Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/4CAE21E8A80F11F1B862E5936B11F970.roa
File: 4CAE21E8A80F11F1B862E5936B11F970.roa (raw, json)
Hash identifier: Wid3pVWf3u3ZNqAvZO6deUovG6PECC9ggJmw69pHTYs=
Subject key identifier: 6E:10:BB:37:1C:3E:52:58:8A:E0:5A:3C:70:87:E3:8E:D1:F8:F6:5C
Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial: 08E8
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/4CAE21E8A80F11F1B862E5936B11F970.roa
Signing time: Fri 04 Sep 2026 03:18:29 +0000
ROA not before: Fri 04 Sep 2026 03:18:29 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135377
IP address blocks: 45.249.244.0/24 maxlen: 24
45.249.245.0/24 maxlen: 24
45.249.246.0/24 maxlen: 24
45.249.247.0/24 maxlen: 24
101.36.96.0/24 maxlen: 24
101.36.97.0/24 maxlen: 24
101.36.98.0/24 maxlen: 24
101.36.99.0/24 maxlen: 24
101.36.100.0/24 maxlen: 24
101.36.101.0/24 maxlen: 24
101.36.102.0/24 maxlen: 24
101.36.103.0/24 maxlen: 24
101.36.104.0/24 maxlen: 24
101.36.105.0/24 maxlen: 24
101.36.106.0/24 maxlen: 24
101.36.107.0/24 maxlen: 24
101.36.108.0/24 maxlen: 24
101.36.109.0/24 maxlen: 24
101.36.110.0/24 maxlen: 24
101.36.111.0/24 maxlen: 24
101.36.112.0/24 maxlen: 24
101.36.113.0/24 maxlen: 24
101.36.114.0/24 maxlen: 24
101.36.115.0/24 maxlen: 24
101.36.116.0/24 maxlen: 24
101.36.117.0/24 maxlen: 24
101.36.118.0/24 maxlen: 24
101.36.119.0/24 maxlen: 24
101.36.120.0/24 maxlen: 24
101.36.121.0/24 maxlen: 24
101.36.122.0/24 maxlen: 24
101.36.123.0/24 maxlen: 24
101.36.124.0/24 maxlen: 24
101.36.125.0/24 maxlen: 24
101.36.126.0/24 maxlen: 24
101.36.127.0/24 maxlen: 24
103.149.26.0/24 maxlen: 24
103.149.27.0/24 maxlen: 24
103.218.240.0/24 maxlen: 24
103.218.241.0/24 maxlen: 24
103.218.242.0/24 maxlen: 24
103.218.243.0/24 maxlen: 24
103.234.60.0/24 maxlen: 24
103.234.61.0/24 maxlen: 24
103.234.62.0/24 maxlen: 24
118.26.36.0/24 maxlen: 24
118.26.37.0/24 maxlen: 24
118.26.38.0/24 maxlen: 24
118.26.39.0/24 maxlen: 24
118.26.104.0/24 maxlen: 24
118.26.105.0/24 maxlen: 24
118.26.106.0/24 maxlen: 24
118.26.107.0/24 maxlen: 24
118.26.108.0/24 maxlen: 24
118.26.109.0/24 maxlen: 24
118.26.110.0/24 maxlen: 24
118.26.111.0/24 maxlen: 24
118.193.32.0/24 maxlen: 24
118.193.33.0/24 maxlen: 24
118.193.34.0/24 maxlen: 24
118.193.35.0/24 maxlen: 24
118.193.36.0/24 maxlen: 24
118.193.37.0/24 maxlen: 24
118.193.38.0/24 maxlen: 24
118.193.39.0/24 maxlen: 24
118.193.40.0/24 maxlen: 24
118.193.41.0/24 maxlen: 24
118.193.42.0/24 maxlen: 24
118.193.43.0/24 maxlen: 24
118.193.44.0/24 maxlen: 24
118.193.45.0/24 maxlen: 24
118.193.46.0/24 maxlen: 24
118.193.47.0/24 maxlen: 24
118.193.56.0/24 maxlen: 24
118.193.57.0/24 maxlen: 24
