Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFD7765202FC11F0A888CF27C4F9AE02.roa
File: FFD7765202FC11F0A888CF27C4F9AE02.roa (raw, json)
Hash identifier: tMrVBYYaWx1MygqoWXayUfXkqp9ruTT2iXOn2jH5p84=
Subject key identifier: 4F:86:54:43:61:47:12:8E:65:8D:CE:D3:C7:87:5B:C2:C3:BD:47:55
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F752
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFD7765202FC11F0A888CF27C4F9AE02.roa
Signing time: Mon 06 Jul 2026 17:49:44 +0000
ROA not before: Mon 06 Jul 2026 17:49:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24554
IP address blocks: 36.255.108.0/22 maxlen: 24
36.255.180.0/22 maxlen: 24
36.255.184.0/22 maxlen: 22
36.255.184.0/24 maxlen: 24
36.255.185.0/24 maxlen: 24
36.255.186.0/24 maxlen: 24
36.255.187.0/24 maxlen: 24
43.224.172.0/22 maxlen: 24
43.241.116.0/22 maxlen: 24
45.116.44.0/22 maxlen: 24
45.117.48.0/22 maxlen: 22
45.117.48.0/24 maxlen: 24
45.117.49.0/24 maxlen: 24
45.117.50.0/24 maxlen: 24
45.117.51.0/24 maxlen: 24
45.117.108.0/22 maxlen: 24
45.117.148.0/22 maxlen: 22
45.117.148.0/24 maxlen: 24
45.117.149.0/24 maxlen: 24
45.117.150.0/24 maxlen: 24
45.117.151.0/24 maxlen: 24
45.117.248.0/22 maxlen: 22
45.117.248.0/24 maxlen: 24
45.117.249.0/24 maxlen: 24
45.117.250.0/24 maxlen: 24
45.117.251.0/24 maxlen: 24
58.146.96.0/19 maxlen: 24
103.29.208.0/22 maxlen: 24
103.51.208.0/22 maxlen: 24
103.53.60.0/22 maxlen: 22
103.53.60.0/24 maxlen: 24
103.53.61.0/24 maxlen: 24
103.53.62.0/24 maxlen: 24
103.53.63.0/24 maxlen: 24
103.53.232.0/22 maxlen: 22
103.53.232.0/24 maxlen: 24
103.53.233.0/24 maxlen: 24
103.53.234.0/24 maxlen: 24
103.53.235.0/24 maxlen: 24
103.54.104.0/22 maxlen: 24
103.57.172.0/22 maxlen: 24
103.195.76.0/22 maxlen: 24
103.200.100.0/22 maxlen: 24
103.200.212.0/22 maxlen: 24
103.203.60.0/22 maxlen: 24
103.234.212.0/22 maxlen: 22
103.234.212.0/24 maxlen: 24
103.234.213.0/24 maxlen: 24
103.234.214.0/24 maxlen: 24
103.234.215.0/24 maxlen: 24
103.234.240.0/22 maxlen: 24
111.125.236.0/24 maxlen: 24
111.125.241.0/24 maxlen: 24
111.125.242.0/24 maxlen: 24
111.125.249.0/24 maxlen: 24
120.138.0.0/22 maxlen: 24
180.148.32.0/19 maxlen: 24
182.237.128.0/18 maxlen: 24
183.87.0.0/21 maxlen: 22
183.87.0.0/24 maxlen: 24
183.87.1.0/24 maxlen: 24
183.87.2.0/24 maxlen: 24
183.87.3.0/24 maxlen: 24
183.87.4.0/24 maxlen: 24
183.87.5.0/24 maxlen: 24
183.87.6.0/24 maxlen: 24
183.87.7.0/24 maxlen: 24
183.87.8.0/22 maxlen: 22
183.87.8.0/24 maxlen: 24
183.87.9.0/24 maxlen: 24
183.87.10.0/24 maxlen: 24
183.87.11.0/24 maxlen: 24
183.87.16.0/22 maxlen: 22
183.87.16.0/24 maxlen: 24
183.87.17.0/24 maxlen: 24
183.87.18.0/24 maxlen: 24
183.87.19.0/24 maxlen: 24
183.87.20.0/22 maxlen: 22
183.87.20.0/24 maxlen: 24
183.87.21.0/24 maxlen: 24
183.87.22.0/24 maxlen: 24
183.87.23.0/24 maxlen: 24
183.87.24.0/22 maxlen: 22
183.87.24.0/24 maxlen: 24
183.87.25.0/24 maxlen: 24
183.87.26.0/24 maxlen: 24
