Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/9BA94A4A0D8911ED999D4F3BC4F9AE02.roa
File: 9BA94A4A0D8911ED999D4F3BC4F9AE02.roa (raw, json)
Hash identifier: qoLfzyIgbaCB5AplHxSdkk1MB5ROzNFuW/OoQUi92vs=
Subject key identifier: 77:35:17:00:9E:6C:72:04:D4:C5:9A:0C:C6:2E:ED:6C:B8:49:C6:07
Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial: 0366
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/9BA94A4A0D8911ED999D4F3BC4F9AE02.roa
Signing time: Fri 10 Apr 2026 08:28:01 +0000
ROA not before: Fri 10 Apr 2026 08:28:01 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 138341
IP address blocks: 134.65.64.0/18 maxlen: 18
134.65.64.0/22 maxlen: 24
134.65.68.0/22 maxlen: 24
134.65.72.0/22 maxlen: 24
134.65.76.0/22 maxlen: 22
134.65.76.0/23 maxlen: 23
134.65.76.0/24 maxlen: 24
134.65.77.0/24 maxlen: 24
134.65.78.0/23 maxlen: 23
134.65.78.0/24 maxlen: 24
134.65.79.0/24 maxlen: 24
134.65.80.0/22 maxlen: 22
134.65.80.0/23 maxlen: 23
134.65.80.0/24 maxlen: 24
134.65.81.0/24 maxlen: 24
134.65.82.0/23 maxlen: 23
134.65.82.0/24 maxlen: 24
134.65.83.0/24 maxlen: 24
134.65.84.0/24 maxlen: 24
143.92.64.0/19 maxlen: 19
143.92.64.0/24 maxlen: 24
143.92.65.0/24 maxlen: 24
143.92.66.0/24 maxlen: 24
143.92.67.0/24 maxlen: 24
143.92.68.0/24 maxlen: 24
143.92.69.0/24 maxlen: 24
143.92.70.0/24 maxlen: 24
143.92.72.0/24 maxlen: 24
143.92.73.0/24 maxlen: 24
143.92.74.0/23 maxlen: 23
143.92.74.0/24 maxlen: 24
143.92.75.0/24 maxlen: 24
143.92.76.0/24 maxlen: 24
143.92.77.0/24 maxlen: 24
143.92.78.0/24 maxlen: 24
143.92.79.0/24 maxlen: 24
143.92.80.0/24 maxlen: 24
143.92.81.0/24 maxlen: 24
143.92.82.0/23 maxlen: 23
143.92.82.0/24 maxlen: 24
143.92.83.0/24 maxlen: 24
143.92.84.0/23 maxlen: 23
143.92.84.0/24 maxlen: 24
143.92.85.0/24 maxlen: 24
143.92.86.0/24 maxlen: 24
143.92.87.0/24 maxlen: 24
143.92.88.0/24 maxlen: 24
143.92.89.0/24 maxlen: 24
143.92.90.0/24 maxlen: 24
143.92.91.0/24 maxlen: 24
143.92.92.0/23 maxlen: 23
143.92.92.0/24 maxlen: 24
143.92.93.0/24 maxlen: 24
143.92.94.0/23 maxlen: 23
143.92.94.0/24 maxlen: 24
143.92.95.0/24 maxlen: 24
143.92.96.0/22 maxlen: 22
143.92.97.0/24 maxlen: 24
143.92.98.0/24 maxlen: 24
143.92.99.0/24 maxlen: 24
143.92.100.0/23 maxlen: 23
143.92.100.0/24 maxlen: 24
143.92.101.0/24 maxlen: 24
143.92.108.0/23 maxlen: 23
143.92.109.0/24 maxlen: 24
147.136.128.0/22 maxlen: 22
147.136.128.0/23 maxlen: 23
147.136.128.0/24 maxlen: 24
147.136.129.0/24 maxlen: 24
147.136.130.0/23 maxlen: 23
