Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/014B86FCA7B311F1A75422DB4F11F970.roa
File: 014B86FCA7B311F1A75422DB4F11F970.roa (raw, json)
Hash identifier: 6mlGtjk5wDpagjYbZY58dc+LkyB/0YxTp42wr+QRGNE=
Subject key identifier: A9:CB:E0:3A:32:E7:A1:99:2F:0E:EA:6A:FB:33:32:12:18:9E:F5:86
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0CA3
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/014B86FCA7B311F1A75422DB4F11F970.roa
Signing time: Thu 03 Sep 2026 16:26:33 +0000
ROA not before: Thu 03 Sep 2026 16:26:33 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 218910
IP address blocks: 61.18.145.0/24 maxlen: 24
61.18.147.0/24 maxlen: 24
61.18.149.0/24 maxlen: 24
61.18.153.0/24 maxlen: 24
61.18.155.0/24 maxlen: 24
61.18.157.0/24 maxlen: 24
61.18.159.0/24 maxlen: 24
61.18.161.0/24 maxlen: 24
61.18.163.0/24 maxlen: 24
61.18.165.0/24 maxlen: 24
61.18.174.0/24 maxlen: 24
61.18.175.0/24 maxlen: 24
61.18.176.0/24 maxlen: 24
61.18.177.0/24 maxlen: 24
61.18.179.0/24 maxlen: 24
61.18.180.0/24 maxlen: 24
61.18.182.0/24 maxlen: 24
61.18.183.0/24 maxlen: 24
61.18.184.0/24 maxlen: 24
61.18.185.0/24 maxlen: 24
61.18.186.0/24 maxlen: 24
61.18.187.0/24 maxlen: 24
61.18.189.0/24 maxlen: 24
61.18.191.0/24 maxlen: 24
61.18.193.0/24 maxlen: 24
61.18.195.0/24 maxlen: 24
61.18.196.0/24 maxlen: 24
61.18.198.0/24 maxlen: 24
61.18.207.0/24 maxlen: 24
61.18.216.0/24 maxlen: 24
61.18.217.0/24 maxlen: 24
61.18.219.0/24 maxlen: 24
61.18.221.0/24 maxlen: 24
61.18.223.0/24 maxlen: 24
61.18.224.0/24 maxlen: 24
61.18.225.0/24 maxlen: 24
61.18.226.0/24 maxlen: 24
61.18.227.0/24 maxlen: 24
61.18.228.0/24 maxlen: 24
61.18.230.0/24 maxlen: 24
61.18.232.0/24 maxlen: 24
61.18.233.0/24 maxlen: 24
61.18.235.0/24 maxlen: 24
61.18.237.0/24 maxlen: 24
61.18.239.0/24 maxlen: 24
61.18.241.0/24 maxlen: 24
61.18.243.0/24 maxlen: 24
61.18.244.0/24 maxlen: 24
61.18.245.0/24 maxlen: 24
61.18.246.0/24 maxlen: 24
61.18.247.0/24 maxlen: 24
61.18.248.0/24 maxlen: 24
61.18.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 16:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3235 (0xca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Sep 3 16:26:33 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a999fb9-e35b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:1c:71:59:02:ec:b9:26:cd:15:2f:b5:e4:
a7:24:75:fe:1a:bd:62:7a:9b:8f:b7:23:9d:84:55:
cf:41:59:14:9d:13:7b:8b:e1:94:be:10:48:38:7e:
22:7b:aa:61:96:e6:7b:d1:74:94:cf:b3:5a:cf:3d:
10:7e:47:23:fb:5a:4b:e7:23:b4:ca:0e:1a:60:f1:
0d:cb:f4:42:26:a4:9d:ec:8a:18:8a:a2:74:5d:eb:
0e:56:c4:25:c3:32:52:2b:25:ea:de:8f:4b:a7:ae:
e9:17:66:0b:86:20:14:70:17:33:ea:54:c6:f1:40:
33:1c:ee:e8:24:49:50:62:c6:5b:6d:f9:3b:fa:11:
3e:a4:2f:86:dd:10:39:5a:a1:21:bd:ec:90:92:33:
f8:13:c8:8e:38:51:6b:0d:35:ad:c4:ba:a5:4e:51:
8d:54:e6:12:9b:72:96:5d:ce:20:2f:ad:49:d3:8b:
d4:d0:ad:d5:ec:d3:11:4c:44:24:e6:4f:a4:ca:3f:
7b:17:1b:3e:52:68:8c:4b:e1:e8:38:f0:ea:6e:07:
99:21:86:cc:7f:51:72:8a:67:b0:48:f9:d3:34:c7:
8d:18:19:19:72:33:86:76:e0:51:18:46:f2:74:67:
e7:07:80:9a:1e:73:6a:85:6d:46:c4:ae:84:82:e5:
69:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CB:E0:3A:32:E7:A1:99:2F:0E:EA:6A:FB:33:32:12:18:9E:F5:86
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/014B86FCA7B311F1A75422DB4F11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.18.145.0/24
61.18.147.0/24
61.18.149.0/24
61.18.153.0/24
61.18.155.0/24
61.18.157.0/24
61.18.159.0/24
61.18.161.0/24
61.18.163.0/24
61.18.165.0/24
61.18.174.0-61.18.177.255
61.18.179.0-61.18.180.255
61.18.182.0-61.18.187.255
61.18.189.0/24
61.18.191.0/24
61.18.193.0/24
61.18.195.0-61.18.196.255
61.18.198.0/24
61.18.207.0/24
61.18.216.0/23
61.18.219.0/24
61.18.221.0/24
61.18.223.0-61.18.228.255
61.18.230.0/24
61.18.232.0/23
61.18.235.0/24
61.18.237.0/24
61.18.239.0/24
61.18.241.0/24
61.18.243.0-61.18.248.255
61.18.250.0/24
Signature Algorithm: sha256WithRSAEncryption
75:1a:22:5e:c4:76:51:ce:b8:5d:78:45:9a:76:1c:e0:c3:c7:
58:b3:61:0e:c0:90:d0:e6:fd:8d:b3:aa:73:ab:f2:d9:54:da:
82:70:71:72:14:d9:9c:b5:0b:ec:79:cf:bb:98:45:b8:87:ad:
2e:86:86:ad:b4:f4:3a:6b:d0:03:b6:41:83:52:3f:e5:14:2b:
84:4f:ea:d5:6e:1b:09:5f:e8:61:56:0b:5b:cd:88:b0:7d:0c:
4a:62:61:07:cd:29:b7:8f:c9:be:3d:4c:31:18:74:22:e7:67:
d2:a8:b2:22:85:30:af:9e:4f:ef:3a:31:5f:fe:c6:98:b7:0a:
46:21:a5:1e:fd:f2:ae:7d:05:2b:7f:6f:a6:03:9e:b0:48:9b:
b0:5e:f8:af:d3:1b:87:af:5f:33:ec:9c:15:1e:ec:c8:db:ce:
db:4c:23:92:bc:36:c8:9a:34:af:8e:6b:38:48:7b:57:c2:ac:
bf:24:cc:fd:23:50:00:ab:ec:21:ca:95:f9:04:96:3a:7e:05:
07:da:f5:32:93:56:b1:f4:73:73:ea:43:4c:47:18:28:ab:51:
eb:c9:5f:4f:67:a7:6a:7a:4a:57:36:d1:45:ce:e2:44:a5:2d:
8b:9e:f7:71:52:8c:a0:12:f8:e8:72:6a:8c:67:18:5f:c8:e9:
6f:c5:17:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 06:57:00 2026 by rpki-client