Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/084044FC19AC11EB8759456DC4F9AE02.roa
File: 084044FC19AC11EB8759456DC4F9AE02.roa (raw, json)
Hash identifier: THDfOziTUL2k0SlfHF4NK0dtJ9vtGYYQ8rccqqwUbT0=
Subject key identifier: B2:53:33:F1:B5:60:9D:D5:6F:9C:14:04:96:BC:9C:44:07:4A:E5:EA
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1E32
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/084044FC19AC11EB8759456DC4F9AE02.roa
Signing time: Tue 20 Oct 2026 15:14:41 +0000
ROA not before: Tue 20 Oct 2026 15:14:41 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 9940
IP address blocks: 202.61.56.0/21 maxlen: 21
202.61.56.0/24 maxlen: 24
202.61.57.0/24 maxlen: 24
202.61.58.0/24 maxlen: 24
202.61.59.0/24 maxlen: 24
202.61.60.0/24 maxlen: 24
202.61.61.0/24 maxlen: 24
202.61.62.0/24 maxlen: 24
202.61.63.0/24 maxlen: 24
202.147.160.0/20 maxlen: 24
202.147.176.0/21 maxlen: 24
202.147.184.0/21 maxlen: 24
202.154.224.0/20 maxlen: 24
202.154.240.0/20 maxlen: 20
202.154.240.0/24 maxlen: 24
202.154.241.0/24 maxlen: 24
202.154.242.0/24 maxlen: 24
202.154.243.0/24 maxlen: 24
202.154.244.0/24 maxlen: 24
202.154.245.0/24 maxlen: 24
202.154.246.0/24 maxlen: 24
202.154.247.0/24 maxlen: 24
202.154.248.0/24 maxlen: 24
202.154.249.0/24 maxlen: 24
202.154.250.0/24 maxlen: 24
202.154.251.0/24 maxlen: 24
202.154.252.0/24 maxlen: 24
202.154.253.0/24 maxlen: 24
202.154.254.0/24 maxlen: 24
202.154.255.0/24 maxlen: 24
203.223.160.0/20 maxlen: 24
210.2.128.0/20 maxlen: 21
210.2.128.0/24 maxlen: 24
210.2.129.0/24 maxlen: 24
210.2.130.0/24 maxlen: 24
210.2.131.0/24 maxlen: 24
210.2.132.0/22 maxlen: 22
210.2.132.0/24 maxlen: 24
210.2.133.0/24 maxlen: 24
210.2.134.0/24 maxlen: 24
210.2.135.0/24 maxlen: 24
210.2.136.0/21 maxlen: 22
210.2.136.0/24 maxlen: 24
210.2.137.0/24 maxlen: 24
210.2.138.0/24 maxlen: 24
210.2.139.0/24 maxlen: 24
210.2.140.0/24 maxlen: 24
210.2.141.0/24 maxlen: 24
210.2.142.0/24 maxlen: 24
210.2.143.0/24 maxlen: 24
210.2.144.0/20 maxlen: 21
210.2.144.0/24 maxlen: 24
210.2.145.0/24 maxlen: 24
210.2.146.0/24 maxlen: 24
210.2.147.0/24 maxlen: 24
210.2.148.0/24 maxlen: 24
210.2.149.0/24 maxlen: 24
210.2.150.0/24 maxlen: 24
210.2.151.0/24 maxlen: 24
210.2.152.0/24 maxlen: 24
210.2.153.0/24 maxlen: 24
210.2.154.0/24 maxlen: 24
210.2.155.0/24 maxlen: 24
210.2.156.0/24 maxlen: 24
210.2.157.0/24 maxlen: 24
210.2.158.0/24 maxlen: 24
210.2.159.0/24 maxlen: 24
210.2.160.0/20 maxlen: 21
210.2.160.0/24 maxlen: 24
210.2.161.0/24 maxlen: 24
210.2.162.0/24 maxlen: 24
210.2.163.0/24 maxlen: 24
210.2.164.0/24 maxlen: 24
210.2.165.0/24 maxlen: 24
210.2.166.0/24 maxlen: 24
210.2.167.0/24 maxlen: 24
210.2.168.0/24 maxlen: 24
210.2.169.0/24 maxlen: 24
210.2.170.0/24 maxlen: 24
210.2.171.0/24 maxlen: 24
210.2.172.0/24 maxlen: 24
