Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/E19826A0EAA511EBA4C1F32CC4F9AE02.roa
File: E19826A0EAA511EBA4C1F32CC4F9AE02.roa (raw, json)
Hash identifier: Hn2QIPMqRjmWgqhNxIKc+CdGL22owDCN1yqXrEf97OM=
Subject key identifier: E9:60:69:90:A5:DF:BB:F1:E8:A4:BD:3A:37:78:53:2E:F5:D5:96:EF
Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial: 08F9
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/E19826A0EAA511EBA4C1F32CC4F9AE02.roa
Signing time: Mon 20 Jul 2026 16:17:23 +0000
ROA not before: Mon 20 Jul 2026 16:17:23 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 132199
IP address blocks: 64.224.96.0/21 maxlen: 21
64.224.104.0/22 maxlen: 22
64.224.108.0/22 maxlen: 22
64.224.112.0/21 maxlen: 21
64.224.120.0/21 maxlen: 21
64.224.128.0/22 maxlen: 22
64.224.132.0/22 maxlen: 22
64.224.136.0/21 maxlen: 21
138.84.80.0/22 maxlen: 22
138.84.84.0/22 maxlen: 22
138.84.88.0/23 maxlen: 23
138.84.90.0/23 maxlen: 23
138.84.92.0/22 maxlen: 22
138.84.96.0/22 maxlen: 22
138.84.100.0/22 maxlen: 22
138.84.104.0/22 maxlen: 22
138.84.108.0/23 maxlen: 23
138.84.116.0/22 maxlen: 22
138.84.120.0/22 maxlen: 22
138.84.124.0/23 maxlen: 23
158.62.0.0/21 maxlen: 21
158.62.0.0/22 maxlen: 22
158.62.4.0/23 maxlen: 23
158.62.6.0/23 maxlen: 23
158.62.8.0/22 maxlen: 22
158.62.16.0/21 maxlen: 21
158.62.16.0/22 maxlen: 22
158.62.20.0/23 maxlen: 23
158.62.22.0/23 maxlen: 23
158.62.24.0/22 maxlen: 22
158.62.32.0/21 maxlen: 21
158.62.32.0/22 maxlen: 22
158.62.36.0/23 maxlen: 23
158.62.38.0/23 maxlen: 23
158.62.40.0/22 maxlen: 22
158.62.48.0/21 maxlen: 21
158.62.56.0/23 maxlen: 23
158.62.62.0/23 maxlen: 23
158.62.64.0/22 maxlen: 22
158.62.68.0/23 maxlen: 23
158.62.70.0/23 maxlen: 23
158.62.72.0/23 maxlen: 23
158.62.74.0/23 maxlen: 23
158.62.76.0/22 maxlen: 22
158.62.80.0/23 maxlen: 23
158.62.82.0/23 maxlen: 23
158.62.84.0/24 maxlen: 24
158.62.86.0/23 maxlen: 23
158.62.88.0/22 maxlen: 22
158.62.92.0/22 maxlen: 22
158.62.96.0/22 maxlen: 22
158.62.100.0/23 maxlen: 23
158.62.108.0/22 maxlen: 22
158.62.112.0/22 maxlen: 22
158.62.116.0/23 maxlen: 23
158.62.118.0/24 maxlen: 24
158.62.119.0/24 maxlen: 24
158.62.120.0/22 maxlen: 22
158.62.124.0/22 maxlen: 22
216.247.0.0/22 maxlen: 22
216.247.4.0/23 maxlen: 23
216.247.6.0/23 maxlen: 23
216.247.8.0/22 maxlen: 22
216.247.12.0/23 maxlen: 23
216.247.14.0/23 maxlen: 23
216.247.16.0/22 maxlen: 22
