Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/B4D9CCB6BA5911F1ABE57AF46B11F970.roa
File: B4D9CCB6BA5911F1ABE57AF46B11F970.roa (raw, json)
Hash identifier: sathNNHZ1joSXHr6/t5VutNIX6HZUMy0N0z567Eju4E=
Subject key identifier: AC:C6:F8:D3:0F:58:BB:A2:33:2B:2B:F5:82:A8:19:92:14:06:E0:3B
Certificate issuer: /CN=A9165D75/serialNumber=5B1107241BA2E3F48045A9E263776493CAF75F05
Certificate serial: 69
Authority key identifier: 5B:11:07:24:1B:A2:E3:F4:80:45:A9:E2:63:77:64:93:CA:F7:5F:05
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WxEHJBui4_SARaniY3dkk8r3XwU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/B4D9CCB6BA5911F1ABE57AF46B11F970.roa
Signing time: Sun 27 Sep 2026 10:00:53 +0000
ROA not before: Sun 27 Sep 2026 10:00:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21433
IP address blocks: 144.36.70.0/23 maxlen: 23
144.36.70.0/24 maxlen: 24
144.36.71.0/24 maxlen: 24
144.36.128.0/23 maxlen: 23
144.36.128.0/24 maxlen: 24
144.36.134.0/23 maxlen: 23
144.36.134.0/24 maxlen: 24
144.36.135.0/24 maxlen: 24
144.36.140.0/23 maxlen: 23
144.36.140.0/24 maxlen: 24
144.36.141.0/24 maxlen: 24
144.36.182.0/23 maxlen: 23
144.36.182.0/24 maxlen: 24
144.36.183.0/24 maxlen: 24
144.36.184.0/23 maxlen: 23
144.36.184.0/24 maxlen: 24
144.36.185.0/24 maxlen: 24
144.36.188.0/23 maxlen: 23
144.36.188.0/24 maxlen: 24
144.36.189.0/24 maxlen: 24
144.36.206.0/23 maxlen: 23
144.36.206.0/24 maxlen: 24
144.36.207.0/24 maxlen: 24
144.36.210.0/23 maxlen: 23
144.36.210.0/24 maxlen: 24
144.36.211.0/24 maxlen: 24
144.36.214.0/23 maxlen: 23
144.36.214.0/24 maxlen: 24
144.36.215.0/24 maxlen: 24
144.36.220.0/23 maxlen: 23
144.36.220.0/24 maxlen: 24
144.36.221.0/24 maxlen: 24
144.36.222.0/23 maxlen: 23
144.36.222.0/24 maxlen: 24
144.36.223.0/24 maxlen: 24
144.36.224.0/23 maxlen: 23
144.36.224.0/24 maxlen: 24
144.36.225.0/24 maxlen: 24
144.36.226.0/23 maxlen: 23
144.36.226.0/24 maxlen: 24
144.36.227.0/24 maxlen: 24
144.36.228.0/23 maxlen: 23
144.36.228.0/24 maxlen: 24
144.36.229.0/24 maxlen: 24
144.36.230.0/23 maxlen: 23
144.36.230.0/24 maxlen: 24
144.36.231.0/24 maxlen: 24
144.36.233.0/24 maxlen: 24
144.36.234.0/23 maxlen: 23
144.36.234.0/24 maxlen: 24
144.36.235.0/24 maxlen: 24
144.36.244.0/23 maxlen: 23
144.36.244.0/24 maxlen: 24
144.36.245.0/24 maxlen: 24
144.36.250.0/23 maxlen: 23
144.36.250.0/24 maxlen: 24
144.36.251.0/24 maxlen: 24
144.36.254.0/23 maxlen: 23
144.36.254.0/24 maxlen: 24
144.36.255.0/24 maxlen: 24
170.248.0.0/23 maxlen: 23
170.248.0.0/24 maxlen: 24
170.248.1.0/24 maxlen: 24
170.248.42.0/23 maxlen: 23
170.248.42.0/24 maxlen: 24
170.248.43.0/24 maxlen: 24
170.248.160.0/23 maxlen: 23
170.248.160.0/24 maxlen: 24
170.248.161.0/24 maxlen: 24
170.248.163.0/24 maxlen: 24
170.248.164.0/23 maxlen: 23
170.248.164.0/24 maxlen: 24
170.248.165.0/24 maxlen: 24
170.248.168.0/23 maxlen: 23
170.248.168.0/24 maxlen: 24
170.248.169.0/24 maxlen: 24
170.248.190.0/23 maxlen: 23
170.248.190.0/24 maxlen: 24
170.248.191.0/24 maxlen: 24
170.251.10.0/23 maxlen: 23
170.251.10.0/24 maxlen: 24
170.251.11.0/24 maxlen: 24
