51
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FAF62A4A39311F18BE5B59D4011F970.roa
Signing time: Sat 29 Aug 2026 10:19:31 +0000
ROA not before: Sat 29 Aug 2026 10:19:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17665
IP address blocks: 36.255.88.0/22 maxlen: 24
43.230.40.0/22 maxlen: 24
45.117.72.0/22 maxlen: 24
45.118.104.0/22 maxlen: 24
59.152.120.0/22 maxlen: 24
103.27.48.0/22 maxlen: 24
103.38.68.0/23 maxlen: 24
103.38.128.0/22 maxlen: 24
103.57.140.0/22 maxlen: 24
103.58.152.0/22 maxlen: 24
103.59.204.0/22 maxlen: 24
103.88.58.0/24 maxlen: 24
103.88.59.0/24 maxlen: 24
103.92.112.0/24 maxlen: 24
103.92.113.0/24 maxlen: 24
103.92.114.0/24 maxlen: 24
103.99.196.0/23 maxlen: 24
103.99.198.0/23 maxlen: 24
103.135.64.0/24 maxlen: 24
103.135.65.0/24 maxlen: 24
103.135.200.0/22 maxlen: 24
103.136.172.0/22 maxlen: 24
103.142.114.0/23 maxlen: 24
103.144.188.0/23 maxlen: 24
103.147.1.0/24 maxlen: 24
103.152.38.0/23 maxlen: 24
103.157.162.0/24 maxlen: 24
103.157.163.0/24 maxlen: 24
103.158.170.0/23 maxlen: 24
103.159.98.0/24 maxlen: 24
103.159.212.0/23 maxlen: 24
103.161.40.0/23 maxlen: 24
103.164.46.0/23 maxlen: 24
103.165.28.0/23 maxlen: 24
103.168.232.0/23 maxlen: 24
103.171.9.0/24 maxlen: 24
103.171.208.0/24 maxlen: 24
103.176.194.0/23 maxlen: 24
103.177.174.0/23 maxlen: 24
103.178.74.0/24 maxlen: 24
103.178.168.0/23 maxlen: 24
103.179.122.0/24 maxlen: 24
103.182.130.0/23 maxlen: 24
103.184.40.0/24 maxlen: 24
103.184.41.0/24 maxlen: 24
103.186.121.0/24 maxlen: 24
103.186.176.0/24 maxlen: 24
103.199.192.0/22 maxlen: 24
103.203.36.0/22 maxlen: 24
103.206.8.0/24 maxlen: 24
103.206.9.0/24 maxlen: 24
103.206.10.0/24 maxlen: 24
103.206.11.0/24 maxlen: 24
103.209.68.0/22 maxlen: 22
103.209.68.0/24 maxlen: 24
103.209.69.0/24 maxlen: 24
103.209.70.0/24 maxlen: 24
103.209.71.0/24 maxlen: 24
103.215.164.0/22 maxlen: 24
103.245.103.0/24 maxlen: 24
111.223.24.0/22 maxlen: 24
157.119.44.0/22 maxlen: 24
162.12.246.0/23 maxlen: 24
202.148.60.0/22 maxlen: 24
203.189.248.0/22 maxlen: 24
203.192.192.0/20 maxlen: 24
203.192.208.0/22 maxlen: 24
203.192.212.0/24 maxlen: 24
203.192.213.0/24 maxlen: 24
203.192.214.0/24 maxlen: 24
203.192.215.0/24 maxlen: 24
203.192.216.0/24 maxlen: 24
203.192.217.0/24 maxlen: 24
203.192.218.0/24 maxlen: 24
203.192.219.0/24 maxlen: 24
203.192.220.0/22 maxlen: 24
203.192.224.0/23 maxlen: 24
203.192.226.0/24 maxlen: 24
203.192.227.0/24 maxlen: 24
203.192.228.0/22 maxlen: 24
203.192.232.0/22 maxlen: 24
203.192.236.0/24 maxlen: 24
203.192.237.0/24 maxlen: 24
203.192.238.0/23 maxlen: 24
203.192.240.0/20 maxlen: 20
203.192.240.0/24 maxlen: 24
203.192.241.0/24 maxlen: 24
203.192.242.0/24 maxlen: 24
203.192.243.0/24 maxlen: 24
203.192.244.0/24 maxlen: 24
203.192.245.0/24 maxlen: 24
203.192.246.0/24 maxlen: 24
203.192.247.0/24 maxlen: 24
203.192.248.0/24 maxlen: 24
