Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6F0B8F96B3A511F09EBFA458C4F9AE02.roa
File: 6F0B8F96B3A511F09EBFA458C4F9AE02.roa (raw, json)
Hash identifier: 3+iWkZdc7utUPzIZSryLQMGfnk3Kyvl1BniS4UN5CJY=
Subject key identifier: 6F:95:33:75:EF:30:63:E7:8F:4E:E2:A8:8D:5E:AF:7F:71:CB:87:32
Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial: 1B3B
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6F0B8F96B3A511F09EBFA458C4F9AE02.roa
Signing time: Thu 20 Aug 2026 23:21:56 +0000
ROA not before: Thu 20 Aug 2026 23:21:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9500
IP address blocks: 27.252.0.0/17 maxlen: 17
27.252.128.0/17 maxlen: 17
49.224.0.0/14 maxlen: 14
49.224.64.0/18 maxlen: 18
49.224.192.0/18 maxlen: 18
118.92.0.0/16 maxlen: 16
118.93.0.0/16 maxlen: 16
121.72.0.0/15 maxlen: 15
121.74.0.0/16 maxlen: 16
121.75.0.0/16 maxlen: 16
121.75.176.0/22 maxlen: 22
121.90.0.0/16 maxlen: 16
124.6.192.0/19 maxlen: 19
124.6.198.0/24 maxlen: 24
202.0.32.0/19 maxlen: 19
202.0.33.0/24 maxlen: 24
202.0.34.0/24 maxlen: 24
202.0.35.0/24 maxlen: 24
202.0.36.0/24 maxlen: 24
202.20.76.0/24 maxlen: 24
202.22.16.0/21 maxlen: 21
202.22.24.0/22 maxlen: 22
202.22.28.0/23 maxlen: 23
202.22.30.0/24 maxlen: 24
202.27.69.0/24 maxlen: 24
202.27.92.0/22 maxlen: 22
202.27.92.0/24 maxlen: 24
202.27.93.0/24 maxlen: 24
202.27.94.0/24 maxlen: 24
202.27.95.0/24 maxlen: 24
202.27.100.0/22 maxlen: 22
202.36.72.0/24 maxlen: 24
202.37.56.0/24 maxlen: 24
202.37.136.0/24 maxlen: 24
202.49.180.0/23 maxlen: 23
202.73.192.0/20 maxlen: 20
202.78.128.0/19 maxlen: 22
203.79.64.0/18 maxlen: 18
203.79.68.0/23 maxlen: 23
203.79.116.0/22 maxlen: 22
203.96.192.0/19 maxlen: 19
203.97.136.0/24 maxlen: 24
203.98.0.0/18 maxlen: 18
203.98.42.0/23 maxlen: 23
203.98.42.0/24 maxlen: 24
203.109.128.0/17 maxlen: 17
203.109.143.0/24 maxlen: 24
203.109.179.0/24 maxlen: 24
203.109.183.0/24 maxlen: 24
203.109.247.0/24 maxlen: 24
203.109.253.0/24 maxlen: 24
203.109.255.0/24 maxlen: 24
203.118.128.0/18 maxlen: 18
203.173.128.0/17 maxlen: 17
210.246.0.0/18 maxlen: 18
218.101.64.0/18 maxlen: 18
2001:4400::/30 maxlen: 30
2407:7000::/32 maxlen: 32
2407:7000:f300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6971 (0x1b3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Validity
Not Before: Aug 20 23:21:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a878c13-f95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:01:27:77:48:6a:5d:fb:47:2f:c4:48:b9:ac:
bb:6d:a9:8d:0b:87:93:c7:70:d5:37:9e:54:d0:31:
c8:5d:81:71:55:91:c6:35:ed:c3:2e:26:6b:e6:36:
ef:a6:73:37:f4:f9:a0:00:c5:eb:56:c3:34:6a:ea:
0c:95:0f:61:d8:ac:d1:8c:03:87:c0:c9:c0:89:39:
91:01:e4:08:5e:ce:31:ff:80:4e:87:d2:34:09:d6:
cd:fb:e9:5e:c3:59:a7:ab:86:b3:6b:a5:bc:2c:ce:
d7:0c:08:2f:73:4b:a1:67:97:47:85:0e:64:7a:22:
01:44:76:94:5c:5d:c4:06:7c:7f:da:08:47:c7:29:
0a:10:59:64:ad:15:de:41:1c:55:8e:e4:44:21:36:
0d:01:b6:41:ca:79:f1:47:a5:b1:ff:35:9d:c8:94:
c3:de:63:c3:91:84:f4:37:92:3c:d8:68:2a:8b:db:
0e:99:34:3c:a2:00:35:ab:a1:0f:fa:fa:e3:7d:95:
ca:e2:7a:32:ea:ec:f7:9a:fb:db:b8:d0:43:8b:6a:
ce:2b:5e:6f:1a:e4:ce:17:c5:ef:79:e3:da:5f:91:
36:d1:1d:4e:38:61:6f:17:c9:0e:8c:78:4a:09:88:
aa:21:3b:fa:ae:5e:18:a0:ea:fb:ac:e9:85:a1:74:
85:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:95:33:75:EF:30:63:E7:8F:4E:E2:A8:8D:5E:AF:7F:71:CB:87:32
X509v3 Authority Key Identifier:
keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6F0B8F96B3A511F09EBFA458C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
27.252.0.0/16
49.224.0.0/14
118.92.0.0/15
121.72.0.0/14
121.90.0.0/16
124.6.192.0/19
202.0.32.0/19
202.20.76.0/24
202.22.16.0-202.22.30.255
202.27.69.0/24
202.27.92.0/22
202.27.100.0/22
202.36.72.0/24
202.37.56.0/24
202.37.136.0/24
202.49.180.0/23
202.73.192.0/20
202.78.128.0/19
203.79.64.0/18
203.96.192.0/19
203.97.136.0/24
203.98.0.0/18
203.109.128.0/17
203.118.128.0/18
203.173.128.0/17
210.246.0.0/18
218.101.64.0/18
IPv6:
2001:4400::/30
2407:7000::/32
Signature Algorithm: sha256WithRSAEncryption
3e:f3:9b:f0:7d:cf:32:40:96:9c:bb:e8:8e:a9:d5:40:8e:d3:
90:e8:1b:c9:9f:0f:78:9b:c9:bb:ee:77:5b:69:d7:92:14:6a:
66:5a:f1:e5:d1:f2:ee:8d:8a:3e:94:54:ad:1d:d2:fa:5a:e2:
a6:30:11:2c:65:05:66:13:c6:b0:f5:20:8e:f8:28:bf:ab:a3:
2c:db:60:eb:d6:6c:00:f2:1a:ff:e4:12:4c:bd:df:bc:4c:61:
22:77:cf:d4:bf:c0:36:ba:6c:11:e2:af:07:4b:de:e7:28:7c:
83:9f:0c:7f:ac:d3:1e:ab:66:0a:57:cf:86:71:e3:dc:b5:9f:
bd:8d:e8:0d:cd:78:14:d0:a1:c9:1d:e1:69:ea:94:48:f4:db:
e2:81:35:4d:ac:61:d0:a7:20:08:d1:39:83:c5:55:64:ef:c3:
9f:50:a1:64:b1:c8:0e:a2:08:e2:62:45:e4:6d:ab:0a:12:40:
4f:11:6e:c2:1c:c5:f9:b2:e5:52:e9:a6:c3:2a:e7:07:6e:51:
44:4d:34:49:96:da:2e:16:f6:a6:d3:ca:f4:02:23:d9:05:8a:
c0:77:43:90:c1:a6:9f:73:9d:67:09:c3:d6:f8:e2:80:c3:a9:
d3:4f:b5:42:d0:dc:d3:8b:51:60:9e:c5:25:b4:c5:3a:df:f7:
ac:19:88:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 02:12:15 2026 by rpki-client