Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/7F78A06E6BBD11F18D81D59C7947A888.roa
File: 7F78A06E6BBD11F18D81D59C7947A888.roa (raw, json)
Hash identifier: eg0ecmCsbK5JnVphz+icPr5TGD+NYgXexf2SF0w1KKU=
Subject key identifier: B9:62:9F:35:7E:E8:27:A5:6B:1E:8E:C0:91:58:10:25:53:DE:FD:82
Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial: 0399
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/7F78A06E6BBD11F18D81D59C7947A888.roa
Signing time: Fri 19 Jun 2026 09:01:46 +0000
ROA not before: Fri 19 Jun 2026 09:01:46 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 138341
IP address blocks: 134.65.64.0/22 maxlen: 24
134.65.68.0/22 maxlen: 24
134.65.72.0/22 maxlen: 24
134.65.76.0/22 maxlen: 22
134.65.76.0/23 maxlen: 23
134.65.76.0/24 maxlen: 24
134.65.77.0/24 maxlen: 24
134.65.78.0/23 maxlen: 23
134.65.78.0/24 maxlen: 24
134.65.79.0/24 maxlen: 24
134.65.80.0/22 maxlen: 22
134.65.80.0/23 maxlen: 23
134.65.80.0/24 maxlen: 24
134.65.81.0/24 maxlen: 24
134.65.82.0/23 maxlen: 23
134.65.82.0/24 maxlen: 24
134.65.83.0/24 maxlen: 24
134.65.84.0/22 maxlen: 22
134.65.84.0/23 maxlen: 23
134.65.84.0/24 maxlen: 24
134.65.85.0/24 maxlen: 24
134.65.86.0/23 maxlen: 23
134.65.86.0/24 maxlen: 24
134.65.87.0/24 maxlen: 24
143.92.64.0/19 maxlen: 19
143.92.64.0/24 maxlen: 24
143.92.65.0/24 maxlen: 24
143.92.66.0/24 maxlen: 24
143.92.67.0/24 maxlen: 24
143.92.68.0/24 maxlen: 24
143.92.69.0/24 maxlen: 24
143.92.70.0/24 maxlen: 24
143.92.72.0/24 maxlen: 24
143.92.73.0/24 maxlen: 24
143.92.74.0/23 maxlen: 23
143.92.74.0/24 maxlen: 24
143.92.75.0/24 maxlen: 24
143.92.76.0/24 maxlen: 24
143.92.77.0/24 maxlen: 24
143.92.78.0/24 maxlen: 24
143.92.79.0/24 maxlen: 24
143.92.80.0/24 maxlen: 24
143.92.81.0/24 maxlen: 24
143.92.82.0/23 maxlen: 23
143.92.82.0/24 maxlen: 24
143.92.83.0/24 maxlen: 24
143.92.84.0/23 maxlen: 23
143.92.84.0/24 maxlen: 24
143.92.85.0/24 maxlen: 24
143.92.86.0/24 maxlen: 24
143.92.87.0/24 maxlen: 24
143.92.88.0/24 maxlen: 24
143.92.89.0/24 maxlen: 24
143.92.90.0/24 maxlen: 24
143.92.91.0/24 maxlen: 24
143.92.92.0/23 maxlen: 23
143.92.92.0/24 maxlen: 24
143.92.93.0/24 maxlen: 24
143.92.94.0/23 maxlen: 23
143.92.94.0/24 maxlen: 24
143.92.95.0/24 maxlen: 24
143.92.96.0/22 maxlen: 22
143.92.97.0/24 maxlen: 24
143.92.98.0/24 maxlen: 24
143.92.99.0/24 maxlen: 24
143.92.100.0/23 maxlen: 23
143.92.100.0/24 maxlen: 24
143.92.101.0/24 maxlen: 24
143.92.108.0/23 maxlen: 23
143.92.109.0/24 maxlen: 24
147.136.128.0/22 maxlen: 22
147.136.128.0/23 maxlen: 23
147.136.128.0/24 maxlen: 24
147.136.129.0/24 maxlen: 24
147.136.130.0/23 maxlen: 23
147.136.130.0/24 maxlen: 24
147.136.131.0/24 maxlen: 24
147.136.132.0/22 maxlen: 22
147.136.132.0/23 maxlen: 23
147.136.132.0/24 maxlen: 24
147.136.133.0/24 maxlen: 24
147.136.134.0/23 maxlen: 23
147.136.134.0/24 maxlen: 24
147.136.135.0/24 maxlen: 24
147.136.136.0/22 maxlen: 22
147.136.136.0/23 maxlen: 23
147.136.136.0/24 maxlen: 24
147.136.137.0/24 maxlen: 24
147.136.138.0/23 maxlen: 23
147.136.138.0/24 maxlen: 24
147.136.139.0/24 maxlen: 24
147.136.140.0/22 maxlen: 22
147.136.140.0/23 maxlen: 23
