Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/6205FF52113D11F1BF40122E203D8C67.roa
File: 6205FF52113D11F1BF40122E203D8C67.roa (raw, json)
Hash identifier: YZA4lVzt1mgdsEJ++kdTfFeCS9rYdciYFwgd714ipgA=
Subject key identifier: D6:C3:BB:94:8D:E4:A8:4C:C8:12:17:F0:6B:7C:1A:07:06:04:79:E4
Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial: 08A8
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/6205FF52113D11F1BF40122E203D8C67.roa
Signing time: Sun 01 Mar 2026 16:41:22 +0000
ROA not before: Tue 24 Feb 2026 04:57:56 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 4775
IP address blocks: 64.224.21.0/24 maxlen: 24
64.224.96.0/19 maxlen: 19
64.224.128.0/20 maxlen: 20
64.226.56.0/21 maxlen: 21
64.226.56.0/24 maxlen: 24
64.226.57.0/24 maxlen: 24
64.226.58.0/24 maxlen: 24
64.226.59.0/24 maxlen: 24
64.226.60.0/24 maxlen: 24
64.226.61.0/24 maxlen: 24
64.226.62.0/24 maxlen: 24
64.226.63.0/24 maxlen: 24
138.84.64.0/18 maxlen: 18
138.84.64.0/24 maxlen: 24
138.84.65.0/24 maxlen: 24
138.84.66.0/24 maxlen: 24
138.84.67.0/24 maxlen: 24
138.84.69.0/24 maxlen: 24
138.84.70.0/23 maxlen: 23
138.84.70.0/24 maxlen: 24
138.84.71.0/24 maxlen: 24
138.84.72.0/24 maxlen: 24
138.84.73.0/24 maxlen: 24
138.84.74.0/23 maxlen: 23
138.84.74.0/24 maxlen: 24
138.84.75.0/24 maxlen: 24
138.84.76.0/22 maxlen: 22
138.84.78.0/23 maxlen: 23
138.84.110.0/23 maxlen: 23
138.84.112.0/23 maxlen: 23
138.84.114.0/23 maxlen: 23
138.84.126.0/23 maxlen: 23
138.84.128.0/19 maxlen: 19
138.84.192.0/21 maxlen: 21
147.185.169.0/24 maxlen: 24
158.62.0.0/17 maxlen: 17
158.62.106.0/24 maxlen: 24
192.112.243.0/24 maxlen: 24
209.35.160.0/20 maxlen: 20
209.35.160.0/24 maxlen: 24
209.35.161.0/24 maxlen: 24
209.35.162.0/24 maxlen: 24
209.35.163.0/24 maxlen: 24
209.35.164.0/24 maxlen: 24
209.35.165.0/24 maxlen: 24
209.35.166.0/24 maxlen: 24
209.35.167.0/24 maxlen: 24
209.35.169.0/24 maxlen: 24
209.35.170.0/24 maxlen: 24
209.35.171.0/24 maxlen: 24
209.35.172.0/24 maxlen: 24
209.35.173.0/24 maxlen: 24
209.35.174.0/24 maxlen: 24
216.247.0.0/18 maxlen: 18
216.247.80.0/20 maxlen: 20
216.247.80.0/24 maxlen: 24
216.247.81.0/24 maxlen: 24
216.247.82.0/24 maxlen: 24
216.247.83.0/24 maxlen: 24
216.247.84.0/24 maxlen: 24
216.247.85.0/24 maxlen: 24
216.247.86.0/24 maxlen: 24
216.247.87.0/24 maxlen: 24
216.247.88.0/24 maxlen: 24
216.247.89.0/24 maxlen: 24
216.247.90.0/24 maxlen: 24
216.247.91.0/24 maxlen: 24
216.247.92.0/24 maxlen: 24
216.247.93.0/24 maxlen: 24
