Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/DB5AEE86AA8411ECA420473FC4F9AE02.roa
File: DB5AEE86AA8411ECA420473FC4F9AE02.roa (raw, json)
Hash identifier: c5RLiTDZR/ZouCGLVMydVrnnpfMrLN5FBnsuANTQhF8=
Subject key identifier: 87:1C:49:3E:69:6E:FF:1A:A0:61:53:85:26:87:C3:D8:8F:B2:0C:80
Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Certificate serial: 3C38
Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/DB5AEE86AA8411ECA420473FC4F9AE02.roa
Signing time: Mon 06 Jul 2026 15:13:45 +0000
ROA not before: Mon 06 Jul 2026 15:13:45 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 9287
IP address blocks: 61.90.185.0/24 maxlen: 24
61.90.197.0/24 maxlen: 24
61.90.198.0/24 maxlen: 24
61.90.200.0/22 maxlen: 22
61.90.200.0/24 maxlen: 24
61.90.201.0/24 maxlen: 24
61.90.202.0/24 maxlen: 24
61.90.204.0/23 maxlen: 23
61.90.204.0/24 maxlen: 24
61.90.205.0/24 maxlen: 24
61.90.213.0/24 maxlen: 24
61.90.231.0/24 maxlen: 24
61.91.0.0/21 maxlen: 21
61.91.0.0/24 maxlen: 24
61.91.1.0/24 maxlen: 24
61.91.2.0/24 maxlen: 24
61.91.3.0/24 maxlen: 24
61.91.4.0/24 maxlen: 24
61.91.5.0/24 maxlen: 24
61.91.6.0/24 maxlen: 24
61.91.7.0/24 maxlen: 24
61.91.11.0/24 maxlen: 24
61.91.12.0/22 maxlen: 22
61.91.12.0/24 maxlen: 24
61.91.13.0/24 maxlen: 24
61.91.14.0/24 maxlen: 24
61.91.15.0/24 maxlen: 24
61.91.80.0/23 maxlen: 23
61.91.80.0/24 maxlen: 24
61.91.81.0/24 maxlen: 24
61.91.92.0/24 maxlen: 24
61.91.120.0/21 maxlen: 21
61.91.120.0/24 maxlen: 24
61.91.121.0/24 maxlen: 24
61.91.122.0/24 maxlen: 24
61.91.123.0/24 maxlen: 24
61.91.124.0/24 maxlen: 24
61.91.125.0/24 maxlen: 24
61.91.126.0/24 maxlen: 24
61.91.127.0/24 maxlen: 24
61.91.247.0/24 maxlen: 24
119.46.69.0/24 maxlen: 24
119.46.92.0/24 maxlen: 24
119.46.96.0/23 maxlen: 23
119.46.96.0/24 maxlen: 24
119.46.97.0/24 maxlen: 24
119.46.98.0/24 maxlen: 24
119.46.113.0/24 maxlen: 24
119.46.194.0/24 maxlen: 24
119.46.226.0/24 maxlen: 24
203.144.245.0/24 maxlen: 24
210.86.139.0/24 maxlen: 24
210.86.176.0/21 maxlen: 21
210.86.176.0/24 maxlen: 24
210.86.177.0/24 maxlen: 24
210.86.178.0/24 maxlen: 24
210.86.179.0/24 maxlen: 24
210.86.180.0/22 maxlen: 22
210.86.180.0/24 maxlen: 24
210.86.181.0/24 maxlen: 24
210.86.182.0/24 maxlen: 24
210.86.183.0/24 maxlen: 24
2001:fb0:1000::/48 maxlen: 48
2001:fb0:1001::/48 maxlen: 48
2001:fb0:1002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 14:20:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15416 (0x3c38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C
Validity
