Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960A0F5C3B0C11F1B3BAF144A1833773.roa
File: 960A0F5C3B0C11F1B3BAF144A1833773.roa (raw, json)
Hash identifier: qOI7b/Rwub7zbGLnLpLv4DSfm2nV7gYsV6oJGtC0jg4=
Subject key identifier: 5A:5C:05:27:0F:D1:DD:E0:75:44:9F:91:0F:37:AF:0B:35:3D:21:05
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: DEAD
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960A0F5C3B0C11F1B3BAF144A1833773.roa
Signing time: Sat 18 Apr 2026 09:54:27 +0000
ROA not before: Sat 18 Apr 2026 09:54:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133275
IP address blocks: 43.228.220.0/22 maxlen: 24
43.248.236.0/22 maxlen: 24
43.249.52.0/22 maxlen: 24
45.115.4.0/22 maxlen: 24
45.119.136.0/22 maxlen: 24
45.119.140.0/22 maxlen: 24
45.125.60.0/22 maxlen: 24
103.36.124.0/22 maxlen: 24
103.46.192.0/23 maxlen: 24
103.46.194.0/23 maxlen: 24
103.47.168.0/22 maxlen: 24
103.47.236.0/22 maxlen: 24
103.59.192.0/22 maxlen: 24
103.59.196.0/22 maxlen: 24
103.86.40.0/22 maxlen: 24
103.95.120.0/22 maxlen: 24
103.124.12.0/22 maxlen: 24
103.146.32.0/23 maxlen: 24
103.152.22.0/24 maxlen: 24
103.153.180.0/23 maxlen: 24
103.173.201.0/24 maxlen: 24
103.176.162.0/23 maxlen: 24
103.182.154.0/23 maxlen: 24
103.193.196.0/22 maxlen: 24
103.196.52.0/22 maxlen: 24
103.197.116.0/22 maxlen: 24
103.207.172.0/22 maxlen: 24
103.208.200.0/22 maxlen: 24
103.215.248.0/22 maxlen: 24
103.216.88.0/22 maxlen: 24
103.243.4.0/24 maxlen: 24
103.248.116.0/22 maxlen: 24
116.204.188.0/22 maxlen: 24
137.59.240.0/22 maxlen: 24
157.119.124.0/22 maxlen: 24
157.119.216.0/24 maxlen: 24
157.119.217.0/24 maxlen: 24
157.119.218.0/24 maxlen: 24
157.119.219.0/24 maxlen: 24
175.111.132.0/22 maxlen: 24
210.16.80.0/22 maxlen: 24
220.158.160.0/22 maxlen: 24
2404:4340::/32 maxlen: 32
2404:4340::/33 maxlen: 33
2404:4340::/48 maxlen: 48
2404:4340:1::/48 maxlen: 48
2404:4340:2::/48 maxlen: 48
2404:4340:3::/48 maxlen: 48
2404:4340:4::/48 maxlen: 48
2404:4340:5::/48 maxlen: 48
2404:4340:6::/48 maxlen: 48
2404:4340:7::/48 maxlen: 48
2404:4340:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 15:18:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 57005 (0xdead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Apr 18 09:54:27 2026 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69e354d3-769e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1c:be:f5:b1:d4:d8:17:11:51:f5:c5:cc:e8:
d3:91:68:5d:10:65:6e:01:14:80:8c:55:77:f6:eb:
59:71:4e:e7:37:d2:6a:9b:91:2c:f0:4d:47:40:2c:
c3:6f:36:ea:0c:c7:49:fc:86:db:02:84:87:3d:fb:
40:57:b0:5f:94:00:08:75:cc:85:1f:c8:d6:c1:00:
05:d0:d8:38:02:fd:a2:01:5b:ef:93:85:48:76:32:
2b:4d:49:ca:45:80:23:c9:f7:cf:66:27:61:6d:fd:
c7:6e:94:ad:2a:73:e8:63:40:74:b1:7e:c6:68:4d:
a6:fd:9d:0f:e6:ea:37:2a:d1:f4:1d:61:44:cc:03:
18:f6:56:db:c7:f7:48:5e:e1:1f:12:8a:c5:cd:3b:
2c:4d:a7:88:e3:68:12:a1:6a:20:69:5d:f4:84:4a:
62:3d:14:e2:2e:14:fc:89:26:e8:e2:2b:0b:98:bd:
89:a9:f9:d9:b8:a5:15:28:00:4b:b0:98:46:29:72:
13:8c:bc:1c:e3:2e:86:47:3a:70:9d:a3:b4:82:34:
07:a6:77:33:32:d4:06:54:15:cc:a9:0a:02:c2:23:
fe:ef:60:55:79:08:63:f3:f5:b4:4a:87:c3:e1:9c:
7a:72:cb:93:f0:84:5f:db:b2:61:7a:92:f2:d2:16:
f3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:5C:05:27:0F:D1:DD:E0:75:44:9F:91:0F:37:AF:0B:35:3D:21:05
