Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB54C8CC332211F1919187EAB5833773.roa
File: EB54C8CC332211F1919187EAB5833773.roa (raw, json)
Hash identifier: CR6Ou7MDv6hLCwLlCO1R+Tue2yj8dM1EMedY9Ia1wUs=
Subject key identifier: C8:BC:20:CC:2A:E4:66:18:89:EB:54:A3:2D:64:D7:FB:EB:35:7F:47
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: EB2C
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB54C8CC332211F1919187EAB5833773.roa
Signing time: Sun 31 May 2026 17:50:05 +0000
ROA not before: Sun 31 May 2026 17:50:05 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 24186
IP address blocks: 27.0.216.0/22 maxlen: 22
27.0.216.0/24 maxlen: 24
27.0.217.0/24 maxlen: 24
27.0.218.0/24 maxlen: 24
27.0.219.0/24 maxlen: 24
27.0.220.0/22 maxlen: 22
27.0.220.0/24 maxlen: 24
27.0.221.0/24 maxlen: 24
27.0.222.0/24 maxlen: 24
27.0.223.0/24 maxlen: 24
27.0.244.0/22 maxlen: 22
27.0.244.0/24 maxlen: 24
27.0.245.0/24 maxlen: 24
27.0.246.0/24 maxlen: 24
27.0.247.0/24 maxlen: 24
27.0.248.0/22 maxlen: 22
27.0.248.0/24 maxlen: 24
27.0.249.0/24 maxlen: 24
27.0.250.0/24 maxlen: 24
27.0.251.0/24 maxlen: 24
27.111.72.0/22 maxlen: 24
27.112.120.0/22 maxlen: 24
27.116.40.0/22 maxlen: 24
27.122.60.0/22 maxlen: 24
36.255.4.0/22 maxlen: 22
36.255.4.0/24 maxlen: 24
36.255.5.0/24 maxlen: 24
36.255.6.0/24 maxlen: 24
36.255.7.0/24 maxlen: 24
36.255.12.0/22 maxlen: 24
36.255.16.0/22 maxlen: 24
36.255.20.0/22 maxlen: 24
45.115.88.0/22 maxlen: 24
45.121.0.0/22 maxlen: 24
61.14.230.0/24 maxlen: 24
103.15.252.0/22 maxlen: 24
103.28.244.0/22 maxlen: 24
103.30.64.0/22 maxlen: 24
103.30.116.0/22 maxlen: 24
103.30.176.0/22 maxlen: 24
103.55.72.0/22 maxlen: 24
103.61.72.0/22 maxlen: 24
103.66.72.0/22 maxlen: 24
103.74.108.0/22 maxlen: 24
103.76.208.0/22 maxlen: 22
103.76.208.0/24 maxlen: 24
103.76.209.0/24 maxlen: 24
103.76.210.0/24 maxlen: 24
103.76.211.0/24 maxlen: 24
103.82.80.0/22 maxlen: 24
103.87.100.0/24 maxlen: 24
103.127.140.0/22 maxlen: 24
103.176.74.0/24 maxlen: 24
103.197.112.0/22 maxlen: 24
103.199.180.0/22 maxlen: 24
103.199.188.0/22 maxlen: 24
103.199.200.0/22 maxlen: 24
103.199.204.0/22 maxlen: 24
103.199.208.0/22 maxlen: 24
103.199.212.0/22 maxlen: 24
103.200.84.0/22 maxlen: 24
103.201.134.0/23 maxlen: 24
103.203.72.0/22 maxlen: 24
103.206.144.0/22 maxlen: 22
103.206.144.0/24 maxlen: 24
103.206.145.0/24 maxlen: 24
103.206.146.0/24 maxlen: 24
103.206.147.0/24 maxlen: 24
103.207.124.0/22 maxlen: 22
103.207.124.0/24 maxlen: 24
103.207.125.0/24 maxlen: 24
103.207.126.0/24 maxlen: 24
103.207.127.0/24 maxlen: 24
103.207.224.0/22 maxlen: 24
103.208.104.0/22 maxlen: 22
103.208.104.0/24 maxlen: 24
103.208.105.0/24 maxlen: 24
103.208.106.0/24 maxlen: 24