Not Before: Jul 6 15:13:45 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a4bc629-39fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:80:74:9d:55:e9:bd:2b:24:3c:58:4f:ac:85:
6b:06:8e:3c:6c:af:bc:d4:23:d0:db:b9:0f:1f:d1:
f3:3c:f0:49:f9:a2:08:12:52:1b:05:4c:03:86:1d:
18:8b:64:ad:31:5a:6b:c6:5c:44:f3:51:15:02:65:
51:e7:88:7c:18:62:1e:77:f5:9c:34:61:0c:a3:50:
f4:a4:e9:bc:f2:11:08:7f:b4:ad:81:5c:e6:63:46:
9c:4b:81:ef:30:eb:34:dd:d7:a8:cc:82:44:5b:95:
4b:c5:e2:60:9e:d1:2a:26:5c:bc:4e:fc:f6:e2:11:
7b:7b:2b:c2:04:56:5a:16:a6:79:b1:03:ac:22:b8:
02:7d:80:d9:e9:a2:ce:67:e9:77:2a:03:4b:84:95:
4f:c5:11:da:d1:a3:0f:1e:c6:08:51:0e:b4:06:24:
f6:68:93:d1:46:e7:4e:9b:d7:26:57:79:e6:5a:5c:
f5:a3:d4:4e:b6:41:ff:57:4a:73:fc:f5:38:df:97:
8d:e0:45:7c:b0:62:17:b9:97:2c:c9:f0:d9:08:6d:
54:97:f9:44:f6:49:84:bc:f9:ca:49:72:5c:b8:fa:
f1:d5:d6:03:34:d5:75:be:66:3b:7a:20:da:56:e3:
62:74:eb:28:37:8d:64:45:c5:50:53:67:5f:d0:5a:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1C:49:3E:69:6E:FF:1A:A0:61:53:85:26:87:C3:D8:8F:B2:0C:80
X509v3 Authority Key Identifier:
keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/DB5AEE86AA8411ECA420473FC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.90.185.0/24
61.90.197.0-61.90.198.255
61.90.200.0-61.90.205.255
61.90.213.0/24
61.90.231.0/24
61.91.0.0/21
61.91.11.0-61.91.15.255
61.91.80.0/23
61.91.92.0/24
61.91.120.0/21
61.91.247.0/24
119.46.69.0/24
119.46.92.0/24
119.46.96.0-119.46.98.255
119.46.113.0/24
119.46.194.0/24
119.46.226.0/24
203.144.245.0/24
210.86.139.0/24
210.86.176.0/21
IPv6:
2001:fb0:1000::-2001:fb0:1002:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:31:06:1a:82:04:e3:7d:4c:d1:a1:e7:c1:d0:b8:dc:3d:5e:
91:ca:7f:cf:7f:19:ef:45:56:da:2c:66:fd:7b:75:2d:4e:0b:
48:46:5b:45:93:a8:08:cd:88:11:fd:07:d8:cb:3c:50:ee:32:
63:da:ab:75:e2:2a:39:f8:dc:0a:a7:05:5d:10:ff:ca:94:32:
56:3c:c5:01:49:d3:bc:48:2c:03:c7:13:db:eb:32:7d:43:5a:
50:37:9a:e6:84:3f:50:0b:7c:4d:c5:a2:09:64:3d:d3:4e:d7:
d4:cd:39:bc:30:ea:09:2e:ef:c2:00:94:64:c9:64:2f:d3:1b:
b8:60:5d:f0:85:a8:d8:19:94:b0:8e:31:c1:99:85:cc:91:4a:
cc:04:92:6a:2b:8a:03:ea:66:b9:ab:0e:fe:46:17:9b:3d:79:
02:33:ae:bb:eb:2c:c8:81:e2:b9:56:76:b1:a0:9b:38:ce:10:
cc:ee:ac:49:4a:4c:82:6c:85:21:cd:8a:e2:8c:1c:a6:ff:60:
2f:04:97:a2:31:8f:64:5e:b4:72:c2:3c:17:98:2e:eb:32:2e:
ff:9e:ea:01:c2:0c:c7:d2:2a:d1:c0:67:46:db:54:ef:26:65:
63:fb:f7:a5:d9:ad:3c:7e:37:f0:60:ff:dc:0c:6e:42:42:50:
40:19:d9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:37:31 2026 by rpki-client