Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/080C5946A2CA11F1AA7FA5DE4011F970.roa
File: 080C5946A2CA11F1AA7FA5DE4011F970.roa (raw, json)
Hash identifier: WaTCMMJqoEAzCboLrhDgdLBDlpnOkGStIz0Typ3mVQo=
Subject key identifier: F5:F9:AE:ED:0F:1B:36:A8:F1:0E:E9:4E:74:EC:59:3A:1F:4C:34:FD
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0C90
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/080C5946A2CA11F1AA7FA5DE4011F970.roa
Signing time: Wed 02 Sep 2026 10:35:23 +0000
ROA not before: Wed 02 Sep 2026 10:35:23 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 219393
IP address blocks: 61.18.128.0/24 maxlen: 24
61.18.129.0/24 maxlen: 24
61.18.131.0/24 maxlen: 24
61.18.132.0/24 maxlen: 24
61.18.133.0/24 maxlen: 24
61.18.144.0/24 maxlen: 24
61.18.145.0/24 maxlen: 24
61.18.146.0/24 maxlen: 24
61.18.148.0/24 maxlen: 24
61.18.150.0/24 maxlen: 24
61.18.152.0/24 maxlen: 24
61.18.153.0/24 maxlen: 24
61.18.155.0/24 maxlen: 24
61.18.157.0/24 maxlen: 24
61.18.159.0/24 maxlen: 24
61.18.161.0/24 maxlen: 24
61.18.163.0/24 maxlen: 24
61.18.165.0/24 maxlen: 24
61.18.178.0/24 maxlen: 24
61.18.188.0/24 maxlen: 24
61.18.192.0/24 maxlen: 24
61.18.193.0/24 maxlen: 24
61.18.194.0/24 maxlen: 24
61.18.195.0/24 maxlen: 24
61.18.197.0/24 maxlen: 24
61.18.198.0/24 maxlen: 24
61.18.199.0/24 maxlen: 24
61.18.200.0/24 maxlen: 24
61.18.201.0/24 maxlen: 24
61.18.206.0/24 maxlen: 24
61.18.207.0/24 maxlen: 24
61.18.210.0/24 maxlen: 24
61.18.211.0/24 maxlen: 24
61.18.213.0/24 maxlen: 24
61.18.214.0/24 maxlen: 24
61.18.216.0/24 maxlen: 24
61.18.217.0/24 maxlen: 24
61.18.218.0/24 maxlen: 24
61.18.219.0/24 maxlen: 24
61.18.220.0/24 maxlen: 24
61.18.221.0/24 maxlen: 24
61.18.222.0/24 maxlen: 24
61.18.223.0/24 maxlen: 24
61.18.224.0/24 maxlen: 24
61.18.226.0/24 maxlen: 24
61.18.228.0/24 maxlen: 24
61.18.229.0/24 maxlen: 24
61.18.230.0/24 maxlen: 24
61.18.231.0/24 maxlen: 24
61.18.232.0/24 maxlen: 24
61.18.234.0/24 maxlen: 24
61.18.236.0/24 maxlen: 24
61.18.240.0/24 maxlen: 24
61.18.241.0/24 maxlen: 24
61.18.242.0/24 maxlen: 24
61.18.243.0/24 maxlen: 24
61.18.244.0/24 maxlen: 24
61.18.245.0/24 maxlen: 24
61.18.246.0/24 maxlen: 24
61.18.247.0/24 maxlen: 24
61.18.248.0/24 maxlen: 24
61.18.249.0/24 maxlen: 24
61.18.250.0/24 maxlen: 24
61.18.251.0/24 maxlen: 24
61.18.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 19:48:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3216 (0xc90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Sep 2 10:35:23 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a97fbeb-e0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:fc:7a:53:52:3c:e4:87:aa:6d:6b:2e:99:
