Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/9894B43E80DA11F1AF01F71A5DA30FBC.roa
File: 9894B43E80DA11F1AF01F71A5DA30FBC.roa (raw, json)
Hash identifier: 9jtTjkuZWC6mMxOt+5/ME68944xeZjtkp78Ek2ctlcw=
Subject key identifier: 49:5A:AD:E3:90:1D:49:36:1B:20:9D:5E:E3:11:8A:9D:0E:8D:4F:8A
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1E2B
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/9894B43E80DA11F1AF01F71A5DA30FBC.roa
Signing time: Tue 20 Oct 2026 15:14:27 +0000
ROA not before: Tue 20 Oct 2026 15:14:27 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 23966
IP address blocks: 119.30.80.0/20 maxlen: 20
119.30.82.0/24 maxlen: 24
119.30.86.0/24 maxlen: 24
119.30.87.0/24 maxlen: 24
119.30.100.0/24 maxlen: 24
119.30.106.0/24 maxlen: 24
119.30.107.0/24 maxlen: 24
119.30.108.0/24 maxlen: 24
119.30.112.0/22 maxlen: 24
119.30.124.0/22 maxlen: 24
119.73.0.0/18 maxlen: 24
202.61.32.0/19 maxlen: 19
202.61.32.0/20 maxlen: 20
202.61.32.0/24 maxlen: 24
202.61.34.0/24 maxlen: 24
202.61.40.0/24 maxlen: 24
202.61.41.0/24 maxlen: 24
202.61.42.0/24 maxlen: 24
202.61.43.0/24 maxlen: 24
202.61.44.0/24 maxlen: 24
202.61.46.0/24 maxlen: 24
202.61.47.0/24 maxlen: 24
202.61.48.0/21 maxlen: 24
202.61.56.0/21 maxlen: 24
202.147.160.0/20 maxlen: 24
202.147.176.0/20 maxlen: 20
202.147.176.0/21 maxlen: 24
202.147.184.0/21 maxlen: 24
202.154.224.0/19 maxlen: 19
202.154.224.0/20 maxlen: 20
202.154.224.0/24 maxlen: 24
202.154.225.0/24 maxlen: 24
202.154.226.0/24 maxlen: 24
202.154.227.0/24 maxlen: 24
202.154.228.0/24 maxlen: 24
202.154.229.0/24 maxlen: 24
202.154.230.0/24 maxlen: 24
202.154.231.0/24 maxlen: 24
202.154.232.0/24 maxlen: 24
202.154.233.0/24 maxlen: 24
202.154.234.0/24 maxlen: 24
202.154.235.0/24 maxlen: 24
202.154.236.0/24 maxlen: 24
202.154.237.0/24 maxlen: 24
202.154.238.0/24 maxlen: 24
202.154.239.0/24 maxlen: 24
202.154.240.0/20 maxlen: 20
202.154.240.0/24 maxlen: 24
202.154.241.0/24 maxlen: 24
202.154.242.0/24 maxlen: 24
202.154.243.0/24 maxlen: 24
202.154.244.0/24 maxlen: 24
202.154.245.0/24 maxlen: 24
202.154.246.0/24 maxlen: 24
202.154.247.0/24 maxlen: 24
202.154.248.0/24 maxlen: 24
202.154.249.0/24 maxlen: 24
202.154.250.0/24 maxlen: 24
202.154.251.0/24 maxlen: 24
202.154.252.0/24 maxlen: 24
202.154.253.0/24 maxlen: 24
202.154.254.0/24 maxlen: 24
202.154.255.0/24 maxlen: 24
203.223.160.0/20 maxlen: 24
210.2.128.0/18 maxlen: 18
210.2.128.0/20 maxlen: 21
210.2.128.0/24 maxlen: 24
210.2.129.0/24 maxlen: 24
210.2.130.0/24 maxlen: 24
210.2.131.0/24 maxlen: 24
210.2.132.0/22 maxlen: 22
210.2.132.0/24 maxlen: 24
210.2.133.0/24 maxlen: 24
210.2.134.0/24 maxlen: 24
210.2.135.0/24 maxlen: 24
210.2.136.0/21 maxlen: 22
210.2.136.0/24 maxlen: 24
210.2.137.0/24 maxlen: 24
210.2.138.0/24 maxlen: 24
210.2.139.0/24 maxlen: 24
210.2.140.0/24 maxlen: 24
210.2.141.0/24 maxlen: 24
210.2.142.0/24 maxlen: 24
210.2.143.0/24 maxlen: 24
210.2.144.0/20 maxlen: 21
210.2.144.0/24 maxlen: 24
210.2.145.0/24 maxlen: 24
210.2.146.0/24 maxlen: 24
210.2.147.0/24 maxlen: 24
210.2.148.0/24 maxlen: 24
210.2.149.0/24 maxlen: 24
210.2.150.0/24 maxlen: 24
210.2.151.0/24 maxlen: 24
210.2.152.0/24 maxlen: 24
210.2.153.0/24 maxlen: 24
210.2.154.0/24 maxlen: 24
210.2.155.0/24 maxlen: 24
210.2.156.0/24 maxlen: 24
210.2.157.0/24 maxlen: 24
210.2.158.0/24 maxlen: 24
210.2.159.0/24 maxlen: 24
210.2.160.0/20 maxlen: 21
210.2.160.0/24 maxlen: 24
