Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/F4172284A8FC11F1B11D96EB3311F970.roa
File: F4172284A8FC11F1B11D96EB3311F970.roa (raw, json)
Hash identifier: xS/AUdU7s3/cOYOR6PaAdH4MjhHz0uuGiFonymaoImE=
Subject key identifier: A7:CD:D7:1F:89:1B:FF:7F:39:A3:E5:63:D8:5D:B4:7A:A8:BA:9E:D2
Certificate issuer: /CN=A9139B49/serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Certificate serial: 199A
Authority key identifier: 4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/F4172284A8FC11F1B11D96EB3311F970.roa
Signing time: Sat 05 Sep 2026 07:39:41 +0000
ROA not before: Sat 05 Sep 2026 07:39:41 +0000
ROA not after: Wed 31 Mar 2027 00:00:00 +0000
asID: 17911
IP address blocks: 122.129.64.0/24 maxlen: 24
122.129.66.0/24 maxlen: 24
122.129.69.0/24 maxlen: 24
122.129.72.0/24 maxlen: 24
122.129.73.0/24 maxlen: 24
122.129.74.0/24 maxlen: 24
122.129.75.0/24 maxlen: 24
122.129.76.0/24 maxlen: 24
122.129.77.0/24 maxlen: 24
122.129.78.0/24 maxlen: 24
122.129.79.0/24 maxlen: 24
122.129.80.0/24 maxlen: 24
122.129.81.0/24 maxlen: 24
122.129.82.0/24 maxlen: 24
122.129.84.0/24 maxlen: 24
122.129.85.0/24 maxlen: 24
122.129.89.0/24 maxlen: 24
122.129.90.0/24 maxlen: 24
122.129.91.0/24 maxlen: 24
122.129.92.0/24 maxlen: 24
122.129.93.0/24 maxlen: 24
122.129.94.0/24 maxlen: 24
203.128.0.0/24 maxlen: 24
203.128.1.0/24 maxlen: 24
203.128.3.0/24 maxlen: 24
203.128.4.0/24 maxlen: 24
203.128.5.0/24 maxlen: 24
203.128.6.0/24 maxlen: 24
203.128.7.0/24 maxlen: 24
203.128.8.0/24 maxlen: 24
203.128.9.0/24 maxlen: 24
203.128.11.0/24 maxlen: 24
203.128.12.0/24 maxlen: 24
203.128.13.0/24 maxlen: 24
203.128.14.0/24 maxlen: 24
203.128.15.0/24 maxlen: 24
203.128.16.0/24 maxlen: 24
203.128.17.0/24 maxlen: 24
203.128.18.0/24 maxlen: 24
203.128.19.0/24 maxlen: 24
203.128.21.0/24 maxlen: 24
203.128.22.0/24 maxlen: 24
203.128.23.0/24 maxlen: 24
203.128.25.0/24 maxlen: 24
203.128.26.0/24 maxlen: 24
203.128.27.0/24 maxlen: 24
203.128.28.0/24 maxlen: 24
203.128.31.0/24 maxlen: 24
2400:4f00::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:27:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6554 (0x199a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9139B49, serialNumber=4EE540A48AD973FBD831ABD02603B5FB0FB945BE
Validity
Not Before: Sep 5 07:39:41 2026 GMT
Not After : Mar 31 00:00:00 2027 GMT
Subject: CN=6a9bc73c-3ad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:79:de:34:50:60:a7:9d:bd:77:63:55:3c:09:
