Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3790507E121E11F1BBA0F6E81C3D8C67.roa
File: 3790507E121E11F1BBA0F6E81C3D8C67.roa (raw, json)
Hash identifier: 49KsDl6KQGj/WNCDtD4nzzUJ0wQSQ+3XjQooW+cjBUE=
Subject key identifier: 39:90:87:0E:2D:44:0D:5A:DF:68:13:DB:B0:B6:79:BE:00:C3:30:79
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EBED
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3790507E121E11F1BBA0F6E81C3D8C67.roa
Signing time: Tue 02 Jun 2026 09:27:29 +0000
ROA not before: Tue 02 Jun 2026 09:27:29 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 55352
IP address blocks: 36.255.180.0/22 maxlen: 22
36.255.180.0/24 maxlen: 24
36.255.181.0/24 maxlen: 24
36.255.182.0/24 maxlen: 24
36.255.183.0/24 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.231.132.0/22 maxlen: 24
43.231.212.0/22 maxlen: 24
43.231.236.0/22 maxlen: 24
43.231.252.0/22 maxlen: 24
43.247.136.0/22 maxlen: 24
45.112.8.0/22 maxlen: 24
45.114.80.0/22 maxlen: 24
45.115.56.0/24 maxlen: 24
45.115.57.0/24 maxlen: 24
45.115.58.0/24 maxlen: 24
45.115.59.0/24 maxlen: 24
45.117.108.0/22 maxlen: 24
45.251.12.0/24 maxlen: 24
45.251.13.0/24 maxlen: 24
45.251.14.0/24 maxlen: 24
45.251.15.0/24 maxlen: 24
59.152.56.0/22 maxlen: 22
59.152.56.0/24 maxlen: 24
59.152.57.0/24 maxlen: 24
59.152.58.0/24 maxlen: 24
59.152.59.0/24 maxlen: 24
59.153.0.0/22 maxlen: 24
59.153.120.0/22 maxlen: 24
103.8.164.0/22 maxlen: 24
103.29.156.0/22 maxlen: 24
103.36.26.0/24 maxlen: 24
103.36.27.0/24 maxlen: 24
103.57.172.0/22 maxlen: 22
103.57.172.0/24 maxlen: 24
103.57.173.0/24 maxlen: 24
103.57.174.0/24 maxlen: 24
103.57.175.0/24 maxlen: 24
103.60.208.0/22 maxlen: 24
103.75.60.0/23 maxlen: 24
103.83.216.0/22 maxlen: 22
103.83.216.0/24 maxlen: 24
103.83.217.0/24 maxlen: 24
103.83.218.0/24 maxlen: 24
103.83.219.0/24 maxlen: 24
103.102.92.0/22 maxlen: 24
103.114.0.0/22 maxlen: 24
103.119.188.0/22 maxlen: 24
103.131.184.0/22 maxlen: 22
103.131.184.0/24 maxlen: 24
103.131.185.0/24 maxlen: 24
103.131.186.0/24 maxlen: 24
103.131.187.0/24 maxlen: 24
103.136.174.0/24 maxlen: 24
103.148.138.0/24 maxlen: 24
103.148.139.0/24 maxlen: 24
103.155.212.0/23 maxlen: 24
103.156.212.0/23 maxlen: 24
103.163.194.0/23 maxlen: 24
103.169.164.0/24 maxlen: 24
103.169.165.0/24 maxlen: 24
103.176.240.0/23 maxlen: 24
103.179.212.0/23 maxlen: 24
103.181.86.0/24 maxlen: 24
103.183.54.0/23 maxlen: 24
103.197.224.0/22 maxlen: 24
103.198.164.0/22 maxlen: 24
103.200.100.0/22 maxlen: 22
103.200.100.0/24 maxlen: 24
103.200.101.0/24 maxlen: 24
103.200.102.0/24 maxlen: 24
103.200.103.0/24 maxlen: 24
103.200.104.0/22 maxlen: 24
103.200.212.0/22 maxlen: 22
103.200.212.0/24 maxlen: 24
