Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2364A16E976011F18F7625094111F970.roa
File: 2364A16E976011F18F7625094111F970.roa (raw, json)
Hash identifier: C6kxHcDnsimTSH9CPxAQ/qpqIvehwY0PcaQsF3MnCzA=
Subject key identifier: BE:D8:F2:82:FD:EE:8A:33:53:D7:AF:2E:1A:E5:3B:92:BE:81:F6:58
Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial: 1A40
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2364A16E976011F18F7625094111F970.roa
Signing time: Thu 13 Aug 2026 21:44:19 +0000
ROA not before: Thu 13 Aug 2026 21:44:19 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 4826
IP address blocks: 14.137.106.0/24 maxlen: 24
27.106.200.0/22 maxlen: 22
43.241.188.0/22 maxlen: 22
43.252.252.0/22 maxlen: 22
49.255.0.0/16 maxlen: 16
49.255.233.0/24 maxlen: 24
49.255.255.0/24 maxlen: 24
103.37.120.0/24 maxlen: 24
103.233.148.0/22 maxlen: 22
103.255.16.0/22 maxlen: 22
110.5.116.0/22 maxlen: 22
114.31.192.0/20 maxlen: 20
116.212.192.0/18 maxlen: 18
116.212.204.0/24 maxlen: 24
116.212.230.0/23 maxlen: 24
116.212.253.0/24 maxlen: 24
119.161.64.0/19 maxlen: 19
121.54.128.0/19 maxlen: 19
121.54.128.0/20 maxlen: 20
121.54.136.0/24 maxlen: 24
121.54.145.0/24 maxlen: 24
121.79.0.0/17 maxlen: 17
123.103.192.0/19 maxlen: 19
124.254.64.0/18 maxlen: 18
124.254.64.0/24 maxlen: 24
124.254.95.0/24 maxlen: 24
124.254.96.0/24 maxlen: 24
175.45.64.0/18 maxlen: 18
175.45.78.0/24 maxlen: 24
175.45.82.0/24 maxlen: 24
175.45.83.0/24 maxlen: 24
175.45.85.0/24 maxlen: 24
175.45.92.0/24 maxlen: 24
175.45.94.0/23 maxlen: 23
175.45.99.0/24 maxlen: 24
175.45.100.0/24 maxlen: 24
175.45.101.0/24 maxlen: 24
175.45.105.0/24 maxlen: 24
175.45.111.0/24 maxlen: 24
180.148.64.0/19 maxlen: 19
180.148.76.0/24 maxlen: 24
180.148.77.0/24 maxlen: 24
180.148.83.0/24 maxlen: 24
180.148.84.0/24 maxlen: 24
180.148.95.0/24 maxlen: 24
202.62.138.0/24 maxlen: 24
202.62.139.0/24 maxlen: 24
202.62.141.0/24 maxlen: 24
202.62.142.0/24 maxlen: 24
202.62.147.0/24 maxlen: 24
202.62.152.0/24 maxlen: 24
202.62.153.0/24 maxlen: 24
202.62.154.0/24 maxlen: 24
202.62.155.0/24 maxlen: 24
202.80.176.0/20 maxlen: 20
202.89.160.0/19 maxlen: 19
202.136.32.0/20 maxlen: 20
202.137.96.0/20 maxlen: 20
202.137.192.0/21 maxlen: 21
202.174.224.0/19 maxlen: 19
202.189.64.0/20 maxlen: 20
202.189.72.0/24 maxlen: 24
202.189.73.0/24 maxlen: 24
203.12.251.0/24 maxlen: 24
203.16.170.0/24 maxlen: 24
203.18.212.0/23 maxlen: 23
203.23.116.0/24 maxlen: 24
203.28.186.0/24 maxlen: 24
203.29.177.0/24 maxlen: 24
203.55.11.0/24 maxlen: 24
203.55.250.0/24 maxlen: 24
203.89.64.0/19 maxlen: 19
203.89.80.0/24 maxlen: 24
203.89.92.0/24 maxlen: 24
203.92.28.0/22 maxlen: 22
203.129.128.0/19 maxlen: 19
203.153.224.0/19 maxlen: 19