203.192.249.0/24 maxlen: 24
203.192.250.0/24 maxlen: 24
203.192.251.0/24 maxlen: 24
203.192.252.0/24 maxlen: 24
203.192.253.0/24 maxlen: 24
203.192.254.0/24 maxlen: 24
203.192.255.0/24 maxlen: 24
203.194.96.0/24 maxlen: 24
203.194.97.0/24 maxlen: 24
203.194.98.0/24 maxlen: 24
203.194.99.0/24 maxlen: 24
203.194.100.0/24 maxlen: 24
203.194.101.0/24 maxlen: 24
203.194.102.0/24 maxlen: 24
203.194.103.0/24 maxlen: 24
203.194.104.0/24 maxlen: 24
203.194.105.0/24 maxlen: 24
203.194.106.0/24 maxlen: 24
203.194.107.0/24 maxlen: 24
203.194.108.0/24 maxlen: 24
203.194.109.0/24 maxlen: 24
203.194.110.0/24 maxlen: 24
203.194.111.0/24 maxlen: 24
2001:df1:9980::/48 maxlen: 48
2001:df1:9980:1::/64 maxlen: 64
2001:df1:9980:2::/64 maxlen: 64
2001:df1:9980:3::/64 maxlen: 64
2001:df1:9980:4::/64 maxlen: 64
2001:df1:9980:5::/64 maxlen: 64
2001:df2:4c0::/48 maxlen: 48
2404:ba00::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 15:18:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64337 (0xfb51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Aug 29 10:19:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a92b233-dc2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d7:74:7e:85:a8:9d:97:6a:71:09:de:61:06:
ac:a3:79:9e:65:bb:13:d6:f4:fe:b7:9a:d9:67:a2:
f0:ff:52:9a:03:2b:b3:75:73:c0:69:8c:85:3d:ad:
ee:c8:c2:e7:0f:d3:c8:28:40:00:1e:fe:f2:f9:0d:
a4:e8:07:79:47:36:f4:95:dc:00:e7:70:6d:f9:62:
b4:c2:ac:29:86:02:b2:b6:6d:c3:4e:ae:61:46:05:
4f:8d:f1:07:78:eb:56:0d:2e:3f:58:56:d8:0d:d3:
4d:46:f8:19:e9:71:3e:19:83:d9:0b:65:5c:4d:79:
d1:48:12:6a:e7:da:ba:5e:fa:ad:8d:8f:bb:ad:07:
d6:cf:ab:7b:4c:7e:48:3b:0b:f0:8a:08:cf:b7:dc:
bd:65:d6:40:0a:c0:53:ab:dd:bc:ba:1b:c3:ec:18:
e6:12:f2:ec:ca:6e:12:b5:b8:2e:0f:e0:c6:70:c4:
11:39:73:2f:9f:98:0d:3d:b8:8d:15:7f:88:29:b8:
42:53:b9:cf:03:38:ed:ce:17:df:fb:d6:84:73:ae:
46:47:bb:dd:f0:3f:be:1f:bd:a5:51:7d:5c:2a:ff:
a8:2f:65:af:be:6b:f0:ed:2d:58:83:2a:5b:2a:0b:
ba:d6:68:b6:bc:55:7d:9f:cd:47:02:98:19:5c:a5:
fe:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BA:5A:46:C9:B2:D3:60:75:BF:DF:AA:BF:E1:CF:91:12:C7:00:E6
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/1FAF62A4A39311F18BE5B59D4011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.88.0/22
43.230.40.0/22
45.117.72.0/22
45.118.104.0/22
59.152.120.0/22
103.27.48.0/22
103.38.68.0/23
103.38.128.0/22
103.57.140.0/22
103.58.152.0/22
103.59.204.0/22
103.88.58.0/23
103.92.112.0-103.92.114.255
103.99.196.0/22
103.135.64.0/23
103.135.200.0/22
103.136.172.0/22
103.142.114.0/23
103.144.188.0/23
103.147.1.0/24
103.152.38.0/23
103.157.162.0/23
103.158.170.0/23
103.159.98.0/24
103.159.212.0/23
103.161.40.0/23
103.164.46.0/23
103.165.28.0/23
103.168.232.0/23
103.171.9.0/24
103.171.208.0/24
103.176.194.0/23
103.177.174.0/23
103.178.74.0/24
103.178.168.0/23
103.179.122.0/24
103.182.130.0/23
103.184.40.0/23
103.186.121.0/24
103.186.176.0/24