147.136.140.0/24 maxlen: 24
147.136.141.0/24 maxlen: 24
147.136.142.0/23 maxlen: 23
147.136.142.0/24 maxlen: 24
147.136.143.0/24 maxlen: 24
147.136.144.0/22 maxlen: 22
147.136.144.0/23 maxlen: 23
147.136.144.0/24 maxlen: 24
147.136.145.0/24 maxlen: 24
147.136.146.0/23 maxlen: 23
147.136.146.0/24 maxlen: 24
147.136.147.0/24 maxlen: 24
147.136.148.0/22 maxlen: 22
147.136.148.0/23 maxlen: 23
147.136.148.0/24 maxlen: 24
147.136.149.0/24 maxlen: 24
147.136.150.0/23 maxlen: 23
147.136.150.0/24 maxlen: 24
147.136.151.0/24 maxlen: 24
147.136.152.0/22 maxlen: 22
147.136.152.0/23 maxlen: 23
147.136.152.0/24 maxlen: 24
147.136.153.0/24 maxlen: 24
147.136.154.0/23 maxlen: 23
147.136.154.0/24 maxlen: 24
147.136.155.0/24 maxlen: 24
147.136.156.0/22 maxlen: 22
147.136.156.0/23 maxlen: 23
147.136.156.0/24 maxlen: 24
147.136.157.0/24 maxlen: 24
147.136.158.0/23 maxlen: 23
147.136.158.0/24 maxlen: 24
147.136.159.0/24 maxlen: 24
147.136.160.0/22 maxlen: 22
147.136.160.0/23 maxlen: 23
147.136.160.0/24 maxlen: 24
147.136.161.0/24 maxlen: 24
147.136.162.0/23 maxlen: 23
147.136.162.0/24 maxlen: 24
147.136.163.0/24 maxlen: 24
147.136.164.0/22 maxlen: 22
147.136.164.0/23 maxlen: 23
147.136.164.0/24 maxlen: 24
147.136.165.0/24 maxlen: 24
147.136.166.0/23 maxlen: 23
147.136.166.0/24 maxlen: 24
147.136.167.0/24 maxlen: 24
147.136.168.0/22 maxlen: 22
147.136.168.0/23 maxlen: 23
147.136.168.0/24 maxlen: 24
147.136.169.0/24 maxlen: 24
147.136.170.0/23 maxlen: 23
147.136.170.0/24 maxlen: 24
147.136.171.0/24 maxlen: 24
147.136.172.0/22 maxlen: 22
147.136.172.0/23 maxlen: 23
147.136.172.0/24 maxlen: 24
147.136.173.0/24 maxlen: 24
147.136.174.0/23 maxlen: 23
147.136.174.0/24 maxlen: 24
147.136.175.0/24 maxlen: 24
147.136.176.0/22 maxlen: 22
147.136.176.0/23 maxlen: 23
147.136.176.0/24 maxlen: 24
147.136.177.0/24 maxlen: 24
147.136.178.0/23 maxlen: 23
147.136.178.0/24 maxlen: 24
147.136.179.0/24 maxlen: 24
147.136.180.0/22 maxlen: 22
147.136.180.0/23 maxlen: 23
147.136.180.0/24 maxlen: 24
147.136.181.0/24 maxlen: 24
147.136.182.0/23 maxlen: 23
147.136.182.0/24 maxlen: 24
147.136.183.0/24 maxlen: 24
147.136.184.0/22 maxlen: 22
147.136.184.0/23 maxlen: 23
147.136.184.0/24 maxlen: 24
147.136.185.0/24 maxlen: 24
147.136.186.0/23 maxlen: 23
147.136.186.0/24 maxlen: 24
147.136.187.0/24 maxlen: 24
147.136.188.0/22 maxlen: 22
147.136.188.0/23 maxlen: 23
147.136.188.0/24 maxlen: 24
147.136.189.0/24 maxlen: 24
147.136.190.0/23 maxlen: 23
147.136.190.0/24 maxlen: 24
147.136.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 01:50:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 921 (0x399)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Validity
Not Before: Jun 19 09:01:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a35057a-3104
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:73:9d:c8:2e:aa:aa:3f:33:27:b3:e7:90:
02:2b:3b:41:f8:24:5b:85:c0:51:59:fa:25:cf:29:
30:76:2e:0e:7c:1d:93:37:22:3f:65:9f:61:f7:fa:
b7:c9:7c:f3:d8:38:69:64:20:d2:a0:d6:ce:85:bf:
0a:5e:d5:ff:91:4d:a0:92:59:b5:91:ae:bd:ec:f0:
a8:72:bf:8f:01:ff:a4:70:cb:81:df:ec:e9:61:eb:
