Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/F9ED3D7AACA711F1B77415A05D11F970.roa
File: F9ED3D7AACA711F1B77415A05D11F970.roa (raw, json)
Hash identifier: pQRSCO+NPVBv7qMcR1dqaFgdMhle3Q3pQc2pm49NO7I=
Subject key identifier: 00:4B:2C:09:77:2A:9D:67:CE:86:0C:4D:2F:E5:0A:46:20:8F:83:83
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3F64
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/F9ED3D7AACA711F1B77415A05D11F970.roa
Signing time: Wed 04 Nov 2026 01:04:55 +0000
ROA not before: Wed 04 Nov 2026 01:04:55 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 216138
IP address blocks: 49.128.197.0/24 maxlen: 24
49.128.201.0/24 maxlen: 24
49.128.205.0/24 maxlen: 24
49.128.214.0/24 maxlen: 24
61.251.184.0/24 maxlen: 24
101.53.67.0/24 maxlen: 24
101.53.79.0/24 maxlen: 24
101.53.83.0/24 maxlen: 24
101.53.85.0/24 maxlen: 24
101.55.49.0/24 maxlen: 24
103.6.72.0/24 maxlen: 24
103.6.75.0/24 maxlen: 24
112.196.196.0/24 maxlen: 24
112.196.197.0/24 maxlen: 24
112.196.198.0/24 maxlen: 24
112.196.201.0/24 maxlen: 24
112.196.204.0/24 maxlen: 24
112.196.205.0/24 maxlen: 24
112.196.209.0/24 maxlen: 24
112.196.210.0/24 maxlen: 24
112.196.213.0/24 maxlen: 24
112.196.216.0/24 maxlen: 24
112.196.217.0/24 maxlen: 24
112.196.220.0/24 maxlen: 24
112.196.221.0/24 maxlen: 24
116.93.184.0/24 maxlen: 24
116.93.188.0/24 maxlen: 24
116.93.189.0/24 maxlen: 24
124.66.209.0/24 maxlen: 24
124.66.211.0/24 maxlen: 24
124.66.214.0/24 maxlen: 24
124.66.215.0/24 maxlen: 24
124.66.220.0/24 maxlen: 24
182.237.56.0/24 maxlen: 24
182.237.57.0/24 maxlen: 24
182.237.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:21:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16228 (0x3f64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Nov 4 01:04:55 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6aea84b7-59be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f6:4a:b0:a6:8f:2c:e3:7e:83:7b:85:9b:b9:
2d:e8:4c:38:95:b0:48:f0:60:4b:d8:c8:d4:1a:77:
81:a2:ed:f9:2c:57:e0:62:f4:ff:f3:21:05:a8:38:
73:63:41:2a:cf:5c:3b:5c:b6:a4:91:cd:8d:d4:c8:
39:26:72:a6:ab:39:9d:6c:2f:ab:6b:37:6c:28:da:
80:53:fd:a1:3b:77:70:7a:3d:bf:ba:e0:60:5b:cc:
32:97:6e:c1:9b:4c:5d:f7:31:88:bc:9c:79:80:e9:
39:8a:a2:20:f1:8a:78:6b:44:b2:bf:86:84:ce:7f:
76:74:09:93:38:98:7c:11:9a:fb:f9:74:57:cd:4d:
32:72:0a:9f:f8:f5:b9:72:04:f3:93:ca:65:52:32:
da:33:12:dd:14:96:48:50:63:9b:bb:3c:3e:dc:76:
fb:d6:a8:1f:df:bc:74:8b:07:d5:1d:d2:7e:16:b9:
42:57:42:81:17:45:68:7b:0d:4d:82:3a:0a:69:98:
af:87:90:0c:9e:f8:c4:78:62:19:76:0e:7f:71:88:
3c:1d:ee:5a:c7:aa:39:28:b0:99:02:77:ee:4b:8d:
4c:b7:0e:81:f5:44:6d:d1:0d:e2:58:8b:80:96:9a:
ce:0a:88:5b:a5:0e:1c:fe:0e:ca:96:12:b6:15:7e:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4B:2C:09:77:2A:9D:67:CE:86:0C:4D:2F:E5:0A:46:20:8F:83:83
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/F9ED3D7AACA711F1B77415A05D11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
49.128.197.0/24
49.128.201.0/24
49.128.205.0/24
49.128.214.0/24
61.251.184.0/24
101.53.67.0/24
101.53.79.0/24
101.53.83.0/24
101.53.85.0/24
101.55.49.0/24
103.6.72.0/24
103.6.75.0/24
112.196.196.0-112.196.198.255
112.196.201.0/24
112.196.204.0/23
112.196.209.0-112.196.210.255
112.196.213.0/24
112.196.216.0/23
112.196.220.0/23
116.93.184.0/24
116.93.188.0/23
124.66.209.0/24
124.66.211.0/24
124.66.214.0/23
124.66.220.0/24
182.237.56.0/23
182.237.59.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b1:d7:e0:4c:85:34:5a:e7:ee:89:d9:19:3a:dc:d8:61:66:
ea:eb:19:1e:f9:6e:c2:ac:6a:1b:e2:2e:11:9b:e5:11:49:3b:
32:af:bc:65:ce:c6:c1:85:03:14:c5:f2:fc:04:57:79:e6:ed:
9e:24:94:a2:e6:87:47:b4:c7:f3:19:e7:53:69:ed:dd:61:f7:
48:19:e8:fc:f0:8d:58:52:42:11:b1:8b:18:b2:72:93:d5:3c:
0f:fa:79:56:e4:b4:77:d5:24:b6:97:9e:3e:03:69:00:67:76:
c3:8c:2f:95:19:f8:37:17:a5:c4:ab:96:2b:b4:cc:42:80:de:
c5:66:8d:80:8c:b9:5e:7c:00:fe:e8:d4:5a:c4:e4:a5:24:16:
2d:66:9a:31:ab:03:0e:7e:b1:24:7d:47:82:0f:17:c6:a2:35:
09:82:61:9e:8e:fd:c9:6e:25:f8:ec:95:0a:1a:de:60:23:a6:
e9:fe:41:9b:68:98:3f:2e:37:af:bf:8f:39:c2:4d:4f:1e:8a:
64:7b:7f:e6:a2:a7:c0:91:90:0e:15:ab:87:e0:a4:e3:04:a2:
8d:54:1d:56:d4:3c:58:93:27:95:55:e3:06:e6:d1:ee:fe:f8:
5b:34:b5:b8:d9:89:db:d4:33:63:90:9f:fe:dd:06:46:43:84:
4f:a4:ee:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:40:24 2026 by rpki-client