203.153.226.0/24 maxlen: 24
203.161.64.0/18 maxlen: 18
203.188.128.0/19 maxlen: 19
210.50.198.0/24 maxlen: 24
211.26.193.0/24 maxlen: 24
218.100.80.0/22 maxlen: 22
223.27.96.0/21 maxlen: 21
2402:7800::/32 maxlen: 32
2402:7800:ff00::/40 maxlen: 40
2402:7800:ff00::/48 maxlen: 48
2402:7800:ff01::/48 maxlen: 48
2402:7800:ff20::/48 maxlen: 48
2402:7800:ff40::/44 maxlen: 44
2402:7800:ffe0::/48 maxlen: 48
2403:d600::/32 maxlen: 32
2403:fc00:300::/40 maxlen: 40
2404:b000::/32 maxlen: 32
2404:bc00::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 16:47:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6720 (0x1a40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Validity
Not Before: Aug 13 21:44:19 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6a7e3ab3-8a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:d2:b7:c0:9b:56:52:0b:fb:cd:d0:f9:4a:
93:77:86:a5:c8:f5:ef:ff:6f:97:8e:52:c1:8e:4f:
b7:d9:2e:7a:22:bb:69:b5:80:04:c5:7a:18:cb:47:
7e:12:40:77:71:c7:6c:f9:1b:73:63:17:37:0f:6e:
6c:b5:f6:bd:bb:ff:28:fb:e8:22:d9:1d:d4:d3:f4:
3c:58:1c:2c:8f:32:53:ec:b4:4a:95:4d:40:32:41:
e0:72:14:b8:a3:c6:fb:bb:7c:7c:10:5c:e3:16:67:
fc:65:94:20:27:52:bc:ea:a6:9f:7c:b5:2b:37:28:
ea:f3:a3:2c:cc:47:30:b4:ff:f9:53:df:52:1e:1f:
b9:1e:92:df:44:1a:2f:90:c4:51:77:d7:a9:23:2b:
4d:70:e7:a3:3a:52:80:51:61:5d:ba:4d:f1:3a:9d:
18:26:da:46:ee:b7:f2:88:38:25:73:3c:04:60:b6:
85:ab:8d:a6:35:d9:25:22:db:e3:29:ac:33:18:3f:
3d:04:5d:f5:5c:9b:f0:2f:40:90:72:f6:8b:36:a0:
8c:92:7e:48:dd:69:fa:7e:91:35:b6:c1:1c:42:b6:
91:cf:7e:eb:29:c2:90:31:70:4b:1d:e4:b7:49:67:
4f:6f:57:ce:99:6c:d3:43:2b:bd:df:ac:df:b4:a5:
da:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D8:F2:82:FD:EE:8A:33:53:D7:AF:2E:1A:E5:3B:92:BE:81:F6:58
X509v3 Authority Key Identifier:
keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/2364A16E976011F18F7625094111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
14.137.106.0/24
27.106.200.0/22
43.241.188.0/22
43.252.252.0/22
49.255.0.0/16
103.37.120.0/24
103.233.148.0/22
103.255.16.0/22
110.5.116.0/22
114.31.192.0/20
116.212.192.0/18
119.161.64.0/19
121.54.128.0/19
121.79.0.0/17
123.103.192.0/19
124.254.64.0/18
175.45.64.0/18
180.148.64.0/19
202.62.138.0/23
202.62.141.0-202.62.142.255
202.62.147.0/24
202.62.152.0/22
202.80.176.0/20
202.89.160.0/19
202.136.32.0/20
202.137.96.0/20
202.137.192.0/21
202.174.224.0/19
202.189.64.0/20
203.12.251.0/24
203.16.170.0/24
203.18.212.0/23
203.23.116.0/24
203.28.186.0/24
203.29.177.0/24
203.55.11.0/24
203.55.250.0/24
203.89.64.0/19
203.92.28.0/22
203.129.128.0/19
203.153.224.0/19
203.161.64.0/18
203.188.128.0/19
210.50.198.0/24
211.26.193.0/24
218.100.80.0/22
223.27.96.0/21
IPv6:
2402:7800::/32
2403:d600::/32
2403:fc00:300::/40
