Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/429A130C13D811EEBE72B647C4F9AE02.roa
File: 429A130C13D811EEBE72B647C4F9AE02.roa (raw, json)
Hash identifier: opUD3RDxuuzQ74+7X1V8Eg2jT9R6K4u+MCRuseVANNc=
Subject key identifier: 36:57:8A:56:E8:A5:B3:7F:FD:3F:A2:AE:43:F4:85:D1:D9:98:4C:69
Certificate issuer: /CN=A916A983/serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Certificate serial: 146F
Authority key identifier: 88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/429A130C13D811EEBE72B647C4F9AE02.roa
Signing time: Thu 10 Sep 2026 17:33:21 +0000
ROA not before: Thu 10 Sep 2026 17:33:21 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 1221
IP address blocks: 137.147.0.0/16 maxlen: 16
138.130.0.0/16 maxlen: 16
138.217.0.0/16 maxlen: 16
139.130.0.0/16 maxlen: 16
139.134.0.0/16 maxlen: 16
139.168.0.0/16 maxlen: 16
143.238.0.0/16 maxlen: 16
144.130.0.0/15 maxlen: 15
144.130.0.0/17 maxlen: 17
144.130.144.0/20 maxlen: 20
144.130.160.0/19 maxlen: 19
144.130.192.0/18 maxlen: 18
144.131.0.0/16 maxlen: 16
144.132.0.0/14 maxlen: 14
144.136.0.0/15 maxlen: 15
144.139.0.0/16 maxlen: 16
144.140.0.0/16 maxlen: 16
147.69.0.0/16 maxlen: 16
149.135.0.0/16 maxlen: 16
165.228.0.0/16 maxlen: 16
192.67.84.0/24 maxlen: 24
192.70.219.0/24 maxlen: 24
192.73.66.0/24 maxlen: 24
192.74.139.0/24 maxlen: 24
192.74.140.0/22 maxlen: 26
192.74.144.0/20 maxlen: 20
192.74.160.0/19 maxlen: 19
192.74.192.0/20 maxlen: 20
192.74.208.0/24 maxlen: 24
192.82.143.0/24 maxlen: 24
192.111.105.0/24 maxlen: 24
192.131.27.0/24 maxlen: 24
192.131.28.0/23 maxlen: 23
192.131.30.0/24 maxlen: 24
192.148.116.0/22 maxlen: 22
192.148.120.0/21 maxlen: 21
192.148.128.0/19 maxlen: 19
192.148.160.0/22 maxlen: 22
192.148.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 16:56:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5231 (0x146f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916A983, serialNumber=88D87B102F5C2771C367064E2049B68A903C71B5
Validity
Not Before: Sep 10 17:33:21 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aa2e9e1-72d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9f:32:a6:af:a9:10:07:96:05:63:f3:8a:47:
f6:a4:b0:85:cb:f4:fb:d4:e0:e9:7b:63:a1:e4:6d:
cf:05:01:e4:4f:7a:1d:82:da:17:fa:87:d3:ca:cc:
5e:40:82:da:84:87:c4:ea:4b:57:98:5d:14:23:e7:
f6:ef:b2:6b:2a:90:89:38:7e:9d:3c:bf:4b:5a:7e:
aa:96:2f:4d:e3:4f:a0:2e:ed:b4:16:b3:72:b1:fe:
6c:3b:22:1b:2d:ab:b4:ab:e6:55:52:ea:f9:a1:95:
54:ef:6c:ca:bd:7a:ee:90:5b:6a:e8:07:7b:da:b4:
ac:aa:b9:03:6d:78:4b:bd:fb:64:28:c2:7a:9c:ce:
71:83:ba:e9:7d:31:09:69:db:ba:43:ca:fb:f0:23:
cb:ce:07:e9:a5:c2:c2:8a:29:eb:8c:ab:13:61:0e:
aa:3f:7f:80:1c:7f:4d:73:69:37:89:2c:d6:1a:43:
7e:bb:9b:6c:df:b4:b5:e3:db:5c:74:44:6c:4c:50:
51:d8:1d:69:8c:ce:ba:d2:ce:ef:87:04:48:1d:72:
3b:19:d6:2c:02:fc:5b:85:2c:cf:e9:ed:29:35:1a:
3b:e7:1f:d2:fd:9d:1b:2d:a3:06:51:71:cb:17:6a:
54:bc:86:d4:f1:2c:12:a8:ac:87:66:b5:c7:c4:ec:
5e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:57:8A:56:E8:A5:B3:7F:FD:3F:A2:AE:43:F4:85:D1:D9:98:4C:69
X509v3 Authority Key Identifier:
keyid:88:D8:7B:10:2F:5C:27:71:C3:67:06:4E:20:49:B6:8A:90:3C:71:B5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iNh7EC9cJ3HDZwZOIEm2ipA8cbU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A983/0E082E72CD0F11E89D9FF165C4F9AE02/429A130C13D811EEBE72B647C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
137.147.0.0/16
138.130.0.0/16
138.217.0.0/16
139.130.0.0/16
139.134.0.0/16
139.168.0.0/16
143.238.0.0/16
144.130.0.0-144.137.255.255
144.139.0.0-144.140.255.255
147.69.0.0/16
149.135.0.0/16
165.228.0.0/16
192.67.84.0/24
192.70.219.0/24
192.73.66.0/24
192.74.139.0-192.74.208.255
192.82.143.0/24
192.111.105.0/24
192.131.27.0-192.131.30.255
192.148.116.0-192.148.165.255
Signature Algorithm: sha256WithRSAEncryption
94:28:b8:03:d6:6f:30:71:15:2e:4c:ba:29:5b:74:11:c6:77:
75:49:d5:a0:a6:da:1e:b8:c9:a6:6f:75:be:ae:87:5c:9a:49:
ee:1f:d3:d2:87:74:a5:a8:ed:c3:b0:bc:68:2e:40:3f:cf:fb:
74:1e:17:a9:8f:ee:9e:0e:90:18:fd:a6:7d:48:76:ba:de:f3:
44:98:97:d4:d7:08:ab:47:23:48:68:b9:fa:b4:84:95:b5:76:
1b:4f:0f:b1:20:7e:8a:10:64:23:77:65:74:a8:a8:bf:8b:7d:
94:69:0d:ca:1a:4e:32:ac:0b:fe:07:c9:9c:2e:59:ae:c7:91:
22:3f:7f:87:2d:01:6f:fa:e8:c0:df:48:ee:8b:36:6d:d1:9c:
74:49:6a:96:90:0d:9a:a2:11:05:68:93:70:fc:1f:b4:ff:a5:
06:63:74:d5:fe:ed:88:c0:67:9a:a3:5f:d2:7f:57:2d:14:0c:
f9:75:dc:20:23:e9:c1:79:5a:36:ba:d2:11:52:4c:be:7b:d0:
e0:a5:5c:0b:75:2b:e3:28:12:b6:e2:2a:b8:b4:0b:bd:5c:bf:
5a:75:81:71:c5:48:c3:79:de:31:28:04:dc:4f:a0:a5:51:14:
81:c4:77:e3:a0:d1:65:26:c3:57:47:a6:da:04:d5:5b:51:6c:
5f:29:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:32:20 2026 by rpki-client