Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/26E184C2B56D11F0939EAE46C4F9AE02.roa
File: 26E184C2B56D11F0939EAE46C4F9AE02.roa (raw, json)
Hash identifier: KhkIiHFfVALVrvgEK738rQdsAgjiaITp4X4saDB/DrM=
Subject key identifier: 18:79:BD:25:B7:A8:2C:C3:07:30:E7:1B:99:13:1E:29:CB:F8:47:1A
Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial: 08C9
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/26E184C2B56D11F0939EAE46C4F9AE02.roa
Signing time: Tue 21 Jul 2026 03:21:10 +0000
ROA not before: Tue 21 Jul 2026 03:21:10 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135377
IP address blocks: 45.249.244.0/24 maxlen: 24
45.249.245.0/24 maxlen: 24
45.249.246.0/24 maxlen: 24
45.249.247.0/24 maxlen: 24
101.36.96.0/24 maxlen: 24
101.36.97.0/24 maxlen: 24
101.36.98.0/24 maxlen: 24
101.36.99.0/24 maxlen: 24
101.36.100.0/24 maxlen: 24
101.36.101.0/24 maxlen: 24
101.36.102.0/24 maxlen: 24
101.36.103.0/24 maxlen: 24
101.36.104.0/24 maxlen: 24
101.36.105.0/24 maxlen: 24
101.36.106.0/24 maxlen: 24
101.36.107.0/24 maxlen: 24
101.36.108.0/24 maxlen: 24
101.36.109.0/24 maxlen: 24
101.36.110.0/24 maxlen: 24
101.36.111.0/24 maxlen: 24
101.36.112.0/24 maxlen: 24
101.36.113.0/24 maxlen: 24
101.36.114.0/24 maxlen: 24
101.36.115.0/24 maxlen: 24
101.36.116.0/24 maxlen: 24
101.36.117.0/24 maxlen: 24
101.36.118.0/24 maxlen: 24
101.36.119.0/24 maxlen: 24
101.36.120.0/24 maxlen: 24
101.36.121.0/24 maxlen: 24
101.36.122.0/24 maxlen: 24
101.36.123.0/24 maxlen: 24
101.36.124.0/24 maxlen: 24
101.36.125.0/24 maxlen: 24
101.36.126.0/24 maxlen: 24
101.36.127.0/24 maxlen: 24
103.149.26.0/24 maxlen: 24
103.149.27.0/24 maxlen: 24
103.218.240.0/24 maxlen: 24
103.218.241.0/24 maxlen: 24
103.218.242.0/24 maxlen: 24
103.218.243.0/24 maxlen: 24
103.234.60.0/24 maxlen: 24
103.234.61.0/24 maxlen: 24
103.234.62.0/24 maxlen: 24
103.234.63.0/24 maxlen: 24
118.26.36.0/24 maxlen: 24
118.26.37.0/24 maxlen: 24
118.26.38.0/24 maxlen: 24
118.26.39.0/24 maxlen: 24
118.26.104.0/24 maxlen: 24
118.26.105.0/24 maxlen: 24
118.26.106.0/24 maxlen: 24
118.26.107.0/24 maxlen: 24
118.26.108.0/24 maxlen: 24
118.26.109.0/24 maxlen: 24
118.26.110.0/24 maxlen: 24
118.26.111.0/24 maxlen: 24
118.193.32.0/24 maxlen: 24
118.193.33.0/24 maxlen: 24
118.193.34.0/24 maxlen: 24
118.193.35.0/24 maxlen: 24
118.193.36.0/24 maxlen: 24
118.193.37.0/24 maxlen: 24
118.193.38.0/24 maxlen: 24
118.193.39.0/24 maxlen: 24
118.193.40.0/24 maxlen: 24
118.193.41.0/24 maxlen: 24
118.193.42.0/24 maxlen: 24
118.193.43.0/24 maxlen: 24
118.193.44.0/24 maxlen: 24
118.193.45.0/24 maxlen: 24
118.193.46.0/24 maxlen: 24
118.193.47.0/24 maxlen: 24
118.193.56.0/24 maxlen: 24
