Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/674B4ED227C811EFAECE0786C4F9AE02.roa
File: 674B4ED227C811EFAECE0786C4F9AE02.roa (raw, json)
Hash identifier: WoLNSG/HyX6la2llIiS4o9MzR2q7bXeNymF7CPRButk=
Subject key identifier: 18:C3:1C:AA:D3:CD:B8:8E:77:5B:1B:93:D0:83:14:50:3B:45:9B:75
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3BFF
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/674B4ED227C811EFAECE0786C4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:11:50 +0000
ROA not before: Mon 06 Jul 2026 15:11:50 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 17552
IP address blocks: 27.145.0.0/16 maxlen: 24
58.8.0.0/16 maxlen: 24
58.9.0.0/16 maxlen: 24
58.10.0.0/16 maxlen: 24
58.11.0.0/16 maxlen: 24
58.97.124.0/24 maxlen: 24
58.97.125.0/24 maxlen: 24
61.90.0.0/17 maxlen: 24
61.91.128.0/21 maxlen: 24
61.91.144.0/21 maxlen: 24
61.91.190.0/24 maxlen: 24
61.91.191.0/24 maxlen: 24
61.91.192.0/24 maxlen: 24
61.91.193.0/24 maxlen: 24
61.91.201.0/24 maxlen: 24
61.91.214.0/24 maxlen: 24
110.168.0.0/17 maxlen: 24
110.168.128.0/17 maxlen: 24
110.169.0.0/16 maxlen: 24
110.171.0.0/17 maxlen: 24
110.171.128.0/17 maxlen: 24
114.109.0.0/16 maxlen: 24
115.87.0.0/16 maxlen: 16
115.87.0.0/17 maxlen: 24
115.87.128.0/17 maxlen: 24
119.46.255.0/24 maxlen: 24
119.76.0.0/16 maxlen: 24
124.120.0.0/16 maxlen: 24
124.121.0.0/16 maxlen: 24
124.122.0.0/16 maxlen: 24
171.96.0.0/16 maxlen: 24
171.97.0.0/16 maxlen: 24
171.98.0.0/16 maxlen: 24
171.99.0.0/16 maxlen: 24
171.100.0.0/16 maxlen: 24
171.101.0.0/16 maxlen: 24
171.102.0.0/16 maxlen: 24
171.103.0.0/16 maxlen: 24
182.17.0.0/16 maxlen: 24
202.133.128.0/20 maxlen: 24
202.133.144.0/20 maxlen: 24
202.133.160.0/19 maxlen: 24
202.176.64.0/18 maxlen: 18
202.176.64.0/19 maxlen: 24
202.176.96.0/19 maxlen: 24
202.176.128.0/18 maxlen: 24
210.213.0.0/18 maxlen: 24
2001:fb0:101::/48 maxlen: 48
2001:fb0:102::/48 maxlen: 48
2001:fb0:1004::/48 maxlen: 48
2001:fb0:1005::/48 maxlen: 48
2001:fb1::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15359 (0x3bff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:11:50 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc5b6-47e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:dc:fd:05:24:9d:75:69:e7:bc:a1:f9:3b:
73:51:f1:fc:3f:20:d2:1a:dd:b8:ed:6f:37:42:31:
dc:c2:48:6f:36:57:ec:fe:e6:7c:6b:8f:f4:f8:f4:
e1:73:e8:b2:cf:04:20:a6:b8:b8:a9:52:35:2b:e4:
88:f6:03:71:a9:63:b8:7b:6e:9f:0b:29:58:42:2b:
dd:d8:ac:63:96:69:62:b1:e7:fe:c4:ba:75:ed:0b:
6c:2c:1c:ae:2c:b4:dd:c2:f2:a6:0b:16:fb:d3:f3:
1f:c8:54:1f:61:ac:0a:5a:d1:69:ba:93:09:30:57:
2b:60:21:67:1a:6f:60:53:69:16:42:45:5a:1c:a1:
9d:d1:6f:f7:47:22:75:ac:f8:ce:7c:72:e0:a5:98:
21:cb:af:43:5c:46:5b:48:e8:06:f6:ef:8e:34:d6:
62:d0:ac:13:49:cc:ad:c9:5e:39:a9:1e:9d:2e:31:
db:ff:f3:b9:4c:b1:f3:0e:33:2e:d4:e5:95:35:b7:
2f:37:70:61:46:6b:5a:f7:3b:18:66:1e:b0:e9:4f:
83:f5:bc:a9:aa:ce:a1:4f:9f:11:b4:5f:09:91:9d:
d4:41:39:08:ad:eb:8f:fd:6d:3d:83:7e:d3:7c:71:
86:a1:5f:40:b6:d7:99:67:3f:f7:30:fa:ff:1d:4b:
d3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C3:1C:AA:D3:CD:B8:8E:77:5B:1B:93:D0:83:14:50:3B:45:9B:75