210.2.161.0/24 maxlen: 24
210.2.162.0/24 maxlen: 24
210.2.163.0/24 maxlen: 24
210.2.164.0/24 maxlen: 24
210.2.165.0/24 maxlen: 24
210.2.166.0/24 maxlen: 24
210.2.167.0/24 maxlen: 24
210.2.168.0/24 maxlen: 24
210.2.169.0/24 maxlen: 24
210.2.170.0/24 maxlen: 24
210.2.171.0/24 maxlen: 24
210.2.172.0/24 maxlen: 24
210.2.173.0/24 maxlen: 24
210.2.174.0/24 maxlen: 24
210.2.175.0/24 maxlen: 24
210.2.176.0/20 maxlen: 22
210.2.176.0/24 maxlen: 24
210.2.177.0/24 maxlen: 24
210.2.178.0/24 maxlen: 24
210.2.179.0/24 maxlen: 24
210.2.180.0/24 maxlen: 24
210.2.181.0/24 maxlen: 24
210.2.182.0/24 maxlen: 24
210.2.183.0/24 maxlen: 24
210.2.184.0/24 maxlen: 24
210.2.185.0/24 maxlen: 24
210.2.186.0/24 maxlen: 24
210.2.187.0/24 maxlen: 24
210.2.188.0/24 maxlen: 24
210.2.189.0/24 maxlen: 24
210.2.190.0/24 maxlen: 24
210.2.191.0/24 maxlen: 24
2401:0:201::/48 maxlen: 48
2401:0:4000::/40 maxlen: 40
2401:0:8001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 14:29:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7723 (0x1e2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Oct 20 15:14:27 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ad78552-40b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:81:4e:84:20:5e:85:ad:b1:8b:28:7b:fb:06:
13:5c:e8:20:ff:3c:13:c9:3d:9c:6d:1c:b1:76:b3:
95:ac:ef:e1:57:70:aa:95:88:65:23:28:89:91:4e:
dd:ba:92:e0:ac:e3:3e:bd:60:a8:58:1e:44:23:98:
0a:7b:e5:c6:bc:06:98:b5:a9:3b:3d:fa:f5:e8:d2:
90:8b:c5:cd:c2:1e:1c:6d:15:6d:f3:aa:03:8e:d4:
42:d4:96:e2:aa:cc:21:ec:a6:d4:3e:46:4a:30:fa:
69:22:0c:06:86:1e:4e:d0:02:7b:fe:94:8f:72:ea:
ca:9a:e0:68:c8:b6:7a:01:dc:4a:9c:42:1b:ae:12:
4b:f2:9f:07:c8:5e:a5:15:42:a1:06:4b:89:82:15:
12:c2:d0:a8:5c:34:3f:1f:65:c4:93:48:aa:21:7a:
66:c7:9d:f2:13:e7:57:b6:d7:9b:0f:6d:ed:d8:57:
ef:13:38:3e:53:ee:99:f7:84:ab:40:53:97:37:0a:
62:cb:3b:48:28:71:9c:59:43:96:d4:9e:bc:57:ba:
6b:a0:d8:ba:2a:45:42:e1:2b:ee:66:2a:4f:7a:fc:
e5:9a:ac:d5:30:51:17:69:db:c3:aa:21:21:e3:9f:
3c:de:18:51:e1:82:2f:e7:c4:5f:7b:3f:26:36:2b:
61:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:5A:AD:E3:90:1D:49:36:1B:20:9D:5E:E3:11:8A:9D:0E:8D:4F:8A
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/9894B43E80DA11F1AF01F71A5DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
119.30.80.0/20
119.30.100.0/24
119.30.106.0-119.30.108.255
119.30.112.0/22
119.30.124.0/22
119.73.0.0/18
202.61.32.0/19
202.147.160.0/19
202.154.224.0/19
203.223.160.0/20
210.2.128.0/18
IPv6:
2401:0:201::/48
2401:0:4000::/40
2401:0:8001::/48
Signature Algorithm: sha256WithRSAEncryption
52:85:4e:b2:83:e0:8b:db:80:30:d5:c2:f9:fe:fc:80:c4:a7:
77:9e:cc:49:b3:45:29:10:ec:6e:46:cc:34:03:3a:c9:e9:b5:
e5:e3:21:30:27:28:ab:bb:8c:ae:f5:57:59:48:09:f2:2c:66:
2f:ae:8f:4f:55:27:ea:9e:fa:bc:85:38:f4:e3:c9:4b:d0:15:
a9:9d:ca:b6:29:a4:6a:1b:22:0e:3e:11:66:f7:06:40:f8:9f:
93:23:48:ec:55:b7:b4:1e:b4:f6:69:2f:84:29:02:b6:20:09:
37:a7:b5:ce:e9:d9:76:5f:71:24:5e:cb:7f:aa:3d:7d:f3:ed:
c7:50:31:89:f2:4d:46:74:06:0f:01:60:ba:b7:27:1f:17:fe:
70:81:48:9c:71:59:a2:f4:aa:90:42:b3:5f:ee:be:50:09:ca:
64:c6:ad:c9:99:82:a0:3c:e3:e5:79:b9:b4:fd:04:f2:3c:10:
87:97:fc:49:ab:a2:d7:64:b8:bb:13:b9:f6:3e:44:95:c8:3f:
a2:df:a7:a7:5a:74:61:42:0f:87:2c:bd:0f:c2:a8:1a:5c:93:
70:55:63:5a:86:65:4d:97:dd:a5:5b:7b:79:d8:f0:9e:c2:52:
93:aa:39:0a:2f:6b:a9:56:fe:3c:81:56:57:1a:e1:b3:28:f1:
70:a8:0e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:29:41 2026 by rpki-client