216.247.20.0/22 maxlen: 22
216.247.24.0/22 maxlen: 22
216.247.28.0/23 maxlen: 23
216.247.30.0/23 maxlen: 23
216.247.32.0/22 maxlen: 22
216.247.36.0/22 maxlen: 22
216.247.40.0/23 maxlen: 23
216.247.42.0/23 maxlen: 23
216.247.44.0/22 maxlen: 22
216.247.48.0/22 maxlen: 22
216.247.52.0/23 maxlen: 23
216.247.54.0/23 maxlen: 23
216.247.56.0/22 maxlen: 22
216.247.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Jul 2026 16:17:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2297 (0x8f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Validity
Not Before: Jul 20 16:17:23 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a5e4a13-1b8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a4:49:0e:16:32:a4:4c:67:f7:f6:89:ca:60:
6e:ba:04:9c:3e:26:bf:0d:e7:ec:bd:2a:ef:59:0e:
ef:d2:4f:c6:bc:90:19:57:6f:9d:6b:c9:df:f7:64:
17:07:b4:bf:89:0d:9d:be:95:5a:d5:cf:e2:44:ad:
6f:f8:91:84:6f:3d:72:2a:c7:19:e1:ee:35:f7:16:
65:f1:08:19:d5:1f:13:81:bf:81:b6:12:02:59:0b:
7e:e2:27:fc:08:78:94:ea:17:70:e6:19:84:ed:43:
d2:a1:91:6f:4a:07:0b:7a:19:c7:54:42:4b:10:e7:
bd:28:0f:b6:79:73:31:24:ab:b8:02:be:b8:5d:fd:
f7:dc:d6:f2:16:e7:10:3f:01:e8:dc:5b:c0:f3:f5:
e7:bd:4d:72:32:8a:47:d6:01:a3:9d:03:ba:0b:0f:
8f:84:a7:e7:ac:fb:37:79:39:6c:fd:9d:68:f2:ee:
c0:11:87:f7:eb:5d:7d:56:3c:32:19:f9:84:77:66:
8e:c5:34:91:c1:e6:14:f7:98:c5:48:5a:41:d8:ae:
f1:ce:43:04:b7:40:45:d5:65:d9:4b:bd:39:90:0d:
53:ff:b8:c6:c7:2d:53:80:dc:c9:c0:0b:c8:7e:59:
d0:82:10:cf:3d:8b:39:56:44:c4:d1:be:81:0d:cd:
7b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:60:69:90:A5:DF:BB:F1:E8:A4:BD:3A:37:78:53:2E:F5:D5:96:EF
X509v3 Authority Key Identifier:
keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/E19826A0EAA511EBA4C1F32CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
64.224.96.0-64.224.143.255
138.84.80.0-138.84.109.255
138.84.116.0-138.84.125.255
158.62.0.0-158.62.11.255
158.62.16.0-158.62.27.255
158.62.32.0-158.62.43.255
158.62.48.0-158.62.57.255
158.62.62.0-158.62.84.255
158.62.86.0-158.62.101.255
158.62.108.0-158.62.127.255
216.247.0.0/18
Signature Algorithm: sha256WithRSAEncryption
c5:a5:df:77:63:d6:a6:b9:6c:57:ee:7e:fe:a4:d8:11:9c:1f:
39:29:a5:73:87:f2:4e:a9:41:53:84:9b:0c:a4:be:1b:95:ad:
fb:dc:ac:11:97:12:e0:70:7c:ee:5c:88:4a:5b:3b:70:37:9b:
12:9d:41:20:21:93:75:d8:29:69:59:32:cf:ef:05:5e:0b:c1:
e6:3d:6f:7e:87:85:c9:e6:cb:c1:c0:2d:99:07:00:95:16:da:
f0:00:8f:76:1f:28:7a:3a:d1:b5:3b:41:50:97:c3:19:fd:bc:
7a:b1:a6:93:f7:ef:82:3e:7f:4d:f2:f8:89:95:8d:6a:f9:11:
26:a1:13:2b:1e:8e:b8:44:ff:69:3e:cf:cc:94:90:e8:45:6f:
de:d1:e5:07:11:fe:e6:12:5b:11:7b:0b:55:65:14:a7:b7:f7:
fb:74:00:d9:17:08:21:72:ae:8a:be:d4:e3:e7:86:f1:3e:84:
0a:77:ce:20:ab:c2:e7:0e:e8:b9:ef:0a:7a:99:d2:43:d2:18:
57:7b:ae:94:c7:1a:ce:cb:0e:37:6b:a6:dd:98:e5:1f:31:30:
f8:09:c7:78:dd:13:80:43:0f:2f:d6:3a:59:79:f5:27:2a:89:
18:b1:01:72:f9:77:64:8a:2a:0b:a1:40:24:e6:b4:6f:c6:79:
34:f1:07:b1
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgICCPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDYyMDcxMTAvBgNVBAUTKDg5N0UwMkNDRDhFQjQwMzlBNzgzRDAyMzc5QzU1RkVF
OUYwQ0VFNTkwHhcNMjYwNzIwMTYxNzIzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTVlNGExMy0xYjhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6RJDhYypExn9/aJymBuugScPia/DefsvSrvWQ7v0k/GvJAZV2+da8nf92QX
B7S/iQ2dvpVa1c/iRK1v+JGEbz1yKscZ4e419xZl8QgZ1R8Tgb+BthICWQt+4if8
CHiU6hdw5hmE7UPSoZFvSgcLehnHVEJLEOe9KA+2eXMxJKu4Ar64Xf333NbyFucQ
PwHo3FvA8/XnvU1yMopH1gGjnQO6Cw+PhKfnrPs3eTls/Z1o8u7AEYf36119Vjwy
GfmEd2aOxTSRweYU95jFSFpB2K7xzkMEt0BF1WXZS705kA1T/7jGxy1TgNzJwAvI
flnQghDPPYs5VkTE0b6BDc17qwIDAQABo4IC8DCCAuwwHQYDVR0OBBYEFOlgaZCl
37vx6KS9Ojd4Uy711ZbvMB8GA1UdIwQYMBaAFIl+AszY60A5p4PQI3nFX+6fDO5Z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NjIwNy84QzY4QjlBMjA5
ODExMUVCOUQ0NjFCMzBDNEY5QUUwMi9pWDRDek5qclFEbW5nOUFqZWNWZjdwOE03
bGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2lYNEN6TmpyUURtbmc5QWplY1ZmN3A4TTdsay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NDYyMDcvOEM2OEI5QTIwOTgxMTFFQjlENDYxQjMwQzRGOUFFMDIvRTE5ODI2QTBF
QUE1MTFFQkE0QzFGMzJDQzRGOUFFMDIucm9hMIGuBggrBgEFBQcBBwEB/wSBnjCB
mzCBmAQCAAEwgZEwDAMEBUDgYAMEBEDggDAMAwQEilRQAwQBilRsMAwDBAKKVHQD
BAGKVHwwCwMDAZ4+AwQCnj4IMAwDBASePhADBAKePhgwDAMEBZ4+IAMEAp4+KDAM
AwQEnj4wAwQBnj44MAwDBAGePj4DBACePlQwDAMEAZ4+VgMEAZ4+ZDAMAwQCnj5s
AwQHnj4AAwQG2PcAMA0GCSqGSIb3DQEBCwUAA4IBAQDFpd93Y9amuWxX7n7+pNgR
nB85KaVzh/JOqUFThJsMpL4bla373KwRlxLgcHzuXIhKWztwN5sSnUEgIZN12Clp
WTLP7wVeC8HmPW9+h4XJ5svBwC2ZBwCVFtrwAI92Hyh6OtG1O0FQl8MZ/bx6saaT
9++CPn9N8viJlY1q+REmoRMrHo64RP9pPs/MlJDoRW/e0eUHEf7mElsRewtVZRSn
t/f7dADZFwghcq6KvtTj54bxPoQKd84gq8LnDui57wp6mdJD0hhXe66UxxrOyw43
a6bdmOUfMTD4Ccd43ROAQw8v1jpZefUnKokYsQFy+XdkiioLoUAk5rRvxnk08Qex
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:59:10 2026 by rpki-client