Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/F9ED3D7AACA711F1B77415A05D11F970.roa
File: F9ED3D7AACA711F1B77415A05D11F970.roa (raw, json)
Hash identifier: +9fmzzPNltw1OUQErS0gd/5n5Ux+sgfbHXxkz2xNLlo=
Subject key identifier: D6:37:C1:F2:AB:40:DE:0D:B0:06:7F:22:B4:EF:D6:4B:34:33:ED:8D
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3EA3
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/F9ED3D7AACA711F1B77415A05D11F970.roa
Signing time: Tue 29 Sep 2026 05:14:18 +0000
ROA not before: Tue 29 Sep 2026 05:14:18 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 216138
IP address blocks: 49.128.201.0/24 maxlen: 24
49.128.214.0/24 maxlen: 24
61.251.184.0/24 maxlen: 24
101.53.67.0/24 maxlen: 24
101.53.79.0/24 maxlen: 24
101.53.83.0/24 maxlen: 24
101.53.85.0/24 maxlen: 24
101.55.49.0/24 maxlen: 24
103.6.72.0/24 maxlen: 24
103.6.75.0/24 maxlen: 24
112.196.196.0/24 maxlen: 24
112.196.197.0/24 maxlen: 24
112.196.198.0/24 maxlen: 24
112.196.204.0/24 maxlen: 24
112.196.205.0/24 maxlen: 24
112.196.210.0/24 maxlen: 24
112.196.213.0/24 maxlen: 24
112.196.216.0/24 maxlen: 24
112.196.217.0/24 maxlen: 24
112.196.220.0/24 maxlen: 24
112.196.221.0/24 maxlen: 24
124.66.209.0/24 maxlen: 24
124.66.211.0/24 maxlen: 24
182.237.56.0/24 maxlen: 24
182.237.57.0/24 maxlen: 24
182.237.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 14:22:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16035 (0x3ea3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Sep 29 05:14:18 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6abb492a-f535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5a:01:3d:19:97:c3:c5:c8:3d:4b:c8:c5:4c:
a4:d4:29:e9:3b:18:e3:bb:9a:fd:66:e3:6f:66:2b:
5c:3d:81:99:f1:be:3a:6c:80:57:b1:cb:1a:2f:68:
f5:d6:fa:3b:f8:86:7b:a8:a8:dd:15:0f:0a:18:b2:
9a:89:5e:ef:81:cf:c3:c8:be:d6:56:03:3a:9a:90:
82:60:0e:02:1f:e5:2e:26:e6:89:f7:b9:6d:10:e6:
3d:1e:5a:70:50:8f:d7:3d:7c:98:c1:56:89:63:9b:
60:01:78:25:1e:1d:6e:08:60:50:04:9e:9b:cf:a9:
c9:30:34:1d:a3:4e:02:f7:d2:fd:40:f8:69:84:d3:
e8:ca:ca:ba:b7:b8:e0:5c:99:e6:dd:23:d1:f7:23:
b2:e2:10:d0:68:98:0b:de:98:69:15:ad:6d:d8:7d:
95:f5:91:90:b0:00:b4:a6:7e:6c:a3:47:a1:48:22:
c2:4f:65:23:f9:63:93:9c:17:6b:52:b0:0a:0d:27:
06:5d:75:e7:8d:96:e8:de:62:37:b8:19:bc:9f:59:
77:5c:ff:af:69:9d:08:dc:1d:df:11:ec:08:05:42:
7b:0c:58:70:d1:fb:34:ca:72:e6:42:bc:a4:35:b2:
f3:31:0e:24:8f:f4:c5:5a:20:ec:07:0c:07:33:3d:
bb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:37:C1:F2:AB:40:DE:0D:B0:06:7F:22:B4:EF:D6:4B:34:33:ED:8D
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/F9ED3D7AACA711F1B77415A05D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
49.128.201.0/24
49.128.214.0/24
61.251.184.0/24
101.53.67.0/24
101.53.79.0/24
101.53.83.0/24
101.53.85.0/24
101.55.49.0/24
103.6.72.0/24
103.6.75.0/24
112.196.196.0-112.196.198.255
112.196.204.0/23
112.196.210.0/24
112.196.213.0/24
112.196.216.0/23
112.196.220.0/23
124.66.209.0/24
124.66.211.0/24
182.237.56.0/23
182.237.59.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:71:74:06:35:88:d2:19:13:f9:6a:52:0a:e6:06:00:5c:b0:
f3:1a:93:99:d4:ce:8d:a2:d5:e0:f9:72:50:60:6b:e5:01:9b:
c1:94:ba:64:25:f7:cf:0e:98:c5:d6:2c:6d:75:76:9a:5c:3c:
f2:57:f4:f7:60:5b:9a:8d:85:e4:97:ce:e2:24:b4:2b:10:dc:
82:8b:cc:e1:db:3c:c2:9e:a7:95:a7:35:0c:1c:9b:ae:3b:cf:
c0:35:52:e0:1e:3c:4a:81:02:32:ed:21:44:76:cc:17:37:89:
85:a2:dd:28:66:2b:2e:a0:58:5a:ad:61:b6:71:78:fa:96:dc:
4f:5f:34:cd:bf:13:bd:8b:d3:ca:52:5a:65:07:8b:ab:7f:66:
cf:c4:bb:5b:5f:1b:58:ec:a8:6a:43:bd:40:51:a8:67:18:9c:
36:31:c4:7f:cb:60:31:15:01:92:eb:bd:26:a7:4f:c9:1a:8f:
b9:8d:24:db:6a:10:e6:01:63:9c:00:a3:e9:17:2a:cf:06:11:
a1:3a:5a:dd:d4:35:1d:22:72:63:ab:28:1d:8f:76:2b:89:df:
22:30:54:2c:e1:17:13:20:40:83:fd:81:b0:c3:80:61:37:20:
5a:e4:e7:6b:90:1f:b0:7c:d1:13:d7:38:d8:65:0d:bf:0a:94:
fa:40:e5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 16:04:17 2026 by rpki-client