Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/6205FF52113D11F1BF40122E203D8C67.roa
File: 6205FF52113D11F1BF40122E203D8C67.roa (raw, json)
Hash identifier: 0SpQqMVLUUEw/gRTBYZ+pc6jCpbNY1J2M0tgurz19QM=
Subject key identifier: 25:74:F0:14:58:78:BA:C8:47:41:68:C7:3A:13:DE:B6:87:5D:50:CC
Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial: 08FA
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/6205FF52113D11F1BF40122E203D8C67.roa
Signing time: Mon 20 Jul 2026 16:17:25 +0000
ROA not before: Mon 20 Jul 2026 16:17:25 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4775
IP address blocks: 64.224.21.0/24 maxlen: 24
64.224.96.0/19 maxlen: 19
64.224.128.0/20 maxlen: 20
64.226.56.0/21 maxlen: 21
64.226.56.0/24 maxlen: 24
64.226.57.0/24 maxlen: 24
64.226.58.0/24 maxlen: 24
64.226.59.0/24 maxlen: 24
64.226.60.0/24 maxlen: 24
64.226.61.0/24 maxlen: 24
64.226.62.0/24 maxlen: 24
64.226.63.0/24 maxlen: 24
138.84.64.0/18 maxlen: 18
138.84.64.0/24 maxlen: 24
138.84.65.0/24 maxlen: 24
138.84.66.0/24 maxlen: 24
138.84.67.0/24 maxlen: 24
138.84.69.0/24 maxlen: 24
138.84.70.0/23 maxlen: 23
138.84.70.0/24 maxlen: 24
138.84.71.0/24 maxlen: 24
138.84.72.0/24 maxlen: 24
138.84.73.0/24 maxlen: 24
138.84.74.0/23 maxlen: 23
138.84.74.0/24 maxlen: 24
138.84.75.0/24 maxlen: 24
138.84.76.0/22 maxlen: 22
138.84.78.0/23 maxlen: 23
138.84.110.0/23 maxlen: 23
138.84.112.0/23 maxlen: 23
138.84.114.0/23 maxlen: 23
138.84.126.0/23 maxlen: 23
138.84.128.0/19 maxlen: 19
138.84.136.0/22 maxlen: 22
138.84.152.0/22 maxlen: 22
138.84.192.0/21 maxlen: 21
138.84.192.0/22 maxlen: 22
138.84.196.0/22 maxlen: 22
147.185.169.0/24 maxlen: 24
158.62.0.0/17 maxlen: 17
158.62.106.0/24 maxlen: 24
192.112.243.0/24 maxlen: 24
209.35.160.0/20 maxlen: 20
209.35.160.0/24 maxlen: 24
209.35.161.0/24 maxlen: 24
209.35.162.0/24 maxlen: 24
209.35.163.0/24 maxlen: 24
209.35.164.0/24 maxlen: 24
209.35.165.0/24 maxlen: 24
209.35.166.0/24 maxlen: 24
209.35.167.0/24 maxlen: 24
209.35.169.0/24 maxlen: 24
209.35.170.0/24 maxlen: 24
209.35.171.0/24 maxlen: 24
209.35.172.0/24 maxlen: 24
209.35.173.0/24 maxlen: 24
209.35.174.0/24 maxlen: 24
216.247.0.0/18 maxlen: 18
216.247.80.0/20 maxlen: 20
216.247.80.0/24 maxlen: 24
216.247.81.0/24 maxlen: 24
216.247.82.0/24 maxlen: 24
216.247.83.0/24 maxlen: 24
216.247.84.0/24 maxlen: 24
216.247.85.0/24 maxlen: 24
216.247.86.0/24 maxlen: 24
216.247.87.0/24 maxlen: 24
216.247.88.0/24 maxlen: 24
216.247.89.0/24 maxlen: 24
216.247.90.0/24 maxlen: 24
216.247.91.0/24 maxlen: 24
