Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F564540E689711F19D1D01877247A888.roa
File: F564540E689711F19D1D01877247A888.roa (raw, json)
Hash identifier: lSetLypezkL5PleaZjhEbIdCpyP8hRyB8bq36EOi9yA=
Subject key identifier: 6F:E2:28:E4:49:4F:7B:FE:48:B1:41:98:84:F7:E4:67:1B:FA:B4:20
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: ED11
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F564540E689711F19D1D01877247A888.roa
Signing time: Mon 15 Jun 2026 08:55:29 +0000
ROA not before: Mon 15 Jun 2026 08:55:29 +0000
ROA not after: Thu 01 Oct 2026 00:00:00 +0000
asID: 150008
IP address blocks: 14.192.0.0/22 maxlen: 24
36.50.124.0/23 maxlen: 24
43.225.24.0/24 maxlen: 24
43.225.25.0/24 maxlen: 24
43.225.26.0/24 maxlen: 24
43.225.27.0/24 maxlen: 24
43.228.92.0/22 maxlen: 24
43.249.224.0/22 maxlen: 24
45.112.28.0/22 maxlen: 24
45.112.48.0/24 maxlen: 24
45.112.49.0/24 maxlen: 24
45.112.50.0/24 maxlen: 24
45.112.51.0/24 maxlen: 24
45.127.56.0/22 maxlen: 24
45.249.76.0/24 maxlen: 24
45.249.77.0/24 maxlen: 24
45.249.78.0/24 maxlen: 24
45.249.79.0/24 maxlen: 24
49.238.32.0/24 maxlen: 24
49.238.33.0/24 maxlen: 24
49.238.34.0/24 maxlen: 24
49.238.35.0/24 maxlen: 24
49.238.58.0/24 maxlen: 24
49.238.59.0/24 maxlen: 24
103.12.116.0/24 maxlen: 24
103.24.124.0/24 maxlen: 24
103.24.125.0/24 maxlen: 24
103.24.126.0/24 maxlen: 24
103.24.127.0/24 maxlen: 24
103.41.96.0/22 maxlen: 24
103.42.200.0/24 maxlen: 24
103.42.201.0/24 maxlen: 24
103.44.0.0/24 maxlen: 24
103.44.1.0/24 maxlen: 24
103.44.2.0/24 maxlen: 24
103.69.28.0/23 maxlen: 24
103.70.129.0/24 maxlen: 24
103.70.130.0/24 maxlen: 24
103.95.173.0/24 maxlen: 24
103.99.108.0/24 maxlen: 24
103.99.109.0/24 maxlen: 24
103.99.110.0/24 maxlen: 24
103.99.111.0/24 maxlen: 24
103.102.18.0/23 maxlen: 24
103.105.101.0/24 maxlen: 24
103.105.103.0/24 maxlen: 24
103.117.36.0/23 maxlen: 24
103.122.61.0/24 maxlen: 24
103.154.206.0/24 maxlen: 24
103.157.12.0/23 maxlen: 24
103.159.250.0/23 maxlen: 24
103.161.243.0/24 maxlen: 24
103.162.128.0/23 maxlen: 24
103.164.200.0/23 maxlen: 24
103.168.82.0/23 maxlen: 24
103.171.190.0/24 maxlen: 24
103.171.191.0/24 maxlen: 24
103.172.4.0/23 maxlen: 24
103.172.202.0/23 maxlen: 24
103.174.80.0/23 maxlen: 24
103.174.160.0/23 maxlen: 24
103.183.202.0/24 maxlen: 24
103.183.203.0/24 maxlen: 24
103.186.254.0/23 maxlen: 24
103.204.35.0/24 maxlen: 24
103.206.104.0/22 maxlen: 24
103.213.202.0/23 maxlen: 24
103.217.236.0/24 maxlen: 24
