Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/6D188172BF5C11F098B79354C4F9AE02.roa
File: 6D188172BF5C11F098B79354C4F9AE02.roa (raw, json)
Hash identifier: bnNYNW5woRijMAziiX+GdjxArSN9zPt7BYM1OrTOpgU=
Subject key identifier: 60:BF:80:C9:1E:94:F6:6B:C1:B8:01:CE:24:87:68:35:13:A4:B9:24
Certificate issuer: /CN=A9149F3E/serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Certificate serial: 3631
Authority key identifier: BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/6D188172BF5C11F098B79354C4F9AE02.roa
Signing time: Thu 06 Aug 2026 15:10:46 +0000
ROA not before: Thu 06 Aug 2026 15:10:46 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 17579
IP address blocks: 134.75.1.0/24 maxlen: 24
134.75.15.0/24 maxlen: 24
134.75.16.0/24 maxlen: 24
134.75.101.0/24 maxlen: 24
134.75.102.0/24 maxlen: 24
134.75.103.0/24 maxlen: 24
134.75.105.0/24 maxlen: 24
134.75.107.0/24 maxlen: 24
134.75.108.0/24 maxlen: 24
134.75.123.0/24 maxlen: 24
134.75.124.0/24 maxlen: 24
134.75.125.0/24 maxlen: 24
134.75.126.0/24 maxlen: 24
134.75.127.0/24 maxlen: 24
134.75.128.0/24 maxlen: 24
134.75.129.0/24 maxlen: 24
134.75.130.0/24 maxlen: 24
134.75.131.0/24 maxlen: 24
134.75.132.0/24 maxlen: 24
134.75.200.0/24 maxlen: 24
134.75.203.0/24 maxlen: 24
134.75.207.0/24 maxlen: 24
134.75.252.0/24 maxlen: 24
134.75.253.0/24 maxlen: 24
134.75.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13873 (0x3631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=BF0E6F4EE0E17DDE8C4A24BF897D19B87AA5759F
Validity
Not Before: Aug 6 15:10:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a74a3f6-b424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:f4:ab:77:b4:64:5d:d7:5d:2d:31:0e:6b:
b1:b2:d4:64:0b:67:cd:27:b7:40:cd:98:49:53:02:
08:df:c8:34:8c:ad:37:8f:e8:4f:2c:d6:c0:11:a2:
fc:7c:51:ba:a8:d0:1f:90:26:0b:29:b8:bf:42:f0:
da:b0:c5:5f:84:7d:81:f0:22:c6:66:a2:4e:1d:86:
30:f1:46:9b:36:61:5e:b7:ea:ce:eb:c6:1d:7e:f7:
11:5e:c3:b6:4e:3e:40:a3:d8:4f:b6:76:4f:a4:de:
ca:d6:16:cc:87:20:1f:2f:85:4a:7f:ab:a9:0d:2e:
19:15:4f:de:6f:5f:c6:a5:d3:13:6b:bc:d4:d1:90:
67:46:8f:7e:09:16:b2:ff:25:2a:61:6a:d8:46:c4:
81:5b:eb:08:99:09:13:ff:85:64:b9:e6:97:7b:0c:
e8:07:38:ba:0f:31:6b:25:4f:3d:93:cb:6e:c3:a6:
90:a0:4f:42:93:20:54:67:97:a2:0b:65:2f:aa:97:
ba:a5:fd:7b:93:88:52:83:4d:ef:98:60:93:81:c8:
1a:f6:a1:e8:c6:e4:b7:2b:97:a4:fa:aa:3e:90:53:
eb:0e:3d:39:82:10:d9:5e:bb:bc:a0:f1:cf:6f:c3:
b4:e8:56:ba:0a:92:a6:77:da:56:ea:50:d9:6a:93:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BF:80:C9:1E:94:F6:6B:C1:B8:01:CE:24:87:68:35:13:A4:B9:24
X509v3 Authority Key Identifier:
keyid:BF:0E:6F:4E:E0:E1:7D:DE:8C:4A:24:BF:89:7D:19:B8:7A:A5:75:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vw5vTuDhfd6MSiS_iX0ZuHqldZ8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/9A85BB501D8211E2BC6417D708B02CD2/6D188172BF5C11F098B79354C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
134.75.1.0/24
134.75.15.0-134.75.16.255
134.75.101.0-134.75.103.255
134.75.105.0/24
134.75.107.0-134.75.108.255
134.75.123.0-134.75.132.255
134.75.200.0/24
134.75.203.0/24
134.75.207.0/24
134.75.252.0-134.75.254.255
Signature Algorithm: sha256WithRSAEncryption
91:7b:b9:ee:ba:d4:dd:90:08:9c:22:63:e0:64:3f:4c:ff:d9:
f7:fb:5b:25:bb:06:fc:97:93:54:07:7c:44:75:0f:68:46:8f:
66:ed:9b:0b:57:2e:1d:b1:06:cd:2f:2b:4a:be:20:aa:03:f6:
df:4c:8d:ee:40:22:3f:9f:39:fd:0c:f3:ea:d7:57:63:b5:29:
0f:f0:5f:0e:0e:ef:e8:f4:28:6d:66:27:bf:e3:0d:86:98:33:
ea:a4:85:a2:19:65:fa:61:4b:4d:b2:a8:fa:34:5e:38:c8:2b:
0e:54:ef:dc:f0:9b:02:79:f2:bd:35:7a:89:c9:ac:ac:63:2c:
8b:b7:24:9d:d1:9e:c6:17:0c:9c:67:ac:4e:f5:df:58:2d:e8:
ea:06:c7:a2:8c:95:a7:fa:0a:3a:1a:49:ac:a4:1a:51:b0:2f:
e4:ca:c8:d3:55:6a:6b:a0:fb:5f:66:8f:bf:6b:6a:e7:32:ee:
07:c6:37:c5:f7:e4:f6:a5:07:32:33:b1:e8:53:78:1b:6f:83:
0e:e4:1b:40:01:df:3a:0b:5a:a5:21:7b:e8:f0:86:bf:ba:68:
d3:70:4e:32:8a:1a:bd:c1:43:78:74:f6:76:4b:f1:8c:6c:95:
f3:2b:f0:bb:5a:2b:c1:bd:56:6e:4d:71:8f:d7:61:09:26:fc:
43:13:24:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:55:46 2026 by rpki-client