Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/690BE3D6953411F1955889105B11F970.roa
File: 690BE3D6953411F1955889105B11F970.roa (raw, json)
Hash identifier: vYf8AhluHp5nHk/+YLjGPDpuNIozNH4MXlZdB0tX+ew=
Subject key identifier: 9C:F4:D1:58:F7:0A:AA:AB:E7:1C:84:59:82:28:78:23:1C:5A:AF:62
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0C5E
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/690BE3D6953411F1955889105B11F970.roa
Signing time: Tue 11 Aug 2026 03:26:16 +0000
ROA not before: Tue 11 Aug 2026 03:26:16 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 9908
IP address blocks: 61.10.0.0/16 maxlen: 16
61.10.0.0/17 maxlen: 17
61.10.0.0/18 maxlen: 20
61.10.64.0/18 maxlen: 18
61.10.64.0/19 maxlen: 20
61.10.96.0/19 maxlen: 20
61.10.128.0/17 maxlen: 20
61.15.0.0/19 maxlen: 20
61.15.32.0/19 maxlen: 19
61.15.32.0/20 maxlen: 20
61.15.48.0/20 maxlen: 20
61.15.64.0/18 maxlen: 18
61.15.64.0/19 maxlen: 19
61.15.64.0/20 maxlen: 20
61.15.64.0/21 maxlen: 21
61.15.80.0/20 maxlen: 20
61.15.96.0/19 maxlen: 19
61.15.96.0/20 maxlen: 20
61.15.104.0/22 maxlen: 22
61.15.106.0/23 maxlen: 23
61.15.112.0/20 maxlen: 20
61.15.126.0/24 maxlen: 24
61.15.128.0/17 maxlen: 20
61.18.0.0/17 maxlen: 20
125.59.0.0/16 maxlen: 20
203.83.64.0/18 maxlen: 18
203.168.222.0/23 maxlen: 24
203.168.236.0/23 maxlen: 24
218.252.0.0/16 maxlen: 16
218.252.0.0/17 maxlen: 20
218.252.128.0/17 maxlen: 20
218.253.0.0/18 maxlen: 20
222.166.0.0/16 maxlen: 20
222.167.0.0/19 maxlen: 20
222.167.41.0/24 maxlen: 24
222.167.42.0/23 maxlen: 23
222.167.44.0/22 maxlen: 22
222.167.48.0/20 maxlen: 20
222.167.64.0/19 maxlen: 24
222.167.128.0/19 maxlen: 24
222.167.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 16:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3166 (0xc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Aug 11 03:26:16 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a7a9658-37a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:57:2d:25:01:ca:fa:02:b5:7c:b6:1a:fa:f8:
eb:da:5b:37:cd:0c:44:17:4e:b5:c1:42:36:53:27:
0f:a9:8d:37:39:c1:77:0d:38:e0:44:fc:39:5b:30:
67:ee:3e:c1:fe:36:6b:9a:47:a4:82:7c:d2:f9:c5:
41:75:df:d9:72:e0:fb:63:a4:d6:c2:74:36:46:d0:
f1:31:6e:58:3f:58:37:35:87:0e:ba:85:6c:f0:83:
40:24:b4:25:15:7a:1b:7a:5a:05:5a:5f:5f:c5:2a:
28:27:ec:cc:85:5c:8c:05:cc:5f:91:81:f4:46:0e:
3e:d0:9d:4e:39:3c:f2:d9:a6:36:67:e9:f6:02:09:
d2:1b:9f:05:a3:3a:a1:d2:c6:80:3e:05:a7:57:3e:
ff:11:1e:23:bb:8a:4a:07:ba:9b:ee:b4:2e:4c:d4:
9e:f4:bc:f9:dd:69:77:0e:85:5b:dd:0d:b6:e6:11:
14:1c:92:20:c8:32:d3:47:fa:6f:e2:44:a2:bb:16:
3c:bd:aa:9a:fe:bb:29:87:41:f2:86:8e:5b:d6:74:
f7:78:a8:ea:c6:8e:6f:59:30:e2:63:9f:8b:6e:1e:
eb:82:56:f4:62:2e:74:4d:b2:6a:92:2e:f0:94:e5:
16:eb:e1:f1:91:da:40:5e:2e:b7:e8:62:99:ce:f3:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F4:D1:58:F7:0A:AA:AB:E7:1C:84:59:82:28:78:23:1C:5A:AF:62
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/690BE3D6953411F1955889105B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.10.0.0/16
61.15.0.0/16
61.18.0.0/17
125.59.0.0/16
203.83.64.0/18
203.168.222.0/23
203.168.236.0/23
218.252.0.0-218.253.63.255
222.166.0.0-222.167.31.255
222.167.41.0-222.167.95.255
222.167.128.0/18
Signature Algorithm: sha256WithRSAEncryption
93:74:39:49:7c:5d:70:b7:c6:43:fa:e3:7d:d6:96:a0:61:6c:
5d:c2:cf:11:7f:05:10:12:ac:0f:f9:00:2f:a7:51:de:9f:43:
dd:83:83:98:be:9a:f6:ce:32:5f:6d:3a:d6:5c:d7:94:9f:d3:
9b:5f:05:f7:05:17:69:bd:ed:73:74:99:4d:83:02:d4:c3:be:
96:bd:b1:ff:6c:46:52:fc:ab:27:22:fe:7b:96:e4:9f:e9:c4:
5e:f6:81:8e:ea:62:2f:bb:98:60:d6:5d:20:25:fc:f6:6c:15:
10:b1:e6:13:b8:7c:d0:07:12:e8:39:69:2c:50:a8:16:c9:b9:
16:bd:d0:52:bb:fa:6e:88:41:db:19:55:d8:72:55:1c:2e:71:
00:85:21:11:e0:71:b1:7a:7a:b9:54:a1:60:1b:fc:c3:f1:53:
51:71:81:10:0e:4c:1d:2f:24:74:c4:c4:df:3c:07:2f:ac:86:
da:8f:9b:12:a9:dd:92:13:ee:42:78:86:99:34:fa:d0:91:1b:
3b:86:6b:c6:7e:2f:22:8d:3a:18:06:0d:23:12:6a:77:43:6f:
de:c9:20:0f:90:4e:32:46:c5:c7:fa:b6:e8:87:67:30:5d:1e:
f4:73:3a:d2:e5:48:b9:c9:91:3c:cb:fb:30:56:06:5b:fa:18:
e0:f9:6b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:17:45 2026 by rpki-client