Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4A39F266CDB211F1AF8DF94FF665CEF9.roa
File: 4A39F266CDB211F1AF8DF94FF665CEF9.roa (raw, json)
Hash identifier: Fcgu1Kp9ZARebT2XNOV5rkSPrB6VrECgOp1G5cjEr0Y=
Subject key identifier: 2A:34:94:79:D8:74:03:00:4B:19:CA:EA:E8:A0:76:0D:B0:4A:99:14
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3F54
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4A39F266CDB211F1AF8DF94FF665CEF9.roa
Signing time: Thu 22 Oct 2026 04:48:43 +0000
ROA not before: Thu 22 Oct 2026 04:48:43 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 135354
IP address blocks: 27.96.128.0/21 maxlen: 21
27.96.144.0/20 maxlen: 20
45.119.144.0/23 maxlen: 23
45.119.146.0/23 maxlen: 23
49.50.128.0/20 maxlen: 20
49.50.160.0/20 maxlen: 20
49.236.136.0/22 maxlen: 22
49.236.140.0/22 maxlen: 22
49.236.152.0/23 maxlen: 23
49.236.156.0/24 maxlen: 24
49.236.157.0/24 maxlen: 24
49.236.158.0/23 maxlen: 23
49.236.160.0/22 maxlen: 22
49.236.160.0/23 maxlen: 23
49.236.164.0/22 maxlen: 22
61.97.181.0/24 maxlen: 24
101.79.8.0/21 maxlen: 21
101.79.16.0/20 maxlen: 20
101.79.32.0/21 maxlen: 21
101.101.160.0/22 maxlen: 22
101.101.164.0/22 maxlen: 22
101.101.168.0/22 maxlen: 22
101.101.172.0/22 maxlen: 22
101.101.208.0/20 maxlen: 20
106.10.32.0/23 maxlen: 23
106.10.34.0/23 maxlen: 23
106.10.36.0/23 maxlen: 23
106.10.38.0/23 maxlen: 23
106.10.40.0/23 maxlen: 23
106.10.42.0/23 maxlen: 23
106.10.44.0/23 maxlen: 23
106.10.46.0/23 maxlen: 23
106.10.48.0/23 maxlen: 23
106.10.50.0/23 maxlen: 23
106.10.52.0/23 maxlen: 23
106.10.54.0/23 maxlen: 23
106.10.56.0/23 maxlen: 23
106.10.58.0/23 maxlen: 23
106.10.60.0/23 maxlen: 23
106.10.62.0/23 maxlen: 23
110.165.0.0/20 maxlen: 20
110.165.16.0/20 maxlen: 20
115.85.176.0/21 maxlen: 21
115.85.184.0/21 maxlen: 21
118.67.128.0/19 maxlen: 19
175.45.192.0/20 maxlen: 20
175.45.208.0/21 maxlen: 21
175.45.216.0/21 maxlen: 21
175.106.80.0/20 maxlen: 20
175.106.96.0/20 maxlen: 20
175.106.106.0/23 maxlen: 23
182.173.184.0/22 maxlen: 22
182.173.188.0/22 maxlen: 22
210.89.188.0/22 maxlen: 22
211.188.32.0/21 maxlen: 21
211.188.40.0/22 maxlen: 22
211.188.48.0/20 maxlen: 20
211.188.64.0/20 maxlen: 20
211.188.80.0/20 maxlen: 20
211.233.192.0/18 maxlen: 18
223.130.128.0/19 maxlen: 19
223.130.160.0/21 maxlen: 21
223.130.168.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:22:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16212 (0x3f54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Oct 22 04:48:43 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6ad995ab-be94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:82:87:cc:41:84:c5:8b:d4:45:d0:4a:0b:
