Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/8554A0A86A8A11F0BBF66881C4F9AE02.roa
File: 8554A0A86A8A11F0BBF66881C4F9AE02.roa (raw, json)
Hash identifier: jG2eCQQta7MNjU1JK1KYAfsYHPf3A4prUFHK/JzlfnI=
Subject key identifier: 9D:71:46:10:17:98:50:B6:BC:4E:49:62:45:A8:5A:F9:BD:E2:CF:EC
Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial: 087A
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/8554A0A86A8A11F0BBF66881C4F9AE02.roa
Signing time: Fri 06 Mar 2026 21:28:36 +0000
ROA not before: Fri 06 Mar 2026 21:28:36 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 62610
IP address blocks: 45.249.244.0/24 maxlen: 24
45.249.245.0/24 maxlen: 24
45.249.246.0/24 maxlen: 24
45.249.247.0/24 maxlen: 24
101.36.106.0/24 maxlen: 24
101.36.107.0/24 maxlen: 24
101.36.108.0/24 maxlen: 24
101.36.109.0/24 maxlen: 24
101.36.110.0/24 maxlen: 24
101.36.111.0/24 maxlen: 24
101.36.112.0/24 maxlen: 24
101.36.113.0/24 maxlen: 24
101.36.116.0/24 maxlen: 24
101.36.117.0/24 maxlen: 24
101.36.118.0/24 maxlen: 24
101.36.119.0/24 maxlen: 24
101.36.120.0/24 maxlen: 24
101.36.121.0/24 maxlen: 24
101.36.122.0/24 maxlen: 24
101.36.123.0/24 maxlen: 24
101.36.124.0/24 maxlen: 24
101.36.125.0/24 maxlen: 24
101.36.126.0/24 maxlen: 24
101.36.127.0/24 maxlen: 24
103.149.26.0/24 maxlen: 24
103.149.27.0/24 maxlen: 24
103.218.240.0/24 maxlen: 24
103.218.241.0/24 maxlen: 24
103.218.242.0/24 maxlen: 24
103.218.243.0/24 maxlen: 24
103.234.61.0/24 maxlen: 24
118.26.36.0/24 maxlen: 24
118.26.37.0/24 maxlen: 24
118.26.38.0/24 maxlen: 24
118.26.39.0/24 maxlen: 24
118.193.32.0/24 maxlen: 24
118.193.33.0/24 maxlen: 24
118.193.34.0/24 maxlen: 24
118.193.35.0/24 maxlen: 24
118.193.36.0/24 maxlen: 24
118.193.37.0/24 maxlen: 24
118.193.38.0/24 maxlen: 24
118.193.39.0/24 maxlen: 24
118.193.40.0/24 maxlen: 24
118.193.41.0/24 maxlen: 24
118.193.42.0/24 maxlen: 24
118.193.43.0/24 maxlen: 24
118.193.44.0/24 maxlen: 24
118.193.45.0/24 maxlen: 24
118.193.46.0/24 maxlen: 24
118.193.47.0/24 maxlen: 24
118.193.79.0/24 maxlen: 24
123.58.208.0/24 maxlen: 24
123.58.209.0/24 maxlen: 24
123.58.210.0/24 maxlen: 24
123.58.211.0/24 maxlen: 24
123.58.212.0/24 maxlen: 24
123.58.213.0/24 maxlen: 24
123.58.214.0/24 maxlen: 24
123.58.215.0/24 maxlen: 24
123.58.216.0/24 maxlen: 24
123.58.217.0/24 maxlen: 24
123.58.218.0/24 maxlen: 24
123.58.219.0/24 maxlen: 24
123.58.220.0/24 maxlen: 24
123.58.221.0/24 maxlen: 24
123.58.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 17:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2170 (0x87a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Validity
Not Before: Mar 6 21:28:36 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69ab4704-bc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:97:ee:ff:7c:d6:7b:92:5d:1d:62:25:f5:84:
b3:b4:70:98:3e:c0:99:81:3b:52:77:9b:ed:c2:14:
48:5a:2f:bc:84:5a:6b:23:f9:f0:02:f8:c4:3a:1a:
17:0c:5e:a3:7e:eb:c4:04:75:c1:13:64:0a:cf:ec:
8b:fd:37:a8:ee:b2:49:8f:e8:ff:53:aa:63:4e:56:
6d:5a:71:d2:62:89:e4:96:ed:81:48:3b:3d:c7:68:
e6:41:fb:6a:04:27:9c:ed:9a:53:77:f9:af:fb:c3:
e6:f2:bb:94:d5:04:32:1e:d3:0e:a6:2b:c3:a0:76:
d1:d6:4e:a9:c6:ee:9b:a8:47:d6:b0:ea:c3:0c:1a:
a4:b9:56:5f:4e:43:e0:86:af:de:04:f7:6f:92:9c:
03:e5:e2:88:0c:9f:9a:f8:d2:94:9e:6e:b9:cc:62:
c7:0d:5e:74:ed:63:ef:cb:6b:35:5a:cf:3d:c3:80:
f5:50:aa:b1:13:95:fb:83:da:59:b9:b3:66:a0:ec:
02:16:33:fa:35:c1:98:c9:13:dc:51:a0:db:aa:fa:
ef:c8:96:9d:52:25:81:3b:da:4f:ad:50:b5:e9:6f:
85:c4:cd:db:6a:1e:4a:6f:93:35:d0:0d:1e:8e:ff:
56:7f:49:46:c7:9c:48:3e:3b:8f:11:3e:95:dc:4c:
88:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:71:46:10:17:98:50:B6:BC:4E:49:62:45:A8:5A:F9:BD:E2:CF:EC
X509v3 Authority Key Identifier:
keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/8554A0A86A8A11F0BBF66881C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.249.244.0/22
101.36.106.0-101.36.113.255
101.36.116.0-101.36.127.255
103.149.26.0/23
103.218.240.0/22
103.234.61.0/24
118.26.36.0/22
118.193.32.0/20
118.193.79.0/24
123.58.208.0-123.58.221.255
123.58.223.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4f:ff:5f:43:88:5f:18:85:c2:1a:9d:36:96:ab:ad:de:6b:
5a:13:9c:71:11:79:0f:b2:78:8f:15:40:64:df:23:f8:48:cd:
9d:2b:c0:17:84:55:91:f0:bd:8c:3f:55:31:0c:e1:c7:a3:5b:
d6:ed:1e:8c:8e:d3:b1:57:ce:6e:09:1d:b2:a2:d5:03:b4:71:
94:30:39:d9:57:c1:27:76:37:e8:83:07:28:25:22:04:33:6f:
79:16:0e:70:6a:33:27:83:f4:8e:01:66:b7:28:16:94:74:4a:
7a:05:70:d3:75:67:19:87:20:12:59:e0:4c:7c:1f:cb:f3:86:
f2:6b:2f:a6:be:97:f4:36:dd:a9:71:a5:ee:ad:99:56:05:5d:
91:69:46:a1:26:a5:56:e8:73:d2:c3:9e:5d:e4:7f:bd:2c:b9:
ab:b8:62:55:71:33:06:97:b1:44:a6:d3:6b:1b:85:82:59:2a:
34:73:1b:6d:48:54:08:ea:db:02:3f:0f:55:31:70:b6:04:cc:
1b:f5:51:f3:d2:89:7f:58:1b:77:36:9d:20:55:1f:87:92:af:
cf:a2:bd:cd:28:26:c4:78:3c:92:7f:6b:d5:64:f4:95:95:71:
57:e6:ad:bc:4a:15:a8:bb:63:1a:d7:04:1d:23:da:e5:c5:4c:
d6:5f:d1:c7
-----BEGIN CERTIFICATE-----
MIIFkDCCBHigAwIBAgICCHowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz
ODEzRTVFRjgwHhcNMjYwMzA2MjEyODM2WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWFiNDcwNC1iYzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAgZfu/3zWe5JdHWIl9YSztHCYPsCZgTtSd5vtwhRIWi+8hFprI/nwAvjEOhoX
DF6jfuvEBHXBE2QKz+yL/Teo7rJJj+j/U6pjTlZtWnHSYonklu2BSDs9x2jmQftq
BCec7ZpTd/mv+8Pm8ruU1QQyHtMOpivDoHbR1k6pxu6bqEfWsOrDDBqkuVZfTkPg
hq/eBPdvkpwD5eKIDJ+a+NKUnm65zGLHDV507WPvy2s1Ws89w4D1UKqxE5X7g9pZ
ubNmoOwCFjP6NcGYyRPcUaDbqvrvyJadUiWBO9pPrVC16W+FxM3bah5Kb5M10A0e
jv9Wf0lGx5xIPjuPET6V3EyIhQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJ1xRhAX
mFC2vE5JYkWoWvm94s/sMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE
RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y
dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODZFOEEvM0I0NzZFN0MyREZGMTFFQjg2OEE5MTM1QzRGOUFFMDIvODU1NEEwQTg2
QThBMTFGMEJCRjY2ODgxQzRGOUFFMDIucm9hMHMGCCsGAQUFBwEHAQH/BGQwYjBg
BAIAATBaAwQCLfn0MAwDBAFlJGoDBAFlJHAwDAMEAmUkdAMEB2UkAAMEAWeVGgME
Amfa8AMEAGfqPQMEAnYaJAMEBHbBIAMEAHbBTzAMAwQEezrQAwQBezrcAwQAezrf
MA0GCSqGSIb3DQEBCwUAA4IBAQCrT/9fQ4hfGIXCGp02lqut3mtaE5xxEXkPsniP
FUBk3yP4SM2dK8AXhFWR8L2MP1UxDOHHo1vW7R6MjtOxV85uCR2yotUDtHGUMDnZ
V8EndjfogwcoJSIEM295Fg5wajMng/SOAWa3KBaUdEp6BXDTdWcZhyASWeBMfB/L
84byay+mvpf0Nt2pcaXurZlWBV2RaUahJqVW6HPSw55d5H+9LLmruGJVcTMGl7FE
ptNrG4WCWSo0cxttSFQI6tsCPw9VMXC2BMwb9VHz0ol/WBt3Np0gVR+Hkq/Por3N
KCbEeDySf2vVZPSVlXFX5q28ShWou2Ma1wQdI9rlxUzWX9HH
-----END CERTIFICATE-----
Generated at Sat Mar 7 04:37:52 2026 by rpki-client