Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/6205FF52113D11F1BF40122E203D8C67.roa
File: 6205FF52113D11F1BF40122E203D8C67.roa (raw, json)
Hash identifier: kciMR3tmrpplYDgQ9Hz1Pp43bk8E8QemNstS3Qp+YXQ=
Subject key identifier: DE:40:37:00:82:4E:79:95:A6:DE:1A:7F:76:5E:1B:60:9F:93:5B:4A
Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial: 0913
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/6205FF52113D11F1BF40122E203D8C67.roa
Signing time: Fri 28 Aug 2026 00:15:39 +0000
ROA not before: Fri 28 Aug 2026 00:15:39 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4775
IP address blocks: 64.224.21.0/24 maxlen: 24
64.224.96.0/19 maxlen: 19
64.224.128.0/20 maxlen: 20
64.226.56.0/21 maxlen: 21
64.226.56.0/24 maxlen: 24
64.226.57.0/24 maxlen: 24
64.226.58.0/24 maxlen: 24
64.226.59.0/24 maxlen: 24
64.226.60.0/24 maxlen: 24
64.226.61.0/24 maxlen: 24
64.226.62.0/24 maxlen: 24
64.226.63.0/24 maxlen: 24
138.84.64.0/18 maxlen: 18
138.84.64.0/24 maxlen: 24
138.84.65.0/24 maxlen: 24
138.84.66.0/24 maxlen: 24
138.84.67.0/24 maxlen: 24
138.84.69.0/24 maxlen: 24
138.84.70.0/23 maxlen: 23
138.84.70.0/24 maxlen: 24
138.84.71.0/24 maxlen: 24
138.84.72.0/24 maxlen: 24
138.84.73.0/24 maxlen: 24
138.84.74.0/23 maxlen: 23
138.84.74.0/24 maxlen: 24
138.84.75.0/24 maxlen: 24
138.84.76.0/22 maxlen: 22
138.84.78.0/23 maxlen: 23
138.84.110.0/23 maxlen: 23
138.84.112.0/23 maxlen: 23
138.84.114.0/23 maxlen: 23
138.84.126.0/23 maxlen: 23
138.84.128.0/19 maxlen: 19
138.84.128.0/22 maxlen: 22
138.84.132.0/22 maxlen: 22
138.84.136.0/22 maxlen: 22
138.84.140.0/22 maxlen: 22
138.84.144.0/22 maxlen: 22
138.84.148.0/22 maxlen: 22
138.84.152.0/22 maxlen: 22
138.84.156.0/22 maxlen: 22
138.84.192.0/21 maxlen: 21
138.84.192.0/22 maxlen: 22
138.84.196.0/22 maxlen: 22
147.185.169.0/24 maxlen: 24
158.62.0.0/17 maxlen: 17
158.62.106.0/24 maxlen: 24
192.112.243.0/24 maxlen: 24
209.35.160.0/20 maxlen: 20
209.35.160.0/24 maxlen: 24
209.35.161.0/24 maxlen: 24
209.35.162.0/24 maxlen: 24
209.35.163.0/24 maxlen: 24
209.35.164.0/24 maxlen: 24
209.35.165.0/24 maxlen: 24
209.35.166.0/24 maxlen: 24
209.35.167.0/24 maxlen: 24
209.35.169.0/24 maxlen: 24
209.35.170.0/24 maxlen: 24
209.35.171.0/24 maxlen: 24
209.35.172.0/24 maxlen: 24
209.35.173.0/24 maxlen: 24
209.35.174.0/24 maxlen: 24
216.247.0.0/18 maxlen: 18
216.247.80.0/20 maxlen: 20
216.247.80.0/24 maxlen: 24
216.247.81.0/24 maxlen: 24
216.247.82.0/24 maxlen: 24
216.247.83.0/24 maxlen: 24
216.247.84.0/24 maxlen: 24
216.247.85.0/24 maxlen: 24
216.247.86.0/24 maxlen: 24
216.247.87.0/24 maxlen: 24
216.247.88.0/24 maxlen: 24
