Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/68D217FAC13F11F19B446DC24B11F970.roa
File: 68D217FAC13F11F19B446DC24B11F970.roa (raw, json)
Hash identifier: 8Vw91JytNhBUME/g/O822wkF75I0b0JmxX5KdOJhKiY=
Subject key identifier: FE:8C:8D:5C:0D:8A:90:89:00:DC:90:EA:8B:8D:C6:7A:79:65:84:26
Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Certificate serial: 0571
Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/68D217FAC13F11F19B446DC24B11F970.roa
Signing time: Tue 06 Oct 2026 04:35:51 +0000
ROA not before: Tue 06 Oct 2026 04:35:51 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 45753
IP address blocks: 52.128.224.0/19 maxlen: 19
52.128.224.0/24 maxlen: 24
52.128.225.0/24 maxlen: 24
52.128.226.0/24 maxlen: 24
52.128.227.0/24 maxlen: 24
52.128.228.0/24 maxlen: 24
52.128.229.0/24 maxlen: 24
52.128.230.0/24 maxlen: 24
52.128.231.0/24 maxlen: 24
52.128.232.0/24 maxlen: 24
52.128.233.0/24 maxlen: 24
52.128.234.0/24 maxlen: 24
52.128.235.0/24 maxlen: 24
52.128.236.0/24 maxlen: 24
52.128.237.0/24 maxlen: 24
52.128.238.0/24 maxlen: 24
52.128.239.0/24 maxlen: 24
52.128.240.0/24 maxlen: 24
52.128.241.0/24 maxlen: 24
52.128.242.0/24 maxlen: 24
52.128.243.0/24 maxlen: 24
52.128.244.0/24 maxlen: 24
52.128.245.0/24 maxlen: 24
52.128.246.0/24 maxlen: 24
52.128.247.0/24 maxlen: 24
52.128.248.0/24 maxlen: 24
52.128.249.0/24 maxlen: 24
52.128.250.0/24 maxlen: 24
52.128.251.0/24 maxlen: 24
52.128.252.0/24 maxlen: 24
52.128.253.0/24 maxlen: 24
52.128.254.0/24 maxlen: 24
52.128.255.0/24 maxlen: 24
148.66.0.0/19 maxlen: 19
148.66.0.0/24 maxlen: 24
148.66.1.0/24 maxlen: 24
148.66.2.0/24 maxlen: 24
148.66.3.0/24 maxlen: 24
148.66.4.0/24 maxlen: 24
148.66.5.0/24 maxlen: 24
148.66.6.0/24 maxlen: 24
148.66.7.0/24 maxlen: 24
148.66.8.0/24 maxlen: 24
148.66.9.0/24 maxlen: 24
148.66.10.0/24 maxlen: 24
148.66.11.0/24 maxlen: 24
148.66.12.0/24 maxlen: 24
148.66.13.0/24 maxlen: 24
148.66.14.0/24 maxlen: 24
148.66.15.0/24 maxlen: 24
148.66.16.0/24 maxlen: 24
148.66.17.0/24 maxlen: 24
148.66.18.0/24 maxlen: 24
148.66.19.0/24 maxlen: 24
148.66.20.0/24 maxlen: 24
148.66.21.0/24 maxlen: 24
148.66.22.0/24 maxlen: 24
148.66.23.0/24 maxlen: 24
148.66.24.0/24 maxlen: 24
148.66.25.0/24 maxlen: 24
148.66.26.0/24 maxlen: 24
148.66.27.0/24 maxlen: 24
148.66.28.0/24 maxlen: 24
148.66.29.0/24 maxlen: 24
148.66.30.0/24 maxlen: 24
148.66.31.0/24 maxlen: 24
216.118.224.0/19 maxlen: 19
216.118.224.0/20 maxlen: 20
216.118.224.0/21 maxlen: 21
216.118.224.0/22 maxlen: 22
216.118.224.0/23 maxlen: 24
216.118.226.0/24 maxlen: 24
216.118.227.0/24 maxlen: 24
216.118.228.0/24 maxlen: 24
216.118.229.0/24 maxlen: 24
216.118.230.0/24 maxlen: 24
216.118.231.0/24 maxlen: 24
216.118.232.0/24 maxlen: 24
216.118.233.0/24 maxlen: 24
216.118.234.0/24 maxlen: 24
216.118.235.0/24 maxlen: 24
216.118.236.0/24 maxlen: 24
216.118.237.0/24 maxlen: 24
