Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/C0BDE4BAA2C911F1A97622974011F970.roa
File: C0BDE4BAA2C911F1A97622974011F970.roa (raw, json)
Hash identifier: rq88HCWxRTaBzbqWgrsjyYdjgZwQJSbeFjPVA5NKkY4=
Subject key identifier: 9F:3D:6F:1E:17:88:26:2E:35:8F:A4:93:C3:F0:BA:A1:70:3D:D7:58
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0C86
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/C0BDE4BAA2C911F1A97622974011F970.roa
Signing time: Wed 02 Sep 2026 00:43:22 +0000
ROA not before: Wed 02 Sep 2026 00:43:22 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 219182
IP address blocks: 61.18.129.0/24 maxlen: 24
61.18.131.0/24 maxlen: 24
61.18.132.0/24 maxlen: 24
61.18.135.0/24 maxlen: 24
61.18.144.0/24 maxlen: 24
61.18.146.0/24 maxlen: 24
61.18.148.0/24 maxlen: 24
61.18.150.0/24 maxlen: 24
61.18.152.0/24 maxlen: 24
61.18.192.0/24 maxlen: 24
61.18.194.0/24 maxlen: 24
61.18.197.0/24 maxlen: 24
61.18.200.0/24 maxlen: 24
61.18.203.0/24 maxlen: 24
61.18.206.0/24 maxlen: 24
61.18.211.0/24 maxlen: 24
61.18.213.0/24 maxlen: 24
61.18.215.0/24 maxlen: 24
61.18.218.0/24 maxlen: 24
61.18.220.0/24 maxlen: 24
61.18.222.0/24 maxlen: 24
61.18.229.0/24 maxlen: 24
61.18.231.0/24 maxlen: 24
61.18.234.0/24 maxlen: 24
61.18.236.0/24 maxlen: 24
61.18.240.0/24 maxlen: 24
61.18.242.0/24 maxlen: 24
61.18.249.0/24 maxlen: 24
61.18.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 09 Sep 2026 06:29:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3206 (0xc86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Sep 2 00:43:22 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a97712a-ea92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:79:54:3f:64:3e:a5:5c:1b:11:9b:e7:9d:
a7:d3:d8:a2:12:e1:b9:e8:26:58:d3:65:6a:c5:ef:
2e:dc:18:77:8b:c9:d6:74:19:91:88:68:23:1e:c2:
35:a8:ba:bc:f3:98:f8:21:41:07:8a:d4:17:8d:3b:
85:b5:11:82:8a:ae:7f:a4:a9:3a:2e:3e:46:49:98:
9e:f4:93:6c:79:6a:03:fc:4a:82:00:07:66:9b:57:
20:c8:f2:7f:6e:43:34:d5:24:87:6f:2f:24:f3:e2:
52:af:1e:e6:1f:98:86:07:c0:c8:f0:f1:52:00:07:
da:e7:ee:dd:09:78:d5:a9:d6:c6:1f:ca:c8:67:8f:
87:fd:13:1d:b4:86:8a:75:6e:c5:5f:d4:a0:04:85:
93:a7:af:41:fd:cd:2f:23:1c:10:cb:c1:db:96:43:
ef:58:c5:ec:cc:24:32:93:00:ed:7b:f4:71:bb:4c:
1d:f8:a3:94:59:09:a3:84:87:da:d0:5f:16:ec:9e:
cb:f2:59:fe:e5:8f:9d:22:24:c8:12:ef:58:67:20:
88:69:79:bb:84:4f:c7:66:6f:72:1c:2b:1a:ed:38:
9c:3a:ad:dc:6d:83:59:96:21:2e:5a:e2:54:60:5c:
c0:79:6b:b0:9a:bf:cc:6c:a9:29:13:7d:07:a3:a5:
16:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3D:6F:1E:17:88:26:2E:35:8F:A4:93:C3:F0:BA:A1:70:3D:D7:58
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/C0BDE4BAA2C911F1A97622974011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.18.129.0/24
61.18.131.0-61.18.132.255
61.18.135.0/24
61.18.144.0/24
61.18.146.0/24
61.18.148.0/24
61.18.150.0/24
61.18.152.0/24
61.18.192.0/24
61.18.194.0/24
61.18.197.0/24
61.18.200.0/24
61.18.203.0/24
61.18.206.0/24
61.18.211.0/24
61.18.213.0/24
61.18.215.0/24
61.18.218.0/24
61.18.220.0/24
61.18.222.0/24
61.18.229.0/24
61.18.231.0/24
61.18.234.0/24
61.18.236.0/24
61.18.240.0/24
61.18.242.0/24
61.18.249.0/24
61.18.251.0/24
Signature Algorithm: sha256WithRSAEncryption
44:9f:03:ff:32:f1:63:71:90:b4:a6:b8:e0:79:78:62:0e:8f:
ae:ba:aa:4d:79:db:c5:35:96:58:db:90:ec:a8:a1:04:96:a1:
48:f8:5a:66:17:23:78:9e:59:a4:76:b8:3d:10:7e:43:1d:87:
0e:3d:e2:d5:79:f0:69:d3:11:c8:44:e3:cb:55:36:5a:f2:71:
ba:03:20:c0:04:76:7e:1b:50:b9:21:70:4b:85:7c:7e:80:5c:
aa:30:3f:44:2d:ec:1e:e5:b2:36:cd:97:ec:cc:8c:85:05:13:
eb:4a:5c:7a:3a:b0:0a:40:f8:d9:72:9b:31:ec:78:87:52:10:
e2:aa:9d:fc:c6:82:7f:b4:ae:f2:23:ca:18:73:6f:4e:70:20:
15:78:be:9f:a5:7d:49:f0:5e:c1:b2:f1:61:a0:9c:c2:de:be:
60:bb:07:3b:63:72:42:71:85:4a:36:71:79:b1:3a:6b:da:26:
69:eb:07:6a:94:33:43:e2:3d:ba:65:72:f2:73:18:2d:94:21:
5d:81:94:1b:99:2f:17:22:c5:74:f1:54:e7:28:32:ec:42:3b:
5c:20:71:f9:f2:e1:15:f6:e3:cc:5a:92:01:8d:73:44:56:88:
fe:b2:e5:2a:4f:77:b9:21:ab:cc:60:08:12:89:12:b8:9d:60:
9b:09:70:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 2 11:04:28 2026 by rpki-client