Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4F7540B64BE311F096B8CE67C4F9AE02.roa
File: 4F7540B64BE311F096B8CE67C4F9AE02.roa (raw, json)
Hash identifier: iOyTZJaQR0Zftm3sGvok4r4IDTRqcimVVnOGHvnHZ5A=
Subject key identifier: 58:98:7E:C0:B0:5A:10:F8:60:57:A3:90:F9:20:20:7E:C0:33:5B:E9
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0C07
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4F7540B64BE311F096B8CE67C4F9AE02.roa
Signing time: Wed 15 Apr 2026 06:25:19 +0000
ROA not before: Wed 15 Apr 2026 06:25:19 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 149175
IP address blocks: 61.15.64.0/24 maxlen: 24
61.15.65.0/24 maxlen: 24
61.15.66.0/24 maxlen: 24
61.15.67.0/24 maxlen: 24
61.15.68.0/24 maxlen: 24
61.15.69.0/24 maxlen: 24
61.15.70.0/23 maxlen: 23
61.15.70.0/24 maxlen: 24
61.15.71.0/24 maxlen: 24
61.15.72.0/22 maxlen: 22
61.15.76.0/22 maxlen: 22
61.15.80.0/22 maxlen: 22
61.15.84.0/23 maxlen: 23
61.15.84.0/24 maxlen: 24
61.15.85.0/24 maxlen: 24
61.15.86.0/24 maxlen: 24
61.15.88.0/22 maxlen: 24
61.15.97.0/24 maxlen: 24
203.168.221.0/24 maxlen: 24
203.168.238.0/24 maxlen: 24
203.168.244.0/24 maxlen: 24
203.168.245.0/24 maxlen: 24
203.168.246.0/24 maxlen: 24
203.168.247.0/24 maxlen: 24
203.168.248.0/24 maxlen: 24
203.168.249.0/24 maxlen: 24
203.168.250.0/24 maxlen: 24
203.168.251.0/24 maxlen: 24
203.168.253.0/24 maxlen: 24
203.168.255.0/24 maxlen: 24
222.167.36.0/22 maxlen: 22
222.167.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 19:47:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3079 (0xc07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Apr 15 06:25:19 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69df2f4f-44e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a5:82:17:f1:f7:d3:0e:de:99:17:16:67:09:
3f:5d:47:a3:93:1f:b1:a5:8b:60:bd:47:f7:d5:e4:
99:35:b8:11:1e:62:f2:87:42:f8:ae:36:be:e5:e4:
79:c6:30:a5:0c:ec:43:4b:8a:e8:53:64:0e:3f:a2:
d6:1b:4b:c7:c2:69:09:c9:ac:40:3d:ed:aa:fa:7b:
37:b1:78:40:0d:e7:69:d7:b4:aa:bc:70:e8:ce:e3:
e5:21:b7:6c:f7:36:ed:67:8f:4b:2d:98:e5:ed:19:
60:9b:f1:bc:14:ad:39:99:37:77:1e:b0:7f:b7:fb:
4a:1a:5f:a3:df:63:11:cb:88:36:04:5d:0b:5e:b1:
fa:2a:9e:ac:ee:ac:72:72:24:88:5e:33:0c:cc:bb:
92:11:13:35:06:e0:a9:b0:32:51:06:91:a3:05:e5:
f7:f4:d3:dc:46:6f:ab:ae:17:6a:04:b3:0b:c2:a9:
b0:a1:df:e4:30:3b:1d:c4:e0:6b:bd:22:5c:06:99:
40:70:02:e6:54:3e:4a:81:1d:02:f2:9c:b0:de:0d:
1a:a3:22:62:22:a9:5f:a0:e9:ac:b7:48:56:05:13:
21:59:77:b5:99:9c:35:eb:3b:29:7d:d0:8d:b5:f6:
2e:67:26:8a:98:eb:51:c0:bf:40:d9:d8:95:ce:c3:
17:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:98:7E:C0:B0:5A:10:F8:60:57:A3:90:F9:20:20:7E:C0:33:5B:E9
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/4F7540B64BE311F096B8CE67C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.15.64.0-61.15.86.255
61.15.88.0/22
61.15.97.0/24
203.168.221.0/24
203.168.238.0/24
203.168.244.0-203.168.251.255
203.168.253.0/24
203.168.255.0/24
222.167.36.0-222.167.40.255
Signature Algorithm: sha256WithRSAEncryption
53:ba:d2:2f:dd:3a:a2:d1:ce:34:1b:f1:0c:23:36:b5:ee:e3:
75:9d:b9:ed:36:1d:2d:b8:c1:3f:31:24:56:34:67:9a:5b:be:
b2:ff:72:08:f3:bd:90:2f:dc:4c:9b:f3:a4:3a:65:9c:f2:46:
88:a2:9e:c9:11:72:37:e9:16:c2:89:19:d1:47:83:75:72:d8:
36:cf:aa:4e:4f:e8:0a:9f:8d:d9:d2:9f:55:66:be:9b:f6:dd:
11:d1:39:ac:e7:a4:73:18:33:ff:0f:a8:4a:c5:60:ff:ef:01:
28:bb:cb:8f:f9:b5:18:25:9d:06:5f:cf:f1:05:5b:ca:75:7a:
f1:c9:dc:0e:16:83:11:d7:14:03:fd:4e:e4:de:b2:1c:d4:6f:
7b:9d:e6:0b:29:e8:6e:07:55:3e:4c:e4:06:64:20:2f:8d:3b:
9c:f9:b2:05:de:cd:c2:33:c2:cf:c7:fc:b7:18:ff:1e:e9:65:
e6:83:c3:87:10:17:eb:d9:b6:8c:a3:b4:8e:84:89:3e:37:6a:
b9:07:09:04:0e:fe:05:d4:49:b4:b4:b8:f5:cb:e0:c0:35:45:
e8:43:d0:25:ae:2d:9e:e4:a2:7e:89:fd:f3:f1:a0:9e:00:0f:
eb:88:2f:a4:16:01:f2:ae:50:55:9c:ab:ae:5c:20:93:cf:82:
ba:03:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:20:03 2026 by rpki-client