2404:b000::/32
2404:bc00::/32
Signature Algorithm: sha256WithRSAEncryption
b2:21:c2:d1:f3:7d:8c:cd:58:6a:88:7e:ce:1b:6b:99:a4:41:
dc:7b:8c:e4:e9:8d:aa:3b:bb:ff:49:58:fd:6f:ed:07:08:97:
f0:45:8f:7f:c8:bc:82:b5:2c:a7:a2:35:a9:76:cf:40:05:1c:
57:f7:89:e3:bd:90:02:78:86:de:21:f2:0f:d9:e1:2e:3c:32:
54:28:f3:95:3b:f5:52:37:3a:e8:91:ad:90:da:e4:9d:a4:c1:
7d:e5:0b:73:13:9d:c4:4b:eb:fa:0d:e3:f2:ce:4d:19:f8:15:
2d:6b:0a:c7:5a:6f:bf:cd:fa:8f:c1:fe:24:b0:65:cf:84:fe:
67:cb:a4:df:a5:44:86:9e:0e:f6:3a:39:0a:f4:14:00:a3:97:
6b:03:f9:7a:e6:14:09:d6:ff:9d:de:26:3e:0a:2a:a9:51:ff:
c0:1f:70:f3:75:9d:d4:ee:f5:4e:b2:4c:90:12:e5:5d:b2:48:
61:5b:6e:44:07:07:cd:b2:0a:5e:d0:92:a0:c9:ef:c0:2a:04:
ff:42:33:a2:44:ad:53:b6:14:57:d8:b7:6a:51:76:1b:09:8a:
8a:2e:e0:86:7e:79:f9:d1:f2:7a:e3:2f:d5:7a:4b:6e:89:5c:
9e:d4:80:71:82:7e:8f:36:96:cb:cb:7a:99:60:f4:fa:f1:b3:
2f:c2:a9:9c
-----BEGIN CERTIFICATE-----
MIIGjTCCBXWgAwIBAgICGkAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE
NDc2Q0JEMDAwHhcNMjYwODEzMjE0NDE5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTdlM2FiMy04YTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxbrSt8CbVlIL+83Q+UqTd4alyPXv/2+XjlLBjk+32S56IrtptYAExXoYy0d+
EkB3ccds+RtzYxc3D25stfa9u/8o++gi2R3U0/Q8WBwsjzJT7LRKlU1AMkHgchS4
o8b7u3x8EFzjFmf8ZZQgJ1K86qaffLUrNyjq86MszEcwtP/5U99SHh+5HpLfRBov
kMRRd9epIytNcOejOlKAUWFduk3xOp0YJtpG7rfyiDglczwEYLaFq42mNdklItvj
KawzGD89BF31XJvwL0CQcvaLNqCMkn5I3Wn6fpE1tsEcQraRz37rKcKQMXBLHeS3
SWdPb1fOmWzTQyu936zftKXa+wIDAQABo4IDsTCCA60wHQYDVR0OBBYEFL7Y8oL9
7oozU9evLhrlO5K+gfZYMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1
REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2
UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvMjM2NEExNkU5
NzYwMTFGMThGNzYyNTA5NDExMUY5NzAucm9hMIIBbgYIKwYBBQUHAQcBAf8EggFd
MIIBWTCCASkEAgABMIIBIQMEAA6JagMEAhtqyAMEAivxvAMEAiv8/AMDADH/AwQA
ZyV4AwQCZ+mUAwQCZ/8QAwQCbgV0AwQEch/AAwQGdNTAAwQFd6FAAwQFeTaAAwQH
eU8AAwQFe2fAAwQGfP5AAwQGry1AAwQFtJRAAwQByj6KMAwDBADKPo0DBADKPo4D
BADKPpMDBALKPpgDBATKULADBAXKWaADBATKiCADBATKiWADBAPKicADBAXKruAD
BATKvUADBADLDPsDBADLEKoDBAHLEtQDBADLF3QDBADLHLoDBADLHbEDBADLNwsD
BADLN/oDBAXLWUADBALLXBwDBAXLgYADBAXLmeADBAbLoUADBAXLvIADBADSMsYD
BADTGsEDBALaZFADBAPfG2AwKgQCAAIwJAMFACQCeAADBQAkA9YAAwYAJAP8AAMD
BQAkBLAAAwUAJAS8ADANBgkqhkiG9w0BAQsFAAOCAQEAsiHC0fN9jM1Yaoh+zhtr
maRB3HuM5OmNqju7/0lY/W/tBwiX8EWPf8i8grUsp6I1qXbPQAUcV/eJ472QAniG
3iHyD9nhLjwyVCjzlTv1Ujc66JGtkNrknaTBfeULcxOdxEvr+g3j8s5NGfgVLWsK
x1pvv836j8H+JLBlz4T+Z8uk36VEhp4O9jo5CvQUAKOXawP5euYUCdb/nd4mPgoq
qVH/wB9w83Wd1O71TrJMkBLlXbJIYVtuRAcHzbIKXtCSoMnvwCoE/0IzokStU7YU
V9i3alF2GwmKii7ghn55+dHyeuMv1XpLbolcntSAcYJ+jzaWy8t6mWD0+vGzL8Kp
nA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 02:40:30 2026 by rpki-client