Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/86C8EBA2B12A11EF985A2D32C4F9AE02.roa
File: 86C8EBA2B12A11EF985A2D32C4F9AE02.roa (raw, json)
Hash identifier: Z1dCIMP+hnEmQ71FWQngcuZY+cFUKM00vNCKs+IOrFU=
Subject key identifier: 97:9A:66:16:6C:F5:B2:DE:9B:5A:0F:AD:79:E8:AA:5B:03:79:C5:93
Certificate issuer: /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial: 05AC
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/86C8EBA2B12A11EF985A2D32C4F9AE02.roa
Signing time: Thu 03 Sep 2026 00:49:08 +0000
ROA not before: Thu 03 Sep 2026 00:49:08 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4750
IP address blocks: 147.50.0.0/22 maxlen: 22
147.50.4.0/22 maxlen: 22
147.50.8.0/22 maxlen: 22
147.50.12.0/22 maxlen: 22
147.50.16.0/22 maxlen: 22
147.50.20.0/22 maxlen: 22
147.50.24.0/22 maxlen: 22
147.50.28.0/22 maxlen: 22
147.50.34.0/24 maxlen: 24
147.50.35.0/24 maxlen: 24
147.50.36.0/22 maxlen: 22
147.50.41.0/24 maxlen: 24
147.50.42.0/24 maxlen: 24
147.50.43.0/24 maxlen: 24
147.50.44.0/24 maxlen: 24
147.50.45.0/24 maxlen: 24
147.50.46.0/24 maxlen: 24
147.50.47.0/24 maxlen: 24
147.50.48.0/24 maxlen: 24
147.50.49.0/24 maxlen: 24
147.50.50.0/24 maxlen: 24
147.50.51.0/24 maxlen: 24
147.50.52.0/24 maxlen: 24
147.50.53.0/24 maxlen: 24
147.50.54.0/24 maxlen: 24
147.50.55.0/24 maxlen: 24
147.50.56.0/24 maxlen: 24
147.50.57.0/24 maxlen: 24
147.50.58.0/24 maxlen: 24
147.50.59.0/24 maxlen: 24
147.50.60.0/24 maxlen: 24
147.50.61.0/24 maxlen: 24
147.50.64.0/22 maxlen: 22
147.50.68.0/22 maxlen: 22
147.50.73.0/24 maxlen: 24
147.50.75.0/24 maxlen: 24
147.50.76.0/24 maxlen: 24
147.50.77.0/24 maxlen: 24
147.50.78.0/24 maxlen: 24
147.50.128.0/19 maxlen: 19
147.50.128.0/22 maxlen: 22
147.50.128.0/24 maxlen: 24
147.50.132.0/22 maxlen: 22
147.50.144.0/22 maxlen: 22
147.50.148.0/22 maxlen: 22
147.50.156.0/22 maxlen: 22
147.50.160.0/20 maxlen: 20
147.50.162.0/23 maxlen: 23
147.50.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1452 (0x5ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Validity
Not Before: Sep 3 00:49:08 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a98c403-aff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:de:94:8d:7b:f7:95:c1:42:78:8b:21:ed:cc:
da:36:20:6f:2f:ea:7b:01:4d:40:a9:40:48:1e:c1:
c4:ba:df:0c:55:fb:db:3a:8c:69:c5:24:b8:3c:cb:
0d:a3:e7:35:b1:57:fb:32:16:8f:f2:95:dc:a9:fe:
94:c4:28:c8:0d:7a:5b:d4:1c:05:eb:11:3e:2f:21:
9a:95:16:d8:51:e3:cd:95:02:90:bf:eb:53:41:42:
0b:87:1d:68:9c:f2:c6:03:55:69:fa:c3:05:0b:90:
92:4d:58:6a:86:d0:5c:6f:05:7e:4f:95:53:92:64:
40:ec:e2:b2:3b:16:c0:ce:5e:b0:4b:f9:75:c9:41:
8c:52:2b:5d:68:a2:95:c7:c1:43:10:d4:d8:85:18:
96:42:fa:b5:45:75:90:07:47:d1:88:ec:d2:09:56:
13:13:71:5d:3b:a7:73:d5:30:fd:df:a4:42:aa:b0:
81:e2:fb:a9:bb:d4:3d:c2:bf:b4:03:e8:a9:4e:62:
97:e5:7f:15:db:9d:56:24:5b:27:3a:0a:c9:c5:6d:
62:14:1d:76:e8:da:99:eb:8a:ed:8c:d8:9b:ca:b8:
a8:7e:0f:89:01:0d:40:83:fc:91:80:99:09:1d:67:
09:48:f1:1e:12:e2:36:ba:47:5f:46:a4:02:f2:3c:
29:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:9A:66:16:6C:F5:B2:DE:9B:5A:0F:AD:79:E8:AA:5B:03:79:C5:93
X509v3 Authority Key Identifier:
keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/86C8EBA2B12A11EF985A2D32C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
147.50.0.0/19
147.50.34.0-147.50.39.255
147.50.41.0-147.50.61.255
147.50.64.0/21
147.50.73.0/24
147.50.75.0-147.50.78.255
147.50.128.0-147.50.175.255
Signature Algorithm: sha256WithRSAEncryption
00:ae:1f:aa:c0:32:e2:49:7c:53:b6:eb:9a:6c:d7:86:1b:08:
7c:32:e1:86:6c:57:39:61:75:ef:8b:b2:71:d1:62:21:30:da:
24:07:1b:6c:c3:b5:f0:d7:9f:d3:71:dd:24:e9:b8:9f:49:cf:
96:88:07:a3:98:88:34:91:65:08:f9:d2:52:f4:1e:5c:5f:9a:
14:8e:0e:d0:77:42:88:83:a4:46:95:34:9d:4a:1e:2c:14:1a:
83:ad:dc:82:50:25:e9:e1:9b:88:b2:13:d5:54:e6:20:87:7d:
51:23:25:04:fc:3b:3b:eb:96:b3:f2:5e:cd:ae:f9:af:e9:59:
1b:85:55:d2:c1:41:69:47:26:f9:2f:a2:d7:53:2f:e6:78:94:
a2:3f:7f:b7:24:b7:23:01:c1:df:2c:4f:69:5e:58:64:2e:d1:
a5:fb:5c:43:6b:66:32:3e:59:34:e5:28:e9:d4:cc:82:57:61:
d7:9e:f5:1e:5c:f5:e5:c1:3a:19:ec:e3:75:b5:1a:cd:79:fc:
80:99:76:d4:cd:23:90:da:4d:ef:55:ee:82:b7:ca:9d:3b:e4:
22:b3:a4:8d:b3:1c:13:5b:3b:7d:83:b8:31:d9:24:fd:ea:01:
a9:e3:24:f1:ad:d5:c2:6c:f4:ea:72:2a:35:45:fa:d8:49:62:
48:c4:f6:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:39:56 2026 by rpki-client