103.208.107.0/24 maxlen: 24
103.208.108.0/22 maxlen: 22
103.208.144.0/22 maxlen: 22
103.208.144.0/24 maxlen: 24
103.208.145.0/24 maxlen: 24
103.208.146.0/24 maxlen: 24
103.208.147.0/24 maxlen: 24
103.208.156.0/22 maxlen: 22
103.208.156.0/24 maxlen: 24
103.208.157.0/24 maxlen: 24
103.208.158.0/24 maxlen: 24
103.208.159.0/24 maxlen: 24
103.208.172.0/22 maxlen: 24
103.208.228.0/22 maxlen: 24
103.208.232.0/22 maxlen: 24
103.208.236.0/22 maxlen: 22
103.208.236.0/24 maxlen: 24
103.208.237.0/24 maxlen: 24
103.208.238.0/24 maxlen: 24
103.208.239.0/24 maxlen: 24
103.208.240.0/22 maxlen: 24
103.210.88.0/22 maxlen: 24
103.210.92.0/22 maxlen: 24
103.210.100.0/22 maxlen: 24
103.215.240.0/24 maxlen: 24
103.229.0.0/24 maxlen: 24
103.246.40.0/22 maxlen: 24
103.246.192.0/22 maxlen: 24
103.247.4.0/22 maxlen: 24
103.247.52.0/22 maxlen: 24
106.0.40.0/22 maxlen: 22
106.0.40.0/24 maxlen: 24
106.0.41.0/24 maxlen: 24
106.0.42.0/24 maxlen: 24
106.0.43.0/24 maxlen: 24
112.133.192.0/18 maxlen: 24
120.138.12.0/22 maxlen: 24
121.46.92.0/22 maxlen: 22
121.46.92.0/24 maxlen: 24
121.46.93.0/24 maxlen: 24
121.46.94.0/24 maxlen: 24
121.46.95.0/24 maxlen: 24
122.252.224.0/19 maxlen: 24
137.59.92.0/22 maxlen: 24
137.59.156.0/22 maxlen: 22
137.59.156.0/24 maxlen: 24
137.59.157.0/24 maxlen: 24
137.59.158.0/24 maxlen: 24
137.59.159.0/24 maxlen: 24
137.59.164.0/22 maxlen: 22
137.59.164.0/24 maxlen: 24
137.59.165.0/24 maxlen: 24
137.59.166.0/24 maxlen: 24
137.59.167.0/24 maxlen: 24
137.59.176.0/22 maxlen: 22
137.59.176.0/24 maxlen: 24
137.59.177.0/24 maxlen: 24
137.59.178.0/24 maxlen: 24
137.59.179.0/24 maxlen: 24
139.5.0.0/22 maxlen: 24
139.5.4.0/22 maxlen: 24
139.5.8.0/22 maxlen: 24
139.5.12.0/22 maxlen: 22
139.5.12.0/24 maxlen: 24
139.5.13.0/24 maxlen: 24
139.5.14.0/24 maxlen: 24
139.5.15.0/24 maxlen: 24
175.111.188.0/22 maxlen: 22
175.111.188.0/24 maxlen: 24
175.111.189.0/24 maxlen: 24
175.111.190.0/24 maxlen: 24
175.111.191.0/24 maxlen: 24
180.94.32.0/22 maxlen: 24
202.21.40.0/22 maxlen: 24
202.21.44.0/22 maxlen: 24
202.43.120.0/22 maxlen: 24
202.140.128.0/22 maxlen: 24
202.141.0.0/17 maxlen: 24
202.148.56.0/22 maxlen: 24
202.168.84.0/22 maxlen: 24
202.170.200.0/22 maxlen: 24
202.170.204.0/22 maxlen: 24
202.176.0.0/22 maxlen: 24
203.153.32.0/20 maxlen: 20
203.153.32.0/24 maxlen: 24
203.153.33.0/24 maxlen: 24
203.153.34.0/24 maxlen: 24
203.153.35.0/24 maxlen: 24
203.153.36.0/24 maxlen: 24
203.153.37.0/24 maxlen: 24
203.153.38.0/24 maxlen: 24
203.153.39.0/24 maxlen: 24
203.153.40.0/24 maxlen: 24
203.153.41.0/24 maxlen: 24
203.153.42.0/24 maxlen: 24
203.153.43.0/24 maxlen: 24
203.153.44.0/24 maxlen: 24
203.153.45.0/24 maxlen: 24
203.153.46.0/24 maxlen: 24
