Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/DF25A2D66EAC11F1B5D83A1361A30FBC.roa
File: DF25A2D66EAC11F1B5D83A1361A30FBC.roa (raw, json)
Hash identifier: uFbHSNo+fb4dtke+0xJWVT+7fLhEDF+Fefzyi8g45E8=
Subject key identifier: 02:6D:16:3F:5F:FB:70:0E:2E:6A:AB:F6:A6:A9:D9:AB:23:93:2B:17
Certificate issuer: /CN=A913089B/serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Certificate serial: C7
Authority key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/DF25A2D66EAC11F1B5D83A1361A30FBC.roa
Signing time: Tue 23 Jun 2026 04:03:55 +0000
ROA not before: Tue 23 Jun 2026 04:03:55 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 134548
IP address blocks: 179.252.64.0/20 maxlen: 24
179.254.0.0/20 maxlen: 24
186.241.32.0/19 maxlen: 24
186.241.144.0/20 maxlen: 24
186.242.224.0/19 maxlen: 24
186.244.0.0/20 maxlen: 24
186.244.32.0/19 maxlen: 24
186.244.64.0/19 maxlen: 24
186.247.112.0/20 maxlen: 24
186.247.144.0/20 maxlen: 24
187.5.160.0/20 maxlen: 24
187.14.0.0/19 maxlen: 24
187.40.96.0/19 maxlen: 24
189.49.0.0/18 maxlen: 24
189.72.224.0/20 maxlen: 24
189.73.64.0/19 maxlen: 24
189.73.160.0/19 maxlen: 24
189.73.208.0/20 maxlen: 24
189.74.32.0/19 maxlen: 24
189.74.64.0/20 maxlen: 24
189.74.192.0/19 maxlen: 24
189.75.240.0/20 maxlen: 24
191.217.64.0/20 maxlen: 24
191.218.192.0/18 maxlen: 24
191.219.32.0/19 maxlen: 24
191.219.96.0/19 maxlen: 24
191.219.160.0/20 maxlen: 24
191.223.96.0/19 maxlen: 24
191.223.240.0/20 maxlen: 24
200.97.192.0/18 maxlen: 24
200.102.208.0/20 maxlen: 24
200.102.224.0/20 maxlen: 24
200.103.80.0/20 maxlen: 24
200.103.160.0/20 maxlen: 24
200.103.192.0/19 maxlen: 24
200.219.64.0/20 maxlen: 24
200.219.96.0/19 maxlen: 24
200.222.160.0/19 maxlen: 24
200.234.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:11:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199 (0xc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Validity
Not Before: Jun 23 04:03:55 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3a05aa-9eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b4:59:32:0d:4c:d0:07:3a:8c:ef:cf:70:03:
14:04:63:a0:46:37:e1:55:ea:b0:c3:dd:af:f4:eb:
df:81:6c:47:29:e7:f5:b0:0a:6d:5d:63:be:b2:7e:
9d:14:2d:fc:1e:86:8f:0a:ef:f6:5d:43:e9:9c:b1:
cc:98:d0:23:f0:06:02:d2:08:98:eb:c8:9e:2a:5b:
d8:ad:0b:02:91:38:6a:0a:9e:95:99:3c:15:d2:52:
fd:95:2f:d9:49:c2:4d:72:9a:39:b8:56:95:0e:af:
4f:6a:a8:81:e5:d3:7a:28:14:0b:bc:56:26:a5:6d:
8c:f8:3f:e2:77:ce:65:d6:8e:f5:c8:4d:5e:58:8c:
4b:4f:ef:0b:2a:ad:a9:e4:95:b0:2f:70:b0:a2:f3:
d3:60:e1:e9:0c:b3:9f:67:4f:79:59:e2:b8:48:34:
a9:2d:47:b7:dc:8c:a5:38:31:47:45:fa:ff:32:b6:
24:80:0c:7a:64:2d:db:02:eb:fe:f3:7a:10:32:6d:
fd:d4:f6:c2:0f:91:05:c6:31:b7:33:ed:8d:27:86:
fb:63:62:32:4d:ab:8b:57:69:15:08:8a:bd:d2:9c:
f7:8f:7a:6b:28:ff:4a:c3:1b:e8:33:95:9d:8f:ed:
c5:dc:bc:ba:71:4a:af:4f:33:c0:ac:19:03:96:41:
dd:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6D:16:3F:5F:FB:70:0E:2E:6A:AB:F6:A6:A9:D9:AB:23:93:2B:17
X509v3 Authority Key Identifier:
keyid:9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/DF25A2D66EAC11F1B5D83A1361A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
179.252.64.0/20
179.254.0.0/20
186.241.32.0/19
186.241.144.0/20
186.242.224.0/19
186.244.0.0/20
186.244.32.0-186.244.95.255
186.247.112.0/20
186.247.144.0/20
