Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/AEEA30A444C911F0B1847067C4F9AE02.roa
File: AEEA30A444C911F0B1847067C4F9AE02.roa (raw, json)
Hash identifier: 6FCwJQ7Hqu9T8wGvhRafVaBteW1BYD7lgrGRZ0Zmux0=
Subject key identifier: 5C:65:25:DD:B8:45:E7:67:0F:3F:79:11:C3:39:27:90:8C:02:F1:79
Certificate issuer: /CN=A9161613/serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Certificate serial: 06F2
Authority key identifier: 09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/AEEA30A444C911F0B1847067C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:26:48 +0000
ROA not before: Wed 04 Feb 2026 22:19:50 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 18190
IP address blocks: 49.157.9.0/24 maxlen: 24
49.157.10.0/24 maxlen: 24
49.157.11.0/24 maxlen: 24
49.157.12.0/24 maxlen: 24
49.157.13.0/24 maxlen: 24
49.157.16.0/24 maxlen: 24
49.157.17.0/24 maxlen: 24
49.157.18.0/24 maxlen: 24
49.157.19.0/24 maxlen: 24
49.157.20.0/24 maxlen: 24
49.157.21.0/24 maxlen: 24
49.157.22.0/24 maxlen: 24
49.157.23.0/24 maxlen: 24
49.157.24.0/24 maxlen: 24
49.157.25.0/24 maxlen: 24
49.157.29.0/24 maxlen: 24
49.157.30.0/24 maxlen: 24
49.157.31.0/24 maxlen: 24
49.157.33.0/24 maxlen: 24
49.157.34.0/24 maxlen: 24
49.157.35.0/24 maxlen: 24
49.157.36.0/24 maxlen: 24
49.157.37.0/24 maxlen: 24
49.157.38.0/24 maxlen: 24
49.157.39.0/24 maxlen: 24
49.157.40.0/24 maxlen: 24
49.157.41.0/24 maxlen: 24
49.157.42.0/24 maxlen: 24
49.157.43.0/24 maxlen: 24
49.157.44.0/24 maxlen: 24
49.157.45.0/24 maxlen: 24
49.157.55.0/24 maxlen: 24
49.157.56.0/24 maxlen: 24
49.157.57.0/24 maxlen: 24
49.157.58.0/24 maxlen: 24
49.157.59.0/24 maxlen: 24
61.28.168.0/24 maxlen: 24
112.199.73.0/24 maxlen: 24
113.61.32.0/24 maxlen: 24
113.61.33.0/24 maxlen: 24
113.61.34.0/24 maxlen: 24
113.61.35.0/24 maxlen: 24
113.61.36.0/24 maxlen: 24
113.61.38.0/24 maxlen: 24
113.61.42.0/24 maxlen: 24
113.61.43.0/24 maxlen: 24
113.61.44.0/24 maxlen: 24
113.61.45.0/24 maxlen: 24
113.61.46.0/24 maxlen: 24
113.61.47.0/24 maxlen: 24
113.61.48.0/24 maxlen: 24
113.61.49.0/24 maxlen: 24
113.61.50.0/24 maxlen: 24
113.61.51.0/24 maxlen: 24
113.61.52.0/24 maxlen: 24
113.61.53.0/24 maxlen: 24
113.61.54.0/24 maxlen: 24
113.61.55.0/24 maxlen: 24
113.61.56.0/24 maxlen: 24
113.61.57.0/24 maxlen: 24
113.61.58.0/24 maxlen: 24
113.61.59.0/24 maxlen: 24
113.61.60.0/24 maxlen: 24
113.61.61.0/24 maxlen: 24
113.61.62.0/24 maxlen: 24
113.61.63.0/24 maxlen: 24
115.85.2.0/24 maxlen: 24
116.50.137.0/24 maxlen: 24
116.50.138.0/24 maxlen: 24
116.50.139.0/24 maxlen: 24
116.50.140.0/24 maxlen: 24
116.50.142.0/24 maxlen: 24
116.50.143.0/24 maxlen: 24
116.50.144.0/24 maxlen: 24
116.50.145.0/24 maxlen: 24
116.50.183.0/24 maxlen: 24
116.50.238.0/24 maxlen: 24
117.104.240.0/24 maxlen: 24
117.104.241.0/24 maxlen: 24
117.104.242.0/24 maxlen: 24
117.104.243.0/24 maxlen: 24
117.104.244.0/24 maxlen: 24
117.104.245.0/24 maxlen: 24
117.104.246.0/24 maxlen: 24
117.104.247.0/24 maxlen: 24
117.104.248.0/24 maxlen: 24
117.104.249.0/24 maxlen: 24
117.104.250.0/24 maxlen: 24
117.104.251.0/24 maxlen: 24
117.104.252.0/24 maxlen: 24
117.104.253.0/24 maxlen: 24
117.104.254.0/24 maxlen: 24
180.232.5.0/24 maxlen: 24
180.232.6.0/24 maxlen: 24
180.232.7.0/24 maxlen: 24
180.232.8.0/24 maxlen: 24
180.232.9.0/24 maxlen: 24
180.232.15.0/24 maxlen: 24