118.193.58.0/24 maxlen: 24
118.193.59.0/24 maxlen: 24
118.193.60.0/24 maxlen: 24
118.193.61.0/24 maxlen: 24
118.193.62.0/24 maxlen: 24
118.193.63.0/24 maxlen: 24
118.193.64.0/24 maxlen: 24
118.193.65.0/24 maxlen: 24
118.193.66.0/24 maxlen: 24
118.193.67.0/24 maxlen: 24
118.193.68.0/24 maxlen: 24
118.193.69.0/24 maxlen: 24
118.193.70.0/24 maxlen: 24
118.193.71.0/24 maxlen: 24
118.193.72.0/24 maxlen: 24
118.193.73.0/24 maxlen: 24
118.193.74.0/24 maxlen: 24
118.193.75.0/24 maxlen: 24
118.193.76.0/24 maxlen: 24
118.193.77.0/24 maxlen: 24
118.193.78.0/24 maxlen: 24
118.193.79.0/24 maxlen: 24
118.194.228.0/24 maxlen: 24
118.194.229.0/24 maxlen: 24
118.194.230.0/24 maxlen: 24
118.194.231.0/24 maxlen: 24
118.194.232.0/24 maxlen: 24
118.194.233.0/24 maxlen: 24
118.194.234.0/24 maxlen: 24
118.194.235.0/24 maxlen: 24
118.194.236.0/24 maxlen: 24
118.194.237.0/24 maxlen: 24
118.194.238.0/24 maxlen: 24
118.194.239.0/24 maxlen: 24
118.194.248.0/24 maxlen: 24
118.194.249.0/24 maxlen: 24
118.194.250.0/24 maxlen: 24
118.194.251.0/24 maxlen: 24
118.194.252.0/24 maxlen: 24
118.194.253.0/24 maxlen: 24
118.194.254.0/24 maxlen: 24
118.194.255.0/24 maxlen: 24
123.58.192.0/24 maxlen: 24
123.58.193.0/24 maxlen: 24
123.58.194.0/24 maxlen: 24
123.58.195.0/24 maxlen: 24
123.58.196.0/24 maxlen: 24
123.58.197.0/24 maxlen: 24
123.58.198.0/24 maxlen: 24
123.58.199.0/24 maxlen: 24
123.58.200.0/24 maxlen: 24
123.58.201.0/24 maxlen: 24
123.58.203.0/24 maxlen: 24
123.58.204.0/24 maxlen: 24
123.58.205.0/24 maxlen: 24
123.58.206.0/24 maxlen: 24
123.58.207.0/24 maxlen: 24
123.58.208.0/24 maxlen: 24
123.58.209.0/24 maxlen: 24
123.58.210.0/24 maxlen: 24
123.58.211.0/24 maxlen: 24
123.58.212.0/24 maxlen: 24
123.58.213.0/24 maxlen: 24
123.58.214.0/24 maxlen: 24
123.58.215.0/24 maxlen: 24
123.58.216.0/24 maxlen: 24
123.58.217.0/24 maxlen: 24
123.58.218.0/24 maxlen: 24
123.58.219.0/24 maxlen: 24
123.58.220.0/24 maxlen: 24
123.58.221.0/24 maxlen: 24
123.58.222.0/24 maxlen: 24
123.58.223.0/24 maxlen: 24
150.107.36.0/24 maxlen: 24
150.107.37.0/24 maxlen: 24
150.107.38.0/24 maxlen: 24
150.107.39.0/24 maxlen: 24
2001:df3:9500::/48 maxlen: 48
2404:82c0::/42 maxlen: 42
2404:82c0:40::/48 maxlen: 48
2404:82c0:41::/48 maxlen: 48
2404:82c0:42::/48 maxlen: 48
2404:82c0:43::/48 maxlen: 48
2404:82c0:44::/48 maxlen: 48
2404:82c0:45::/48 maxlen: 48
2404:82c0:46::/48 maxlen: 48
2404:82c0:47::/48 maxlen: 48
2404:82c0:48::/48 maxlen: 48
2404:82c0:49::/48 maxlen: 48
2404:82c0:4a::/48 maxlen: 48
2404:82c0:4c::/48 maxlen: 48
2404:82c0:4d::/48 maxlen: 48
2404:82c0:4e::/48 maxlen: 48