203.153.47.0/24 maxlen: 24
220.158.156.0/22 maxlen: 24
2401:b200::/32 maxlen: 48
2406:f00:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 06:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60204 (0xeb2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 31 17:50:05 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a1c74cd-e754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ed:53:99:a6:c5:a8:6f:2e:42:da:56:56:f7:
a7:4b:08:ea:4f:b6:b7:9c:cb:69:10:c1:77:a8:24:
80:53:3a:76:c1:4b:a9:5f:1e:ac:52:3a:c8:3d:d2:
e4:24:bf:66:b5:4a:3f:de:4c:a6:7e:fd:dd:f5:2d:
1b:4b:dd:3c:dc:3e:35:cf:52:ce:68:39:14:59:9b:
50:28:a9:0c:39:86:4f:a2:27:53:7f:78:47:b1:a1:
a3:c9:54:53:ca:13:24:1b:68:36:c1:cf:27:b0:72:
aa:30:e5:4e:77:8d:65:c1:4a:ed:7a:a3:32:fa:82:
5a:55:3a:86:28:89:4b:19:87:f0:a5:b8:94:09:91:
a4:93:4d:bb:a5:3a:75:7d:3c:02:b8:83:bb:57:b9:
3d:c4:d7:65:c7:c7:a7:32:e8:de:74:3a:3c:99:d1:
d2:73:9f:4a:16:23:94:76:f4:e0:a8:c8:2b:c6:b8:
23:70:71:b9:bc:21:5c:24:78:73:83:0f:a0:6f:de:
e3:98:bd:f6:4a:a9:d2:4d:1b:24:41:ca:74:69:56:
3e:aa:15:ab:92:d6:3e:c1:9f:22:6b:fc:2a:15:44:
b6:74:20:b4:84:22:3d:f2:8e:d1:c0:60:cb:3b:24:
00:43:89:1b:df:29:e8:f5:58:c8:f9:ed:c1:f0:65:
cb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:BC:20:CC:2A:E4:66:18:89:EB:54:A3:2D:64:D7:FB:EB:35:7F:47
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/EB54C8CC332211F1919187EAB5833773.roa
sbgp-ipAddrBlock: critical
IPv4:
27.0.216.0/21
27.0.244.0-27.0.251.255
27.111.72.0/22
27.112.120.0/22
27.116.40.0/22
27.122.60.0/22
36.255.4.0/22
36.255.12.0-36.255.23.255
45.115.88.0/22
45.121.0.0/22
61.14.230.0/24
103.15.252.0/22
103.28.244.0/22
103.30.64.0/22
103.30.116.0/22
103.30.176.0/22
103.55.72.0/22
103.61.72.0/22
103.66.72.0/22
103.74.108.0/22
103.76.208.0/22
103.82.80.0/22
103.87.100.0/24
103.127.140.0/22
103.176.74.0/24
103.197.112.0/22
103.199.180.0/22
103.199.188.0/22
103.199.200.0-103.199.215.255
103.200.84.0/22
103.201.134.0/23
103.203.72.0/22
103.206.144.0/22
103.207.124.0/22
103.207.224.0/22
103.208.104.0/21
103.208.144.0/22
103.208.156.0/22
103.208.172.0/22
103.208.228.0-103.208.243.255
103.210.88.0/21
103.210.100.0/22
103.215.240.0/24
103.229.0.0/24
103.246.40.0/22
103.246.192.0/22
103.247.4.0/22
103.247.52.0/22
106.0.40.0/22
112.133.192.0/18
120.138.12.0/22
121.46.92.0/22
122.252.224.0/19
137.59.92.0/22
137.59.156.0/22
137.59.164.0/22
137.59.176.0/22
139.5.0.0/20
175.111.188.0/22
180.94.32.0/22
202.21.40.0/21
202.43.120.0/22
202.140.128.0/22
202.141.0.0/17
202.148.56.0/22
202.168.84.0/22
202.170.200.0/21
202.176.0.0/22
203.153.32.0/20
220.158.156.0/22
IPv6:
2401:b200::/32
2406:f00:7::/48
Signature Algorithm: sha256WithRSAEncryption