ce:01:82:fb:fa:a6:2a:f3:d2:f4:ed:3d:c2:3b:f0:
76:f6:ca:f5:57:cb:3c:05:11:4f:a6:a1:4d:dd:c5:
f5:64:61:8d:6b:ad:2d:45:39:b0:cf:ba:6c:0f:83:
28:ee:12:38:b3:5f:b1:93:a5:31:cb:f3:a2:83:70:
4f:5c:b5:71:6a:d3:83:e6:2f:43:31:59:70:23:47:
05:fa:ba:3b:47:0c:ba:80:02:e6:7a:d4:67:b9:22:
ee:16:cb:16:25:db:2d:8c:d4:50:d3:fe:6b:3e:58:
9a:76:80:30:18:bb:95:f4:22:89:4a:99:44:2e:fb:
32:eb:5f:2a:70:5a:fe:70:3d:89:01:06:32:dd:d1:
68:f5:e8:1e:a0:60:2f:4e:e6:34:7a:91:ef:2f:30:
c6:75:67:88:9b:5c:9c:e0:12:56:de:6e:82:a8:be:
28:43:58:27:df:1e:4a:be:20:9c:a2:0d:8d:97:e3:
79:3d:a0:83:e3:d3:4c:d8:8a:4d:de:14:89:03:23:
44:d1:49:05:ee:00:a4:76:f5:cc:da:81:7f:2c:23:
84:bc:bc:03:bb:57:43:ba:de:41:3b:81:2c:98:88:
e0:ca:6e:83:92:75:00:b7:5b:38:59:a4:2c:11:cd:
bf:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CD:D7:1F:89:1B:FF:7F:39:A3:E5:63:D8:5D:B4:7A:A8:BA:9E:D2
X509v3 Authority Key Identifier:
keyid:4E:E5:40:A4:8A:D9:73:FB:D8:31:AB:D0:26:03:B5:FB:0F:B9:45:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/TuVApIrZc_vYMavQJgO1-w-5Rb4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TuVApIrZc_vYMavQJgO1-w-5Rb4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139B49/0780B990C9F811E79EF12009C4F9AE02/F4172284A8FC11F1B11D96EB3311F970.roa
sbgp-ipAddrBlock: critical
IPv4:
122.129.64.0/24
122.129.66.0/24
122.129.69.0/24
122.129.72.0-122.129.82.255
122.129.84.0/23
122.129.89.0-122.129.94.255
203.128.0.0/23
203.128.3.0-203.128.9.255
203.128.11.0-203.128.19.255
203.128.21.0-203.128.23.255
203.128.25.0-203.128.28.255
203.128.31.0/24
IPv6:
2400:4f00::/36
Signature Algorithm: sha256WithRSAEncryption
96:38:b1:8b:81:66:16:bc:7d:e6:4c:b3:0c:fb:5b:ff:42:f3:
9e:a2:d6:2f:d6:73:50:42:91:21:31:f2:d3:60:fe:4a:d7:fd:
00:22:91:4c:e6:46:e9:57:7f:62:3a:85:c2:86:3f:dd:37:b1:
0a:f7:0d:e9:81:3a:21:50:51:fd:17:08:c7:f7:fb:fe:9e:81:
bc:2f:97:b4:a2:4c:02:b5:7b:4b:d9:8c:c6:1b:f9:01:2d:2a:
0e:36:62:d7:7d:56:1f:60:fd:39:7a:80:e3:cc:8a:0a:ca:41:
5e:04:b1:2e:04:b3:1c:4d:50:76:57:01:84:f1:c1:fd:cf:43:
cb:f5:69:a0:cb:d4:d8:73:2b:7e:55:b1:b4:0f:2b:4a:fc:2c:
84:21:fc:e5:69:76:c1:a2:46:0c:f1:41:2a:86:07:26:76:46:
cf:df:d1:1b:95:a7:b4:03:de:5a:33:10:bc:cb:d1:ef:7a:6d:
0a:bc:04:b6:7c:12:c4:95:4b:e4:19:db:69:f3:df:cd:e7:d6:
1f:35:f0:77:2c:26:5a:07:31:7b:cd:c3:58:a2:86:a6:98:6f:
f3:47:85:c1:e1:4e:63:be:30:82:29:f6:15:8c:55:ad:c3:f5:
bd:92:6a:b7:c3:9b:21:28:5e:c6:61:52:79:6a:e9:1f:a5:77:
ae:0c:34:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:37:00 2026 by rpki-client