Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F4FCC41E648311EC88370386C4F9AE02.roa
File: F4FCC41E648311EC88370386C4F9AE02.roa (raw, json)
Hash identifier: XxusVMnGcxcxLwh5Mc9S65cgk/ejfkxjnK++VGWj67c=
Subject key identifier: 1C:89:2F:6F:E5:90:47:45:75:0D:70:1F:9F:8E:3F:06:29:CC:39:B9
Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial: 0BAC
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F4FCC41E648311EC88370386C4F9AE02.roa
Signing time: Wed 12 Aug 2026 19:38:56 +0000
ROA not before: Wed 12 Aug 2026 19:38:56 +0000
ROA not after: Sun 31 Oct 2027 00:00:00 +0000
asID: 149175
IP address blocks: 39.109.67.0/24 maxlen: 24
39.109.68.0/24 maxlen: 24
39.109.69.0/24 maxlen: 24
39.109.70.0/24 maxlen: 24
39.109.71.0/24 maxlen: 24
39.109.72.0/24 maxlen: 24
39.109.73.0/24 maxlen: 24
39.109.74.0/24 maxlen: 24
39.109.75.0/24 maxlen: 24
39.109.76.0/24 maxlen: 24
39.109.78.0/24 maxlen: 24
39.109.79.0/24 maxlen: 24
39.109.80.0/24 maxlen: 24
39.109.82.0/24 maxlen: 24
39.109.84.0/24 maxlen: 24
39.109.85.0/24 maxlen: 24
39.109.88.0/24 maxlen: 24
39.109.89.0/24 maxlen: 24
103.82.216.0/24 maxlen: 24
103.82.217.0/24 maxlen: 24
103.82.218.0/24 maxlen: 24
103.82.219.0/24 maxlen: 24
103.98.14.0/24 maxlen: 24
103.98.15.0/24 maxlen: 24
103.119.132.0/24 maxlen: 24
103.119.133.0/24 maxlen: 24
2403:e840::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 19:26:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2988 (0xbac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Validity
Not Before: Aug 12 19:38:56 2026 GMT
Not After : Oct 31 00:00:00 2027 GMT
Subject: CN=6a7ccbd0-f934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:7d:bf:8e:62:6c:f3:4f:fe:97:eb:a0:e5:
7f:35:3e:57:8d:fc:cb:9a:3d:27:36:13:d7:9d:ce:
d0:25:4d:33:b3:c5:8f:9f:80:ac:82:65:58:2a:e2:
9c:a8:76:ff:bb:b9:ac:f3:74:1e:9b:4f:1c:44:56:
dd:0c:a8:ab:0d:60:08:46:12:30:85:6e:4a:35:0e:
92:79:02:c7:a2:9b:df:51:89:f2:13:2e:41:1a:ae:
ef:0c:75:69:c1:b3:14:b1:d8:3e:4d:22:53:2d:18:
a1:45:50:b0:5c:ef:30:1e:87:cd:6c:9b:0e:65:e0:
22:96:2f:44:79:ef:c8:5f:15:9e:34:e8:1b:c6:43:
6d:64:01:0b:d2:91:91:9d:dc:ce:89:e0:bc:d7:fc:
94:66:34:f6:6e:3d:1e:2d:cc:9a:48:8c:e7:87:d0:
65:ef:c0:56:c1:48:75:9a:3a:1a:89:3a:22:00:61:
ec:a7:60:a2:ec:b1:25:f1:fe:f7:56:98:8c:b1:a9:
b1:db:85:04:d2:08:6b:2a:e5:f4:2e:d8:ad:2d:6f:
2a:57:e8:56:c4:42:fc:51:8e:a7:71:73:31:ef:ca:
fb:d3:9b:15:85:a6:cd:a6:9e:c8:26:1e:b9:8d:61:
6d:4e:56:a2:c7:94:a9:d7:3d:c1:b6:7f:31:cc:db:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:89:2F:6F:E5:90:47:45:75:0D:70:1F:9F:8E:3F:06:29:CC:39:B9
X509v3 Authority Key Identifier:
keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F4FCC41E648311EC88370386C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
39.109.67.0-39.109.76.255
39.109.78.0-39.109.80.255
39.109.82.0/24
39.109.84.0/23
39.109.88.0/23
103.82.216.0/22
103.98.14.0/23
103.119.132.0/23
IPv6:
2403:e840::/33
Signature Algorithm: sha256WithRSAEncryption
74:5c:ab:da:a3:96:c0:a8:0c:4a:2e:a1:de:30:00:fc:1e:ff:
e5:fa:b3:68:3e:9a:0b:46:d0:d5:30:63:13:84:2e:ad:ee:41:
e2:c2:3a:fb:cb:ee:93:b8:17:69:ab:3d:f0:67:7d:4a:7d:b5:
37:50:28:5a:b8:48:23:a5:d6:ef:8c:7f:19:d8:4f:48:9e:d2:
de:9e:8f:eb:b9:f3:a8:4b:ec:ea:ef:26:f9:71:9c:e2:24:ee:
9a:f7:b8:ff:a2:8e:68:90:16:aa:fd:2c:fc:a9:80:e5:38:2b:
ce:1f:6c:f6:c2:aa:96:fd:e4:89:96:d5:f4:df:61:7e:3c:ef:
45:79:ba:e5:67:83:d5:4e:8d:2e:f0:6a:eb:d1:41:09:ab:98:
7c:eb:c0:65:5f:4b:62:b1:9a:e9:20:9c:2e:5d:cc:76:d6:72:
4f:37:11:4d:1e:53:e5:f9:7f:b6:0c:c0:bf:e6:45:c9:12:b1:
fe:42:22:62:ce:ad:30:b3:f7:08:34:52:c4:c3:68:6d:dd:55:
d9:1c:53:49:a9:04:85:4e:5a:e7:c8:d8:27:e2:e7:05:83:ab:
22:64:a9:0f:64:3d:ff:1e:6e:69:b6:50:c7:62:2e:06:34:ef:
25:9f:3f:da:67:fd:b8:58:f3:0b:0b:ab:72:db:9a:6c:13:ed:
ca:d0:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 04:34:46 2026 by rpki-client