42:f2:42:fd:e7:fe:87:f2:08:17:37:63:44:f1:2d:
4a:66:36:b5:18:97:63:b3:49:8c:79:10:ac:8b:50:
50:de:42:b9:f7:50:1e:d3:a6:db:dd:0c:74:14:98:
17:ff:f0:75:e7:bf:6b:c7:79:21:83:2a:f4:a8:2c:
7e:69:d8:c1:37:12:33:01:cf:f5:8f:6d:cf:15:ac:
9b:9c:f5:db:27:64:e8:e6:cd:fd:a9:1f:d8:14:ef:
85:3a:10:36:74:b4:38:62:6f:27:2a:5e:ef:1d:a8:
79:1c:93:97:eb:28:cc:c8:4a:59:9c:ff:cc:8f:a2:
de:c6:02:05:25:64:bb:1f:41:4d:2a:1b:00:e2:89:
25:fd:5f:e7:19:eb:db:51:da:19:25:6b:3f:da:62:
a5:96:c7:1b:98:71:f2:85:b2:4e:9d:75:fe:ca:91:
d7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:62:9F:35:7E:E8:27:A5:6B:1E:8E:C0:91:58:10:25:53:DE:FD:82
X509v3 Authority Key Identifier:
keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/7F78A06E6BBD11F18D81D59C7947A888.roa
sbgp-ipAddrBlock: critical
IPv4:
134.65.64.0-134.65.87.255
143.92.64.0-143.92.101.255
143.92.108.0/23
147.136.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9a:80:19:ae:06:b3:6a:64:40:05:72:e6:ef:cd:6f:f4:0f:c2:
b3:82:00:0f:7d:f7:a9:ad:53:df:ed:c7:a8:1d:c4:ab:0d:b7:
cd:53:d8:70:12:1e:cd:f3:03:59:de:55:2b:68:f9:56:b4:23:
98:56:36:60:9b:75:6e:53:a0:eb:e3:05:00:8c:3a:ac:ed:b4:
58:5e:3a:01:be:ff:2d:b5:c9:29:c4:49:06:ee:a7:75:d5:a6:
6c:5d:97:e3:ed:91:96:c4:df:4c:21:ed:90:09:24:50:0c:b4:
c0:e6:b9:8d:73:12:fb:1a:d8:71:96:a4:c9:3a:3a:29:80:61:
10:a1:eb:46:02:84:ba:2f:73:2b:4e:d9:3f:54:6f:21:1d:5a:
c8:42:89:75:d0:88:df:31:34:02:97:e9:6c:b4:9a:ce:33:91:
68:11:53:3b:98:a4:58:d0:fa:9f:2b:18:96:92:54:f5:69:ae:
7b:56:d8:39:66:09:78:91:e7:10:89:f3:cb:ec:0b:28:96:ab:
7c:26:4b:43:0d:60:dc:29:8f:ef:74:df:59:04:2c:3a:66:d2:
da:95:c2:e2:6e:ef:1a:30:25:8f:01:49:77:6b:31:4c:59:c6:
f8:36:05:29:00:a6:7c:89:ec:e5:05:10:a4:b0:6c:37:8b:5d:
4c:29:20:f0
-----BEGIN CERTIFICATE-----
MIIFXjCCBEagAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw
MjM4MzZCQTAwHhcNMjYwNjE5MDkwMTQ2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTM1MDU3YS0zMTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvrVzncguqqo/Myez55ACKztB+CRbhcBRWfolzykwdi4OfB2TNyI/ZZ9h9/q3
yXzz2DhpZCDSoNbOhb8KXtX/kU2gklm1ka697PCocr+PAf+kcMuB3+zpYetC8kL9
5/6H8ggXN2NE8S1KZja1GJdjs0mMeRCsi1BQ3kK591Ae06bb3Qx0FJgX//B1579r
x3khgyr0qCx+adjBNxIzAc/1j23PFaybnPXbJ2To5s39qR/YFO+FOhA2dLQ4Ym8n
Kl7vHah5HJOX6yjMyEpZnP/Mj6LexgIFJWS7H0FNKhsA4okl/V/nGevbUdoZJWs/
2mKllscbmHHyhbJOnXX+ypHXYwIDAQABo4ICgjCCAn4wHQYDVR0OBBYEFLlinzV+
6Celax6OwJFYECVT3v2CMB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4
REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjM5OTgvMzBDQzA4NEEwOERDMTFFREJFREU2MTJCQzRGOUFFMDIvN0Y3OEEwNkU2
QkJEMTFGMThEODFENTlDNzk0N0E4ODgucm9hMEEGCCsGAQUFBwEHAQH/BDIwMDAu
BAIAATAoMAwDBAaGQUADBAOGQVAwDAMEBo9cQAMEAY9cZAMEAY9cbAMEBpOIgDAN
BgkqhkiG9w0BAQsFAAOCAQEAmoAZrgazamRABXLm781v9A/Cs4IAD333qa1T3+3H
qB3Eqw23zVPYcBIezfMDWd5VK2j5VrQjmFY2YJt1blOg6+MFAIw6rO20WF46Ab7/
LbXJKcRJBu6nddWmbF2X4+2RlsTfTCHtkAkkUAy0wOa5jXMS+xrYcZakyTo6KYBh
EKHrRgKEui9zK07ZP1RvIR1ayEKJddCI3zE0ApfpbLSazjORaBFTO5ikWND6nysY
lpJU9Wmue1bYOWYJeJHnEInzy+wLKJarfCZLQw1g3CmP73TfWQQsOmbS2pXC4m7v
GjAljwFJd2sxTFnG+DYFKQCmfIns5QUQpLBsN4tdTCkg8A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:12:01 2026 by rpki-client