118.193.57.0/24 maxlen: 24
118.193.58.0/24 maxlen: 24
118.193.59.0/24 maxlen: 24
118.193.60.0/24 maxlen: 24
118.193.61.0/24 maxlen: 24
118.193.62.0/24 maxlen: 24
118.193.63.0/24 maxlen: 24
118.193.64.0/24 maxlen: 24
118.193.65.0/24 maxlen: 24
118.193.66.0/24 maxlen: 24
118.193.67.0/24 maxlen: 24
118.193.68.0/24 maxlen: 24
118.193.69.0/24 maxlen: 24
118.193.70.0/24 maxlen: 24
118.193.71.0/24 maxlen: 24
118.193.72.0/24 maxlen: 24
118.193.73.0/24 maxlen: 24
118.193.74.0/24 maxlen: 24
118.193.75.0/24 maxlen: 24
118.193.76.0/24 maxlen: 24
118.193.77.0/24 maxlen: 24
118.193.78.0/24 maxlen: 24
118.193.79.0/24 maxlen: 24
118.194.228.0/24 maxlen: 24
118.194.229.0/24 maxlen: 24
118.194.230.0/24 maxlen: 24
118.194.231.0/24 maxlen: 24
118.194.232.0/24 maxlen: 24
118.194.233.0/24 maxlen: 24
118.194.234.0/24 maxlen: 24
118.194.235.0/24 maxlen: 24
118.194.236.0/24 maxlen: 24
118.194.237.0/24 maxlen: 24
118.194.238.0/24 maxlen: 24
118.194.239.0/24 maxlen: 24
118.194.248.0/24 maxlen: 24
118.194.249.0/24 maxlen: 24
118.194.250.0/24 maxlen: 24
118.194.251.0/24 maxlen: 24
118.194.252.0/24 maxlen: 24
118.194.253.0/24 maxlen: 24
118.194.254.0/24 maxlen: 24
118.194.255.0/24 maxlen: 24
123.58.192.0/24 maxlen: 24
123.58.193.0/24 maxlen: 24
123.58.194.0/24 maxlen: 24
123.58.195.0/24 maxlen: 24
123.58.196.0/24 maxlen: 24
123.58.197.0/24 maxlen: 24
123.58.198.0/24 maxlen: 24
123.58.199.0/24 maxlen: 24
123.58.200.0/24 maxlen: 24
123.58.201.0/24 maxlen: 24
123.58.202.0/24 maxlen: 24
123.58.203.0/24 maxlen: 24
123.58.204.0/24 maxlen: 24
123.58.205.0/24 maxlen: 24
123.58.206.0/24 maxlen: 24
123.58.207.0/24 maxlen: 24
123.58.208.0/24 maxlen: 24
123.58.209.0/24 maxlen: 24
123.58.210.0/24 maxlen: 24
123.58.211.0/24 maxlen: 24
123.58.212.0/24 maxlen: 24
123.58.213.0/24 maxlen: 24
123.58.214.0/24 maxlen: 24
123.58.215.0/24 maxlen: 24
123.58.216.0/24 maxlen: 24
123.58.217.0/24 maxlen: 24
123.58.218.0/24 maxlen: 24
123.58.219.0/24 maxlen: 24
123.58.220.0/24 maxlen: 24
123.58.221.0/24 maxlen: 24
123.58.222.0/24 maxlen: 24
123.58.223.0/24 maxlen: 24
150.107.36.0/24 maxlen: 24
150.107.37.0/24 maxlen: 24
150.107.38.0/24 maxlen: 24
150.107.39.0/24 maxlen: 24
2001:df3:9500::/48 maxlen: 48
2404:82c0::/42 maxlen: 42
2404:82c0:40::/48 maxlen: 48
2404:82c0:41::/48 maxlen: 48
2404:82c0:42::/48 maxlen: 48
2404:82c0:43::/48 maxlen: 48
2404:82c0:44::/48 maxlen: 48
2404:82c0:45::/48 maxlen: 48
2404:82c0:46::/48 maxlen: 48
2404:82c0:47::/48 maxlen: 48
2404:82c0:48::/48 maxlen: 48
2404:82c0:49::/48 maxlen: 48
2404:82c0:4a::/48 maxlen: 48
2404:82c0:4c::/48 maxlen: 48
2404:82c0:4d::/48 maxlen: 48
2404:82c0:4e::/48 maxlen: 48