183.87.27.0/24 maxlen: 24
183.87.28.0/22 maxlen: 22
183.87.28.0/24 maxlen: 24
183.87.29.0/24 maxlen: 24
183.87.30.0/24 maxlen: 24
183.87.31.0/24 maxlen: 24
183.87.224.0/20 maxlen: 24
202.177.224.0/19 maxlen: 19
202.177.224.0/22 maxlen: 22
202.177.224.0/24 maxlen: 24
202.177.225.0/24 maxlen: 24
202.177.226.0/24 maxlen: 24
202.177.227.0/24 maxlen: 24
202.177.228.0/22 maxlen: 22
202.177.228.0/24 maxlen: 24
202.177.229.0/24 maxlen: 24
202.177.230.0/24 maxlen: 24
202.177.231.0/24 maxlen: 24
202.177.232.0/22 maxlen: 22
202.177.232.0/24 maxlen: 24
202.177.233.0/24 maxlen: 24
202.177.234.0/24 maxlen: 24
202.177.235.0/24 maxlen: 24
202.177.236.0/22 maxlen: 22
202.177.236.0/24 maxlen: 24
202.177.237.0/24 maxlen: 24
202.177.238.0/24 maxlen: 24
202.177.239.0/24 maxlen: 24
202.177.240.0/22 maxlen: 22
202.177.240.0/24 maxlen: 24
202.177.241.0/24 maxlen: 24
202.177.242.0/24 maxlen: 24
202.177.243.0/24 maxlen: 24
202.177.244.0/22 maxlen: 22
202.177.244.0/24 maxlen: 24
202.177.245.0/24 maxlen: 24
202.177.246.0/24 maxlen: 24
202.177.247.0/24 maxlen: 24
202.177.248.0/22 maxlen: 22
202.177.248.0/24 maxlen: 24
202.177.249.0/24 maxlen: 24
202.177.250.0/24 maxlen: 24
202.177.251.0/24 maxlen: 24
202.177.252.0/22 maxlen: 22
202.177.252.0/24 maxlen: 24
202.177.253.0/24 maxlen: 24
202.177.254.0/24 maxlen: 24
202.177.255.0/24 maxlen: 24
2402:b00::/32 maxlen: 32
2402:b00::/40 maxlen: 48
2402:b00:100::/40 maxlen: 48
2402:b00:200::/40 maxlen: 48
2402:b00:fffb::/48 maxlen: 48
2402:b00:fffc::/48 maxlen: 48
2402:b00:fffd::/48 maxlen: 48
2402:b00:fffe::/48 maxlen: 48
2402:b00:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63314 (0xf752)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:49:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4beab8-6566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e3:de:7b:7f:0d:c8:0a:81:e4:5e:a3:7c:dd:
1f:e2:ea:86:11:b5:9d:59:59:6e:f7:e1:ec:e8:58:
c1:4a:85:e7:5c:e7:c5:18:1d:c7:f7:5e:a2:46:14:
d4:04:ee:b8:ed:55:e4:f9:21:79:5b:3c:0b:5a:f8:
00:2d:90:c2:5e:31:2a:87:f1:dd:ca:cb:c0:b0:62:
36:97:8e:0b:c0:79:67:99:22:6e:6d:b4:18:14:0d:
d3:d7:9a:f8:db:f9:83:57:7b:d3:01:d5:ed:d8:28:
07:97:11:7c:ce:84:7c:0b:7e:10:a8:e2:26:7f:fa:
6e:20:21:73:46:b4:c3:95:64:4e:71:31:eb:f5:9b:
df:fb:14:ed:a7:ff:af:ec:ae:29:bb:24:b5:20:7d:
46:1c:a9:3a:6a:10:f5:c6:9e:75:01:1d:51:b4:88:
95:90:b2:4a:62:1f:a6:ea:d4:e7:16:a1:13:ea:e9:
20:00:c0:78:96:b0:6c:af:9c:31:17:ef:55:8f:50:
4a:57:ad:78:f7:05:c0:2a:41:4c:fc:48:e0:c2:c0:
95:bd:10:1e:ad:64:da:9b:5e:11:f8:e0:23:05:a1:
1d:bb:1d:6b:b7:20:29:7d:3e:7c:79:b5:57:d9:bb:
2e:60:76:24:68:69:97:9c:fc:05:ad:87:d0:e0:b0:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:86:54:43:61:47:12:8E:65:8D:CE:D3:C7:87:5B:C2:C3:BD:47:55
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/FFD7765202FC11F0A888CF27C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
36.255.108.0/22
36.255.180.0-36.255.187.255
43.224.172.0/22
