Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4F7540B64BE311F096B8CE67C4F9AE02.roa
File: 4F7540B64BE311F096B8CE67C4F9AE02.roa (raw, json)
Hash identifier: OWsF7834Yu5v9W0GoF/WYWdfE23zRqfXi/hoRRScwk8=
Subject key identifier: 38:6D:EC:C2:C5:D3:6E:C6:46:13:25:15:70:0F:26:B9:ED:89:FA:35
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0C1F
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4F7540B64BE311F096B8CE67C4F9AE02.roa
Signing time: Thu 14 May 2026 04:26:10 +0000
ROA not before: Thu 14 May 2026 04:26:10 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 149175
IP address blocks: 61.15.64.0/24 maxlen: 24
61.15.65.0/24 maxlen: 24
61.15.66.0/24 maxlen: 24
61.15.67.0/24 maxlen: 24
61.15.68.0/24 maxlen: 24
61.15.69.0/24 maxlen: 24
61.15.70.0/23 maxlen: 23
61.15.70.0/24 maxlen: 24
61.15.71.0/24 maxlen: 24
61.15.72.0/22 maxlen: 22
61.15.76.0/22 maxlen: 22
61.15.80.0/22 maxlen: 22
61.15.84.0/23 maxlen: 23
61.15.84.0/24 maxlen: 24
61.15.85.0/24 maxlen: 24
61.15.86.0/24 maxlen: 24
61.15.87.0/24 maxlen: 24
61.15.88.0/22 maxlen: 24
61.15.97.0/24 maxlen: 24
61.15.112.0/24 maxlen: 24
61.15.113.0/24 maxlen: 24
61.15.114.0/24 maxlen: 24
61.15.115.0/24 maxlen: 24
203.168.221.0/24 maxlen: 24
203.168.238.0/24 maxlen: 24
203.168.244.0/24 maxlen: 24
203.168.245.0/24 maxlen: 24
203.168.246.0/24 maxlen: 24
203.168.247.0/24 maxlen: 24
203.168.248.0/24 maxlen: 24
203.168.249.0/24 maxlen: 24
203.168.250.0/24 maxlen: 24
203.168.251.0/24 maxlen: 24
203.168.253.0/24 maxlen: 24
203.168.255.0/24 maxlen: 24
222.167.36.0/22 maxlen: 22
222.167.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 19:50:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3103 (0xc1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: May 14 04:26:10 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a054ee2-a39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:72:f7:a5:2e:91:0b:17:95:4f:f5:2a:68:04:
cd:e2:1b:63:95:47:67:a7:e2:47:08:10:49:bf:51:
0d:8b:69:58:e1:11:94:eb:a8:f7:23:8f:33:97:36:
66:02:85:b8:53:e2:54:7c:21:08:b4:fc:16:86:45:
76:bd:21:46:8d:28:84:54:45:82:79:7f:74:1d:7a:
e5:8a:37:51:93:f8:84:46:91:f7:82:66:61:81:18:
1a:e2:95:c9:86:51:b1:04:b9:95:76:83:f4:a5:a2:
d0:0e:d8:d6:0c:59:9d:37:4e:2c:2b:ed:18:8a:cf:
e5:fc:e3:ca:75:45:71:2d:00:e3:5e:ef:3a:3c:dc:
5c:2c:c4:4b:23:df:69:69:ed:8c:66:0b:66:b3:94:
74:bc:14:40:ec:87:5f:d6:00:da:ac:ad:3e:5f:08:
4d:43:91:7e:3d:bb:0c:31:66:93:df:bc:65:29:a4:
f8:48:1e:aa:6b:88:cc:87:3a:db:d9:41:6d:eb:66:
c7:78:d7:f5:19:42:a1:cc:58:2f:4a:3e:6c:b6:4f:
b6:d4:03:a2:97:4c:90:cb:83:6c:c1:39:dd:95:74:
e6:cf:6b:9b:ea:b1:52:53:6c:b8:e9:1d:e7:ee:84:
9c:5b:3b:03:5b:2b:59:aa:40:b5:ac:5a:0e:b0:17:
24:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6D:EC:C2:C5:D3:6E:C6:46:13:25:15:70:0F:26:B9:ED:89:FA:35
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4F7540B64BE311F096B8CE67C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.15.64.0-61.15.91.255
61.15.97.0/24
61.15.112.0/22
203.168.221.0/24
203.168.238.0/24
203.168.244.0-203.168.251.255
203.168.253.0/24
203.168.255.0/24
222.167.36.0-222.167.40.255
Signature Algorithm: sha256WithRSAEncryption
6e:8a:c8:fa:4e:f7:ad:73:bb:e7:4c:f3:4a:c4:d2:e5:7d:f8:
1f:35:18:85:93:3e:f1:38:04:82:39:d9:03:b2:ea:86:71:bb:
39:8a:5a:55:05:a1:4a:33:3d:af:64:b8:df:c0:c4:e1:f7:14:
7a:90:62:04:d3:ef:a8:ea:85:27:ae:d4:d0:c7:80:63:dd:e3:
60:ba:de:43:f9:64:0f:66:b8:92:16:ba:4e:78:25:49:f8:13:
3a:63:61:62:27:e3:8b:4a:17:49:53:35:1e:5c:3f:14:a7:2b:
aa:9e:6a:7b:8c:5e:da:72:3f:c9:6a:37:42:2e:ca:51:18:03:
35:e4:01:a7:34:83:f2:03:e3:22:86:d7:b0:29:56:8c:c8:6c:
67:ba:6f:a4:00:55:c4:4c:e7:a1:24:f0:32:2d:4d:30:4b:14:
46:b8:80:11:06:11:2b:ea:c5:a5:14:7f:3f:8e:ee:c3:f6:f3:
42:12:33:a2:3a:c2:a4:2f:e5:5a:8d:1e:48:7e:9a:49:e9:5d:
95:d0:70:85:64:09:b9:71:8f:24:c8:b8:bf:0d:09:13:44:f0:
bf:55:f2:24:47:03:72:50:1f:be:fe:5f:be:a3:80:2a:8a:0b:
03:a4:93:9e:31:7f:88:15:d1:eb:fb:a1:d2:14:be:29:06:37:
50:58:ce:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:21:06 2026 by rpki-client