Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/B9AD57AA6EAD11F1B44FDC1A61A30FBC.roa
File: B9AD57AA6EAD11F1B44FDC1A61A30FBC.roa (raw, json)
Hash identifier: i2DRuTtcxAcFVEPXW7Ye0U7oiSia4crw7RqB4K2y9ws=
Subject key identifier: 56:35:6D:17:78:32:4F:6D:80:24:60:41:1A:0E:11:9E:2A:A5:43:7D
Certificate issuer: /CN=A913089B/serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Certificate serial: 0108
Authority key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/B9AD57AA6EAD11F1B44FDC1A61A30FBC.roa
Signing time: Thu 03 Sep 2026 07:05:55 +0000
ROA not before: Thu 03 Sep 2026 07:05:55 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 62325
IP address blocks: 177.210.0.0/15 maxlen: 24
179.252.64.0/20 maxlen: 24
179.254.0.0/20 maxlen: 24
186.241.32.0/19 maxlen: 24
186.241.144.0/20 maxlen: 24
186.242.224.0/19 maxlen: 24
186.244.0.0/20 maxlen: 24
186.244.32.0/19 maxlen: 24
186.244.64.0/19 maxlen: 24
186.247.112.0/20 maxlen: 24
186.247.144.0/20 maxlen: 24
187.5.160.0/20 maxlen: 24
187.14.0.0/19 maxlen: 24
187.40.96.0/19 maxlen: 24
189.49.0.0/18 maxlen: 24
189.72.224.0/20 maxlen: 24
189.73.64.0/19 maxlen: 24
189.73.160.0/19 maxlen: 24
189.73.208.0/20 maxlen: 24
189.74.32.0/19 maxlen: 24
189.74.64.0/20 maxlen: 24
189.74.192.0/19 maxlen: 24
189.75.240.0/20 maxlen: 24
191.214.0.0/16 maxlen: 24
191.217.64.0/20 maxlen: 24
191.218.192.0/18 maxlen: 24
191.219.32.0/19 maxlen: 24
191.219.96.0/19 maxlen: 24
191.219.160.0/20 maxlen: 24
191.223.96.0/19 maxlen: 24
191.223.240.0/20 maxlen: 24
200.97.192.0/18 maxlen: 24
200.102.208.0/20 maxlen: 24
200.102.224.0/20 maxlen: 24
200.103.80.0/20 maxlen: 24
200.103.160.0/20 maxlen: 24
200.103.192.0/19 maxlen: 24
200.219.64.0/20 maxlen: 24
200.219.96.0/19 maxlen: 24
200.222.160.0/19 maxlen: 24
200.234.16.0/20 maxlen: 24
201.5.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:50:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 264 (0x108)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Validity
Not Before: Sep 3 07:05:55 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a991c53-e02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1f:f6:1b:5c:0e:4f:42:80:6a:c8:82:06:8d:
9a:c3:7a:1b:81:e9:9d:73:c6:a2:75:21:49:e5:29:
c9:eb:7c:3f:5e:b4:7e:e4:f3:5b:3d:0f:ed:75:a7:
1e:42:71:95:98:a5:a7:89:55:81:74:59:6f:e8:ce:
b5:c8:49:46:67:4d:a5:fa:99:4b:6e:fe:88:47:62:
4e:b4:57:17:09:4f:ef:ed:44:b3:94:6d:7e:3d:06:
7c:bc:c9:49:cd:7a:55:da:39:bf:0d:59:fc:0a:02:
a6:d8:4a:5c:45:78:c5:07:62:44:c3:9b:66:84:3c:
33:4e:c7:4d:fe:1e:17:ab:df:dc:2d:1d:c3:fb:cd:
6d:a1:6c:35:c5:74:28:70:36:21:ab:ab:92:73:6e:
45:b7:0c:53:46:0b:69:f8:ef:0c:fc:4e:44:64:b2:
1e:5f:89:a4:c4:63:22:d3:e6:51:ae:a6:0c:5f:29:
70:02:f9:58:2a:d9:45:31:35:17:1c:fa:6e:6e:45:
cc:cd:24:c2:90:29:f9:ed:66:38:44:54:09:3c:d0:
ec:70:a0:14:b5:8f:59:39:41:f9:8c:65:81:da:3e:
76:f7:13:1a:a2:79:67:d6:a4:cf:37:34:ca:cd:11:
af:66:5b:a7:f7:79:dd:e0:5c:60:42:21:6f:0d:b4:
81:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:35:6D:17:78:32:4F:6D:80:24:60:41:1A:0E:11:9E:2A:A5:43:7D
X509v3 Authority Key Identifier:
keyid:9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/B9AD57AA6EAD11F1B44FDC1A61A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
177.210.0.0/15
179.252.64.0/20
179.254.0.0/20
186.241.32.0/19
186.241.144.0/20
186.242.224.0/19
186.244.0.0/20
186.244.32.0-186.244.95.255
186.247.112.0/20
186.247.144.0/20
187.5.160.0/20
187.14.0.0/19
187.40.96.0/19
189.49.0.0/18
189.72.224.0/20
189.73.64.0/19
189.73.160.0/19
189.73.208.0/20
189.74.32.0-189.74.79.255
189.74.192.0/19
189.75.240.0/20
191.214.0.0/16
191.217.64.0/20
191.218.192.0/18
191.219.32.0/19
191.219.96.0/19
191.219.160.0/20
191.223.96.0/19
191.223.240.0/20
200.97.192.0/18
200.102.208.0-200.102.239.255
200.103.80.0/20
200.103.160.0/20
200.103.192.0/19
200.219.64.0/20
200.219.96.0/19
200.222.160.0/19
200.234.16.0/20
201.5.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a5:5a:94:19:c2:7e:99:50:8b:16:12:af:e6:e2:6b:e3:20:96:
5c:49:22:68:69:3a:f5:dc:80:c8:f5:62:91:c9:7f:ab:a6:68:
9e:c7:69:70:64:ce:d0:cd:80:e8:a1:e9:5e:22:55:65:f5:0e:
25:96:1f:b6:81:c2:b9:65:42:ce:67:45:37:b1:88:2f:f2:56:
a0:b9:64:50:26:d2:f3:0e:f6:5e:3c:be:19:99:00:ea:83:87:
08:e0:dd:4f:36:d8:1f:1f:d5:66:55:dc:c4:dd:f4:06:b5:fc:
4d:1f:4f:8e:4a:1d:54:75:bd:e8:a9:2e:5a:9f:a2:c7:99:24:
b9:c9:49:fd:f0:e7:ac:ba:9c:ed:51:98:ef:f9:d3:4c:0e:1b:
2a:9f:94:34:71:14:87:d6:6f:4f:5f:04:17:91:60:6b:2a:ef:
01:69:4e:06:59:ee:df:9a:d9:45:69:a7:46:79:48:ae:b9:d1:
ef:20:06:28:a8:cd:ae:90:3f:34:1c:21:09:5e:6e:2f:92:d7:
40:bf:4a:68:20:e5:16:be:66:17:00:f4:7f:20:47:53:c1:86:
cc:90:3a:d1:89:0e:12:56:c6:af:ae:e0:66:ca:77:ac:8c:8e:
b4:80:b4:3c:fe:d0:3c:6c:05:86:3e:9d:ee:10:09:04:ed:7e:
63:20:fc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:37:49 2026 by rpki-client