103.199.192.0/22
103.203.36.0/22
103.206.8.0/22
103.209.68.0/22
103.215.164.0/22
103.245.103.0/24
111.223.24.0/22
157.119.44.0/22
162.12.246.0/23
202.148.60.0/22
203.189.248.0/22
203.192.192.0/18
203.194.96.0/20
IPv6:
2001:df1:9980::/48
2001:df2:4c0::/48
2404:ba00::/32
Signature Algorithm: sha256WithRSAEncryption
19:dd:06:bf:49:3b:c2:37:3e:08:ea:51:b5:a0:3b:54:fe:e3:
98:bb:55:ba:d2:a8:51:4d:47:21:88:8a:9e:ff:44:34:53:dd:
c2:6c:90:79:45:92:67:89:fb:98:d6:a3:fb:5d:05:9f:e6:c1:
4f:16:f6:45:35:b8:f8:a3:44:64:7e:78:da:ef:02:eb:41:9a:
74:66:bf:51:f2:ba:70:24:e5:0d:71:69:03:31:23:f6:5c:a8:
88:11:90:6e:23:82:55:4b:42:5d:78:e5:6f:b0:3d:11:0c:01:
1d:c8:55:41:74:db:33:74:63:5a:e4:d8:6e:d9:95:b3:00:f2:
8c:53:33:c5:0d:00:f0:91:64:98:f1:88:96:96:96:a5:78:9b:
fe:62:02:23:3d:7b:9b:4d:0b:84:47:d0:46:a2:3d:66:dd:df:
39:4a:34:e6:2b:86:7c:c0:fa:7a:11:06:4b:62:d9:8c:d5:b1:
7c:3d:1b:c1:d6:f5:fe:6c:b5:b5:3e:77:14:bc:f6:20:8c:8f:
ff:b5:39:1b:9b:f7:8c:4f:62:5d:fb:22:9d:da:73:b2:16:2c:
70:5e:e7:8c:c7:2e:d5:fd:59:01:2d:4d:de:8e:46:29:53:d6:
2f:af:a3:9b:14:29:b4:77:7c:29:fe:15:6a:8d:02:f0:f9:e0:
da:6b:84:bd
-----BEGIN CERTIFICATE-----
MIIGqDCCBZCgAwIBAgIDAPtRMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDgyOTEwMTkzMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE5MmIyMzMtZGMyZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANXXdH6FqJ2XanEJ3mEGrKN5nmW7E9b0/rea2Wei8P9SmgMrs3VzwGmMhT2t
7sjC5w/TyChAAB7+8vkNpOgHeUc29JXcAOdwbflitMKsKYYCsrZtw06uYUYFT43x
B3jrVg0uP1hW2A3TTUb4GelxPhmD2QtlXE150UgSaufaul76rY2Pu60H1s+re0x+
SDsL8IoIz7fcvWXWQArAU6vdvLobw+wY5hLy7MpuErW4Lg/gxnDEETlzL5+YDT24
jRV/iCm4QlO5zwM47c4X3/vWhHOuRke73fA/vh+9pVF9XCr/qC9lr75r8O0tWIMq
WyoLutZotrxVfZ/NRwKYGVyl/mECAwEAAaOCA8swggPHMB0GA1UdDgQWBBS9ulpG
ybLTYHW/36q/4c+REscA5jAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzFGQUY2MkE0
QTM5MzExRjE4QkU1QjU5RDQwMTFGOTcwLnJvYTCCAYgGCCsGAQUFBwEHAQH/BIIB
dzCCAXMwggFOBAIAATCCAUYDBAIk/1gDBAIr5igDBAItdUgDBAItdmgDBAI7mHgD
BAJnGzADBAFnJkQDBAJnJoADBAJnOYwDBAJnOpgDBAJnO8wDBAFnWDowDAMEBGdc
cAMEAGdccgMEAmdjxAMEAWeHQAMEAmeHyAMEAmeIrAMEAWeOcgMEAWeQvAMEAGeT
AQMEAWeYJgMEAWedogMEAWeeqgMEAGefYgMEAWef1AMEAWehKAMEAWekLgMEAWel
HAMEAWeo6AMEAGerCQMEAGer0AMEAWewwgMEAWexrgMEAGeySgMEAWeyqAMEAGez
egMEAWe2ggMEAWe4KAMEAGe6eQMEAGe6sAMEAmfHwAMEAmfLJAMEAmfOCAMEAmfR
RAMEAmfXpAMEAGf1ZwMEAm/fGAMEAp13LAMEAaIM9gMEAsqUPAMEAsu9+AMEBsvA
wAMEBMvCYDAfBAIAAjAZAwcAIAEN8ZmAAwcAIAEN8gTAAwUAJAS6ADANBgkqhkiG
9w0BAQsFAAOCAQEAGd0Gv0k7wjc+COpRtaA7VP7jmLtVutKoUU1HIYiKnv9ENFPd
wmyQeUWSZ4n7mNaj+10Fn+bBTxb2RTW4+KNEZH542u8C60GadGa/UfK6cCTlDXFp
AzEj9lyoiBGQbiOCVUtCXXjlb7A9EQwBHchVQXTbM3RjWuTYbtmVswDyjFMzxQ0A
8JFkmPGIlpaWpXib/mICIz17m00LhEfQRqI9Zt3fOUo05iuGfMD6ehEGS2LZjNWx
fD0bwdb1/my1tT53FLz2IIyP/7U5G5v3jE9iXfsindpzshYscF7njMcu1f1ZAS1N
3o5GKVPWL6+jmxQptHd8Kf4Vao0C8Png2muEvQ==
-----END CERTIFICATE-----
Generated at Fri Sep 4 20:31:34 2026 by rpki-client