170.251.20.0/23 maxlen: 24
170.251.40.0/23 maxlen: 23
170.251.40.0/24 maxlen: 24
170.251.41.0/24 maxlen: 24
170.251.42.0/23 maxlen: 23
170.251.42.0/24 maxlen: 24
170.251.43.0/24 maxlen: 24
170.251.44.0/23 maxlen: 23
170.251.44.0/24 maxlen: 24
170.251.45.0/24 maxlen: 24
170.251.46.0/23 maxlen: 23
170.251.46.0/24 maxlen: 24
170.251.47.0/24 maxlen: 24
170.251.60.0/23 maxlen: 23
170.251.60.0/24 maxlen: 24
170.251.61.0/24 maxlen: 24
170.251.90.0/23 maxlen: 23
170.251.90.0/24 maxlen: 24
170.251.91.0/24 maxlen: 24
170.251.110.0/23 maxlen: 23
170.251.110.0/24 maxlen: 24
170.251.111.0/24 maxlen: 24
170.251.149.0/24 maxlen: 24
170.251.154.0/23 maxlen: 23
170.251.154.0/24 maxlen: 24
170.251.155.0/24 maxlen: 24
170.251.170.0/24 maxlen: 24
170.251.174.0/23 maxlen: 23
170.251.174.0/24 maxlen: 24
170.251.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/WxEHJBui4_SARaniY3dkk8r3XwU.crl
rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/WxEHJBui4_SARaniY3dkk8r3XwU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WxEHJBui4_SARaniY3dkk8r3XwU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 14 Oct 2026 09:52:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105 (0x69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165D75, serialNumber=5B1107241BA2E3F48045A9E263776493CAF75F05
Validity
Not Before: Sep 27 10:00:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6ab8e954-e624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9d:d8:dd:5f:99:b5:9d:6b:ae:19:dd:a0:3f:
d0:57:34:4d:2f:fb:4a:7b:0c:fe:6b:76:67:28:0d:
a1:05:f0:c2:74:01:2e:2a:0a:57:36:cc:a4:9f:ab:
36:8c:93:2e:46:72:a9:76:52:d7:79:51:d0:02:33:
17:aa:60:9a:68:71:16:fc:34:99:e6:66:10:1a:92:
46:40:f7:b3:3f:04:cf:e6:7e:24:2e:90:20:35:fb:
33:86:e2:32:2c:e2:41:24:44:54:d5:b9:fa:fd:c3:
fc:ad:26:01:fa:7e:8e:9f:32:b6:d7:62:78:f1:45:
73:ef:9c:6d:2b:76:43:84:44:18:2b:ff:d0:50:7c:
92:b4:8f:ec:56:f8:48:33:6a:a3:cc:cf:5b:d4:68:
6b:ac:f3:df:72:41:35:4f:e4:b7:56:b6:7a:ee:fe:
fb:b3:39:7c:7b:bb:75:63:8f:b7:de:48:95:43:0e:
28:03:76:96:59:a1:ec:7e:42:5e:1b:9a:08:04:f9:
81:78:c3:0b:04:45:08:7e:39:dd:15:51:be:f7:ef:
ff:90:14:f9:b7:bd:b7:43:cd:a4:b8:2e:4e:3b:b3:
8b:b8:76:9a:ad:73:09:eb:fb:0f:c4:e9:c7:b7:6c:
98:8e:17:8d:9a:f7:91:ce:a2:7b:c5:66:bc:99:f7:
e8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C6:F8:D3:0F:58:BB:A2:33:2B:2B:F5:82:A8:19:92:14:06:E0:3B
X509v3 Authority Key Identifier:
keyid:5B:11:07:24:1B:A2:E3:F4:80:45:A9:E2:63:77:64:93:CA:F7:5F:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/WxEHJBui4_SARaniY3dkk8r3XwU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WxEHJBui4_SARaniY3dkk8r3XwU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165D75/9F128D7EB8D211F1BDCDB98F3311F970/B4D9CCB6BA5911F1ABE57AF46B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
144.36.70.0/23
144.36.128.0/23
144.36.134.0/23
144.36.140.0/23
144.36.182.0-144.36.185.255
144.36.188.0/23
144.36.206.0/23
144.36.210.0/23
144.36.214.0/23
144.36.220.0-144.36.231.255
144.36.233.0-144.36.235.255
144.36.244.0/23
144.36.250.0/23
144.36.254.0/23
