Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/5EB91EB40F9611F0A2F2830DC4F9AE02.roa
File: 5EB91EB40F9611F0A2F2830DC4F9AE02.roa (raw, json)
Hash identifier: 5SCmxoY7IRgQL1Tep4KxeF2bokano2G0HP3zsXzrfTw=
Subject key identifier: A9:EE:56:2F:A7:A3:15:7A:5B:BE:BE:87:FC:72:6E:C7:8E:C1:19:CC
Certificate issuer: /CN=A9145456/serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Certificate serial: 0885
Authority key identifier: 3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/5EB91EB40F9611F0A2F2830DC4F9AE02.roa
Signing time: Mon 06 Jul 2026 01:02:42 +0000
ROA not before: Mon 06 Jul 2026 01:02:42 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 139831
IP address blocks: 131.226.64.0/18 maxlen: 18
131.226.64.0/22 maxlen: 24
131.226.68.0/22 maxlen: 24
131.226.74.0/23 maxlen: 24
131.226.76.0/23 maxlen: 24
131.226.80.0/22 maxlen: 24
131.226.84.0/22 maxlen: 24
131.226.88.0/22 maxlen: 24
131.226.92.0/22 maxlen: 24
131.226.96.0/22 maxlen: 23
131.226.100.0/22 maxlen: 23
131.226.100.0/24 maxlen: 24
131.226.104.0/22 maxlen: 23
131.226.108.0/22 maxlen: 23
131.226.112.0/22 maxlen: 23
131.226.116.0/23 maxlen: 23
131.226.118.0/23 maxlen: 23
131.226.120.0/23 maxlen: 23
131.226.122.0/23 maxlen: 23
131.226.124.0/23 maxlen: 24
131.226.126.0/24 maxlen: 24
131.226.127.0/24 maxlen: 24
139.135.64.0/18 maxlen: 18
139.135.64.0/22 maxlen: 22
139.135.68.0/22 maxlen: 22
139.135.72.0/22 maxlen: 22
139.135.76.0/22 maxlen: 22
139.135.80.0/22 maxlen: 22
139.135.88.0/22 maxlen: 22
139.135.104.0/22 maxlen: 23
139.135.108.0/22 maxlen: 23
139.135.122.0/23 maxlen: 24
139.135.124.0/23 maxlen: 23
160.84.128.0/18 maxlen: 18
160.84.128.0/24 maxlen: 24
160.84.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 21:47:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2181 (0x885)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9145456, serialNumber=3FB0A56E20F194C7749879D4D225B3F97E9EBECF
Validity
Not Before: Jul 6 01:02:42 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a4afeb2-a17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:af:07:3e:76:6e:65:99:86:42:81:d6:0b:
c6:88:50:50:51:dc:15:25:66:2c:ce:8d:59:9b:a1:
3b:50:81:67:ba:ea:bc:07:e0:71:f1:23:25:83:20:
d1:d9:d6:a0:6f:ed:e2:50:78:05:43:e7:d8:9c:70:
ea:f4:19:0c:70:15:78:2c:e3:89:9c:ab:16:bb:b1:
b1:0b:d9:e7:58:38:81:48:3d:7a:c8:e8:f6:67:76:
49:a0:4e:1f:da:e4:7b:22:4a:30:e2:75:0b:7e:07:
79:0a:2d:cd:2c:4f:fb:50:ff:98:28:35:b1:8f:67:
68:95:e5:3a:83:9c:56:e6:6b:68:09:3e:fe:c7:df:
b6:c8:29:bd:a2:4d:a0:3c:0f:dd:f7:c7:af:48:bc:
2c:76:d5:41:ae:0e:22:0d:03:7a:30:8f:27:ba:12:
cd:b6:55:e4:62:76:fa:39:49:34:e1:b4:f0:70:1f:
5c:27:5d:8f:5e:7f:3f:39:0d:1f:27:c9:a6:f4:4d:
15:5f:bb:55:e5:cf:3b:e3:f6:1e:d0:c5:0d:62:1e:
9c:d3:06:32:c7:8e:90:f7:eb:6d:37:3f:ff:94:3f:
f3:22:7f:07:1c:7f:be:84:88:18:4a:12:c3:38:2e:
e2:80:e3:44:39:05:2d:b9:81:f3:7b:61:24:20:44:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EE:56:2F:A7:A3:15:7A:5B:BE:BE:87:FC:72:6E:C7:8E:C1:19:CC
X509v3 Authority Key Identifier:
keyid:3F:B0:A5:6E:20:F1:94:C7:74:98:79:D4:D2:25:B3:F9:7E:9E:BE:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/P7ClbiDxlMd0mHnU0iWz-X6evs8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7ClbiDxlMd0mHnU0iWz-X6evs8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145456/7719C710306611EB85251355C4F9AE02/5EB91EB40F9611F0A2F2830DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
131.226.64.0/18
139.135.64.0/18
160.84.128.0/18
Signature Algorithm: sha256WithRSAEncryption
70:b1:53:f0:25:a3:9f:8c:3b:6c:00:cc:91:aa:2d:71:68:d8:
c8:52:ca:2a:42:41:e1:1f:dd:c9:a3:ec:9b:33:2f:22:bf:0c:
16:21:2f:73:94:82:13:9b:db:d2:ae:d0:27:0a:04:88:11:45:
e3:4e:21:d5:b5:2e:15:d0:ba:4f:c5:c6:1e:37:9a:c1:23:0a:
7f:a2:8c:83:ce:bc:4a:c9:65:3f:f6:2f:4d:06:b4:52:b7:dd:
60:f5:17:a9:af:39:e4:0d:0b:e0:72:51:fc:a5:da:af:a9:c1:
46:be:bd:24:78:f4:0d:53:1e:92:43:74:35:ee:1d:54:5f:a9:
8c:fe:a4:17:3e:37:93:8c:1b:fb:e3:8d:b3:93:fc:f0:1d:7a:
a2:9e:4f:13:44:4d:91:6c:19:a9:ad:4d:dd:aa:6c:cc:2d:5b:
21:43:3a:0a:82:31:e0:1d:f1:4f:89:b5:bf:77:fc:56:73:aa:
88:a6:21:6b:3e:1f:56:cb:f0:25:b7:53:b1:f9:b0:74:00:10:
3f:37:66:3f:7a:23:4a:a4:f8:56:50:43:54:82:73:68:e0:28:
6a:1f:1e:a4:49:c2:d0:cf:07:2b:87:c8:28:a3:f8:d2:f6:80:
51:7d:0f:78:7b:6e:92:ee:47:2b:44:1e:bc:04:15:41:11:a5:
e4:80:28:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 16:51:21 2026 by rpki-client