Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/07390DFCB09E11F18524D6185E11F970.roa
File: 07390DFCB09E11F18524D6185E11F970.roa (raw, json)
Hash identifier: b1AXlb+LA9Vlp56ffVNN4BlaCHFaGB2+o7U1ksYesHI=
Subject key identifier: 20:FC:6D:20:51:2C:B5:C6:35:85:5D:49:7B:A7:2F:7E:7A:34:D6:0C
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0CD6
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/07390DFCB09E11F18524D6185E11F970.roa
Signing time: Thu 17 Sep 2026 02:57:42 +0000
ROA not before: Thu 17 Sep 2026 02:57:42 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 218797
IP address blocks: 61.18.129.0/24 maxlen: 24
61.18.131.0/24 maxlen: 24
61.18.132.0/24 maxlen: 24
61.18.144.0/24 maxlen: 24
61.18.146.0/24 maxlen: 24
61.18.148.0/24 maxlen: 24
61.18.149.0/24 maxlen: 24
61.18.150.0/24 maxlen: 24
61.18.152.0/24 maxlen: 24
61.18.176.0/24 maxlen: 24
61.18.177.0/24 maxlen: 24
61.18.179.0/24 maxlen: 24
61.18.183.0/24 maxlen: 24
61.18.184.0/24 maxlen: 24
61.18.192.0/24 maxlen: 24
61.18.194.0/24 maxlen: 24
61.18.195.0/24 maxlen: 24
61.18.197.0/24 maxlen: 24
61.18.198.0/24 maxlen: 24
61.18.200.0/24 maxlen: 24
61.18.206.0/24 maxlen: 24
61.18.211.0/24 maxlen: 24
61.18.213.0/24 maxlen: 24
61.18.218.0/24 maxlen: 24
61.18.220.0/24 maxlen: 24
61.18.222.0/24 maxlen: 24
61.18.224.0/24 maxlen: 24
61.18.226.0/24 maxlen: 24
61.18.229.0/24 maxlen: 24
61.18.231.0/24 maxlen: 24
61.18.234.0/24 maxlen: 24
61.18.236.0/24 maxlen: 24
61.18.240.0/24 maxlen: 24
61.18.242.0/24 maxlen: 24
61.18.249.0/24 maxlen: 24
61.18.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 19:39:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3286 (0xcd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Sep 17 02:57:42 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6aab5726-f6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:56:ab:f5:50:9e:c2:6a:a9:e6:8e:a4:1d:07:
92:33:1d:43:04:b7:d4:84:85:e7:70:f9:84:2d:d0:
34:6e:92:e2:03:46:0e:b6:a8:da:7b:ac:31:da:64:
4e:df:06:5b:e9:a7:3e:fd:54:d4:7b:73:c1:8e:f2:
ba:20:01:b6:82:c3:02:f0:fe:30:b6:1a:9e:28:26:
b3:8e:ad:01:d1:60:df:03:d1:1f:4d:b9:ec:fa:27:
49:db:65:f6:9a:e4:8c:83:34:6a:00:50:fe:75:b7:
99:3e:b9:6a:d3:d4:98:7c:d0:07:3b:a3:1b:61:3b:
a8:c2:81:bf:37:c4:25:4c:40:07:40:94:71:74:69:
78:1d:3f:e9:5b:d1:dd:89:54:c8:98:64:50:79:79:
cc:5d:df:76:35:cf:63:65:c4:ca:ee:68:ff:75:4f:
e8:41:65:8a:4c:3f:61:dd:2b:b4:df:d1:84:e8:8e:
8a:e3:4b:64:1e:fc:b6:6a:1e:99:53:07:8b:9b:61:
ba:8b:7f:01:1b:1f:b2:7a:6d:ef:ba:e6:e9:18:0a:
ab:7e:52:87:22:da:73:87:ae:93:98:ac:6e:65:ca:
6d:1d:a3:09:4d:f1:f4:eb:c1:07:5a:05:d6:c6:11:
53:23:76:f0:ba:60:6c:53:14:73:cf:a3:01:95:3b:
62:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:FC:6D:20:51:2C:B5:C6:35:85:5D:49:7B:A7:2F:7E:7A:34:D6:0C
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/07390DFCB09E11F18524D6185E11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.18.129.0/24
61.18.131.0-61.18.132.255
61.18.144.0/24
61.18.146.0/24
61.18.148.0-61.18.150.255
61.18.152.0/24
61.18.176.0/23
61.18.179.0/24
61.18.183.0-61.18.184.255
61.18.192.0/24
61.18.194.0/23
61.18.197.0-61.18.198.255
61.18.200.0/24
61.18.206.0/24
61.18.211.0/24
61.18.213.0/24
61.18.218.0/24
61.18.220.0/24
61.18.222.0/24
61.18.224.0/24
61.18.226.0/24
61.18.229.0/24
61.18.231.0/24
61.18.234.0/24
61.18.236.0/24
61.18.240.0/24
61.18.242.0/24
61.18.249.0/24
61.18.251.0/24
Signature Algorithm: sha256WithRSAEncryption
17:6c:32:55:0c:4f:2b:bb:95:da:6e:f8:21:24:ba:6a:95:02:
db:14:eb:f5:69:ad:54:45:e8:5d:b8:45:95:48:5f:cc:d4:bc:
3f:df:c4:83:5a:fe:b3:80:90:76:fa:a1:80:7e:d2:ab:5c:83:
92:19:64:e2:a4:3f:91:f6:c2:a4:2f:15:1b:b3:b3:09:ec:e3:
53:cd:cc:f1:c6:a6:92:78:bf:b4:f7:f5:34:c6:aa:d9:c9:79:
29:42:c5:c5:83:a7:81:e6:68:a2:d6:d7:5f:c5:1e:a5:6b:e2:
f3:e7:06:b9:08:a4:04:2d:cf:66:e8:ca:17:cc:3a:93:53:b9:
1c:f0:6e:7a:95:50:81:95:41:56:20:4d:dd:d4:b8:8f:1a:3f:
99:ac:47:3c:e2:b6:07:05:5c:7f:a2:4d:05:c9:79:9b:1e:2b:
8d:62:4f:0a:77:f9:7e:da:3a:35:35:04:c2:38:2c:64:bc:d0:
58:07:db:cf:43:94:6f:26:0d:d2:e9:95:11:5a:72:ca:88:b0:
7f:16:12:ab:78:b0:4d:b3:ae:0e:77:fd:c8:61:4e:9e:66:ce:
1c:2e:3f:9e:60:fe:77:7e:09:43:85:6e:c0:e2:50:a9:9f:ed:
ce:59:ef:e2:07:7e:f8:76:8a:d1:c8:c1:ee:c5:b7:5c:40:74:
e8:68:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:15:07 2026 by rpki-client