67:0c:bc:5e:82:c7:01:5c:09:37:d9:5e:62:96:a2:
1f:cf:22:ae:79:ab:a2:8d:5c:fc:5f:f0:0b:c0:b0:
b0:2a:dc:b9:96:27:c3:9e:9a:00:02:9a:92:ec:ed:
35:5c:75:f7:a9:60:a0:5c:37:f2:97:80:56:be:63:
ee:9d:92:fc:ff:90:a7:84:b7:eb:35:04:43:6c:b7:
bf:1d:9d:e4:3e:1c:64:74:b3:3a:21:fe:cd:be:7b:
86:1b:c1:40:0d:7e:7e:36:57:ce:29:01:5a:81:6b:
4f:9d:5b:e5:b9:10:fa:9d:8e:e6:13:70:b0:61:63:
23:15:ff:64:fd:e4:9c:9d:8e:92:d2:91:5e:7a:d6:
16:c5:18:6f:cb:6d:6b:94:88:f4:e9:4c:16:a2:c7:
13:00:61:bb:57:80:95:c3:49:91:02:ef:ea:9e:31:
d6:c2:87:79:34:4a:bb:0f:c3:d9:85:4e:9e:65:d2:
93:02:00:ef:9a:3d:69:b7:f8:63:41:01:72:29:f4:
0c:56:16:40:dc:14:ee:04:58:ae:8c:40:a2:59:f1:
82:d8:26:e0:8c:0a:86:00:09:e6:4c:54:a4:b3:fd:
7a:1a:9e:dd:42:b5:b0:d5:a8:91:29:87:c8:4e:6f:
90:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:34:94:79:D8:74:03:00:4B:19:CA:EA:E8:A0:76:0D:B0:4A:99:14
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/4A39F266CDB211F1AF8DF94FF665CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
27.96.128.0/21
27.96.144.0/20
45.119.144.0/22
49.50.128.0/20
49.50.160.0/20
49.236.136.0/21
49.236.152.0/23
49.236.156.0-49.236.167.255
61.97.181.0/24
101.79.8.0-101.79.39.255
101.101.160.0/20
101.101.208.0/20
106.10.32.0/19
110.165.0.0/19
115.85.176.0/20
118.67.128.0/19
175.45.192.0/19
175.106.80.0-175.106.111.255
182.173.184.0/21
210.89.188.0/22
211.188.32.0-211.188.43.255
211.188.48.0-211.188.95.255
211.233.192.0/18
223.130.128.0-223.130.175.255
Signature Algorithm: sha256WithRSAEncryption
4b:f5:5c:ed:44:7b:b1:3e:3f:f4:1a:9b:5d:0e:e6:0d:72:70:
f9:ff:b6:ba:51:29:19:d9:6d:22:12:fd:5c:b9:3d:ba:ce:43:
33:13:2f:90:b4:ba:33:3e:39:ba:9e:2e:b9:2e:68:d9:2f:95:
d1:f9:b9:c2:66:13:d9:d6:24:d4:30:61:44:1e:fa:6c:de:ec:
58:35:e7:fd:f7:11:7f:33:f5:f9:48:bb:6a:68:77:ec:9f:c2:
a0:d5:e1:94:6f:de:fe:80:c6:6b:fe:9f:8d:05:96:be:0f:de:
d1:5d:d4:40:2b:35:5d:f5:fe:4d:fa:cf:06:87:05:75:33:5c:
e9:1e:86:73:94:c3:d3:32:b1:f0:ce:8c:45:b5:fc:ca:7c:f3:
eb:14:2e:c5:64:8e:b9:dc:e8:d1:40:35:50:e2:a9:9d:84:31:
a4:36:e2:08:5d:19:90:c1:b1:a7:ab:72:c3:29:3c:2e:91:10:
cd:94:ae:f4:57:d1:e7:57:d4:f2:0b:8a:06:18:b3:3c:60:dd:
34:6d:78:6c:7b:c5:22:28:c1:5e:b1:89:ad:06:94:0b:a4:c7:
f7:d3:6b:b5:6f:06:12:09:21:63:5e:91:60:61:5a:52:88:bd:
f7:85:7a:4c:03:1f:e8:69:4d:61:39:7f:31:c4:ce:79:c4:62:
d4:b4:0b:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Oct 27 10:55:09 2026 by rpki-client