Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/42CB3D60E49611F098414B07486F56BC.roa
File: 42CB3D60E49611F098414B07486F56BC.roa (raw, json)
Hash identifier: SGAgqirlOlukBT4xNGwk4j92LJxLiy55yPX+tQxiKJM=
Subject key identifier: 86:70:78:93:A7:03:2E:A8:1F:02:9C:C7:D7:F2:97:CB:C5:89:42:1A
Certificate issuer: /CN=A9120B99/serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Certificate serial: 35B2
Authority key identifier: 86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/42CB3D60E49611F098414B07486F56BC.roa
Signing time: Sun 01 Mar 2026 18:23:28 +0000
ROA not before: Mon 29 Dec 2025 09:10:46 +0000
ROA not after: Thu 30 Jul 2026 00:00:00 +0000
asID: 7540
IP address blocks: 117.18.96.0/24 maxlen: 24
117.18.98.0/24 maxlen: 24
117.18.105.0/24 maxlen: 24
117.18.116.0/24 maxlen: 24
202.181.136.0/24 maxlen: 24
202.181.140.0/24 maxlen: 24
202.181.141.0/24 maxlen: 24
202.181.146.0/24 maxlen: 24
202.181.147.0/24 maxlen: 24
202.181.150.0/24 maxlen: 24
202.181.152.0/24 maxlen: 24
202.181.164.0/24 maxlen: 24
202.181.165.0/24 maxlen: 24
202.181.166.0/24 maxlen: 24
202.181.167.0/24 maxlen: 24
202.181.168.0/24 maxlen: 24
202.181.169.0/24 maxlen: 24
202.181.174.0/24 maxlen: 24
202.181.176.0/24 maxlen: 24
202.181.192.0/21 maxlen: 21
202.181.192.0/24 maxlen: 24
202.181.193.0/24 maxlen: 24
202.181.194.0/24 maxlen: 24
202.181.195.0/24 maxlen: 24
202.181.196.0/24 maxlen: 24
202.181.197.0/24 maxlen: 24
202.181.198.0/24 maxlen: 24
202.181.199.0/24 maxlen: 24
202.181.200.0/24 maxlen: 24
202.181.201.0/24 maxlen: 24
202.181.202.0/24 maxlen: 24
202.181.203.0/24 maxlen: 24
202.181.205.0/24 maxlen: 24
202.181.206.0/24 maxlen: 24
202.181.207.0/24 maxlen: 24
202.181.208.0/21 maxlen: 21
202.181.208.0/24 maxlen: 24
202.181.209.0/24 maxlen: 24
202.181.210.0/24 maxlen: 24
202.181.211.0/24 maxlen: 24
202.181.212.0/24 maxlen: 24
202.181.213.0/24 maxlen: 24
202.181.214.0/24 maxlen: 24
202.181.215.0/24 maxlen: 24
202.181.225.0/24 maxlen: 24
202.181.226.0/24 maxlen: 24
202.181.227.0/24 maxlen: 24
202.181.228.0/24 maxlen: 24
202.181.229.0/24 maxlen: 24
202.181.230.0/24 maxlen: 24
202.181.231.0/24 maxlen: 24
202.181.233.0/24 maxlen: 24
202.181.234.0/24 maxlen: 24
202.181.235.0/24 maxlen: 24
202.181.236.0/24 maxlen: 24
202.181.237.0/24 maxlen: 24
202.181.238.0/24 maxlen: 24
202.181.239.0/24 maxlen: 24
202.181.240.0/24 maxlen: 24
202.181.241.0/24 maxlen: 24
202.181.242.0/24 maxlen: 24
202.181.243.0/24 maxlen: 24
202.181.244.0/24 maxlen: 24