2404:82c0:4f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 03:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2249 (0x8c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Validity
Not Before: Jul 21 03:21:10 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a5ee5a6-32cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:45:f1:61:04:02:d8:6c:95:c0:ce:ff:07:02:
f9:ee:e5:d3:1d:b2:83:d2:d6:41:f8:a9:9a:4e:f8:
6b:ee:94:39:c2:ab:ad:33:80:86:bf:fe:3a:71:ed:
5f:43:1c:b2:f3:6f:31:b3:c4:7c:e7:1e:ea:fd:ea:
c9:ed:b6:f2:97:e9:da:53:2d:ce:b9:aa:b2:40:a5:
c7:6d:9c:30:73:35:a8:a9:3b:31:e2:ea:2b:91:24:
46:2c:30:04:1a:74:00:fd:45:e8:07:ce:bd:a9:c0:
84:6e:fd:4a:97:42:e7:68:94:50:fe:67:df:75:fc:
fb:09:59:ad:3f:dd:b7:77:69:7f:a7:4b:f2:55:b5:
d3:9c:24:e7:86:98:18:64:5b:27:95:ad:cf:03:a0:
06:e5:27:f2:f1:0b:8c:2b:3c:8d:e5:44:b3:b7:8e:
7f:60:c8:1b:81:88:9b:67:72:fa:27:dc:e7:5d:b4:
aa:7c:b2:ea:ef:50:3f:05:66:b7:ff:31:de:36:b8:
da:e9:a4:e3:35:e9:5f:35:93:69:06:98:9b:ec:64:
6a:bf:45:7a:78:85:e1:85:dd:12:2a:f5:87:91:62:
51:e5:da:14:71:ba:05:84:26:8c:e1:c9:a8:75:eb:
af:1a:dd:ff:7f:28:5f:37:d0:13:d5:a5:2f:ef:2e:
39:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:79:BD:25:B7:A8:2C:C3:07:30:E7:1B:99:13:1E:29:CB:F8:47:1A
X509v3 Authority Key Identifier:
keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/26E184C2B56D11F0939EAE46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.249.244.0/22
101.36.96.0/19
103.149.26.0/23
103.218.240.0/22
103.234.60.0/22
118.26.36.0/22
118.26.104.0/21
118.193.32.0/20
118.193.56.0-118.193.79.255
118.194.228.0-118.194.239.255
118.194.248.0/21
123.58.192.0/19
150.107.36.0/22
IPv6:
2001:df3:9500::/48
2404:82c0::-2404:82c0:4a:ffff:ffff:ffff:ffff:ffff
2404:82c0:4c::/46
Signature Algorithm: sha256WithRSAEncryption
63:3c:23:e5:68:1e:84:76:ac:32:cd:3e:2f:5d:d7:09:fa:9a:
b5:cb:c8:39:be:00:25:44:41:8c:41:49:5d:7d:44:08:12:ef:
f2:6c:0d:5d:c3:2c:30:05:15:71:37:35:4a:d1:56:c5:8f:8b:
e9:ad:f6:7f:34:b6:23:6f:e7:a7:55:bd:af:fc:a9:c9:e2:71:
d5:aa:7f:c2:77:45:86:58:27:25:2e:e0:3d:56:0d:a7:75:5e:
e9:07:23:95:71:44:05:f0:86:1c:bf:37:ac:bd:1b:cd:7e:8c:
c5:26:03:0c:4e:fc:88:b7:fa:b2:e9:c9:86:6e:e1:aa:62:89:
da:ca:3d:25:8c:48:2a:c1:aa:a5:08:6d:23:61:4b:01:6a:af:
63:a0:81:7b:ec:19:31:81:52:c0:d9:f7:34:f0:6f:d9:7b:80:
a6:de:1c:84:94:24:eb:a8:9a:e1:63:e2:ea:0f:11:8e:87:3e:
a3:a2:03:5e:b9:33:6d:ac:7e:ae:5e:08:95:59:33:11:3c:11:
e8:32:b4:6c:9c:5b:7e:94:6c:8b:15:49:ac:31:90:a4:d9:ec:
4c:b5:d1:29:ed:db:78:bc:4d:fc:d4:2e:94:87:e1:61:23:89:
99:b8:fc:c8:b6:2e:4f:f0:df:51:72:a6:02:40:0f:71:3a:06:
b6:23:16:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:18:52 2026 by rpki-client