Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/7B306A34218D11EC87C96D6DC4F9AE02.roa
File: 7B306A34218D11EC87C96D6DC4F9AE02.roa (raw, json)
Hash identifier: UaBguah8aqrFfyBedD0PzoPcWPfm260vsagvZpaZCng=
Subject key identifier: D9:F6:B7:E6:5B:38:3D:54:05:59:F9:2F:98:8C:7A:3B:B9:64:FC:4D
Certificate issuer: /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Certificate serial: 1127
Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/7B306A34218D11EC87C96D6DC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:57:20 +0000
ROA not before: Wed 26 Nov 2025 17:06:33 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 4773
IP address blocks: 118.189.34.0/24 maxlen: 24
118.189.44.0/22 maxlen: 22
118.189.78.0/24 maxlen: 24
118.189.82.0/24 maxlen: 24
118.189.176.0/20 maxlen: 20
118.189.176.0/22 maxlen: 22
118.189.176.0/24 maxlen: 24
118.189.177.0/24 maxlen: 24
118.189.178.0/24 maxlen: 24
118.189.179.0/24 maxlen: 24
118.189.180.0/23 maxlen: 24
118.189.182.0/23 maxlen: 24
118.189.184.0/21 maxlen: 21
118.189.184.0/24 maxlen: 24
118.189.185.0/24 maxlen: 24
118.189.186.0/24 maxlen: 24
118.189.187.0/24 maxlen: 24
118.189.188.0/24 maxlen: 24
118.189.189.0/24 maxlen: 24
118.189.190.0/24 maxlen: 24
118.189.191.0/24 maxlen: 24
118.189.192.0/20 maxlen: 22
118.189.192.0/24 maxlen: 24
118.189.193.0/24 maxlen: 24
118.189.194.0/24 maxlen: 24
118.189.195.0/24 maxlen: 24
118.189.196.0/24 maxlen: 24
118.189.197.0/24 maxlen: 24
118.189.198.0/24 maxlen: 24
118.189.199.0/24 maxlen: 24
118.189.200.0/24 maxlen: 24
118.189.201.0/24 maxlen: 24
118.189.202.0/24 maxlen: 24
118.189.203.0/24 maxlen: 24
118.189.204.0/24 maxlen: 24
118.189.205.0/24 maxlen: 24
118.189.206.0/24 maxlen: 24
118.189.207.0/24 maxlen: 24
118.189.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4391 (0x1127)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Validity
Not Before: Nov 26 17:06:33 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a461df-3418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1e:e1:87:ec:86:96:3d:8c:f3:92:47:7f:3b:
e6:78:74:0a:bb:72:26:9e:7e:e2:54:ae:27:ea:6c:
3f:13:03:b6:e8:49:81:81:f2:9b:79:26:83:ef:54:
db:b6:3b:de:22:18:19:e2:18:1a:d8:21:62:0a:d4:
a2:f2:e7:2f:82:30:c1:a2:32:3d:cb:0f:35:6d:ae:
30:83:30:a3:87:f2:02:64:ca:ba:e5:ac:ff:74:91:
fc:24:3e:be:28:a5:31:c6:51:c2:ec:b7:19:ad:7b:
93:bf:11:6d:de:15:f7:38:aa:81:ab:9f:df:9e:d9:
0d:d1:7b:f6:a0:3a:3e:f8:0b:21:b1:53:cc:e9:9e:
48:65:8e:12:c7:df:20:e1:e2:a0:20:2c:05:24:00:
7f:1f:c5:6e:bb:67:5f:70:a7:50:bf:20:ed:f9:23:
fe:17:c6:6f:e5:12:53:21:20:2b:ec:7e:aa:e9:c4:
48:c2:ef:a4:a5:f4:63:71:0f:b3:f6:6a:d7:5a:ba:
46:2e:cf:1a:8e:c1:a4:3a:db:60:f6:82:a6:1a:5a:
e3:30:39:bf:77:a1:fa:c1:25:aa:36:70:a7:1b:a0:
a0:91:96:37:30:f9:46:cd:29:66:0f:4d:fa:9d:16:
a8:2c:bf:98:27:4b:9b:3c:3a:e8:b1:43:c9:8d:32:
94:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:F6:B7:E6:5B:38:3D:54:05:59:F9:2F:98:8C:7A:3B:B9:64:FC:4D
X509v3 Authority Key Identifier:
keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/7B306A34218D11EC87C96D6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
118.189.34.0/24
118.189.44.0/22
118.189.78.0/24
118.189.82.0/24
118.189.176.0-118.189.215.255
Signature Algorithm: sha256WithRSAEncryption
05:83:3c:f7:80:52:70:06:34:47:15:01:29:7b:37:69:63:62:
22:01:36:6e:b6:40:10:d5:fb:61:43:50:40:92:21:d3:07:fc:
c1:53:01:cd:a8:78:c5:e3:c1:2b:5a:67:14:9f:6d:26:20:d8:
2c:a6:cb:ce:63:ed:90:02:25:23:64:71:be:89:2a:46:da:71:
df:92:a9:51:12:18:62:06:fe:e9:61:a6:e0:a7:1b:1f:1b:c9:
e0:1c:09:1a:de:1c:40:b1:6c:9f:e9:e7:d9:08:9f:c8:91:4e:
fc:5e:14:d5:dc:2d:c3:ee:05:66:ca:4b:e4:cf:8b:57:9b:13:
d4:2d:03:64:f8:9e:5e:3d:96:02:5b:17:6a:15:31:a4:ec:34:
75:66:be:15:10:7d:3c:c5:fa:ae:56:bd:74:f4:ed:8d:22:36:
a2:b4:45:11:d6:b2:f5:fd:3b:44:f6:14:99:19:96:b4:be:b0:
32:3c:7f:2e:f0:67:ad:6e:07:62:64:86:18:34:c8:b5:db:79:
a0:39:b2:d7:27:a9:da:d1:0d:96:65:9a:dd:28:1f:f3:71:da:
71:04:65:7b:04:2c:de:9b:cc:fb:5f:10:1e:36:fe:da:5b:7c:
60:31:de:42:e1:53:12:0b:ce:4c:5c:70:ae:d0:64:75:33:14:
7d:63:ab:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:37:29 2026 by rpki-client