43.241.116.0/22
45.116.44.0/22
45.117.48.0/22
45.117.108.0/22
45.117.148.0/22
45.117.248.0/22
58.146.96.0/19
103.29.208.0/22
103.51.208.0/22
103.53.60.0/22
103.53.232.0/22
103.54.104.0/22
103.57.172.0/22
103.195.76.0/22
103.200.100.0/22
103.200.212.0/22
103.203.60.0/22
103.234.212.0/22
103.234.240.0/22
111.125.236.0/24
111.125.241.0-111.125.242.255
111.125.249.0/24
120.138.0.0/22
180.148.32.0/19
182.237.128.0/18
183.87.0.0-183.87.11.255
183.87.16.0/20
183.87.224.0/20
202.177.224.0/19
IPv6:
2402:b00::/32
Signature Algorithm: sha256WithRSAEncryption
10:39:b0:b0:fd:41:b4:8c:62:58:05:af:10:70:0d:90:cf:e1:
4a:76:9a:a9:41:32:db:88:a9:a7:71:38:e5:64:91:7e:9c:89:
26:0e:2a:09:e1:ce:56:3a:de:a8:d6:d2:34:61:48:db:4b:7d:
55:bd:3d:92:22:3e:5d:94:6c:c0:88:71:ce:a4:20:64:e2:f1:
37:7f:b7:0a:31:47:3a:c4:e3:e8:5b:31:05:aa:78:10:e4:3b:
b0:ac:54:63:ea:d7:e0:d3:6e:bd:3d:f9:f5:48:df:3f:76:4b:
51:46:6b:91:4a:36:e3:f4:ad:5c:3f:0d:48:32:20:48:9f:eb:
af:00:d2:cd:4a:69:75:58:1a:86:79:a8:35:45:57:5b:6c:d8:
e4:d4:75:2b:ee:a8:4e:6c:1f:13:7f:2a:af:cb:51:af:42:8e:
42:41:cb:3b:18:a9:04:72:b8:86:35:92:61:7c:a4:c1:c9:8b:
36:bb:9f:00:90:32:a2:4b:53:3e:dd:38:ea:d6:dd:ef:69:ee:
21:5d:bb:8c:87:9a:fe:93:38:ad:c3:6b:ec:5f:66:8f:75:58:
03:28:db:31:37:9c:5e:9b:ff:e4:e5:d1:f1:2c:34:ff:31:ef:
e7:3b:e2:a5:6f:79:83:e5:cf:6b:46:f7:41:07:71:97:01:db:
6a:76:cb:79
-----BEGIN CERTIFICATE-----
MIIGIzCCBQugAwIBAgIDAPdSMA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NDk0NFoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmVhYjgtNjU2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJvj3nt/DcgKgeReo3zdH+LqhhG1nVlZbvfh7OhYwUqF51znxRgdx/deokYU
1ATuuO1V5PkheVs8C1r4AC2Qwl4xKofx3crLwLBiNpeOC8B5Z5kibm20GBQN09ea
+Nv5g1d70wHV7dgoB5cRfM6EfAt+EKjiJn/6biAhc0a0w5VkTnEx6/Wb3/sU7af/
r+yuKbsktSB9RhypOmoQ9caedQEdUbSIlZCySmIfpurU5xahE+rpIADAeJawbK+c
MRfvVY9QSletePcFwCpBTPxI4MLAlb0QHq1k2pteEfjgIwWhHbsda7cgKX0+fHm1
V9m7LmB2JGhpl5z8Ba2H0OCwf7UCAwEAAaOCA0YwggNCMB0GA1UdDgQWBBRPhlRD
YUcSjmWNztPHh1vCw71HVTAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0ZGRDc3NjUy
MDJGQzExRjBBODg4Q0YyN0M0RjlBRTAyLnJvYTCCAQMGCCsGAQUFBwEHAQH/BIHz
MIHwMIHeBAIAATCB1wMEAiT/bDAMAwQCJP+0AwQCJP+4AwQCK+CsAwQCK/F0AwQC
LXQsAwQCLXUwAwQCLXVsAwQCLXWUAwQCLXX4AwQFOpJgAwQCZx3QAwQCZzPQAwQC
ZzU8AwQCZzXoAwQCZzZoAwQCZzmsAwQCZ8NMAwQCZ8hkAwQCZ8jUAwQCZ8s8AwQC
Z+rUAwQCZ+rwAwQAb33sMAwDBABvffEDBABvffIDBABvffkDBAJ4igADBAW0lCAD
BAa27YAwCwMDALdXAwQCt1cIAwQEt1cQAwQEt1fgAwQFyrHgMA0EAgACMAcDBQAk
AgsAMA0GCSqGSIb3DQEBCwUAA4IBAQAQObCw/UG0jGJYBa8QcA2Qz+FKdpqpQTLb
iKmncTjlZJF+nIkmDioJ4c5WOt6o1tI0YUjbS31VvT2SIj5dlGzAiHHOpCBk4vE3
f7cKMUc6xOPoWzEFqngQ5DuwrFRj6tfg0269Pfn1SN8/dktRRmuRSjbj9K1cPw1I
MiBIn+uvANLNSml1WBqGeag1RVdbbNjk1HUr7qhObB8Tfyqvy1GvQo5CQcs7GKkE
criGNZJhfKTByYs2u58AkDKiS1M+3Tjq1t3vae4hXbuMh5r+kzitw2vsX2aPdVgD
KNsxN5xem//k5dHxLDT/Me/nO+Klb3mD5c9rRvdBB3GXAdtqdst5
-----END CERTIFICATE-----
Generated at Tue Jul 21 11:12:31 2026 by rpki-client