170.248.0.0/23
170.248.42.0/23
170.248.160.0/23
170.248.163.0-170.248.165.255
170.248.168.0/23
170.248.190.0/23
170.251.10.0/23
170.251.20.0/23
170.251.40.0/21
170.251.60.0/23
170.251.90.0/23
170.251.110.0/23
170.251.149.0/24
170.251.154.0/23
170.251.170.0/24
170.251.174.0/23
Signature Algorithm: sha256WithRSAEncryption
35:8b:fa:cc:e8:cd:3b:eb:42:18:b1:e6:e3:19:f2:8d:49:2e:
34:4f:92:62:e7:01:a5:21:40:b5:b6:18:72:14:1e:4e:48:a2:
fb:b1:29:71:91:e7:cd:65:75:0d:d7:66:47:00:a4:5d:cf:d8:
29:80:72:83:df:e8:7f:8d:99:8c:36:03:71:df:07:fc:39:a5:
20:ac:a9:ed:d0:af:46:3c:01:62:b8:95:0b:02:6c:2a:da:f6:
0e:de:26:9f:4a:51:4a:03:73:e0:3a:3e:40:27:4b:84:91:0f:
01:5a:36:84:ac:0b:60:a4:6f:84:e7:cf:f8:84:80:7f:9a:60:
c7:b1:35:23:d1:4e:c3:51:2c:06:bf:1f:02:13:03:5b:8d:e7:
20:3b:5c:da:36:85:5c:64:66:8a:f3:b7:57:54:47:75:ed:c4:
79:f7:8e:29:ba:65:19:98:26:1a:53:45:9c:ce:84:64:07:ac:
41:7f:66:4c:0e:2c:25:5c:53:2e:6e:5f:f2:d7:b7:bb:16:4d:
7e:1e:6f:83:86:d6:bd:84:3a:87:19:76:82:18:0b:b6:1f:ec:
e7:71:f5:e1:31:e7:3a:5f:a0:2d:a4:01:4d:20:99:aa:33:0f:
00:7e:a5:c7:9a:bf:ad:4d:4c:0c:9f:73:fd:47:e4:9f:8a:20:
9f:83:7e:dd
-----BEGIN CERTIFICATE-----
MIIGDjCCBPagAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NUQ3NTExMC8GA1UEBRMoNUIxMTA3MjQxQkEyRTNGNDgwNDVBOUUyNjM3NzY0OTND
QUY3NUYwNTAeFw0yNjA5MjcxMDAwNTNaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV
BAMTDTZhYjhlOTU0LWU2MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDDndjdX5m1nWuuGd2gP9BXNE0v+0p7DP5rdmcoDaEF8MJ0AS4qClc2zKSfqzaM
ky5Gcql2Utd5UdACMxeqYJpocRb8NJnmZhAakkZA97M/BM/mfiQukCA1+zOG4jIs
4kEkRFTVufr9w/ytJgH6fo6fMrbXYnjxRXPvnG0rdkOERBgr/9BQfJK0j+xW+Egz
aqPMz1vUaGus899yQTVP5LdWtnru/vuzOXx7u3Vjj7feSJVDDigDdpZZoex+Ql4b
mggE+YF4wwsERQh+Od0VUb737/+QFPm3vbdDzaS4Lk47s4u4dpqtcwnr+w/E6ce3
bJiOF42a95HOonvFZryZ9+i1AgMBAAGjggMzMIIDLzAdBgNVHQ4EFgQUrMb40w9Y
u6IzKyv1gqgZkhQG4DswHwYDVR0jBBgwFoAUWxEHJBui4/SARaniY3dkk8r3XwUw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY1RDc1LzlGMTI4RDdFQjhE
MjExRjFCRENEQjk4RjMzMTFGOTcwL1d4RUhKQnVpNF9TQVJhbmlZM2RrazhyM1h3
VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvV3hFSEpCdWk0X1NBUmFuaVkzZGtrOHIzWHdVLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
NUQ3NS85RjEyOEQ3RUI4RDIxMUYxQkRDREI5OEYzMzExRjk3MC9CNEQ5Q0NCNkJB
NTkxMUYxQUJFNTdBRjQ2QjExRjk3MC5yb2EwgfEGCCsGAQUFBwEHAQH/BIHhMIHe
MIHbBAIAATCB1AMEAZAkRgMEAZAkgAMEAZAkhgMEAZAkjDAMAwQBkCS2AwQBkCS4
AwQBkCS8AwQBkCTOAwQBkCTSAwQBkCTWMAwDBAKQJNwDBAOQJOAwDAMEAJAk6QME
ApAk6AMEAZAk9AMEAZAk+gMEAZAk/gMEAar4AAMEAar4KgMEAar4oDAMAwQAqvij
AwQBqvikAwQBqvioAwQBqvi+AwQBqvsKAwQBqvsUAwQDqvsoAwQBqvs8AwQBqvta
AwQBqvtuAwQAqvuVAwQBqvuaAwQAqvuqAwQBqvuuMA0GCSqGSIb3DQEBCwUAA4IB
AQA1i/rM6M0760IYsebjGfKNSS40T5Ji5wGlIUC1thhyFB5OSKL7sSlxkefNZXUN
12ZHAKRdz9gpgHKD3+h/jZmMNgNx3wf8OaUgrKnt0K9GPAFiuJULAmwq2vYO3iaf
SlFKA3PgOj5AJ0uEkQ8BWjaErAtgpG+E58/4hIB/mmDHsTUj0U7DUSwGvx8CEwNb
jecgO1zaNoVcZGaK87dXVEd17cR5944pumUZmCYaU0WczoRkB6xBf2ZMDiwlXFMu
bl/y17e7Fk1+Hm+Dhta9hDqHGXaCGAu2H+zncfXhMec6X6AtpAFNIJmqMw8AfqXH
mr+tTUwMn3P9R+SfiiCfg37d
-----END CERTIFICATE-----
Generated at Wed Oct 7 23:12:52 2026 by rpki-client