Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/8272E36003BD11EBB416B77DC4F9AE02.roa
File: 8272E36003BD11EBB416B77DC4F9AE02.roa (raw, json)
Hash identifier: YDV7BZcSxL/GS299L5qq5wTtV0pYOQjm37aNEWD8Hpo=
Subject key identifier: 7E:13:A6:13:BA:1A:4A:05:E2:D6:7D:79:55:24:A1:BF:96:D5:87:29
Certificate issuer: /CN=A919F0DA/serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Certificate serial: 08D6
Authority key identifier: 08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/8272E36003BD11EBB416B77DC4F9AE02.roa
Signing time: Sat 08 Aug 2026 15:10:08 +0000
ROA not before: Sat 08 Aug 2026 15:10:08 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 55824
IP address blocks: 164.100.81.0/24 maxlen: 24
164.100.96.0/24 maxlen: 24
164.100.125.0/24 maxlen: 24
164.100.126.0/24 maxlen: 24
164.100.130.0/24 maxlen: 24
164.100.131.0/24 maxlen: 24
164.100.132.0/24 maxlen: 24
164.100.133.0/24 maxlen: 24
164.100.134.0/24 maxlen: 24
164.100.138.0/24 maxlen: 24
164.100.142.0/24 maxlen: 24
164.100.145.0/24 maxlen: 24
164.100.146.0/24 maxlen: 24
164.100.181.0/24 maxlen: 24
164.100.189.0/24 maxlen: 24
164.100.196.0/24 maxlen: 24
164.100.201.0/24 maxlen: 24
164.100.217.0/24 maxlen: 24
164.100.222.0/24 maxlen: 24
164.100.223.0/24 maxlen: 24
164.100.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:15:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2262 (0x8d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=082F1EE92FEA6373FDA1D5AEC46E2F2D8AE8AC87
Validity
Not Before: Aug 8 15:10:08 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a7746cf-71af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ae:e1:07:13:58:9a:22:10:36:21:46:a2:b0:
74:6a:cd:7f:39:ca:96:dc:42:84:00:b9:dd:6c:7a:
88:23:30:81:58:e0:03:a1:25:82:73:75:32:70:7c:
38:81:1e:36:69:b6:b4:4d:72:4d:6d:4f:a2:5a:42:
e5:b9:75:fb:3a:0b:6b:02:f9:06:da:7d:1b:df:c9:
d2:6e:7e:8a:1b:02:6b:ae:b4:dd:b0:40:43:b8:0d:
ed:dd:52:4a:1c:2d:5c:23:48:a5:32:8d:4b:35:25:
b5:98:45:6a:47:39:8c:95:d7:96:ae:83:9f:ab:08:
63:0d:e9:81:21:2b:19:6a:21:40:11:e8:6f:1a:4c:
48:fa:c2:49:45:ba:3f:c1:b8:c9:f6:d0:e4:07:55:
ca:7d:61:72:f7:9c:b0:7e:b6:f5:fc:0f:df:d3:e1:
bd:73:13:5f:a2:b5:11:ac:ba:b6:98:b9:ba:70:2c:
45:74:dc:74:44:2b:6d:7e:24:60:a3:91:97:87:61:
4a:b1:5b:93:6d:51:d2:b6:b3:f2:23:33:69:2d:e3:
c0:80:e7:1e:26:85:44:2e:e7:f2:67:f9:9a:93:bb:
92:6a:61:09:c4:c2:0f:99:cb:3a:e5:db:91:52:b7:
f4:20:cd:31:d0:90:e0:28:19:7a:b0:fe:81:b5:c6:
d6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:13:A6:13:BA:1A:4A:05:E2:D6:7D:79:55:24:A1:BF:96:D5:87:29
X509v3 Authority Key Identifier:
keyid:08:2F:1E:E9:2F:EA:63:73:FD:A1:D5:AE:C4:6E:2F:2D:8A:E8:AC:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/CC8e6S_qY3P9odWuxG4vLYrorIc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CC8e6S_qY3P9odWuxG4vLYrorIc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/FC61E0081D6711E28C1828A408B02CD2/8272E36003BD11EBB416B77DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
164.100.81.0/24
164.100.96.0/24
164.100.125.0-164.100.126.255
164.100.130.0-164.100.134.255
164.100.138.0/24
164.100.142.0/24
164.100.145.0-164.100.146.255
164.100.181.0/24
164.100.189.0/24
164.100.196.0/24
164.100.201.0/24
164.100.217.0/24
164.100.222.0-164.100.225.255
Signature Algorithm: sha256WithRSAEncryption
2a:dd:0d:bf:8c:82:b1:89:83:5c:5e:f3:5c:f3:60:ae:70:4c:
35:92:05:60:0c:e9:d1:a5:71:cf:d3:49:09:08:ac:60:72:1c:
4a:72:41:dc:c9:e0:79:5d:81:a8:25:35:71:ba:5f:d7:73:3d:
9b:8d:ec:34:06:bc:9e:fb:29:d3:70:49:b3:c1:d1:14:d5:ae:
6f:69:a6:b7:08:7f:56:d7:af:0f:51:1a:dd:99:e9:44:a5:fd:
5e:a7:37:4a:29:22:43:32:2b:66:07:00:40:65:7a:0b:f3:59:
18:cf:f4:d4:5d:f1:d5:6e:b6:d5:37:8c:77:14:ef:60:4d:ca:
27:e7:0d:53:66:26:12:8f:7d:23:0a:7b:8b:11:a3:1d:da:70:
64:1d:28:68:f2:b6:5c:b6:14:56:df:a7:5f:eb:79:cf:1f:58:
65:fd:b8:4d:f5:88:32:bd:a2:68:03:43:2c:e6:62:b9:c6:e7:
b8:78:24:71:b0:d1:ab:32:03:04:12:6c:5a:9f:09:14:dc:53:
7c:9c:b0:e3:d8:61:3a:3d:85:5e:6d:59:72:75:5a:19:e9:e9:
6a:79:ac:0e:19:be:2e:8b:34:10:85:bb:18:6e:15:b3:ac:76:
16:5e:ff:ff:d3:9d:5b:49:b6:99:57:cc:e3:2d:3a:25:db:36:
61:76:3f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:57 2026 by rpki-client