74:d3:85:e1:b3:b3:e1:67:56:61:19:7e:3b:ce:d8:4b:40:37:
79:f3:e8:94:7b:45:8e:7a:46:4c:30:43:07:55:21:3c:9d:bb:
27:43:37:75:77:1b:c2:b5:a3:c0:24:73:e7:0c:16:fa:f2:e2:
3f:7e:1f:7f:6e:bb:b7:73:e3:3e:4d:3f:64:65:49:ee:0d:4f:
85:18:ca:1d:d3:7c:0e:cb:ca:c5:52:0a:cb:c7:39:6d:1f:15:
1a:f5:99:ea:e8:46:39:e8:60:3a:6f:da:45:2a:bc:36:27:71:
96:60:ea:98:9e:3e:d3:e8:fe:29:fe:69:3b:f5:63:0c:8e:c3:
de:45:50:4c:be:f2:25:a7:d1:97:32:90:e6:0c:f1:a4:28:0e:
b6:19:8f:d1:73:09:66:d6:34:3f:c4:74:86:da:51:25:55:94:
53:ee:c7:fd:23:a1:ce:87:1b:0a:53:bb:57:7c:e2:d8:6b:5b:
93:e8:d7:2d:db:38:ce:28:f0:28:e3:e4:ab:05:0c:c4:90:9a:
b5:be:96:84:ba:64:5c:30:e7:13:03:c4:dd:89:cc:80:94:07:
e3:df:bd:2b:f4:e1:43:62:10:64:61:2c:4f:23:6b:ff:11:cd:
a7:2f:27:7b:ac:2d:80:55:8f:fc:6f:3d:49:b5:d5:9e:c1:25:
3c:cb:f8:1f
-----BEGIN CERTIFICATE-----
MIIHHTCCBgWgAwIBAgIDAOssMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDUzMTE3NTAwNVoXDTI2MTAwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmExYzc0Y2QtZTc1NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAIrtU5mmxahvLkLaVlb3p0sI6k+2t5zLaRDBd6gkgFM6dsFLqV8erFI6yD3S
5CS/ZrVKP95Mpn793fUtG0vdPNw+Nc9Szmg5FFmbUCipDDmGT6InU394R7Gho8lU
U8oTJBtoNsHPJ7ByqjDlTneNZcFK7XqjMvqCWlU6hiiJSxmH8KW4lAmRpJNNu6U6
dX08AriDu1e5PcTXZcfHpzLo3nQ6PJnR0nOfShYjlHb04KjIK8a4I3BxubwhXCR4
c4MPoG/e45i99kqp0k0bJEHKdGlWPqoVq5LWPsGfImv8KhVEtnQgtIQiPfKO0cBg
yzskAEOJG98p6PVYyPntwfBlyxkCAwEAAaOCBEAwggQ8MB0GA1UdDgQWBBTIvCDM
KuRmGInrVKMtZNf76zV/RzAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0VCNTRDOEND
MzMyMjExRjE5MTkxODdFQUI1ODMzNzczLnJvYTCCAf0GCCsGAQUFBwEHAQH/BIIB
7DCCAegwggHMBAIAATCCAcQDBAMbANgwDAMEAhsA9AMEAhsA+AMEAhtvSAMEAhtw
eAMEAht0KAMEAht6PAMEAiT/BDAMAwQCJP8MAwQDJP8QAwQCLXNYAwQCLXkAAwQA
PQ7mAwQCZw/8AwQCZxz0AwQCZx5AAwQCZx50AwQCZx6wAwQCZzdIAwQCZz1IAwQC
Z0JIAwQCZ0psAwQCZ0zQAwQCZ1JQAwQAZ1dkAwQCZ3+MAwQAZ7BKAwQCZ8VwAwQC
Z8e0AwQCZ8e8MAwDBANnx8gDBANnx9ADBAJnyFQDBAFnyYYDBAJny0gDBAJnzpAD
BAJnz3wDBAJnz+ADBANn0GgDBAJn0JADBAJn0JwDBAJn0KwwDAMEAmfQ5AMEAmfQ
8AMEA2fSWAMEAmfSZAMEAGfX8AMEAGflAAMEAmf2KAMEAmf2wAMEAmf3BAMEAmf3
NAMEAmoAKAMEBnCFwAMEAniKDAMEAnkuXAMEBXr84AMEAok7XAMEAok7nAMEAok7
pAMEAok7sAMEBIsFAAMEAq9vvAMEArReIAMEA8oVKAMEAsoreAMEAsqMgAMEB8qN
AAMEAsqUOAMEAsqoVAMEA8qqyAMEAsqwAAMEBMuZIAMEAtyenDAWBAIAAjAQAwUA
JAGyAAMHACQGDwAABzANBgkqhkiG9w0BAQsFAAOCAQEAdNOF4bOz4WdWYRl+O87Y
S0A3efPolHtFjnpGTDBDB1UhPJ27J0M3dXcbwrWjwCRz5wwW+vLiP34ff267t3Pj
Pk0/ZGVJ7g1PhRjKHdN8DsvKxVIKy8c5bR8VGvWZ6uhGOehgOm/aRSq8NidxlmDq
mJ4+0+j+Kf5pO/VjDI7D3kVQTL7yJafRlzKQ5gzxpCgOthmP0XMJZtY0P8R0htpR
JVWUU+7H/SOhzocbClO7V3zi2Gtbk+jXLds4zijwKOPkqwUMxJCatb6WhLpkXDDn
EwPE3YnMgJQH49+9K/ThQ2IQZGEsTyNr/xHNpy8ne6wtgFWP/G89SbXVnsElPMv4
Hw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 09:07:08 2026 by rpki-client