Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8470E428A2E711EFA6A5B91AC4F9AE02.roa
File: 8470E428A2E711EFA6A5B91AC4F9AE02.roa (raw, json)
Hash identifier: sinXKl/QnicFwQfl9zN0ZuE8qDpTmLGR8Pto5dNY9P0=
Subject key identifier: C4:AE:DF:AE:BE:23:13:D6:C3:52:A8:05:FA:0C:DF:AD:4E:C9:1C:6A
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3DBA
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8470E428A2E711EFA6A5B91AC4F9AE02.roa
Signing time: Thu 06 Aug 2026 15:12:07 +0000
ROA not before: Thu 06 Aug 2026 15:12:07 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 216425
IP address blocks: 61.251.186.0/24 maxlen: 24
61.251.188.0/24 maxlen: 24
101.53.67.0/24 maxlen: 24
101.53.73.0/24 maxlen: 24
101.53.75.0/24 maxlen: 24
101.53.76.0/24 maxlen: 24
101.53.77.0/24 maxlen: 24
101.53.79.0/24 maxlen: 24
101.53.80.0/24 maxlen: 24
101.53.81.0/24 maxlen: 24
101.53.82.0/24 maxlen: 24
101.53.83.0/24 maxlen: 24
101.53.84.0/24 maxlen: 24
101.53.85.0/24 maxlen: 24
101.53.86.0/24 maxlen: 24
101.53.87.0/24 maxlen: 24
101.53.88.0/24 maxlen: 24
101.53.89.0/24 maxlen: 24
101.53.90.0/24 maxlen: 24
101.53.93.0/24 maxlen: 24
101.53.94.0/24 maxlen: 24
101.53.95.0/24 maxlen: 24
103.9.130.0/24 maxlen: 24
175.176.133.0/24 maxlen: 24
175.176.136.0/24 maxlen: 24
175.176.138.0/24 maxlen: 24
175.176.139.0/24 maxlen: 24
175.176.141.0/24 maxlen: 24
175.176.143.0/24 maxlen: 24
182.237.41.0/24 maxlen: 24
182.237.42.0/24 maxlen: 24
182.237.50.0/24 maxlen: 24
182.237.51.0/24 maxlen: 24
182.237.53.0/24 maxlen: 24
182.237.54.0/24 maxlen: 24
182.237.56.0/24 maxlen: 24
182.237.57.0/24 maxlen: 24
182.237.58.0/24 maxlen: 24
182.237.59.0/24 maxlen: 24
182.237.62.0/24 maxlen: 24
182.237.63.0/24 maxlen: 24
203.173.106.0/24 maxlen: 24
203.173.110.0/24 maxlen: 24
203.173.111.0/24 maxlen: 24
203.173.122.0/24 maxlen: 24
210.4.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 14:22:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15802 (0x3dba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Aug 6 15:12:07 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a74a447-d8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d8:69:42:42:48:8e:f6:c8:15:a2:4a:a9:6f:
91:72:d7:53:c0:f7:b7:58:8d:e3:10:7e:ff:51:46:
0f:0b:90:b4:e5:6b:b8:c3:21:96:a4:35:99:28:19:
7b:20:46:5d:4f:78:e9:8f:44:80:78:02:e7:10:16:
ef:1c:bd:e4:47:60:60:41:6a:c4:a0:3c:fe:f9:c9:
d8:fd:73:67:10:14:fd:fa:ed:a9:98:f2:54:96:f6:
23:90:ff:0d:ee:a6:22:e9:68:78:ca:cf:e0:e2:7f:
2e:0a:b6:6a:8a:37:f2:0e:df:c9:f4:6e:73:56:49:
6c:25:ea:96:34:7e:88:ab:f3:69:a3:4c:29:1f:2c:
e3:04:73:63:e4:ab:29:69:50:38:07:4e:fa:39:68:
a2:dd:21:15:a3:0e:78:ca:31:96:76:00:0c:1e:d0:
10:8d:d0:94:e9:79:43:48:ce:71:99:79:31:36:0e:
51:1e:5a:ff:7e:3e:7e:31:68:9f:15:91:4f:db:61:
47:4e:25:ae:47:99:21:62:da:57:11:9f:f9:c7:0b:
5f:d3:d4:98:c0:cb:de:be:0c:39:b3:45:cc:66:cf:
02:13:ec:cf:d8:e2:ba:3a:d6:71:a4:2a:6e:d9:ab:
5e:9e:f6:14:6a:6c:fa:ac:b0:74:9a:2e:99:df:fd:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AE:DF:AE:BE:23:13:D6:C3:52:A8:05:FA:0C:DF:AD:4E:C9:1C:6A
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/8470E428A2E711EFA6A5B91AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.251.186.0/24
61.251.188.0/24
101.53.67.0/24
101.53.73.0/24
101.53.75.0-101.53.77.255
101.53.79.0-101.53.90.255
101.53.93.0-101.53.95.255
103.9.130.0/24
175.176.133.0/24
175.176.136.0/24
175.176.138.0/23
175.176.141.0/24
175.176.143.0/24
182.237.41.0-182.237.42.255
182.237.50.0/23
182.237.53.0-182.237.54.255
182.237.56.0/22
182.237.62.0/23
203.173.106.0/24
203.173.110.0/23
203.173.122.0/24
210.4.92.0/24
Signature Algorithm: sha256WithRSAEncryption
04:09:a1:b2:25:4f:5b:16:c2:42:b1:e7:87:16:14:78:18:44:
f6:19:8a:29:75:5f:36:9a:92:fa:64:4a:3d:38:3b:11:cd:5c:
2e:d0:0a:9b:66:72:43:74:40:6b:7e:8e:a7:ba:6f:fa:84:c2:
5b:50:eb:c9:cc:fd:f8:1c:b3:bc:c3:83:d7:6c:bf:33:9b:dc:
cc:76:90:c8:a3:d7:e9:45:d9:4c:08:e1:20:a7:8e:41:ae:46:
bc:df:72:d0:08:08:c4:52:43:72:19:9f:47:cc:ba:35:94:01:
92:15:a7:6b:84:8c:54:3c:87:c1:af:db:5d:1c:ee:6d:4c:ae:
5f:8b:d4:aa:65:31:9b:7d:91:8e:f0:d0:32:64:eb:ec:3d:62:
59:bc:01:b9:72:fd:d7:bb:b5:7e:e9:e0:f3:71:28:d0:65:ae:
79:4c:c0:92:73:6e:58:e4:fc:ee:84:af:84:9f:ea:e6:77:60:
12:19:5a:36:bd:ff:d1:88:83:3e:9d:a7:6a:f9:7f:f3:ae:57:
86:fa:7c:f5:73:67:8d:c5:e5:40:89:53:ce:b8:a5:e8:7a:ce:
e8:1f:97:2b:53:56:d0:76:0c:eb:df:ae:be:fb:b6:46:f1:68:
73:7f:df:ea:af:b9:a4:c8:b6:60:9d:bd:0e:a5:c1:71:42:74:
64:c7:78:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:45 2026 by rpki-client