Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/9BA94A4A0D8911ED999D4F3BC4F9AE02.roa
File: 9BA94A4A0D8911ED999D4F3BC4F9AE02.roa (raw, json)
Hash identifier: SW2MBqcXl5xSEpQph30V999FQxKYuuhpPrLOGWRxvbE=
Subject key identifier: 61:71:A7:CC:B6:B4:0B:4C:2F:AB:B5:D8:0B:A4:1C:02:CC:12:E9:27
Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial: 034E
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/9BA94A4A0D8911ED999D4F3BC4F9AE02.roa
Signing time: Sun 01 Mar 2026 14:27:19 +0000
ROA not before: Thu 19 Jun 2025 01:57:43 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 138341
IP address blocks: 134.65.64.0/18 maxlen: 18
134.65.64.0/22 maxlen: 24
134.65.68.0/22 maxlen: 24
134.65.72.0/22 maxlen: 24
134.65.76.0/22 maxlen: 22
134.65.76.0/23 maxlen: 23
134.65.76.0/24 maxlen: 24
134.65.77.0/24 maxlen: 24
134.65.78.0/23 maxlen: 23
134.65.78.0/24 maxlen: 24
134.65.79.0/24 maxlen: 24
134.65.80.0/24 maxlen: 24
143.92.64.0/19 maxlen: 19
143.92.64.0/24 maxlen: 24
143.92.65.0/24 maxlen: 24
143.92.66.0/24 maxlen: 24
143.92.67.0/24 maxlen: 24
143.92.68.0/24 maxlen: 24
143.92.69.0/24 maxlen: 24
143.92.70.0/24 maxlen: 24
143.92.72.0/24 maxlen: 24
143.92.73.0/24 maxlen: 24
143.92.74.0/23 maxlen: 23
143.92.74.0/24 maxlen: 24
143.92.75.0/24 maxlen: 24
143.92.76.0/24 maxlen: 24
143.92.77.0/24 maxlen: 24
143.92.78.0/24 maxlen: 24
143.92.79.0/24 maxlen: 24
143.92.80.0/24 maxlen: 24
143.92.81.0/24 maxlen: 24
143.92.82.0/23 maxlen: 23
143.92.82.0/24 maxlen: 24
143.92.83.0/24 maxlen: 24
143.92.84.0/23 maxlen: 23
143.92.84.0/24 maxlen: 24
143.92.85.0/24 maxlen: 24
143.92.86.0/24 maxlen: 24
143.92.87.0/24 maxlen: 24
143.92.88.0/24 maxlen: 24
143.92.89.0/24 maxlen: 24
143.92.90.0/24 maxlen: 24
143.92.91.0/24 maxlen: 24
143.92.92.0/23 maxlen: 23
143.92.92.0/24 maxlen: 24
143.92.93.0/24 maxlen: 24
143.92.94.0/23 maxlen: 23
143.92.94.0/24 maxlen: 24
143.92.95.0/24 maxlen: 24
143.92.96.0/22 maxlen: 22
143.92.97.0/24 maxlen: 24
143.92.98.0/24 maxlen: 24
143.92.99.0/24 maxlen: 24
143.92.100.0/23 maxlen: 23
143.92.100.0/24 maxlen: 24
143.92.101.0/24 maxlen: 24
143.92.108.0/23 maxlen: 23
143.92.109.0/24 maxlen: 24
147.136.128.0/22 maxlen: 22
147.136.128.0/23 maxlen: 23
147.136.128.0/24 maxlen: 24
147.136.129.0/24 maxlen: 24
147.136.130.0/23 maxlen: 23
147.136.130.0/24 maxlen: 24
147.136.131.0/24 maxlen: 24
147.136.132.0/22 maxlen: 22
147.136.132.0/23 maxlen: 23
147.136.132.0/24 maxlen: 24
147.136.133.0/24 maxlen: 24
147.136.134.0/23 maxlen: 23
147.136.134.0/24 maxlen: 24
147.136.135.0/24 maxlen: 24
147.136.136.0/22 maxlen: 22