216.118.238.0/24 maxlen: 24
216.118.239.0/24 maxlen: 24
216.118.240.0/24 maxlen: 24
216.118.241.0/24 maxlen: 24
216.118.242.0/24 maxlen: 24
216.118.243.0/24 maxlen: 24
216.118.244.0/24 maxlen: 24
216.118.245.0/24 maxlen: 24
216.118.246.0/24 maxlen: 24
216.118.247.0/24 maxlen: 24
216.118.248.0/24 maxlen: 24
216.118.249.0/24 maxlen: 24
216.118.250.0/24 maxlen: 24
216.118.251.0/24 maxlen: 24
216.118.252.0/24 maxlen: 24
216.118.253.0/24 maxlen: 24
216.118.254.0/24 maxlen: 24
216.118.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 31 Oct 2026 20:13:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1393 (0x571)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Validity
Not Before: Oct 6 04:35:51 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6ac47aa7-8581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:53:0f:50:f9:b5:ef:78:ea:37:09:1c:bc:92:
11:7d:2b:0e:d0:9f:22:f7:59:57:49:98:29:09:0b:
7b:4c:59:33:a8:85:d3:c6:50:21:b7:5e:29:0b:c3:
09:84:c8:b8:5f:dd:87:e9:65:1a:e4:5a:22:eb:ad:
4c:95:80:0a:c9:5e:e1:90:39:2d:c9:31:d9:a2:49:
70:fd:44:d7:0e:ff:82:22:af:c4:82:df:1c:37:90:
74:f6:01:72:d7:82:36:03:07:81:6c:84:90:9f:e0:
7c:61:58:4d:97:6f:ac:04:5f:6f:78:85:bb:a1:2d:
1a:16:67:d8:20:93:22:c8:3e:b1:6a:d9:af:61:33:
19:55:72:39:45:91:b1:04:14:a3:55:27:05:14:3f:
dc:72:57:63:81:fc:d8:b4:62:93:99:ba:6c:3d:2a:
a9:19:71:26:0b:b9:c7:e4:10:2d:51:7c:b9:9f:e5:
d6:5c:17:fa:a0:ca:f5:45:f2:94:25:fa:ef:a4:04:
68:e9:ae:7b:a5:aa:76:2f:30:33:50:8a:5c:a9:46:
dd:06:22:55:46:e3:73:ad:d1:94:58:1c:e7:1b:da:
78:39:df:fd:0c:a2:9f:fb:df:bf:4c:03:75:b1:2c:
93:67:49:c6:9b:23:f2:a9:91:b1:f0:12:02:b9:01:
1c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8C:8D:5C:0D:8A:90:89:00:DC:90:EA:8B:8D:C6:7A:79:65:84:26
X509v3 Authority Key Identifier:
keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/68D217FAC13F11F19B446DC24B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
52.128.224.0/19
148.66.0.0/19
216.118.224.0/19
Signature Algorithm: sha256WithRSAEncryption
6b:18:15:61:c1:91:c5:1a:5f:28:6f:91:35:d1:9f:04:09:76:
c6:0a:fa:c5:bc:7e:85:01:b4:c7:f8:73:ac:04:fb:2f:43:16:
72:16:3b:fd:e0:ac:4e:9d:89:a7:71:29:87:1e:8c:ff:71:23:
ed:59:2e:07:e7:2a:e3:3a:a9:80:6d:ab:e3:f2:6c:65:d9:95:
6c:75:b1:7a:dd:04:74:72:d9:8b:81:90:dc:02:d2:b9:b5:d6:
bf:55:9b:bf:69:4c:9c:b8:32:65:a5:70:6f:70:37:f6:ef:cf:
cf:3d:c9:9c:8f:2d:d7:a7:26:cc:b9:36:7c:b2:6d:98:71:5f:
18:66:3e:fb:6c:0b:4f:b9:d0:64:64:8a:41:44:b9:47:6d:d8:
2d:ae:07:e0:98:57:87:9a:ba:7a:7c:2b:ca:21:4a:0b:cd:77:
d7:f7:4c:76:dc:fe:09:5d:a6:eb:9e:d1:53:54:1e:6a:6e:f0:
b4:e1:04:85:d6:66:70:4a:26:d8:9c:38:df:f5:47:76:3e:dc:
e3:8d:20:99:a6:5b:64:83:80:fa:9c:78:5d:b1:77:49:df:ba:
ed:ce:66:0a:51:84:cc:10:59:36:3b:9c:59:91:1a:64:c5:18:
d1:8e:fa:33:34:4f:54:37:e9:7e:35:2e:f5:77:48:6b:04:74:
a1:a4:3d:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:20:00 2026 by rpki-client