210.2.173.0/24 maxlen: 24
210.2.174.0/24 maxlen: 24
210.2.175.0/24 maxlen: 24
210.2.176.0/20 maxlen: 22
210.2.176.0/24 maxlen: 24
210.2.177.0/24 maxlen: 24
210.2.178.0/24 maxlen: 24
210.2.179.0/24 maxlen: 24
210.2.180.0/24 maxlen: 24
210.2.181.0/24 maxlen: 24
210.2.182.0/24 maxlen: 24
210.2.183.0/24 maxlen: 24
210.2.184.0/24 maxlen: 24
210.2.185.0/24 maxlen: 24
210.2.186.0/24 maxlen: 24
210.2.187.0/24 maxlen: 24
210.2.188.0/24 maxlen: 24
210.2.189.0/24 maxlen: 24
210.2.190.0/24 maxlen: 24
210.2.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7730 (0x1e32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Oct 20 15:14:41 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ad78560-9b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:6b:4e:f6:f1:87:67:65:6a:6b:b7:95:fc:
6e:e7:ca:32:d1:e8:49:d4:44:f9:7a:70:e3:ae:31:
ac:ab:4c:fd:9d:c6:95:92:b5:ce:39:6e:42:d9:17:
c3:52:d6:e9:c9:0a:c4:68:7c:a4:23:ac:5a:fe:df:
80:7b:df:85:4a:32:a5:02:24:9a:09:f4:de:4e:54:
35:10:6e:35:c6:23:80:c6:97:38:3c:d0:5c:a9:6e:
17:39:d3:85:28:15:26:b9:b7:81:be:1d:d0:68:21:
41:a2:01:de:9d:0f:bf:af:67:4d:e7:9e:24:f9:30:
e6:24:63:b8:50:cf:0a:f5:f9:ea:46:e0:5f:7a:3f:
ef:7e:49:f8:1d:a6:04:59:8b:4a:d8:c4:3a:07:05:
8f:0e:4e:aa:f3:66:f3:90:82:e2:19:70:67:98:d3:
47:34:b5:17:40:56:d4:10:8e:9d:0c:e7:be:26:22:
31:54:be:af:da:b3:6d:e6:c6:58:18:95:0e:de:7b:
70:f6:e3:88:7a:e5:bf:9b:bb:f7:17:a0:7d:96:7c:
8e:75:7c:4d:1b:ee:c4:2c:62:81:60:b9:1d:8d:95:
61:6c:88:4f:e4:00:c8:f3:3a:3d:02:be:76:4c:92:
f1:5a:51:3d:c0:bc:20:68:9c:eb:4c:6c:bf:9b:17:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:53:33:F1:B5:60:9D:D5:6F:9C:14:04:96:BC:9C:44:07:4A:E5:EA
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/084044FC19AC11EB8759456DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
202.61.56.0/21
202.147.160.0/19
202.154.224.0/19
203.223.160.0/20
210.2.128.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:c9:74:5c:99:20:c4:4c:a7:14:78:f0:9e:91:6b:d7:df:ac:
11:02:a0:c4:fa:e5:7c:06:1d:7b:a1:46:c9:1a:76:bb:8e:2a:
86:d3:8a:a9:51:99:dd:d4:75:ce:44:3c:db:02:22:f3:26:99:
cf:0e:26:fd:ae:4e:b9:34:71:29:6b:73:79:fe:cf:c7:90:01:
8f:58:c9:8a:82:70:74:0e:e2:1f:4d:49:4d:ba:35:08:af:ac:
20:f2:4d:89:55:28:3d:38:a5:99:81:e8:4e:4b:0b:ff:06:a9:
03:2f:c6:d3:9a:58:dc:fd:83:4e:9f:86:bb:a2:f9:df:77:a9:
bc:cc:6b:8e:f2:b5:d5:1b:e8:78:c7:92:e3:06:72:04:2c:d8:
9f:b8:53:82:0c:ac:b1:8f:45:b3:7d:bd:10:19:16:72:a3:07:
04:b8:05:15:ce:5b:c6:63:22:95:4e:b6:03:2c:a5:b3:22:32:
a4:78:d8:ef:de:10:69:e0:c9:84:fd:f0:53:ad:dc:70:b0:4d:
ac:91:ce:8d:bb:7b:23:ee:07:71:fd:9c:e3:7e:ba:2f:ab:9f:
49:0e:94:a2:e2:1e:fc:0a:27:63:58:eb:f9:3a:9d:27:fa:d9:
cc:ca:5e:93:12:c6:a6:a6:91:e1:13:e4:11:3c:bc:9f:b9:bc:
24:67:59:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:28:46 2026 by rpki-client