147.136.136.0/23 maxlen: 23
147.136.136.0/24 maxlen: 24
147.136.137.0/24 maxlen: 24
147.136.138.0/23 maxlen: 23
147.136.138.0/24 maxlen: 24
147.136.139.0/24 maxlen: 24
147.136.140.0/22 maxlen: 22
147.136.140.0/23 maxlen: 23
147.136.140.0/24 maxlen: 24
147.136.141.0/24 maxlen: 24
147.136.142.0/23 maxlen: 23
147.136.142.0/24 maxlen: 24
147.136.143.0/24 maxlen: 24
147.136.144.0/22 maxlen: 22
147.136.144.0/23 maxlen: 23
147.136.144.0/24 maxlen: 24
147.136.145.0/24 maxlen: 24
147.136.146.0/23 maxlen: 23
147.136.146.0/24 maxlen: 24
147.136.147.0/24 maxlen: 24
147.136.148.0/22 maxlen: 22
147.136.148.0/23 maxlen: 23
147.136.148.0/24 maxlen: 24
147.136.149.0/24 maxlen: 24
147.136.150.0/23 maxlen: 23
147.136.150.0/24 maxlen: 24
147.136.151.0/24 maxlen: 24
147.136.152.0/22 maxlen: 22
147.136.152.0/23 maxlen: 23
147.136.152.0/24 maxlen: 24
147.136.153.0/24 maxlen: 24
147.136.154.0/23 maxlen: 23
147.136.154.0/24 maxlen: 24
147.136.155.0/24 maxlen: 24
147.136.156.0/22 maxlen: 22
147.136.156.0/23 maxlen: 23
147.136.156.0/24 maxlen: 24
147.136.157.0/24 maxlen: 24
147.136.158.0/23 maxlen: 23
147.136.158.0/24 maxlen: 24
147.136.159.0/24 maxlen: 24
147.136.160.0/22 maxlen: 22
147.136.160.0/23 maxlen: 23
147.136.160.0/24 maxlen: 24
147.136.161.0/24 maxlen: 24
147.136.162.0/23 maxlen: 23
147.136.162.0/24 maxlen: 24
147.136.163.0/24 maxlen: 24
147.136.164.0/22 maxlen: 22
147.136.164.0/23 maxlen: 23
147.136.164.0/24 maxlen: 24
147.136.165.0/24 maxlen: 24
147.136.166.0/23 maxlen: 23
147.136.166.0/24 maxlen: 24
147.136.167.0/24 maxlen: 24
147.136.168.0/22 maxlen: 22
147.136.168.0/23 maxlen: 23
147.136.168.0/24 maxlen: 24
147.136.169.0/24 maxlen: 24
147.136.170.0/23 maxlen: 23
147.136.170.0/24 maxlen: 24
147.136.171.0/24 maxlen: 24
147.136.172.0/22 maxlen: 22
147.136.172.0/23 maxlen: 23
147.136.172.0/24 maxlen: 24
147.136.173.0/24 maxlen: 24
147.136.174.0/23 maxlen: 23
147.136.174.0/24 maxlen: 24
147.136.175.0/24 maxlen: 24
147.136.176.0/22 maxlen: 22
147.136.176.0/23 maxlen: 23
147.136.176.0/24 maxlen: 24
147.136.177.0/24 maxlen: 24
147.136.178.0/23 maxlen: 23
147.136.178.0/24 maxlen: 24
147.136.179.0/24 maxlen: 24
147.136.180.0/22 maxlen: 22
147.136.180.0/23 maxlen: 23
147.136.180.0/24 maxlen: 24
147.136.181.0/24 maxlen: 24
147.136.182.0/23 maxlen: 23
147.136.182.0/24 maxlen: 24
147.136.183.0/24 maxlen: 24
147.136.184.0/22 maxlen: 22
147.136.184.0/23 maxlen: 23
147.136.184.0/24 maxlen: 24
147.136.185.0/24 maxlen: 24
147.136.186.0/23 maxlen: 23
147.136.186.0/24 maxlen: 24
147.136.187.0/24 maxlen: 24