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/960A0F5C3B0C11F1B3BAF144A1833773.roa
sbgp-ipAddrBlock: critical
IPv4:
43.228.220.0/22
43.248.236.0/22
43.249.52.0/22
45.115.4.0/22
45.119.136.0/21
45.125.60.0/22
103.36.124.0/22
103.46.192.0/22
103.47.168.0/22
103.47.236.0/22
103.59.192.0/21
103.86.40.0/22
103.95.120.0/22
103.124.12.0/22
103.146.32.0/23
103.152.22.0/24
103.153.180.0/23
103.173.201.0/24
103.176.162.0/23
103.182.154.0/23
103.193.196.0/22
103.196.52.0/22
103.197.116.0/22
103.207.172.0/22
103.208.200.0/22
103.215.248.0/22
103.216.88.0/22
103.243.4.0/24
103.248.116.0/22
116.204.188.0/22
137.59.240.0/22
157.119.124.0/22
157.119.216.0/22
175.111.132.0/22
210.16.80.0/22
220.158.160.0/22
IPv6:
2404:4340::/32
Signature Algorithm: sha256WithRSAEncryption
08:f5:89:36:36:ed:1c:dc:2c:90:40:e2:ae:d4:40:d2:29:01:
93:13:5a:4b:b3:db:93:5e:dc:a4:f1:5b:b8:35:1b:41:91:b3:
ac:6e:22:77:d1:a6:a1:b2:6c:84:2f:1a:9c:07:75:5b:8c:f2:
1d:6a:8c:23:8b:1e:e8:4f:31:a0:1a:66:c8:e5:23:d8:f0:73:
c0:1a:61:4d:34:80:e8:2d:8b:92:9b:c8:ff:02:99:70:a1:f8:
fc:bc:ac:4f:49:3c:e9:a3:ad:bd:2b:23:6d:22:53:82:ac:e8:
8f:bb:ac:bb:ca:dd:d6:cf:12:cb:c3:cd:2c:3c:79:bf:ff:8e:
bc:fc:9c:f6:b7:42:88:f8:bf:b2:64:16:6e:73:aa:9c:da:6b:
f4:99:18:ba:f0:c4:e9:6f:b2:06:d0:cb:e8:28:34:39:49:3a:
85:fc:53:f5:04:f1:97:36:db:e0:ca:f8:aa:93:ad:09:d8:9c:
a0:0c:c8:27:8f:a2:8a:3e:91:96:1f:00:7b:e4:9d:1c:32:24:
58:b6:c1:2f:37:22:79:c1:42:1c:ca:4f:59:bd:fb:f7:19:83:
0e:6a:86:cb:1e:46:ad:5c:ae:6d:b7:92:bd:4a:35:6d:02:5e:
cd:21:9c:ec:83:cd:9f:c2:2e:2f:85:04:92:ce:43:fd:21:14:
cd:d5:62:13
-----BEGIN CERTIFICATE-----
MIIGJDCCBQygAwIBAgIDAN6tMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDQxODA5NTQyN1oXDTI2MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNjllMzU0ZDMtNzY5ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAOEcvvWx1NgXEVH1xczo05FoXRBlbgEUgIxVd/brWXFO5zfSapuRLPBNR0As
w2826gzHSfyG2wKEhz37QFewX5QACHXMhR/I1sEABdDYOAL9ogFb75OFSHYyK01J
ykWAI8n3z2YnYW39x26UrSpz6GNAdLF+xmhNpv2dD+bqNyrR9B1hRMwDGPZW28f3
SF7hHxKKxc07LE2niONoEqFqIGld9IRKYj0U4i4U/Ikm6OIrC5i9ian52bilFSgA
S7CYRilyE4y8HOMuhkc6cJ2jtII0B6Z3MzLUBlQVzKkKAsIj/u9gVXkIY/P1tEqH
w+GcenLLk/CEX9uyYXqS8tIW81ECAwEAAaOCA0cwggNDMB0GA1UdDgQWBBRaXAUn
D9Hd4HVEn5EPN68LNT0hBTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwLzk2MEEwRjVD
M0IwQzExRjFCM0JBRjE0NEExODMzNzczLnJvYTCCAQQGCCsGAQUFBwEHAQH/BIH0
MIHxMIHfBAIAATCB2AMEAivk3AMEAiv47AMEAiv5NAMEAi1zBAMEAy13iAMEAi19
PAMEAmckfAMEAmcuwAMEAmcvqAMEAmcv7AMEA2c7wAMEAmdWKAMEAmdfeAMEAmd8
DAMEAWeSIAMEAGeYFgMEAWeZtAMEAGetyQMEAWewogMEAWe2mgMEAmfBxAMEAmfE
NAMEAmfFdAMEAmfPrAMEAmfQyAMEAmfX+AMEAmfYWAMEAGfzBAMEAmf4dAMEAnTM
vAMEAok78AMEAp13fAMEAp132AMEAq9vhAMEAtIQUAMEAtyeoDANBAIAAjAHAwUA
JARDQDANBgkqhkiG9w0BAQsFAAOCAQEACPWJNjbtHNwskEDirtRA0ikBkxNaS7Pb
k17cpPFbuDUbQZGzrG4id9GmobJshC8anAd1W4zyHWqMI4se6E8xoBpmyOUj2PBz
wBphTTSA6C2LkpvI/wKZcKH4/LysT0k86aOtvSsjbSJTgqzoj7usu8rd1s8Sy8PN
LDx5v/+OvPyc9rdCiPi/smQWbnOqnNpr9JkYuvDE6W+yBtDL6Cg0OUk6hfxT9QTx
lzbb4Mr4qpOtCdicoAzIJ4+iij6Rlh8Ae+SdHDIkWLbBLzciecFCHMpPWb379xmD
DmqGyx5GrVyubbeSvUo1bQJezSGc7IPNn8IuL4UEks5D/SEUzdViEw==
-----END CERTIFICATE-----
Generated at Mon Apr 20 04:58:38 2026 by rpki-client