216.247.89.0/24 maxlen: 24
216.247.90.0/24 maxlen: 24
216.247.91.0/24 maxlen: 24
216.247.92.0/24 maxlen: 24
216.247.93.0/24 maxlen: 24
216.247.94.0/24 maxlen: 24
216.247.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2323 (0x913)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Validity
Not Before: Aug 28 00:15:39 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a90d32a-8ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:98:04:99:03:ee:ea:19:40:b9:6b:ab:79:d0:
6d:69:b4:fc:ca:cc:f9:5a:62:fe:ed:be:7e:9c:5d:
f8:20:9e:30:b2:46:11:94:5e:67:7c:bf:0b:85:de:
40:ff:a9:c2:48:7c:5d:0f:d9:1c:1f:90:cf:37:c8:
cf:9a:65:ae:3d:13:bb:91:94:01:8b:18:1e:c7:57:
f0:3d:39:29:90:a0:00:95:82:eb:2d:6c:e5:f0:a5:
e3:7a:30:78:c9:0a:cd:9d:da:2f:65:14:0b:c6:0c:
90:9c:e2:c9:e9:3a:f3:38:f3:0f:45:a2:0b:4d:65:
a3:67:c1:2d:de:ce:8b:09:0e:f9:66:02:d8:5d:bb:
d1:01:10:62:03:ee:f2:0b:54:e7:0f:d7:5f:3a:54:
2a:08:15:cc:5c:47:f9:55:33:00:65:9a:45:bf:4d:
02:9b:d1:08:4c:11:4d:dd:7e:df:ea:1a:11:a8:38:
47:20:2e:64:1c:ce:4e:34:77:1d:d7:1f:6e:eb:3d:
22:76:a4:80:60:c0:15:75:ad:46:d7:d8:ff:0e:6f:
d9:fc:3c:7c:5b:4d:6c:3d:a4:11:07:55:5d:f2:6f:
9f:39:5f:64:6c:60:e9:7b:74:24:fa:74:9c:13:ab:
18:48:d3:de:1b:c2:9f:b0:e0:3f:8a:ae:35:00:f3:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:40:37:00:82:4E:79:95:A6:DE:1A:7F:76:5E:1B:60:9F:93:5B:4A
X509v3 Authority Key Identifier:
keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/6205FF52113D11F1BF40122E203D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
64.224.21.0/24
64.224.96.0-64.224.143.255
64.226.56.0/21
138.84.64.0-138.84.159.255
138.84.192.0/21
147.185.169.0/24
158.62.0.0/17
192.112.243.0/24
209.35.160.0/20
216.247.0.0/18
216.247.80.0/20
Signature Algorithm: sha256WithRSAEncryption
88:a3:68:f1:d1:92:30:c7:b3:df:e1:da:ea:9b:eb:de:98:65:
21:c4:35:dc:2d:a3:ad:bd:b8:85:9b:79:46:f9:d4:14:6f:8f:
16:51:cb:6d:3e:a5:d6:77:4e:49:5a:21:d8:1d:69:c8:4f:ea:
9b:13:6e:79:74:90:2d:5f:53:82:f7:ad:14:89:7d:f1:44:40:
e6:be:26:2b:8f:89:fe:26:20:8b:24:d0:9d:b6:8b:72:9e:c0:
f5:81:af:1c:c2:4e:32:7c:fa:c1:12:e0:42:76:39:1d:50:78:
a4:bd:7e:79:8a:3e:76:87:05:3a:35:a6:01:18:c1:d0:60:59:
c8:a8:e6:ef:e4:d6:9d:48:2c:2d:95:4b:eb:74:e9:89:1f:a5:
f1:6c:1d:54:8b:67:5f:b2:11:6c:04:e4:36:3e:b3:8e:c9:b9:
fa:da:ff:88:58:91:df:1e:8e:f1:f7:95:a2:19:34:95:52:7e:
c1:3c:0e:b0:f3:fa:86:af:4e:9a:91:71:aa:bd:52:28:51:45:
22:26:73:c3:ad:53:e0:da:95:19:6a:53:16:30:dd:6b:f1:20:
74:a0:a0:a5:4b:f5:61:63:a3:7c:dc:8d:b2:11:e0:0c:cc:95:
d5:37:51:67:e0:27:71:ef:88:8c:53:8c:7e:d1:fb:c7:9f:86:
0d:26:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:09:23 2026 by rpki-client