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/674B4ED227C811EFAECE0786C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.145.0.0/16
58.8.0.0/14
58.97.124.0/23
61.90.0.0/17
61.91.128.0/21
61.91.144.0/21
61.91.190.0-61.91.193.255
61.91.201.0/24
61.91.214.0/24
110.168.0.0/15
110.171.0.0/16
114.109.0.0/16
115.87.0.0/16
119.46.255.0/24
119.76.0.0/16
124.120.0.0-124.122.255.255
171.96.0.0/13
182.17.0.0/16
202.133.128.0/18
202.176.64.0-202.176.191.255
210.213.0.0/18
IPv6:
2001:fb0:101::-2001:fb0:102:ffff:ffff:ffff:ffff:ffff
2001:fb0:1004::/47
2001:fb1::/32
Signature Algorithm: sha256WithRSAEncryption
a3:27:eb:ed:26:64:f7:a2:83:58:f8:98:b8:ce:c0:59:82:95:
94:10:cc:4a:26:3c:df:9d:47:34:5f:05:50:80:76:41:60:a3:
8b:40:c4:78:c0:0a:3c:72:e5:9a:54:82:e8:3d:e1:a0:19:06:
90:be:09:25:17:29:50:da:42:ad:c0:85:10:c6:e7:55:2c:d4:
5e:da:97:38:b7:1a:d7:61:0b:06:22:ce:bc:42:fa:6e:d1:12:
a8:74:0e:9d:9a:d3:8d:49:43:6e:17:88:91:2a:16:52:dd:16:
e1:73:30:6a:ac:1b:5a:1b:8c:56:68:87:ab:fa:82:22:72:e7:
78:90:08:09:1b:df:4c:ee:d9:d8:0f:5a:a5:4f:47:37:c9:54:
d8:05:8b:d6:09:82:85:54:c0:76:f0:c0:a8:37:1e:c9:1d:9e:
a2:48:2f:9a:7c:f9:43:ba:82:cc:28:40:a6:c1:57:3c:be:f0:
4c:8b:02:7e:69:f0:5c:a0:fb:ea:03:e4:f7:a5:09:70:d8:ef:
c1:77:38:d7:ce:2f:70:51:a0:a0:18:2f:ac:dc:fd:3c:65:25:
e7:24:d8:a4:c5:34:25:1a:87:b0:6d:46:59:22:db:9b:d0:be:
51:f8:37:a9:0e:08:c8:d0:4b:71:c0:1e:c0:7e:95:f4:38:47:
87:64:9c:3f
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgICO/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB
NDM3QUYwMkMwHhcNMjYwNzA2MTUxMTUwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTRiYzViNi00N2U1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAu0/c/QUknXVp57yh+TtzUfH8PyDSGt247W83QjHcwkhvNlfs/uZ8a4/0+PTh
c+iyzwQgpri4qVI1K+SI9gNxqWO4e26fCylYQivd2Kxjlmlisef+xLp17QtsLByu
LLTdwvKmCxb70/MfyFQfYawKWtFpupMJMFcrYCFnGm9gU2kWQkVaHKGd0W/3RyJ1
rPjOfHLgpZghy69DXEZbSOgG9u+ONNZi0KwTScytyV45qR6dLjHb//O5TLHzDjMu
1OWVNbcvN3BhRmta9zsYZh6w6U+D9bypqs6hT58RtF8JkZ3UQTkIreuP/W09g37T
fHGGoV9AtteZZz/3MPr/HUvTlQIDAQABo4IDFjCCAxIwHQYDVR0OBBYEFBjDHKrT
zbiOd1sbk9CDFFA7RZt1MB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE
NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4
Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvNjc0QjRFRDIy
N0M4MTFFRkFFQ0UwNzg2QzRGOUFFMDIucm9hMIHUBggrBgEFBQcBBwEB/wSBxDCB
wTCBkgQCAAEwgYsDAwAbkQMDAjoIAwQBOmF8AwQHPVoAAwQDPVuAAwQDPVuQMAwD
BAE9W74DBAE9W8ADBAA9W8kDBAA9W9YDAwFuqAMDAG6rAwMAcm0DAwBzVwMEAHcu
/wMDAHdMMAoDAwN8eAMDAHx6AwMDq2ADAwC2EQMEBsqFgDAMAwQGyrBAAwQGyrCA
AwQG0tUAMCoEAgACMCQwEgMHACABD7ABAQMHACABD7ABAgMHASABD7AQBAMFACAB
D7EwDQYJKoZIhvcNAQELBQADggEBAKMn6+0mZPeig1j4mLjOwFmClZQQzEomPN+d
RzRfBVCAdkFgo4tAxHjACjxy5ZpUgug94aAZBpC+CSUXKVDaQq3AhRDG51Us1F7a
lzi3GtdhCwYizrxC+m7REqh0Dp2a041JQ24XiJEqFlLdFuFzMGqsG1objFZoh6v6
giJy53iQCAkb30zu2dgPWqVPRzfJVNgFi9YJgoVUwHbwwKg3HskdnqJIL5p8+UO6
gswoQKbBVzy+8EyLAn5p8Fyg++oD5PelCXDY78F3ONfOL3BRoKAYL6zc/TxlJeck
2KTFNCUah7BtRlki25vQvlH4N6kOCMjQS3HAHsB+lfQ4R4dknD8=
-----END CERTIFICATE-----
Generated at Tue Jul 21 19:38:29 2026 by rpki-client