2404:82c0:4f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 20:14:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2280 (0x8e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Validity
Not Before: Sep 4 03:18:29 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a9a3885-fba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:74:20:e7:ff:1b:27:46:f2:81:21:af:f2:48:
f8:6a:c1:7d:c2:e3:2b:83:60:29:16:73:f7:e9:07:
4e:99:55:e2:06:96:83:ea:88:1c:4f:ad:ae:f4:a1:
a0:5c:c1:9e:33:22:30:b7:87:07:a1:6d:47:6e:16:
c7:92:34:e7:dc:52:1b:5c:b6:08:6d:89:d4:d3:91:
1f:44:ab:13:a6:a2:b4:df:37:6b:b9:c4:40:d4:6c:
c2:6f:e7:5c:3a:34:eb:2b:bd:d8:1d:1d:de:ae:5a:
c4:66:54:73:1b:a1:3a:d9:b7:10:22:a8:58:02:cb:
c5:a3:a6:e8:4e:fe:a6:3b:dc:a5:d7:1b:e9:47:bb:
f8:41:f4:36:bc:ef:41:c6:8d:00:b7:5f:e1:7d:3e:
1f:23:8c:9a:7a:30:8c:c0:8d:b4:e1:90:6f:1d:87:
b7:65:23:73:1d:7a:25:4f:34:eb:51:89:4e:4c:85:
f0:2c:ef:52:62:d4:32:60:fa:88:45:13:38:8b:a3:
70:7b:f0:a1:68:c9:56:61:07:85:b6:89:73:dd:00:
9e:5d:a1:8d:41:6d:08:76:be:92:38:0e:d7:a7:d9:
41:b2:92:ba:ac:2e:ed:9d:d0:97:b7:d3:ca:d5:b9:
c9:77:44:e4:a2:39:25:44:df:8a:0c:7c:eb:4e:e8:
6c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:10:BB:37:1C:3E:52:58:8A:E0:5A:3C:70:87:E3:8E:D1:F8:F6:5C
X509v3 Authority Key Identifier:
keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/4CAE21E8A80F11F1B862E5936B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
45.249.244.0/22
101.36.96.0/19
103.149.26.0/23
103.218.240.0/22
103.234.60.0-103.234.62.255
118.26.36.0/22
118.26.104.0/21
118.193.32.0/20
118.193.56.0-118.193.79.255
118.194.228.0-118.194.239.255
118.194.248.0/21
123.58.192.0-123.58.201.255
123.58.203.0-123.58.223.255
150.107.36.0/22
IPv6:
2001:df3:9500::/48
2404:82c0::-2404:82c0:4a:ffff:ffff:ffff:ffff:ffff
2404:82c0:4c::/46
Signature Algorithm: sha256WithRSAEncryption
bc:9f:7b:59:34:45:7f:90:a4:3f:92:b0:b0:ef:54:1f:9e:38:
f2:40:17:2a:c6:29:58:f7:78:59:30:47:04:15:ed:2f:7a:69:
b5:bc:7b:d9:ca:25:eb:f8:50:d3:df:a5:a4:1a:73:2e:1c:fb:
aa:bf:82:42:3e:9a:19:21:40:5b:f0:61:65:69:1d:5a:41:35:
f9:1e:71:90:28:76:82:d7:6e:63:8d:59:03:d3:cc:66:bf:23:
15:ee:e3:ff:e1:af:78:d2:89:a7:ab:e5:9b:4c:e8:36:0f:3a:
af:dd:26:84:16:81:0e:c9:a4:dd:91:1a:0c:4d:60:4f:87:1d:
36:b0:f8:26:7c:04:8c:45:b5:23:1d:13:f9:bb:05:51:6c:da:
63:3f:55:27:73:c4:f8:e5:8e:0d:57:22:6b:de:37:39:de:d7:
23:e1:a9:88:97:88:3e:53:98:07:8b:d1:ee:5c:55:26:de:b6:
8e:ce:b1:02:bd:66:9c:99:f3:3b:56:86:0c:ab:e6:01:bb:a3:
52:fd:f6:76:62:5a:79:cd:83:57:9c:07:ec:2b:02:9a:15:9a:
4c:9a:db:63:28:64:f7:9f:2b:be:e8:fd:38:71:4f:1f:e6:ad:
78:32:eb:7e:74:27:c6:2c:2d:95:65:fe:a6:a4:44:a4:c7:4e:
27:af:d4:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:36:14 2026 by rpki-client