Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FF95FC4A72F11F1AA952ECB6711F970.roa
File: 9FF95FC4A72F11F1AA952ECB6711F970.roa (raw, json)
Hash identifier: LBQuf5/aYMuhhOauR5esSnJVHJP/gVhQK7ylUK6F2tY=
Subject key identifier: 2C:4E:05:BC:CB:CB:0E:60:F1:1A:05:85:06:F5:52:9F:59:0D:E8:8A
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0C9B
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FF95FC4A72F11F1AA952ECB6711F970.roa
Signing time: Thu 03 Sep 2026 00:53:53 +0000
ROA not before: Thu 03 Sep 2026 00:53:53 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 218955
IP address blocks: 61.18.129.0/24 maxlen: 24
61.18.131.0/24 maxlen: 24
61.18.132.0/24 maxlen: 24
61.18.144.0/24 maxlen: 24
61.18.145.0/24 maxlen: 24
61.18.146.0/24 maxlen: 24
61.18.147.0/24 maxlen: 24
61.18.148.0/24 maxlen: 24
61.18.149.0/24 maxlen: 24
61.18.150.0/24 maxlen: 24
61.18.151.0/24 maxlen: 24
61.18.152.0/24 maxlen: 24
61.18.153.0/24 maxlen: 24
61.18.154.0/24 maxlen: 24
61.18.155.0/24 maxlen: 24
61.18.156.0/24 maxlen: 24
61.18.157.0/24 maxlen: 24
61.18.158.0/24 maxlen: 24
61.18.159.0/24 maxlen: 24
61.18.160.0/24 maxlen: 24
61.18.161.0/24 maxlen: 24
61.18.162.0/24 maxlen: 24
61.18.163.0/24 maxlen: 24
61.18.164.0/24 maxlen: 24
61.18.165.0/24 maxlen: 24
61.18.171.0/24 maxlen: 24
61.18.172.0/24 maxlen: 24
61.18.173.0/24 maxlen: 24
61.18.174.0/24 maxlen: 24
61.18.175.0/24 maxlen: 24
61.18.176.0/24 maxlen: 24
61.18.177.0/24 maxlen: 24
61.18.179.0/24 maxlen: 24
61.18.180.0/24 maxlen: 24
61.18.182.0/24 maxlen: 24
61.18.183.0/24 maxlen: 24
61.18.184.0/24 maxlen: 24
61.18.185.0/24 maxlen: 24
61.18.186.0/24 maxlen: 24
61.18.187.0/24 maxlen: 24
61.18.189.0/24 maxlen: 24
61.18.191.0/24 maxlen: 24
61.18.192.0/24 maxlen: 24
61.18.193.0/24 maxlen: 24
61.18.194.0/24 maxlen: 24
61.18.195.0/24 maxlen: 24
61.18.196.0/24 maxlen: 24
61.18.197.0/24 maxlen: 24
61.18.198.0/24 maxlen: 24
61.18.200.0/24 maxlen: 24
61.18.206.0/24 maxlen: 24
61.18.207.0/24 maxlen: 24
61.18.211.0/24 maxlen: 24
61.18.213.0/24 maxlen: 24
61.18.216.0/24 maxlen: 24
61.18.217.0/24 maxlen: 24
61.18.218.0/24 maxlen: 24
61.18.219.0/24 maxlen: 24
61.18.220.0/24 maxlen: 24
61.18.221.0/24 maxlen: 24
61.18.222.0/24 maxlen: 24
61.18.223.0/24 maxlen: 24
61.18.224.0/24 maxlen: 24
61.18.225.0/24 maxlen: 24
61.18.226.0/24 maxlen: 24
61.18.227.0/24 maxlen: 24
61.18.228.0/24 maxlen: 24
61.18.229.0/24 maxlen: 24
61.18.230.0/24 maxlen: 24
61.18.231.0/24 maxlen: 24
61.18.232.0/24 maxlen: 24
61.18.233.0/24 maxlen: 24
61.18.234.0/24 maxlen: 24
61.18.235.0/24 maxlen: 24
61.18.236.0/24 maxlen: 24
61.18.237.0/24 maxlen: 24
61.18.239.0/24 maxlen: 24
61.18.240.0/24 maxlen: 24
61.18.241.0/24 maxlen: 24
61.18.242.0/24 maxlen: 24
61.18.243.0/24 maxlen: 24