147.136.188.0/22 maxlen: 22
147.136.188.0/23 maxlen: 23
147.136.188.0/24 maxlen: 24
147.136.189.0/24 maxlen: 24
147.136.190.0/23 maxlen: 23
147.136.190.0/24 maxlen: 24
147.136.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 01:41:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 846 (0x34e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Validity
Not Before: Jun 19 01:57:43 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a44cc7-2ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f3:7c:43:40:ee:20:b9:82:cf:f2:16:e6:1a:
e5:29:94:7f:74:33:81:53:e6:2e:6c:31:bb:c3:da:
e2:9c:0c:cc:4e:f1:ee:7b:0b:8c:f0:e7:3b:cc:94:
bd:eb:14:78:55:04:20:ea:62:1a:f6:8d:b2:6d:59:
4b:1e:24:8c:5f:72:74:42:65:7a:b2:ed:22:4e:3d:
07:04:ed:ca:21:4c:c5:7c:dd:6a:d5:9a:25:34:76:
75:5d:4a:a5:a0:96:e1:e8:e1:07:04:96:7b:1a:47:
1f:b9:f3:27:43:f5:6c:66:5a:a6:66:ff:af:97:59:
2c:1d:d7:8a:9b:98:be:01:5c:11:d1:4a:6a:1b:11:
31:2c:bd:c1:45:07:63:2e:a2:59:e1:6d:88:30:ea:
7a:2f:cb:5e:00:f3:92:94:19:1f:76:6f:21:06:fd:
52:13:71:79:e9:41:0d:47:ef:8e:c2:45:c6:d4:16:
3b:04:5a:1d:e1:b6:46:e3:a4:ca:8d:cb:68:30:94:
e9:bb:3b:3b:23:84:02:93:95:4c:a3:b2:fe:64:d9:
a5:57:ba:12:77:85:2c:a8:80:e1:bb:c7:57:33:4a:
06:16:0f:46:0c:1a:19:62:39:d6:a6:4c:81:4c:d6:
e8:3d:28:36:52:ef:52:32:22:b7:34:8a:28:50:ef:
80:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:71:A7:CC:B6:B4:0B:4C:2F:AB:B5:D8:0B:A4:1C:02:CC:12:E9:27
X509v3 Authority Key Identifier:
keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/9BA94A4A0D8911ED999D4F3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
134.65.64.0/18
143.92.64.0-143.92.101.255
143.92.108.0/23
147.136.128.0/18
Signature Algorithm: sha256WithRSAEncryption
01:6a:f2:6b:6d:1e:8a:de:2d:83:e5:dd:c1:ef:29:ad:92:b7:
19:ee:92:50:f2:1b:c9:7b:c1:3f:0e:cd:11:2a:34:54:19:e2:
87:a8:e3:ed:50:85:9c:fc:60:c8:ab:1b:b0:73:b7:43:87:3e:
3d:02:52:d4:5a:07:e4:29:e4:70:4b:db:39:af:c4:10:61:2f:
44:55:fb:64:20:cf:78:da:10:52:72:5b:ab:d4:95:9e:47:36:
4b:68:dd:6e:f7:03:4c:01:06:25:31:e3:01:4d:a0:33:63:92:
6d:8e:44:83:1f:d6:36:75:d4:d6:87:ab:e5:47:0b:75:4e:3e:
44:10:b2:e4:c7:6f:b8:b7:b3:c5:62:b0:82:a9:3b:b2:55:d9:
e8:98:62:81:5d:18:f7:da:f0:db:1e:c5:a5:3e:01:fd:e2:df:
97:4d:3b:9c:c1:53:59:9f:a2:f7:36:83:11:35:a3:cd:ca:f1:
6a:ca:23:53:df:04:0e:64:7d:a9:9a:46:8a:19:26:69:e4:b6:
dd:e1:f0:15:98:a0:92:07:85:9b:66:d3:88:fc:0a:2c:08:a3:
a3:a6:36:15:69:b6:4a:c2:eb:c8:0f:0b:36:03:52:0d:d2:1b:
22:09:d8:94:7a:ef:1a:39:0e:72:32:e3:a1:4c:e5:9b:76:eb:
6a:60:47:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:38:21 2026 by rpki-client