216.247.92.0/24 maxlen: 24
216.247.93.0/24 maxlen: 24
216.247.94.0/24 maxlen: 24
216.247.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2298 (0x8fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Validity
Not Before: Jul 20 16:17:25 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5e4a14-41ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:0a:70:50:74:20:63:86:5d:f6:cd:b6:e3:
7d:5f:19:c3:be:a8:a3:40:ff:9d:69:a8:26:6f:e3:
ea:e7:2d:7c:9b:ce:21:11:d8:e4:33:c0:8b:4b:c0:
23:1e:e2:4a:00:3c:59:d3:b6:4d:4c:5f:20:91:ae:
48:d4:b5:c6:b3:ef:c8:6f:64:1d:3c:e8:ae:0c:5c:
65:a2:29:c6:32:6c:0f:a9:df:e1:d6:1c:07:cf:f6:
72:f4:34:54:da:86:73:d4:b7:71:da:c2:b1:f2:78:
8a:b9:c6:37:68:89:65:c0:78:ac:75:6f:d1:7b:08:
7c:b2:bc:0d:2a:f6:d6:e5:6b:61:9e:60:69:99:dc:
81:0f:44:77:06:60:1f:c2:97:d5:b4:1d:90:da:fb:
45:a7:93:08:11:68:4d:b5:ea:19:80:d9:95:80:ab:
e4:1d:95:9f:2a:53:76:bb:dd:db:c6:ee:52:11:12:
ee:af:8a:39:de:3b:cc:cd:da:4e:7d:b9:16:70:f2:
24:1e:e4:a3:9e:cc:ad:0a:58:04:52:32:eb:c3:64:
b7:58:f9:8c:3d:38:6e:87:94:86:47:75:4a:68:16:
d3:00:76:15:4b:ae:58:49:ab:e3:53:60:e7:38:f0:
83:83:0a:ec:5e:e2:7d:64:4f:42:a2:6e:e9:0e:23:
3a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:74:F0:14:58:78:BA:C8:47:41:68:C7:3A:13:DE:B6:87:5D:50:CC
X509v3 Authority Key Identifier:
keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/6205FF52113D11F1BF40122E203D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
64.224.21.0/24
64.224.96.0-64.224.143.255
64.226.56.0/21
138.84.64.0-138.84.159.255
138.84.192.0/21
147.185.169.0/24
158.62.0.0/17
192.112.243.0/24
209.35.160.0/20
216.247.0.0/18
216.247.80.0/20
Signature Algorithm: sha256WithRSAEncryption
8f:1a:39:d2:89:1a:20:32:a8:7c:c5:cb:08:b6:97:26:e9:7b:
43:ef:42:6e:51:eb:81:ae:5e:14:38:58:57:d5:4a:fe:e2:e0:
85:f8:69:0c:2d:1e:37:5a:7a:cd:2c:1a:13:35:01:18:e8:17:
cf:bb:26:af:c7:60:47:bf:7b:9a:88:37:d4:f7:a4:2f:2d:cd:
7d:a2:2e:11:2c:55:da:2d:e9:f4:5b:c4:ce:cc:41:e7:97:7a:
a7:0e:c5:7d:e8:3d:41:e7:de:c5:93:c4:94:35:da:71:32:14:
1f:a6:0a:ee:28:0f:5a:d8:71:56:1f:aa:a2:a8:bb:c3:ba:e4:
33:70:8e:ad:c1:ea:3c:88:13:97:e6:a8:86:e1:c7:93:78:f6:
1e:e5:01:2e:8e:35:69:f6:27:19:42:cb:ad:da:5a:a1:bc:1b:
cd:02:23:77:23:01:90:26:14:9f:fb:42:04:4f:ee:76:1f:76:
60:2e:49:25:0f:4e:fd:71:bf:2d:63:a0:dc:0a:0b:c9:ee:61:
5f:b0:39:77:95:d0:7d:4e:c2:17:6b:d0:56:cb:05:b9:d3:08:
4b:09:fb:00:b9:cb:d8:18:62:ae:27:44:dd:1a:59:83:97:7f:
95:ab:f1:bc:18:a4:b2:88:a6:13:c1:e2:52:6d:d7:d6:87:ba:
0e:7c:0a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:16:56 2026 by rpki-client