103.200.213.0/24 maxlen: 24
103.200.214.0/24 maxlen: 24
103.200.215.0/24 maxlen: 24
103.204.160.0/22 maxlen: 24
103.205.172.0/22 maxlen: 22
103.205.172.0/24 maxlen: 24
103.205.173.0/24 maxlen: 24
103.205.174.0/24 maxlen: 24
103.205.175.0/24 maxlen: 24
103.220.40.0/22 maxlen: 24
103.221.248.0/22 maxlen: 24
103.226.140.0/22 maxlen: 24
103.226.144.0/22 maxlen: 24
103.226.188.0/22 maxlen: 24
103.226.204.0/22 maxlen: 24
103.226.236.0/22 maxlen: 24
103.226.240.0/22 maxlen: 24
103.234.212.0/22 maxlen: 22
103.234.212.0/24 maxlen: 24
103.234.213.0/24 maxlen: 24
103.234.214.0/24 maxlen: 24
103.234.215.0/24 maxlen: 24
103.234.240.0/22 maxlen: 22
103.234.240.0/24 maxlen: 24
103.234.241.0/24 maxlen: 24
103.234.242.0/24 maxlen: 24
103.234.243.0/24 maxlen: 24
111.125.217.0/24 maxlen: 24
111.125.218.0/23 maxlen: 24
111.125.224.0/24 maxlen: 24
111.125.226.0/24 maxlen: 24
111.125.228.0/24 maxlen: 24
111.125.233.0/24 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
111.125.252.0/22 maxlen: 24
124.66.172.0/22 maxlen: 24
175.100.176.0/20 maxlen: 24
202.168.144.0/22 maxlen: 24
2001:df6:fb80::/48 maxlen: 48
2406:9e00:20::/48 maxlen: 48
2406:9e00:21::/48 maxlen: 48
2406:9e00:22::/48 maxlen: 48
2406:9e00:23::/48 maxlen: 48
2406:9e00:24::/48 maxlen: 48
2406:9e00:25::/48 maxlen: 48
2406:9e00:26::/48 maxlen: 48
2406:9e00:27::/48 maxlen: 48
2406:9e00:28::/48 maxlen: 48
2406:9e00:29::/48 maxlen: 48
2406:9e00:2a::/48 maxlen: 48
2406:9e00:2b::/48 maxlen: 48
2406:9e00:2c::/48 maxlen: 48
2406:9e00:2d::/48 maxlen: 48
2406:9e00:2e::/48 maxlen: 48
2406:9e00:2f::/48 maxlen: 48
2406:9e00:30::/48 maxlen: 48
2406:9e00:31::/48 maxlen: 48
2406:9e00:32::/48 maxlen: 48
2406:9e00:33::/48 maxlen: 48
2406:9e00:34::/48 maxlen: 48
2406:9e00:35::/48 maxlen: 48
2406:9e00:36::/48 maxlen: 48
2406:9e00:37::/48 maxlen: 48
2406:9e00:38::/48 maxlen: 48
2406:9e00:39::/48 maxlen: 48
2406:9e00:3a::/48 maxlen: 48
2406:9e00:3b::/48 maxlen: 48
2406:9e00:3c::/48 maxlen: 48
2406:9e00:3d::/48 maxlen: 48
2406:9e00:3e::/48 maxlen: 48
2406:9e00:3f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60397 (0xebed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 2 09:27:29 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1ea200-9392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:df:96:fa:d1:b0:e1:39:87:1e:b9:1e:42:5f:
c8:ed:78:63:aa:ba:a4:eb:23:d0:83:4a:00:f1:ca:
32:63:b3:3b:1c:22:10:f1:37:7c:a3:f3:7a:2c:fb:
bb:54:44:3c:75:62:c3:1a:b8:3f:9d:48:6e:8b:43:
ef:b5:ba:46:aa:ae:74:e5:54:4f:83:b0:d2:d7:f3:
8e:ec:12:af:d4:a4:f0:b2:77:1b:33:58:a2:76:7a:
a1:e4:e6:9d:69:a4:e0:53:69:69:d7:30:de:79:6a:
2c:8c:15:d4:ec:56:fc:49:6f:3e:8c:05:b9:05:05:
d8:6a:98:7d:9f:f4:54:3e:29:c3:66:b7:cd:52:86:
df:59:f0:1d:d1:7d:f9:c1:c3:f4:a6:af:cc:4d:6b:
52:ca:f6:b2:44:99:41:d5:bf:52:da:4a:55:05:1b:
84:7b:a3:26:4f:55:f7:bd:7f:00:a4:94:24:56:c3:
31:7f:e1:05:2d:94:d7:31:06:ec:6d:17:46:ca:81:
f0:d4:d8:d6:b4:dd:8a:2b:33:20:1e:70:72:38:f8:
bb:36:2b:41:0c:f4:fa:96:e1:ed:a3:cf:b3:ad:aa:
c0:72:90:67:56:15:1c:6d:b3:2f:81:d9:a0:95:1d:
29:b6:5b:5e:35:42:d5:0c:31:32:77:f4:20:f6:a3:
44:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:90:87:0E:2D:44:0D:5A:DF:68:13:DB:B0:B6:79:BE:00:C3:30:79
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/3790507E121E11F1BBA0F6E81C3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.180.0-36.255.187.255
43.231.132.0/22
43.231.212.0/22
43.231.236.0/22
43.231.252.0/22
43.247.136.0/22
45.112.8.0/22
45.114.80.0/22
45.115.56.0/22
45.117.108.0/22
45.251.12.0/22
59.152.56.0/22
59.153.0.0/22
59.153.120.0/22
103.8.164.0/22
103.29.156.0/22
103.36.26.0/23
103.57.172.0/22
103.60.208.0/22
103.75.60.0/23
103.83.216.0/22
103.102.92.0/22
103.114.0.0/22
103.119.188.0/22
103.131.184.0/22
103.136.174.0/24
103.148.138.0/23
103.155.212.0/23
103.156.212.0/23
103.163.194.0/23
103.169.164.0/23
103.176.240.0/23
103.179.212.0/23
103.181.86.0/24
103.183.54.0/23
103.197.224.0/22
103.198.164.0/22
103.200.100.0-103.200.107.255
103.200.212.0/22
103.204.160.0/22
103.205.172.0/22
103.220.40.0/22
103.221.248.0/22
103.226.140.0-103.226.147.255
103.226.188.0/22
103.226.204.0/22
103.226.236.0-103.226.243.255
103.234.212.0/22
103.234.240.0/22
111.125.217.0-111.125.219.255
111.125.224.0/24
111.125.226.0/24
111.125.228.0/24
111.125.233.0/24
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
111.125.252.0/22
124.66.172.0/22
175.100.176.0/20
202.168.144.0/22
IPv6:
2001:df6:fb80::/48
2406:9e00:20::/43
Signature Algorithm: sha256WithRSAEncryption
6e:25:d9:68:db:44:ac:37:15:96:6f:d6:d4:c8:7c:fb:fe:2a:
5a:84:8e:77:59:09:47:a6:f6:fa:7b:9f:49:8a:7f:82:6f:c5:
72:2a:8d:5e:34:d5:c1:6b:16:bf:c5:e5:d3:aa:60:ce:dc:33:
44:38:8f:f5:02:69:fb:0c:c9:7a:71:9d:9a:e0:a1:7c:6e:26:
9a:94:07:a8:e3:e5:c6:61:17:1b:c8:39:16:f6:8b:27:65:cf:
04:a2:63:30:75:2e:88:a0:5a:a4:bc:7c:2b:83:45:ed:41:c9:
5f:b9:a8:13:d9:4c:2e:3f:ae:f8:da:d3:01:9d:f7:14:23:d1:
d8:b3:23:0f:74:ab:b1:53:28:4a:01:ec:ce:2d:e8:1c:a4:0b:
43:0c:5e:2c:13:58:97:a1:20:0a:e6:75:0e:05:07:4d:bb:2e:
a0:fd:b0:7d:65:c4:e1:e7:18:77:fe:06:c9:82:c6:5d:28:5d:
33:9c:e2:ed:e5:84:6c:09:e5:b1:01:7b:55:f7:56:bc:52:3e:
f9:a8:d8:6d:18:38:fc:05:d7:46:bb:93:37:53:93:cb:e7:a6:
23:42:f8:94:80:d1:f0:ad:c7:59:a3:ec:31:fc:f3:0c:f5:db:
be:92:b6:64:01:ad:16:ee:0c:5e:c7:17:21:a0:7b:04:98:b9:
87:99:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 10:08:03 2026 by rpki-client