Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/A8E45442C7C611F180B4F3865111F970.roa
File: A8E45442C7C611F180B4F3865111F970.roa (raw, json)
Hash identifier: HGib+78aA6MzU0aF/Tbc4+Jfp5dunSDdToHIRQtXJMs=
Subject key identifier: D3:D7:F9:7F:A8:73:7B:CB:F9:4D:55:F0:94:83:0D:C0:2E:5F:D7:97
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 19B3
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/A8E45442C7C611F180B4F3865111F970.roa
Signing time: Wed 14 Oct 2026 11:59:08 +0000
ROA not before: Wed 14 Oct 2026 11:59:08 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 17911
IP address blocks: 122.129.64.0/24 maxlen: 24
122.129.66.0/24 maxlen: 24
122.129.69.0/24 maxlen: 24
122.129.72.0/24 maxlen: 24
122.129.73.0/24 maxlen: 24
122.129.74.0/24 maxlen: 24
122.129.75.0/24 maxlen: 24
122.129.76.0/24 maxlen: 24
122.129.77.0/24 maxlen: 24
122.129.78.0/24 maxlen: 24
122.129.79.0/24 maxlen: 24
122.129.80.0/24 maxlen: 24
122.129.81.0/24 maxlen: 24
122.129.82.0/24 maxlen: 24
122.129.84.0/24 maxlen: 24
122.129.85.0/24 maxlen: 24
122.129.89.0/24 maxlen: 24
122.129.90.0/24 maxlen: 24
122.129.91.0/24 maxlen: 24
122.129.92.0/24 maxlen: 24
122.129.93.0/24 maxlen: 24
122.129.94.0/24 maxlen: 24
203.128.0.0/24 maxlen: 24
203.128.1.0/24 maxlen: 24
203.128.3.0/24 maxlen: 24
203.128.4.0/24 maxlen: 24
203.128.5.0/24 maxlen: 24
203.128.6.0/24 maxlen: 24
203.128.7.0/24 maxlen: 24
203.128.8.0/24 maxlen: 24
203.128.9.0/24 maxlen: 24
203.128.11.0/24 maxlen: 24
203.128.12.0/24 maxlen: 24
203.128.13.0/24 maxlen: 24
203.128.14.0/24 maxlen: 24
203.128.15.0/24 maxlen: 24
203.128.16.0/24 maxlen: 24
203.128.17.0/24 maxlen: 24
203.128.18.0/24 maxlen: 24
203.128.19.0/24 maxlen: 24
203.128.20.0/24 maxlen: 24
203.128.21.0/24 maxlen: 24
203.128.22.0/24 maxlen: 24
203.128.23.0/24 maxlen: 24
203.128.25.0/24 maxlen: 24
203.128.26.0/24 maxlen: 24
203.128.27.0/24 maxlen: 24
203.128.28.0/24 maxlen: 24
203.128.31.0/24 maxlen: 24
2400:4f00::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 16:29:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6579 (0x19b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Oct 14 11:59:08 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6acf6e8c-b12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:1e:e9:df:3c:08:de:14:e6:43:09:c4:3f:c0:
6f:68:19:16:41:07:76:96:cf:6c:71:c8:dc:4c:9a:
a9:9d:e7:db:b1:68:8f:c8:da:a7:8a:15:fb:d7:27:
f4:e7:c6:03:24:fd:c7:bb:e4:aa:f1:4f:5e:76:fe:
c2:d7:88:71:0e:7c:4c:55:25:97:8b:f5:89:a6:c7:
a7:98:20:ca:91:ee:66:51:fe:9b:9b:45:4b:14:74:
84:6c:5c:7e:f9:a7:5c:53:6c:33:5e:cb:26:7e:2b:
03:4e:38:9f:f8:52:ad:45:db:c3:a2:d4:7b:80:01:
2b:ca:0a:df:f3:40:05:0a:3c:8f:99:cf:ec:6c:09:
94:54:a0:9f:63:58:96:25:1c:6d:94:79:ce:58:8a:
6f:cc:00:43:01:2c:82:e0:eb:5a:7d:84:af:08:68:
9c:84:f8:cf:12:65:cd:85:41:a1:21:c7:70:7a:c2:
80:a8:f1:f1:39:16:4c:75:49:6a:4c:37:3b:d0:c3:
02:e1:ce:78:7d:8d:b6:0c:9b:74:ed:ad:dd:15:97:
00:dd:aa:b8:a8:74:ad:cb:56:24:68:04:8b:bd:62:
0c:83:e3:58:32:53:93:dd:d6:18:0e:38:d2:91:4a:
8a:73:55:16:18:b7:15:82:28:0a:5f:e6:d2:9f:e2:
7b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D7:F9:7F:A8:73:7B:CB:F9:4D:55:F0:94:83:0D:C0:2E:5F:D7:97
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/A8E45442C7C611F180B4F3865111F970.roa
sbgp-ipAddrBlock: critical
IPv4:
122.129.64.0/24
122.129.66.0/24
122.129.69.0/24
122.129.72.0-122.129.82.255
122.129.84.0/23
122.129.89.0-122.129.94.255
203.128.0.0/23
203.128.3.0-203.128.9.255
203.128.11.0-203.128.23.255
203.128.25.0-203.128.28.255
203.128.31.0/24
IPv6:
2400:4f00::/36
Signature Algorithm: sha256WithRSAEncryption
11:ac:a0:6f:80:be:73:61:fa:80:23:66:20:22:a7:8f:e1:fa:
80:47:64:35:7e:d6:77:96:cc:b6:2b:b1:eb:cc:a6:2b:42:12:
51:c8:63:bc:fc:ff:db:ce:48:0b:f6:6e:39:c1:3f:7e:2e:ee:
8c:e5:d2:3c:39:b0:17:98:bd:72:2a:ba:4e:6d:a2:a4:36:97:
a9:47:5e:a7:4a:c6:ef:c1:3d:bd:6a:c0:26:71:c4:9f:a8:7d:
92:12:ed:a0:91:35:22:61:e7:4e:fb:5b:5e:b7:f9:2e:3b:14:
54:78:a7:95:c7:f7:da:4e:8c:e8:31:ac:d2:ca:93:d3:3b:ea:
e5:d4:a3:54:9e:6e:29:17:42:c1:fa:8b:41:6f:73:8d:5f:57:
94:0c:64:9e:21:78:2d:07:f5:d3:cf:6d:ce:52:1c:22:09:04:
7a:17:e1:55:eb:e9:18:45:a9:a8:50:a5:37:54:dd:6d:68:3e:
ef:f5:f0:80:98:06:3d:79:50:e3:69:d6:e5:d7:76:df:33:2d:
5f:14:3c:13:78:48:86:ed:4c:80:8f:cf:97:c8:82:47:d5:46:
4c:db:a0:5c:a0:1d:fa:9f:07:d4:fb:91:3d:64:12:88:62:e9:
7d:55:34:22:ee:aa:38:42:9f:79:24:fb:74:a1:99:3d:be:a2:
06:a8:1e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 15:37:23 2026 by rpki-client