187.5.160.0/20
187.14.0.0/19
187.40.96.0/19
189.49.0.0/18
189.72.224.0/20
189.73.64.0/19
189.73.160.0/19
189.73.208.0/20
189.74.32.0-189.74.79.255
189.74.192.0/19
189.75.240.0/20
191.217.64.0/20
191.218.192.0/18
191.219.32.0/19
191.219.96.0/19
191.219.160.0/20
191.223.96.0/19
191.223.240.0/20
200.97.192.0/18
200.102.208.0-200.102.239.255
200.103.80.0/20
200.103.160.0/20
200.103.192.0/19
200.219.64.0/20
200.219.96.0/19
200.222.160.0/19
200.234.16.0/20
Signature Algorithm: sha256WithRSAEncryption
7d:33:3c:db:a1:3b:53:80:77:5f:18:05:b6:7e:d9:3d:f7:a6:
ab:4d:81:7b:f2:1c:e7:cb:ab:a8:d0:e0:24:ee:79:e6:a9:c8:
e5:54:74:1f:cc:b7:33:3c:2f:b8:42:a6:ea:6f:50:56:fb:94:
03:0c:1b:4a:a6:c1:87:1b:08:f9:88:ae:f9:6d:96:21:98:65:
93:37:93:a8:2e:23:f8:df:1e:52:62:73:b1:89:68:3a:9e:40:
8f:f2:28:11:ef:4c:f9:9c:ec:92:a3:ba:2e:ef:cc:5c:7c:a6:
6a:30:61:ed:6c:93:5f:e2:4c:44:6a:fd:36:0f:9e:6f:bf:07:
bb:c3:ec:7e:f2:49:ce:ce:d5:eb:39:80:f0:32:42:c7:6e:02:
c7:4b:a5:39:d5:0d:b1:57:b3:e3:2e:42:ae:6b:0e:c5:4e:d9:
1b:22:02:ff:68:e8:f7:cf:8a:82:0f:2d:3b:e2:d7:3f:f1:8d:
83:ff:d8:d7:a7:86:16:6a:48:bd:da:26:3a:05:5e:fd:0b:bb:
00:fe:25:f7:9e:31:3c:26:84:42:d1:c0:d2:b9:94:63:de:b4:
c1:30:d0:65:73:78:72:09:46:d6:96:c6:f2:d0:1a:8b:04:40:
fa:4b:d5:b0:08:58:c1:b8:26:11:96:ea:11:4f:37:54:fc:01:
11:d4:47:28
-----BEGIN CERTIFICATE-----
MIIGLDCCBRSgAwIBAgICAMcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA4OUIxMTAvBgNVBAUTKDlCQzQ4REFDMTAwRTc1NEVFOEUxQ0E2QUJBOTQyNEUz
M0QzNURFNkEwHhcNMjYwNjIzMDQwMzU1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTNhMDVhYS05ZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnLRZMg1M0Ac6jO/PcAMUBGOgRjfhVeqww92v9OvfgWxHKef1sAptXWO+sn6d
FC38HoaPCu/2XUPpnLHMmNAj8AYC0giY68ieKlvYrQsCkThqCp6VmTwV0lL9lS/Z
ScJNcpo5uFaVDq9PaqiB5dN6KBQLvFYmpW2M+D/id85l1o71yE1eWIxLT+8LKq2p
5JWwL3CwovPTYOHpDLOfZ095WeK4SDSpLUe33IylODFHRfr/MrYkgAx6ZC3bAuv+
83oQMm391PbCD5EFxjG3M+2NJ4b7Y2IyTauLV2kVCIq90pz3j3prKP9KwxvoM5Wd
j+3F3Ly6cUqvTzPArBkDlkHd2wIDAQABo4IDUDCCA0wwHQYDVR0OBBYEFAJtFj9f
+3AOLmqr9qap2asjkysXMB8GA1UdIwQYMBaAFJvEjawQDnVO6OHKarqUJOM9Nd5q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDg5Qi9ENTRBMkUzRTAw
Q0IxMUYxQkY3NDkxMDM4RUVFNTI4RS9tOFNOckJBT2RVN280Y3BxdXBRazR6MDEz
bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy
RkQxRkYyL204U05yQkFPZFU3bzRjcHF1cFFrNHowMTNtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA4OUIvRDU0QTJFM0UwMENCMTFGMUJGNzQ5MTAzOEVFRTUyOEUvREYyNUEyRDY2
RUFDMTFGMUI1RDgzQTEzNjFBMzBGQkMucm9hMIIBDQYIKwYBBQUHAQcBAf8Egf0w
gfowgfcEAgABMIHwAwQEs/xAAwQEs/4AAwQFuvEgAwQEuvGQAwQFuvLgAwQEuvQA
MAwDBAW69CADBAW69EADBAS693ADBAS695ADBAS7BaADBAW7DgADBAW7KGADBAa9
MQADBAS9SOADBAW9SUADBAW9SaADBAS9SdAwDAMEBb1KIAMEBL1KQAMEBb1KwAME
BL1L8AMEBL/ZQAMEBr/awAMEBb/bIAMEBb/bYAMEBL/boAMEBb/fYAMEBL/f8AME
BshhwDAMAwQEyGbQAwQEyGbgAwQEyGdQAwQEyGegAwQFyGfAAwQEyNtAAwQFyNtg
AwQFyN6gAwQEyOoQMA0GCSqGSIb3DQEBCwUAA4IBAQB9MzzboTtTgHdfGAW2ftk9
96arTYF78hzny6uo0OAk7nnmqcjlVHQfzLczPC+4Qqbqb1BW+5QDDBtKpsGHGwj5
iK75bZYhmGWTN5OoLiP43x5SYnOxiWg6nkCP8igR70z5nOySo7ou78xcfKZqMGHt
bJNf4kxEav02D55vvwe7w+x+8knOztXrOYDwMkLHbgLHS6U51Q2xV7PjLkKuaw7F
TtkbIgL/aOj3z4qCDy074tc/8Y2D/9jXp4YWaki92iY6BV79C7sA/iX3njE8JoRC
0cDSuZRj3rTBMNBlc3hyCUbWlsby0BqLBED6S9WwCFjBuCYRluoRTzdU/AER1Eco
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:12 2026 by rpki-client