103.217.237.0/24 maxlen: 24
103.217.238.0/24 maxlen: 24
103.217.239.0/24 maxlen: 24
103.220.234.0/23 maxlen: 24
103.233.73.0/24 maxlen: 24
103.236.193.0/24 maxlen: 24
103.239.36.0/24 maxlen: 24
103.239.37.0/24 maxlen: 24
103.239.38.0/24 maxlen: 24
103.239.39.0/24 maxlen: 24
103.248.208.0/22 maxlen: 24
103.252.144.0/22 maxlen: 24
103.255.144.0/22 maxlen: 24
106.0.36.0/23 maxlen: 24
182.18.177.0/24 maxlen: 24
202.63.121.0/24 maxlen: 24
202.63.122.0/24 maxlen: 24
202.63.123.0/24 maxlen: 24
202.65.129.0/24 maxlen: 24
202.65.130.0/24 maxlen: 24
202.65.133.0/24 maxlen: 24
202.65.134.0/24 maxlen: 24
202.65.138.0/24 maxlen: 24
202.65.142.0/24 maxlen: 24
202.65.144.0/24 maxlen: 24
202.65.147.0/24 maxlen: 24
202.65.148.0/24 maxlen: 24
202.65.154.0/24 maxlen: 24
202.65.155.0/24 maxlen: 24
202.65.158.0/24 maxlen: 24
202.65.159.0/24 maxlen: 24
2001:df7:bd80::/48 maxlen: 48
2400:3b01::/32 maxlen: 40
2400:3b01::/48 maxlen: 48
2400:3b01:5::/48 maxlen: 48
2400:3b01:6::/48 maxlen: 48
2400:3b01:7::/48 maxlen: 48
2400:3b01:8::/48 maxlen: 48
2400:3b01:9::/48 maxlen: 48
2400:3b01:a::/48 maxlen: 48
2400:3b01:b::/48 maxlen: 48
2400:3b01:c::/48 maxlen: 48
2400:3b01:d::/48 maxlen: 48
2400:3b01:e::/48 maxlen: 48
2400:3b01:f::/48 maxlen: 48
2400:3b01:10::/48 maxlen: 48
2400:3b01:11::/48 maxlen: 48
2400:3b01:12::/48 maxlen: 48
2400:3b01:13::/48 maxlen: 48
2400:3b01:14::/48 maxlen: 48
2400:3b01:15::/48 maxlen: 48
2400:3b01:16::/48 maxlen: 48
2400:3b01:17::/48 maxlen: 48
2400:3b01:18::/48 maxlen: 48
2400:3b01:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 30 Jun 2026 13:13:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60689 (0xed11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jun 15 08:55:29 2026 GMT
Not After : Oct 1 00:00:00 2026 GMT
Subject: CN=6a2fbe01-3b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:fa:f1:4b:e2:3f:e8:7a:c1:36:d9:96:a6:30:
75:b0:ae:48:e5:26:11:78:ac:c0:89:25:6f:f8:24:
2e:98:94:76:57:d6:25:f3:6c:b6:b7:97:e0:b7:70:
a0:44:61:f6:64:da:38:44:35:40:89:c4:0a:31:5e:
00:d7:da:01:72:7c:eb:88:99:b1:ca:81:a7:bf:38:
28:41:91:9c:52:44:ae:1e:ba:8e:76:18:39:ec:50:
d1:fb:7b:86:cc:f8:c1:be:15:69:c6:95:a7:51:cf:
fc:b9:2b:ad:2a:b0:0d:b4:27:94:a3:e0:6c:5c:78:
e5:e4:b4:e2:de:35:cd:b8:e3:b0:1f:0a:e3:fd:71:
22:96:77:cb:cf:bd:ea:19:a0:4a:42:54:0f:60:9a:
fa:13:3f:f4:37:c0:1f:b0:ac:ec:c6:db:38:3e:b4:
5e:28:22:a8:ed:0f:92:61:5a:1a:24:96:0d:6f:fe:
12:bd:fe:1d:e0:21:12:ad:65:e9:60:f6:9d:d7:60:
9f:f8:fd:74:d5:cd:70:f0:2a:73:2c:b1:5f:c6:f6:
e6:45:10:99:60:29:74:c0:cc:8a:b0:d0:ba:f6:18:
e4:5c:4e:d7:80:0a:70:fd:9a:b1:08:f9:22:a8:4a:
fa:1b:65:a5:34:16:c9:6a:ec:29:96:07:05:9d:d9:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E2:28:E4:49:4F:7B:FE:48:B1:41:98:84:F7:E4:67:1B:FA:B4:20
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F564540E689711F19D1D01877247A888.roa
sbgp-ipAddrBlock: critical
IPv4:
14.192.0.0/22
36.50.124.0/23
43.225.24.0/22
43.228.92.0/22
43.249.224.0/22
45.112.28.0/22
45.112.48.0/22
45.127.56.0/22
45.249.76.0/22
49.238.32.0/22
49.238.58.0/23
103.12.116.0/24
103.24.124.0/22
103.41.96.0/22
103.42.200.0/23
103.44.0.0-103.44.2.255
103.69.28.0/23
103.70.129.0-103.70.130.255
103.95.173.0/24
103.99.108.0/22
103.102.18.0/23
103.105.101.0/24
103.105.103.0/24
103.117.36.0/23
103.122.61.0/24
103.154.206.0/24
103.157.12.0/23
103.159.250.0/23
103.161.243.0/24
103.162.128.0/23
103.164.200.0/23
103.168.82.0/23
103.171.190.0/23
103.172.4.0/23
103.172.202.0/23
103.174.80.0/23
103.174.160.0/23
103.183.202.0/23
103.186.254.0/23
103.204.35.0/24
103.206.104.0/22
103.213.202.0/23
103.217.236.0/22
103.220.234.0/23
103.233.73.0/24
103.236.193.0/24
103.239.36.0/22
103.248.208.0/22
103.252.144.0/22
103.255.144.0/22
106.0.36.0/23
182.18.177.0/24
202.63.121.0-202.63.123.255
202.65.129.0-202.65.130.255
202.65.133.0-202.65.134.255
202.65.138.0/24
202.65.142.0/24
202.65.144.0/24
202.65.147.0-202.65.148.255
202.65.154.0/23
202.65.158.0/23
IPv6:
2001:df7:bd80::/48
2400:3b01::/32
Signature Algorithm: sha256WithRSAEncryption
56:4f:d5:12:c7:8e:28:30:04:5b:41:3e:3e:bb:f0:6c:e8:50:
85:06:40:80:ad:ca:07:ea:49:c2:9f:8b:17:40:5f:32:c0:8f:
9c:e7:35:06:dc:bc:19:5e:ba:3f:22:e4:9a:0b:bb:03:4f:78:
08:0d:1e:e6:6d:48:25:e3:c9:59:ed:c2:a3:07:ea:d8:9e:1e:
97:58:f8:50:d4:4b:b1:a6:8e:04:cd:e5:5a:f4:5a:25:60:53:
66:ef:ed:de:29:9e:d3:a7:83:b0:ef:25:b9:33:2b:b9:99:a0:
1d:bc:a2:d7:f2:0f:bb:ba:38:c2:e5:4f:66:86:05:6f:88:b7:
df:12:97:14:f2:ae:8d:2f:78:19:a3:7d:e9:88:b8:55:16:15:
18:04:9c:b5:e6:9a:6f:14:d9:0e:49:b6:9e:83:22:2e:34:a1:
5f:b0:73:e9:36:36:4d:f1:e4:12:31:a1:b9:3f:c1:14:ea:ed:
12:b3:29:b9:f5:ea:a0:60:c6:2f:54:2c:1e:09:5e:40:b9:bc:
b2:fe:69:4c:6b:58:65:fa:41:4b:5f:6c:fa:bf:36:8c:eb:5d:
16:32:cd:05:4b:04:4a:b1:d8:b3:9e:fd:76:07:96:f5:e3:9e:
fc:88:c3:19:be:83:0f:42:87:0e:07:90:02:f4:0b:aa:ae:15:
49:f6:87:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 00:10:44 2026 by rpki-client