Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/7A7B57CCB16911F193B5E3B35C11F970.roa
File: 7A7B57CCB16911F193B5E3B35C11F970.roa (raw, json)
Hash identifier: 5M4rcwqucQqtMERebMyxPon3bWlH6cvOn0HHAgRP0j4=
Subject key identifier: 0E:FC:04:CA:D1:E6:E6:E0:3B:DE:87:4C:9B:16:90:9D:1C:8E:24:BC
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0CD3
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/7A7B57CCB16911F193B5E3B35C11F970.roa
Signing time: Wed 16 Sep 2026 08:51:12 +0000
ROA not before: Wed 16 Sep 2026 08:51:12 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 219100
IP address blocks: 61.18.129.0/24 maxlen: 24
61.18.131.0/24 maxlen: 24
61.18.132.0/24 maxlen: 24
61.18.144.0/24 maxlen: 24
61.18.146.0/24 maxlen: 24
61.18.148.0/24 maxlen: 24
61.18.150.0/24 maxlen: 24
61.18.152.0/24 maxlen: 24
61.18.192.0/24 maxlen: 24
61.18.194.0/24 maxlen: 24
61.18.195.0/24 maxlen: 24
61.18.197.0/24 maxlen: 24
61.18.198.0/24 maxlen: 24
61.18.200.0/24 maxlen: 24
61.18.206.0/24 maxlen: 24
61.18.211.0/24 maxlen: 24
61.18.213.0/24 maxlen: 24
61.18.218.0/24 maxlen: 24
61.18.220.0/24 maxlen: 24
61.18.222.0/24 maxlen: 24
61.18.224.0/24 maxlen: 24
61.18.226.0/24 maxlen: 24
61.18.229.0/24 maxlen: 24
61.18.231.0/24 maxlen: 24
61.18.234.0/24 maxlen: 24
61.18.236.0/24 maxlen: 24
61.18.240.0/24 maxlen: 24
61.18.242.0/24 maxlen: 24
61.18.249.0/24 maxlen: 24
61.18.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 23:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3283 (0xcd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Sep 16 08:51:12 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6aaa5880-958a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e2:9c:9b:f6:02:8a:dd:cc:f8:99:1a:e2:ae:
23:6f:d9:9b:77:5b:65:1d:2f:b2:ac:c1:8a:46:6b:
70:8f:b5:3e:cd:47:09:f4:95:19:b3:71:f6:9b:17:
4a:1a:58:02:76:f5:60:67:00:de:8e:1a:e1:62:a1:
5d:c8:5a:20:ba:96:ab:ec:db:2c:d5:11:5f:f1:75:
42:46:b1:f1:44:1d:4a:24:a3:79:7a:14:d8:6d:65:
33:9a:d6:ae:c4:cf:5f:cd:84:67:f3:e3:55:5e:7b:
82:54:19:30:bd:62:25:21:b0:bc:9f:5d:46:e4:ca:
b9:2d:a6:1e:f5:22:f6:d6:d7:ff:ab:32:fc:3d:87:
e7:41:93:9b:98:00:f3:86:48:37:20:7c:10:84:88:
e4:42:dc:87:e5:28:ea:75:88:95:72:c7:7f:cd:fe:
fb:ad:88:fc:8f:af:b5:f1:1e:f9:69:8e:d6:ce:95:
eb:57:f5:7d:9e:83:c2:d8:bd:d8:2e:d4:cf:7c:af:
f8:73:e7:c1:ed:c8:0a:ac:b3:45:e9:68:99:f4:77:
0b:f2:22:68:b1:07:9b:60:f8:f4:db:e7:ce:05:c0:
98:41:b9:4e:5f:75:ef:4c:c1:b3:1c:95:13:cc:1e:
11:4b:59:b3:dc:76:84:f9:a5:14:62:ee:48:c4:23:
5f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FC:04:CA:D1:E6:E6:E0:3B:DE:87:4C:9B:16:90:9D:1C:8E:24:BC
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/7A7B57CCB16911F193B5E3B35C11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.18.129.0/24
61.18.131.0-61.18.132.255
61.18.144.0/24
61.18.146.0/24
61.18.148.0/24
61.18.150.0/24
61.18.152.0/24
61.18.192.0/24
61.18.194.0/23
61.18.197.0-61.18.198.255
61.18.200.0/24
61.18.206.0/24
61.18.211.0/24
61.18.213.0/24
61.18.218.0/24
61.18.220.0/24
61.18.222.0/24
61.18.224.0/24
61.18.226.0/24
61.18.229.0/24
61.18.231.0/24
61.18.234.0/24
61.18.236.0/24
61.18.240.0/24
61.18.242.0/24
61.18.249.0/24
61.18.251.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:9d:d4:e0:e4:26:8b:bd:6f:c8:11:d2:c4:87:35:86:f3:0a:
a2:39:25:5a:da:43:7b:c5:eb:a4:9a:c4:66:08:c0:48:88:06:
51:35:25:5a:53:80:2c:8e:a0:d9:c0:18:6d:8b:bc:87:3d:d6:
50:3f:c7:d3:64:0a:e8:b0:8e:c6:e6:9b:95:cf:cd:bf:3f:2e:
25:70:83:c3:b1:66:0d:6d:8e:86:5c:c4:0d:b4:a2:44:9b:77:
3d:4b:9a:d9:20:53:78:8f:63:ed:14:b7:03:01:d9:9d:cc:eb:
2b:25:3d:13:e7:7a:c0:1e:4d:35:a0:5a:56:ac:ed:27:7b:6f:
ac:de:1a:08:56:7c:6b:40:96:0c:d7:2f:ae:99:3d:de:5e:41:
58:8a:17:a3:9c:f0:25:fb:f4:85:db:d5:c7:31:27:0e:c2:a0:
1c:d1:f8:fe:66:d8:4e:16:20:a4:b3:df:eb:29:d6:a7:89:13:
48:52:94:b2:65:76:3a:61:5f:88:2c:5f:cd:4f:ce:ec:f4:79:
5c:de:21:a2:b1:6d:09:92:8a:dd:17:d2:dc:ed:8c:c9:e6:e5:
ce:5b:49:23:25:36:f9:dd:99:3f:96:ad:5e:b6:ca:26:79:5f:
91:26:1d:d3:09:1f:4b:0e:0e:11:cd:a5:e9:e0:e9:77:12:87:
36:fa:2d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:29:36 2026 by rpki-client