216.247.94.0/24 maxlen: 24
216.247.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2216 (0x8a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Validity
Not Before: Feb 24 04:57:56 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a46c32-c0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dc:45:81:94:da:06:8b:04:09:35:09:66:af:
49:0a:0b:06:ba:41:cf:b6:84:e9:2e:72:e5:a9:d4:
6a:71:59:08:b6:5a:a0:89:88:d3:7a:61:66:39:72:
52:4b:c4:53:a8:23:06:b7:70:bc:fe:59:76:cf:a2:
77:a5:0f:8b:8f:84:fc:e8:6c:c6:11:a7:a4:e9:24:
4b:d8:1a:73:66:63:c4:28:f8:50:37:28:53:53:94:
9b:ec:3a:47:1c:f9:3e:1f:f7:d3:1c:9d:56:c6:bd:
b4:a1:f2:26:d0:4f:39:9b:17:8d:c6:ed:58:a9:c2:
65:e6:b6:26:b2:57:78:6d:ff:17:b2:4b:8c:a1:15:
6f:0d:99:03:55:bf:de:47:0e:fb:97:41:b7:f2:2f:
65:57:4b:7b:00:86:27:da:7c:6b:ec:ab:71:4d:c3:
28:6c:20:4f:e2:e8:92:02:ca:c7:b7:d5:09:e7:a8:
57:9f:f0:c5:d9:6f:c6:b9:38:a0:a1:bb:82:a8:51:
0e:4b:d3:cd:04:ad:5d:ce:a3:72:da:0a:f6:af:31:
c7:3c:37:67:17:d8:58:59:a3:3f:ec:b4:aa:0c:f4:
ae:d7:4c:ab:e7:d5:b5:43:37:98:51:e9:3e:24:95:
20:88:cc:46:9f:d0:8a:60:7c:3d:f5:4c:8d:dc:e8:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C3:BB:94:8D:E4:A8:4C:C8:12:17:F0:6B:7C:1A:07:06:04:79:E4
X509v3 Authority Key Identifier:
keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/6205FF52113D11F1BF40122E203D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
64.224.21.0/24
64.224.96.0-64.224.143.255
64.226.56.0/21
138.84.64.0-138.84.159.255
138.84.192.0/21
147.185.169.0/24
158.62.0.0/17
192.112.243.0/24
209.35.160.0/20
216.247.0.0/18
216.247.80.0/20
Signature Algorithm: sha256WithRSAEncryption
56:66:0c:dd:3f:e3:f7:79:4b:dd:2c:52:bf:8b:2c:7d:3d:62:
f2:97:42:c0:b1:ef:13:4d:1a:f6:ea:65:51:7d:8b:a7:4f:09:
88:e4:79:e3:3a:85:68:70:ab:8d:2e:73:cf:a4:96:00:64:3c:
e5:6e:cc:fb:7a:5e:c1:2f:09:76:8b:08:cc:cc:a9:29:8c:8a:
81:f7:05:55:b4:39:62:3c:74:dd:52:de:b2:8f:72:0c:2f:95:
c2:f6:6c:61:1f:2f:88:40:de:2e:ed:c9:ea:fe:eb:df:ab:57:
0c:c4:6c:bb:03:8d:f1:92:88:b0:25:19:34:2a:42:ab:83:f2:
97:07:e8:d2:a8:99:77:8c:9f:75:fd:13:a6:5c:3b:c8:2f:2b:
5a:aa:fb:b3:6c:d0:92:16:2f:e1:2a:2e:66:67:60:bd:32:71:
dd:ba:9a:e6:6e:c5:96:c2:b6:e0:9d:91:01:33:61:1d:04:c2:
23:c8:15:db:b2:b6:cc:3c:a4:b6:4f:1a:4b:66:b1:0c:85:cc:
5f:fa:6d:53:ce:67:40:56:e5:7f:0b:34:05:65:a0:34:75:f2:
c5:f4:2b:9a:57:db:05:36:60:4d:e5:8a:38:e9:77:b0:81:a8:
8e:ed:e7:9b:07:f7:f4:c0:b8:44:7b:6d:8f:9a:34:03:99:42:
52:0e:40:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:30:25 2026 by rpki-client