61.18.244.0/24 maxlen: 24
61.18.245.0/24 maxlen: 24
61.18.246.0/24 maxlen: 24
61.18.247.0/24 maxlen: 24
61.18.248.0/24 maxlen: 24
61.18.249.0/24 maxlen: 24
61.18.250.0/24 maxlen: 24
61.18.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 00:53:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3227 (0xc9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Sep 3 00:53:53 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a98c521-fa05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f8:89:96:19:5e:53:b6:63:d1:dc:8f:e3:42:
bc:c1:d4:20:db:c9:35:49:26:60:b6:bd:82:77:aa:
ef:14:55:75:e1:04:99:5b:6b:24:52:88:58:f4:38:
6c:fc:82:f8:b4:35:4b:71:09:94:0b:13:2f:0d:8d:
f5:78:a3:c5:aa:6b:88:a4:73:b5:13:10:86:fb:41:
49:39:94:a4:76:f9:bb:14:e2:ef:5c:38:9c:dc:2c:
4d:af:28:7f:4d:68:a8:51:55:04:4d:b3:8d:9f:cd:
cf:b1:bf:16:79:62:9f:77:a2:dc:3a:46:5f:b9:b7:
ae:3b:d1:1e:1c:63:aa:28:28:04:0c:3e:ce:12:5e:
81:11:fa:c6:10:06:f8:5a:b7:c8:63:54:0c:b5:c0:
e7:e7:82:30:c3:3c:9a:25:20:4d:a5:1f:99:38:f8:
94:29:31:1b:45:a3:17:76:7f:db:ed:1a:f5:3d:f8:
27:2b:53:18:8e:b1:6c:28:75:e7:5e:3f:bd:5b:21:
55:c2:fe:4e:30:5c:26:6e:9b:73:db:c5:99:5f:9f:
fb:e6:4e:a5:0e:2f:a2:9f:23:21:5b:80:55:01:64:
4d:29:3b:ed:76:63:84:d4:a4:b6:40:55:4a:d2:76:
97:a3:da:31:bc:f0:38:7b:15:77:4c:ad:ee:9c:84:
e9:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4E:05:BC:CB:CB:0E:60:F1:1A:05:85:06:F5:52:9F:59:0D:E8:8A
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FF95FC4A72F11F1AA952ECB6711F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.18.129.0/24
61.18.131.0-61.18.132.255
61.18.144.0-61.18.165.255
61.18.171.0-61.18.177.255
61.18.179.0-61.18.180.255
61.18.182.0-61.18.187.255
61.18.189.0/24
61.18.191.0-61.18.198.255
61.18.200.0/24
61.18.206.0/23
61.18.211.0/24
61.18.213.0/24
61.18.216.0-61.18.237.255
61.18.239.0-61.18.251.255
Signature Algorithm: sha256WithRSAEncryption
15:83:c6:8c:45:c6:41:70:3f:08:ea:73:42:30:f6:ef:5a:0e:
01:19:70:d2:71:70:bf:43:a7:23:03:07:4c:ca:8a:c4:1c:93:
a7:de:7f:12:4e:72:33:52:39:2e:cf:24:da:c3:33:e6:2f:9c:
8a:c7:cf:02:a8:25:12:a0:37:00:f1:85:36:fd:3b:80:ab:69:
36:01:62:64:5b:ba:79:b0:db:27:48:fd:be:f8:c5:23:98:66:
67:15:36:88:f7:58:8c:10:b5:01:35:44:8e:42:30:54:db:08:
68:25:07:22:1f:c1:46:ce:1a:3b:0c:5c:1c:3d:d5:dd:53:18:
71:fc:63:36:e7:3d:92:b4:90:de:a5:75:35:2b:f6:79:53:2c:
80:cc:a7:e4:ec:a6:d7:75:08:9d:bf:73:ff:53:69:9c:d6:e7:
08:e3:8f:7f:c6:86:0e:2a:39:0c:7d:b4:7c:5a:d3:b7:e1:6c:
5d:dc:91:75:14:a4:06:54:e3:a6:81:50:9f:32:a5:08:f6:2e:
51:d3:45:69:da:b7:44:c9:4b:93:c6:ee:49:2e:8d:77:40:0d:
f2:e2:6a:07:5a:5e:92:72:de:7d:23:ca:f7:f0:74:f1:99:6f:
af:38:4f:98:18:e2:c6:89:27:22:36:6c:9e:bb:1a:eb:8e:11:
f7:8f:cb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 11:04:48 2026 by rpki-client