7b:a6:ad:c8:4a:4e:5a:cc:83:b3:a7:c5:af:16:c3:
c1:1d:f9:50:f8:df:5d:b5:76:9c:b6:68:ec:5c:73:
10:d1:03:ed:6a:3c:6b:24:53:86:91:aa:3f:fd:fd:
a8:3c:9e:88:59:a3:1f:ee:7e:0c:55:f0:ce:22:32:
16:b2:36:4d:f3:85:7e:c1:b4:cc:8d:0e:b3:46:d2:
ce:dc:4c:b7:1c:8a:7b:9f:ab:b4:1a:70:cc:21:e2:
e5:02:18:d9:28:b7:fe:2e:cb:62:b5:d2:7b:c3:4c:
c9:27:c3:35:06:81:04:ec:71:01:6e:eb:8c:92:2c:
a9:b8:a4:4a:63:10:78:29:7b:af:df:41:5e:61:63:
3a:2a:bd:ed:88:2c:ae:93:b8:3e:c0:82:07:79:b4:
bb:4c:a3:07:a2:e1:09:c5:05:0a:0e:99:17:6e:da:
4c:84:15:45:11:d4:25:82:5a:44:c3:c2:75:2f:58:
92:68:18:2c:24:2f:da:49:52:5b:be:c4:f4:ac:8b:
c2:be:74:5d:98:5d:41:1e:12:e6:73:b4:4e:a5:eb:
a7:82:14:7d:2d:1e:b2:b7:ee:90:c1:c8:52:47:ef:
b1:01:6e:c4:66:d8:cd:da:99:27:c9:bc:f2:2e:0d:
54:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F9:AE:ED:0F:1B:36:A8:F1:0E:E9:4E:74:EC:59:3A:1F:4C:34:FD
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/080C5946A2CA11F1AA7FA5DE4011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.18.128.0/23
61.18.131.0-61.18.133.255
61.18.144.0-61.18.146.255
61.18.148.0/24
61.18.150.0/24
61.18.152.0/23
61.18.155.0/24
61.18.157.0/24
61.18.159.0/24
61.18.161.0/24
61.18.163.0/24
61.18.165.0/24
61.18.178.0/24
61.18.188.0/24
61.18.192.0/22
61.18.197.0-61.18.201.255
61.18.206.0/23
61.18.210.0/23
61.18.213.0-61.18.214.255
61.18.216.0-61.18.224.255
61.18.226.0/24
61.18.228.0-61.18.232.255
61.18.234.0/24
61.18.236.0/24
61.18.240.0-61.18.251.255
61.18.255.0/24
Signature Algorithm: sha256WithRSAEncryption
45:1e:c4:c7:d3:d5:64:c7:fc:9d:c9:c7:5e:f5:48:c7:28:c7:
fa:6a:0d:6b:05:58:94:8b:ad:34:26:f5:62:4a:53:17:8b:5b:
d3:f9:bc:37:e7:0d:37:90:47:96:ca:66:a8:d5:f8:e4:00:d9:
33:ea:9c:d2:15:98:e5:db:44:f2:52:f3:07:90:65:5d:fe:45:
26:2d:c1:64:9f:d3:63:d9:1f:4f:97:31:47:a0:52:dd:07:24:
24:19:14:7e:39:7b:fa:3a:5c:48:62:c4:19:ce:79:a4:8e:53:
15:6c:c9:6c:41:40:2e:f4:fe:c1:9a:83:8c:c8:d9:ea:34:7c:
b0:b2:76:bd:ff:cb:7f:02:e4:79:2b:b8:21:35:75:85:98:cd:
7e:6d:da:95:82:9e:0a:71:38:20:dc:fe:4b:73:bd:5f:19:a4:
cf:7e:1a:a5:78:85:10:75:98:74:4c:fa:a5:0a:fd:67:d9:d2:
f3:4c:18:ed:95:93:d3:bc:87:3b:5e:e6:24:f2:30:ac:2f:16:
57:cc:17:e4:6e:f2:46:92:f8:f2:74:48:78:03:aa:df:87:6d:
1c:d0:e7:e5:df:bd:6d:2f:39:32:50:ba:e5:23:5c:cc:19:f2:
90:ee:c7:7e:fb:1b:67:a8:6b:c1:8e:6f:75:f3:fa:7b:4a:71:
34:63:be:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 23:09:43 2026 by rpki-client