Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/DF25A2D66EAC11F1B5D83A1361A30FBC.roa
File: DF25A2D66EAC11F1B5D83A1361A30FBC.roa (raw, json)
Hash identifier: 8POiDfLt3Oh/asnbflsaHeyLyt9kFMBOwimnLYeZOjY=
Subject key identifier: ED:83:14:28:8A:77:07:92:7B:3A:3B:77:2B:86:BB:7D:8C:B1:EE:DD
Certificate issuer: /CN=A913089B/serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Certificate serial: 0106
Authority key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/DF25A2D66EAC11F1B5D83A1361A30FBC.roa
Signing time: Thu 03 Sep 2026 07:05:50 +0000
ROA not before: Thu 03 Sep 2026 07:05:50 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 134548
IP address blocks: 177.210.0.0/15 maxlen: 24
179.252.64.0/20 maxlen: 24
179.254.0.0/20 maxlen: 24
186.241.32.0/19 maxlen: 24
186.241.144.0/20 maxlen: 24
186.242.224.0/19 maxlen: 24
186.244.0.0/20 maxlen: 24
186.244.32.0/19 maxlen: 24
186.244.64.0/19 maxlen: 24
186.247.112.0/20 maxlen: 24
186.247.144.0/20 maxlen: 24
187.5.160.0/20 maxlen: 24
187.14.0.0/19 maxlen: 24
187.40.96.0/19 maxlen: 24
189.49.0.0/18 maxlen: 24
189.72.224.0/20 maxlen: 24
189.73.64.0/19 maxlen: 24
189.73.160.0/19 maxlen: 24
189.73.208.0/20 maxlen: 24
189.74.32.0/19 maxlen: 24
189.74.64.0/20 maxlen: 24
189.74.192.0/19 maxlen: 24
189.75.240.0/20 maxlen: 24
191.214.0.0/16 maxlen: 24
191.217.64.0/20 maxlen: 24
191.218.192.0/18 maxlen: 24
191.219.32.0/19 maxlen: 24
191.219.96.0/19 maxlen: 24
191.219.160.0/20 maxlen: 24
191.223.96.0/19 maxlen: 24
191.223.240.0/20 maxlen: 24
200.97.192.0/18 maxlen: 24
200.102.208.0/20 maxlen: 24
200.102.224.0/20 maxlen: 24
200.103.80.0/20 maxlen: 24
200.103.160.0/20 maxlen: 24
200.103.192.0/19 maxlen: 24
200.219.64.0/20 maxlen: 24
200.219.96.0/19 maxlen: 24
200.222.160.0/19 maxlen: 24
200.234.16.0/20 maxlen: 24
201.5.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Sep 2026 06:33:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 262 (0x106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Validity
Not Before: Sep 3 07:05:50 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a991c4e-9e61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:b4:f7:f8:99:c1:af:40:0c:db:40:6c:a0:
46:73:de:c6:61:bb:bc:2b:13:d9:a5:54:5b:3d:21:
0c:f2:09:fd:f8:cd:4b:71:43:1c:b1:5b:82:42:b2:
89:6b:59:7a:17:9c:40:35:3f:17:d8:1e:fe:44:e1:
63:b1:27:10:0a:40:52:39:6c:9b:b5:20:58:57:e6:
47:45:11:c2:f4:45:3b:82:35:18:f7:9f:81:db:2f:
73:6c:04:75:21:1d:75:a1:44:84:f2:c2:b0:c0:ae:
26:98:01:a1:9c:fc:58:90:23:d3:0b:ce:b9:2a:35:
c0:85:2b:08:57:cc:26:8f:6e:a7:98:9b:8e:90:50:
b1:ba:d1:4f:aa:e6:10:d1:25:31:b0:12:16:4e:c4:
61:9b:20:8a:67:04:5b:e7:fe:1a:ec:36:c1:59:c0:
95:76:d4:9c:04:8d:d6:ef:ce:e7:6e:37:e8:15:9e:
98:1a:17:63:63:bf:bb:2d:f2:8d:a4:31:7b:a9:3f:
84:f9:ec:49:8d:66:15:c8:2b:40:51:5c:a6:00:f4:
13:ca:fe:de:b7:ad:01:5e:0c:a1:30:66:cc:91:cb:
4d:b9:38:a9:14:ac:67:7f:cd:10:8d:f9:9b:9b:64:
9c:e9:05:f0:b6:23:f1:59:4b:a5:41:bc:37:ba:be:
c5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:83:14:28:8A:77:07:92:7B:3A:3B:77:2B:86:BB:7D:8C:B1:EE:DD
X509v3 Authority Key Identifier:
keyid:9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/DF25A2D66EAC11F1B5D83A1361A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
177.210.0.0/15
179.252.64.0/20
179.254.0.0/20
186.241.32.0/19
186.241.144.0/20
186.242.224.0/19
186.244.0.0/20
186.244.32.0-186.244.95.255
186.247.112.0/20
186.247.144.0/20
187.5.160.0/20
187.14.0.0/19
187.40.96.0/19
189.49.0.0/18
189.72.224.0/20
189.73.64.0/19
189.73.160.0/19
189.73.208.0/20
189.74.32.0-189.74.79.255
189.74.192.0/19
189.75.240.0/20
191.214.0.0/16
191.217.64.0/20
191.218.192.0/18
191.219.32.0/19
191.219.96.0/19
191.219.160.0/20
191.223.96.0/19
191.223.240.0/20
200.97.192.0/18
200.102.208.0-200.102.239.255
200.103.80.0/20
200.103.160.0/20
200.103.192.0/19
200.219.64.0/20
200.219.96.0/19
200.222.160.0/19
200.234.16.0/20
201.5.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:7b:f6:bf:58:88:e6:46:cc:8d:2a:f4:dc:67:1e:3d:f7:07:
75:71:a3:9e:03:ff:f6:d5:73:3d:b6:64:ed:64:05:92:8e:f4:
8b:39:3a:6a:e6:36:1e:bb:7e:0e:a5:57:c0:a0:8a:f2:eb:20:
21:48:7e:65:f7:56:9b:38:00:53:42:3f:53:79:5f:c8:81:99:
f7:bd:f9:28:1f:a6:84:f1:63:c3:ec:ed:4c:15:33:2e:9b:93:
e5:4a:13:91:b5:fc:e5:12:54:9c:4c:35:3b:60:eb:87:43:05:
74:66:e9:bd:02:08:d4:67:fd:08:d3:60:18:4b:68:f4:2f:70:
98:6a:ad:8c:ed:ce:ab:9c:e7:ad:53:9d:c5:6d:9c:8a:41:1d:
1e:49:52:0c:ff:0f:a6:ae:86:f5:5a:48:f1:1b:71:a9:b1:37:
c5:d6:ab:b3:53:28:8d:ba:5f:05:25:c6:fc:f0:e7:08:7d:30:
b8:d9:6a:00:7d:06:c9:bf:04:a1:f4:ba:09:e9:61:09:c1:87:
fc:ad:2c:97:ff:f9:c5:5a:d7:2b:38:55:9c:a7:52:f8:3e:b2:
f7:73:ac:8b:2e:b6:3b:a0:93:a5:f2:66:21:79:59:9e:60:83:
ef:3c:6e:6e:12:b7:4a:c2:41:8b:a7:1f:00:9e:e8:c1:3c:3d:
ba:7d:ac:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:21:42 2026 by rpki-client