180.232.16.0/24 maxlen: 24
180.232.17.0/24 maxlen: 24
180.232.18.0/24 maxlen: 24
180.232.19.0/24 maxlen: 24
180.232.113.0/24 maxlen: 24
180.232.114.0/24 maxlen: 24
180.232.115.0/24 maxlen: 24
180.232.116.0/24 maxlen: 24
180.232.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 03:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1778 (0x6f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9161613, serialNumber=09FC077F33E3AD67BF147755167A3AD4EACB1E7C
Validity
Not Before: Feb 4 22:19:50 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69a484e8-eb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:c6:c4:d4:ff:bc:31:6c:e6:6a:cd:fd:39:
8e:ed:94:56:8e:d8:0e:c5:19:97:c5:28:72:f6:b9:
be:42:b1:7e:91:54:2f:80:74:9e:c7:94:9a:5c:e8:
7e:7b:68:74:c4:bc:5b:72:d4:9f:93:65:ed:18:f6:
c6:a1:c8:db:50:34:fc:55:10:2a:6f:3b:3d:9b:62:
48:56:04:76:c3:ec:d7:c2:6b:e5:a3:1a:3f:7a:f9:
db:af:13:a1:ff:43:7f:7f:a8:d1:94:b4:c9:5c:b9:
1d:db:ef:18:70:d8:70:88:6a:66:98:7a:c8:d7:e5:
f8:d3:67:d0:13:28:da:80:30:7a:23:1b:ed:fb:fd:
e2:50:99:5e:93:f0:a0:21:5b:bd:2c:4e:fb:41:e6:
8e:54:2f:26:d2:54:ec:39:77:1f:0a:fc:ff:23:59:
b8:de:2c:b3:04:f0:54:df:4b:74:29:f8:68:73:d2:
dc:dc:16:55:30:72:af:35:d2:bd:25:8f:8e:7d:f8:
71:a5:b0:0e:da:04:78:91:9d:6b:94:11:eb:68:0f:
b4:9d:3d:86:a1:40:66:ab:b7:4f:e5:21:87:bd:38:
b9:7c:03:24:db:f8:89:f3:bc:40:11:fd:46:12:50:
4f:b0:ac:ba:09:ae:1e:d2:f9:db:bc:10:76:b0:66:
d7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:65:25:DD:B8:45:E7:67:0F:3F:79:11:C3:39:27:90:8C:02:F1:79
X509v3 Authority Key Identifier:
keyid:09:FC:07:7F:33:E3:AD:67:BF:14:77:55:16:7A:3A:D4:EA:CB:1E:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/CfwHfzPjrWe_FHdVFno61OrLHnw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CfwHfzPjrWe_FHdVFno61OrLHnw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161613/30992668E53911EB8A5B9271C4F9AE02/AEEA30A444C911F0B1847067C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.157.9.0-49.157.13.255
49.157.16.0-49.157.25.255
49.157.29.0-49.157.31.255
49.157.33.0-49.157.45.255
49.157.55.0-49.157.59.255
61.28.168.0/24
112.199.73.0/24
113.61.32.0-113.61.36.255
113.61.38.0/24
113.61.42.0-113.61.63.255
115.85.2.0/24
116.50.137.0-116.50.140.255
116.50.142.0-116.50.145.255
116.50.183.0/24
116.50.238.0/24
117.104.240.0-117.104.254.255
180.232.5.0-180.232.9.255
180.232.15.0-180.232.19.255
180.232.113.0-180.232.117.255
Signature Algorithm: sha256WithRSAEncryption
00:95:87:9d:64:77:47:ea:0b:d1:cc:4f:e5:02:b1:da:eb:29:
c6:d1:e1:19:41:00:4c:52:33:a3:4d:07:dc:ab:bb:27:0e:be:
a3:b6:25:7c:4c:a1:e5:4a:43:2a:7a:1e:a5:60:6e:3c:ba:11:
0c:16:da:cd:0c:24:80:6d:91:c8:82:ef:34:f0:15:75:9e:21:
b7:11:95:08:fd:10:64:4f:6a:6a:9c:02:2c:e9:c5:ab:b3:5b:
c5:60:4e:98:0f:50:25:0e:42:ef:b9:b2:e8:f7:5d:30:3d:07:
2c:88:fd:f0:18:ac:c0:9f:80:81:2d:81:48:ae:33:ec:20:b2:
99:ca:29:e4:0c:7c:7d:ff:b9:27:3f:29:91:b2:11:de:7e:0a:
56:d9:f8:9c:20:7e:55:53:75:83:ae:a7:e9:5a:33:c9:f6:7d:
3b:10:79:95:9a:07:1b:de:ab:3e:9f:a5:97:15:1f:73:33:29:
d4:9d:3c:04:26:a7:37:46:22:11:eb:06:ef:5d:9a:a0:af:0b:
72:d7:a7:11:8d:b4:97:a9:72:cd:9c:b6:91:1b:25:55:81:ad:
d6:ae:f6:c7:ce:53:ed:7f:71:cd:66:72:e4:3a:96:3a:92:f4:
e7:c0:e0:f7:c2:44:db:35:83:2d:96:c5:a6:23:1d:53:34:be:
d7:1c:fb:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:35:37 2026 by rpki-client