Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/DBB6091ECC5411F1A00DCF340966CEF9.roa
File: DBB6091ECC5411F1A00DCF340966CEF9.roa (raw, json)
Hash identifier: juxqk2RCajxGHKX14aYdSxrBkAyZhmqnIobVdcQWwMQ=
Subject key identifier: 94:BB:B1:20:82:EC:FD:52:A9:08:71:DE:B4:FE:30:74:AE:97:70:D7
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0F43
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/DBB6091ECC5411F1A00DCF340966CEF9.roa
Signing time: Sun 25 Oct 2026 06:45:30 +0000
ROA not before: Sun 25 Oct 2026 06:45:30 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 834
IP address blocks: 61.18.129.0/24 maxlen: 24
61.18.131.0/24 maxlen: 24
61.18.133.0/24 maxlen: 24
61.18.135.0/24 maxlen: 24
61.18.144.0/24 maxlen: 24
61.18.146.0/24 maxlen: 24
61.18.147.0/24 maxlen: 24
61.18.148.0/24 maxlen: 24
61.18.149.0/24 maxlen: 24
61.18.150.0/24 maxlen: 24
61.18.152.0/24 maxlen: 24
61.18.153.0/24 maxlen: 24
61.18.155.0/24 maxlen: 24
61.18.157.0/24 maxlen: 24
61.18.159.0/24 maxlen: 24
61.18.166.0/23 maxlen: 24
61.18.168.0/23 maxlen: 24
61.18.177.0/24 maxlen: 24
61.18.179.0/24 maxlen: 24
61.18.185.0/24 maxlen: 24
61.18.187.0/24 maxlen: 24
61.18.191.0/24 maxlen: 24
61.18.193.0/24 maxlen: 24
61.18.195.0/24 maxlen: 24
61.18.197.0/24 maxlen: 24
61.18.198.0/24 maxlen: 24
61.18.199.0/24 maxlen: 24
61.18.200.0/24 maxlen: 24
61.18.201.0/24 maxlen: 24
61.18.203.0/24 maxlen: 24
61.18.205.0/24 maxlen: 24
61.18.206.0/24 maxlen: 24
61.18.207.0/24 maxlen: 24
61.18.210.0/24 maxlen: 24
61.18.211.0/24 maxlen: 24
61.18.213.0/24 maxlen: 24
61.18.214.0/24 maxlen: 24
61.18.215.0/24 maxlen: 24
61.18.216.0/24 maxlen: 24
61.18.218.0/24 maxlen: 24
61.18.220.0/24 maxlen: 24
61.18.222.0/24 maxlen: 24
61.18.224.0/24 maxlen: 24
61.18.225.0/24 maxlen: 24
61.18.226.0/24 maxlen: 24
61.18.227.0/24 maxlen: 24
61.18.228.0/24 maxlen: 24
61.18.229.0/24 maxlen: 24
61.18.230.0/24 maxlen: 24
61.18.231.0/24 maxlen: 24
61.18.232.0/24 maxlen: 24
61.18.233.0/24 maxlen: 24
61.18.234.0/24 maxlen: 24
61.18.235.0/24 maxlen: 24
61.18.236.0/24 maxlen: 24
61.18.237.0/24 maxlen: 24
61.18.239.0/24 maxlen: 24
61.18.240.0/24 maxlen: 24
61.18.241.0/24 maxlen: 24
61.18.242.0/24 maxlen: 24
61.18.243.0/24 maxlen: 24
61.18.244.0/24 maxlen: 24
61.18.245.0/24 maxlen: 24
61.18.246.0/24 maxlen: 24
61.18.247.0/24 maxlen: 24
61.18.248.0/24 maxlen: 24
61.18.249.0/24 maxlen: 24
61.18.250.0/24 maxlen: 24
61.18.251.0/24 maxlen: 24
61.18.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Nov 2026 06:45:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3907 (0xf43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Oct 25 06:45:30 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6adda58a-2116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:d7:ff:9c:9d:41:3c:2d:0b:15:9d:da:c7:
7b:e4:c3:0d:66:25:1b:77:e5:66:9e:f5:dd:03:8d:
b4:4b:54:69:62:e5:2c:f4:3f:55:77:af:33:ee:18:
67:d7:64:20:4b:ff:c4:8e:4c:68:dc:2d:61:1b:0c:
67:23:1e:79:c8:c8:94:14:a1:ad:1f:9f:ba:35:4c:
56:0b:d8:d9:74:bf:cf:70:02:0c:d7:ad:7c:2d:65:
9f:88:22:31:b7:bc:46:d5:e9:9c:2c:e0:90:ef:9c:
41:22:6e:ad:41:86:0e:c9:04:5f:c9:c6:7a:97:4e:
2f:66:6a:39:a3:72:da:50:41:8e:3e:d4:b5:da:76:
15:60:59:4b:28:e6:b4:c8:bb:55:5f:51:e4:da:68:
54:86:b1:ab:7f:53:9f:73:e0:6d:83:04:3f:2e:80:
fa:fc:78:57:5a:07:bb:d2:a0:8c:77:02:0a:c8:d9:
c7:f8:5b:5a:16:f3:09:65:9c:db:4e:d6:6c:71:ab:
11:cf:7c:54:09:09:7f:a2:c4:59:24:96:fd:3f:bb:
bb:8d:74:a4:59:c1:27:96:9f:93:91:e8:94:9b:a5:
88:37:02:b9:ad:95:ea:3f:23:3a:fa:65:84:fb:66:
64:ee:99:0d:a3:d7:a2:6e:ac:b4:9c:5b:fe:b0:06:
19:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BB:B1:20:82:EC:FD:52:A9:08:71:DE:B4:FE:30:74:AE:97:70:D7
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/DBB6091ECC5411F1A00DCF340966CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
61.18.129.0/24
61.18.131.0/24
61.18.133.0/24
61.18.135.0/24
61.18.144.0/24
61.18.146.0-61.18.150.255
61.18.152.0/23
61.18.155.0/24
61.18.157.0/24
61.18.159.0/24
61.18.166.0-61.18.169.255
61.18.177.0/24
61.18.179.0/24
61.18.185.0/24
61.18.187.0/24
61.18.191.0/24
61.18.193.0/24
61.18.195.0/24
61.18.197.0-61.18.201.255
61.18.203.0/24
61.18.205.0-61.18.207.255
61.18.210.0/23
61.18.213.0-61.18.216.255
61.18.218.0/24
61.18.220.0/24
61.18.222.0/24
61.18.224.0-61.18.237.255
61.18.239.0-61.18.251.255
61.18.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:bf:73:62:7a:13:31:a1:0c:db:3f:e0:b4:c0:a9:34:56:e0:
6e:04:91:a3:24:d1:3a:b8:f3:99:ef:bc:10:bd:5a:c7:ae:52:
15:d7:e1:74:da:f7:70:c1:50:50:a9:64:38:f2:4f:17:c9:c6:
05:7b:08:eb:a9:84:6c:20:38:91:08:73:08:27:ff:19:37:49:
80:a0:0d:b8:94:bf:e2:42:8e:50:01:78:ae:54:3f:9c:d5:de:
95:a8:b1:d9:dd:29:18:f2:b8:d8:88:32:0e:eb:da:c1:5a:ba:
6f:1d:bc:43:a0:61:2b:36:28:a1:b8:10:0f:3f:7e:e0:28:8d:
96:9c:df:62:ca:2b:c0:0e:c2:54:4c:1b:0f:ea:72:fd:bf:9c:
40:76:ce:22:bc:e1:cd:da:a1:6e:df:6d:3a:97:3d:a1:2b:54:
9b:a6:13:a6:57:15:91:38:44:d7:7e:86:1c:02:23:41:fa:1d:
9f:91:e1:02:f3:20:dc:29:88:81:91:78:f6:84:67:ad:94:97:
03:a4:d4:72:c8:de:bd:ab:a0:5f:bd:12:20:b6:7e:f7:54:d1:
2c:0e:6f:bb:64:70:5f:15:32:a4:d5:68:d3:df:cc:1a:c2:b6:
7d:bf:f4:92:ac:99:18:a8:7e:72:a7:16:ab:eb:2d:f8:c5:00:
15:e4:9f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 20:55:57 2026 by rpki-client