202.181.245.0/24 maxlen: 24
202.181.246.0/24 maxlen: 24
202.181.247.0/24 maxlen: 24
2405:5d00::/32 maxlen: 32
2405:5d00::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 19 Mar 2026 14:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13746 (0x35b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9120B99, serialNumber=86C7946946B2A57B056F02B279340D30C2CE49B4
Validity
Not Before: Dec 29 09:10:46 2025 GMT
Not After : Jul 30 00:00:00 2026 GMT
Subject: CN=69a48420-6e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:c1:28:4a:9a:f6:da:a5:fa:36:86:70:80:
9f:10:e2:b3:96:a0:a1:15:3c:a2:32:c0:07:8e:bf:
48:2e:81:40:13:f4:fc:f3:c7:7b:d6:d4:eb:08:17:
ff:e5:e7:82:12:d0:f2:90:e0:5e:bb:bd:7b:5c:b3:
dd:7b:08:24:01:4d:e5:43:d4:af:38:e6:1c:d6:80:
9c:6f:16:d9:73:2e:9c:33:60:6e:87:28:b4:23:18:
7e:43:08:ef:ec:a5:cf:e2:aa:20:1a:7d:63:70:d9:
1e:15:4f:77:a5:1d:6d:5b:80:9a:1f:7d:79:f8:9a:
61:91:25:b4:82:ad:0a:54:ad:2e:b6:74:f3:d8:01:
e6:af:51:b1:dc:81:74:46:bb:60:e6:36:e6:21:13:
16:63:3e:4d:30:dd:5e:d0:4e:a0:79:01:84:2f:d4:
67:81:8f:eb:ff:17:f7:57:aa:5d:86:a4:b5:63:75:
f9:80:92:4f:63:47:28:a3:2a:3a:d6:43:12:9f:d0:
1f:26:36:e9:4e:1d:d6:77:75:c9:d7:95:89:7d:99:
30:0a:39:f4:c3:47:c8:68:bb:6d:b4:19:72:1d:cd:
09:79:78:ad:68:6b:cd:a7:a3:37:a8:4c:6b:ec:97:
02:e2:5f:f6:11:ce:77:e7:f1:cd:8b:02:0a:a4:27:
58:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:70:78:93:A7:03:2E:A8:1F:02:9C:C7:D7:F2:97:CB:C5:89:42:1A
X509v3 Authority Key Identifier:
keyid:86:C7:94:69:46:B2:A5:7B:05:6F:02:B2:79:34:0D:30:C2:CE:49:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/hseUaUaypXsFbwKyeTQNMMLOSbQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hseUaUaypXsFbwKyeTQNMMLOSbQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120B99/D3F9051C1D8311E2B4ED5CD908B02CD2/42CB3D60E49611F098414B07486F56BC.roa
sbgp-ipAddrBlock: critical
IPv4:
117.18.96.0/24
117.18.98.0/24
117.18.105.0/24
117.18.116.0/24
202.181.136.0/24
202.181.140.0/23
202.181.146.0/23
202.181.150.0/24
202.181.152.0/24
202.181.164.0-202.181.169.255
202.181.174.0/24
202.181.176.0/24
202.181.192.0-202.181.203.255
202.181.205.0-202.181.215.255
202.181.225.0-202.181.231.255
202.181.233.0-202.181.247.255
IPv6:
2405:5d00::/32
Signature Algorithm: sha256WithRSAEncryption
63:ac:7a:df:63:40:e4:6a:fe:80:00:e9:26:7c:02:a4:8d:0e:
aa:38:2b:a8:4c:6e:ef:3c:3a:02:56:21:ff:6c:b1:57:df:7e:
19:be:bd:3f:75:60:65:e5:ef:2d:c4:38:5f:2c:16:7c:2d:2b:
77:1e:27:d6:9d:c4:83:02:14:ba:ff:11:76:e1:4c:c9:67:6b:
93:60:fe:35:a4:ce:19:22:8e:57:76:79:40:36:6d:0a:b2:38:
1e:f2:b7:b8:56:a6:a2:e9:25:1c:44:99:0f:34:fc:77:76:a3:
50:f5:0f:d2:7a:54:ae:a7:d4:02:66:4e:60:7c:c1:c0:fc:0b:
91:c3:41:92:bf:6c:34:41:c4:f7:83:82:5a:7d:e1:a4:22:76:
ae:18:da:76:87:87:b0:1e:a6:1d:5f:10:31:29:85:08:a2:e4:
34:7f:ea:9f:f3:97:ae:ad:b6:ad:41:72:4c:00:87:94:64:ae:
cb:5b:08:d7:1b:d8:62:a6:a7:59:8a:da:e4:89:3a:30:75:68:
be:7c:69:79:3e:71:2c:c7:dd:c5:53:9f:da:bc:33:cc:30:6b:
9f:cb:4a:ee:be:77:b8:2f:dc:0e:71:7a:17:a2:e7:01:91:49:
82:74:80:8b:76:0f:df:dd:7b:2e:ce:d1:ba:4a:62:e3:97:84:
84:84:b8:41
-----BEGIN CERTIFICATE-----
MIIF0jCCBLqgAwIBAgICNbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjBCOTkxMTAvBgNVBAUTKDg2Qzc5NDY5NDZCMkE1N0IwNTZGMDJCMjc5MzQwRDMw
QzJDRTQ5QjQwHhcNMjUxMjI5MDkxMDQ2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0ODQyMC02ZTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA3DTBKEqa9tql+jaGcICfEOKzlqChFTyiMsAHjr9ILoFAE/T888d71tTrCBf/
5eeCEtDykOBeu717XLPdewgkAU3lQ9SvOOYc1oCcbxbZcy6cM2Buhyi0Ixh+Qwjv
7KXP4qogGn1jcNkeFU93pR1tW4CaH315+JphkSW0gq0KVK0utnTz2AHmr1Gx3IF0
Rrtg5jbmIRMWYz5NMN1e0E6geQGEL9RngY/r/xf3V6pdhqS1Y3X5gJJPY0cooyo6
1kMSn9AfJjbpTh3Wd3XJ15WJfZkwCjn0w0fIaLtttBlyHc0JeXitaGvNp6M3qExr
7JcC4l/2Ec535/HNiwIKpCdYtQIDAQABo4IC9jCCAvIwHQYDVR0OBBYEFIZweJOn
Ay6oHwKcx9fyl8vFiUIaMB8GA1UdIwQYMBaAFIbHlGlGsqV7BW8Csnk0DTDCzkm0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMEI5OS9EM0Y5MDUxQzFE
ODMxMUUyQjRFRDVDRDkwOEIwMkNEMi9oc2VVYVVheXBYc0Zid0t5ZVRRTk1NTE9T
YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hzZVVhVWF5cFhzRmJ3S3llVFFOTU1MT1NiUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MjBCOTkvRDNGOTA1MUMxRDgzMTFFMkI0RUQ1Q0Q5MDhCMDJDRDIvNDJDQjNENjBF
NDk2MTFGMDk4NDE0QjA3NDg2RjU2QkMucm9hMIG0BggrBgEFBQcBBwEB/wSBpDCB
oTCBjwQCAAEwgYgDBAB1EmADBAB1EmIDBAB1EmkDBAB1EnQDBADKtYgDBAHKtYwD
BAHKtZIDBADKtZYDBADKtZgwDAMEAsq1pAMEAcq1qAMEAMq1rgMEAMq1sDAMAwQG
yrXAAwQCyrXIMAwDBADKtc0DBAPKtdAwDAMEAMq14QMEA8q14DAMAwQAyrXpAwQD
yrXwMA0EAgACMAcDBQAkBV0AMA0GCSqGSIb3DQEBCwUAA4IBAQBjrHrfY0Dkav6A
AOkmfAKkjQ6qOCuoTG7vPDoCViH/bLFX334Zvr0/dWBl5e8txDhfLBZ8LSt3HifW
ncSDAhS6/xF24UzJZ2uTYP41pM4ZIo5XdnlANm0Ksjge8re4Vqai6SUcRJkPNPx3
dqNQ9Q/SelSup9QCZk5gfMHA/AuRw0GSv2w0QcT3g4JafeGkInauGNp2h4ewHqYd
XxAxKYUIouQ0f+qf85eurbatQXJMAIeUZK7LWwjXG9hipqdZitrkiTowdWi+fGl5
PnEsx93FU5/avDPMMGufy0ruvne4L9wOcXoXoucBkUmCdICLdg/f3XsuztG6SmLj
l4SEhLhB
-----END CERTIFICATE-----
Generated at Thu Mar 12 16:52:43 2026 by rpki-client