147.136.130.0/24 maxlen: 24
147.136.131.0/24 maxlen: 24
147.136.132.0/22 maxlen: 22
147.136.132.0/23 maxlen: 23
147.136.132.0/24 maxlen: 24
147.136.133.0/24 maxlen: 24
147.136.134.0/23 maxlen: 23
147.136.134.0/24 maxlen: 24
147.136.135.0/24 maxlen: 24
147.136.136.0/22 maxlen: 22
147.136.136.0/23 maxlen: 23
147.136.136.0/24 maxlen: 24
147.136.137.0/24 maxlen: 24
147.136.138.0/23 maxlen: 23
147.136.138.0/24 maxlen: 24
147.136.139.0/24 maxlen: 24
147.136.140.0/22 maxlen: 22
147.136.140.0/23 maxlen: 23
147.136.140.0/24 maxlen: 24
147.136.141.0/24 maxlen: 24
147.136.142.0/23 maxlen: 23
147.136.142.0/24 maxlen: 24
147.136.143.0/24 maxlen: 24
147.136.144.0/22 maxlen: 22
147.136.144.0/23 maxlen: 23
147.136.144.0/24 maxlen: 24
147.136.145.0/24 maxlen: 24
147.136.146.0/23 maxlen: 23
147.136.146.0/24 maxlen: 24
147.136.147.0/24 maxlen: 24
147.136.148.0/22 maxlen: 22
147.136.148.0/23 maxlen: 23
147.136.148.0/24 maxlen: 24
147.136.149.0/24 maxlen: 24
147.136.150.0/23 maxlen: 23
147.136.150.0/24 maxlen: 24
147.136.151.0/24 maxlen: 24
147.136.152.0/22 maxlen: 22
147.136.152.0/23 maxlen: 23
147.136.152.0/24 maxlen: 24
147.136.153.0/24 maxlen: 24
147.136.154.0/23 maxlen: 23
147.136.154.0/24 maxlen: 24
147.136.155.0/24 maxlen: 24
147.136.156.0/22 maxlen: 22
147.136.156.0/23 maxlen: 23
147.136.156.0/24 maxlen: 24
147.136.157.0/24 maxlen: 24
147.136.158.0/23 maxlen: 23
147.136.158.0/24 maxlen: 24
147.136.159.0/24 maxlen: 24
147.136.160.0/22 maxlen: 22
147.136.160.0/23 maxlen: 23
147.136.160.0/24 maxlen: 24
147.136.161.0/24 maxlen: 24
147.136.162.0/23 maxlen: 23
147.136.162.0/24 maxlen: 24
147.136.163.0/24 maxlen: 24
147.136.164.0/22 maxlen: 22
147.136.164.0/23 maxlen: 23
147.136.164.0/24 maxlen: 24
147.136.165.0/24 maxlen: 24
147.136.166.0/23 maxlen: 23
147.136.166.0/24 maxlen: 24
147.136.167.0/24 maxlen: 24
147.136.168.0/22 maxlen: 22
147.136.168.0/23 maxlen: 23
147.136.168.0/24 maxlen: 24
147.136.169.0/24 maxlen: 24
147.136.170.0/23 maxlen: 23
147.136.170.0/24 maxlen: 24
147.136.171.0/24 maxlen: 24
147.136.172.0/22 maxlen: 22
147.136.172.0/23 maxlen: 23
147.136.172.0/24 maxlen: 24
147.136.173.0/24 maxlen: 24
147.136.174.0/23 maxlen: 23
147.136.174.0/24 maxlen: 24
147.136.175.0/24 maxlen: 24
147.136.176.0/22 maxlen: 22
147.136.176.0/23 maxlen: 23
147.136.176.0/24 maxlen: 24
147.136.177.0/24 maxlen: 24
147.136.178.0/23 maxlen: 23
147.136.178.0/24 maxlen: 24
147.136.179.0/24 maxlen: 24
147.136.180.0/22 maxlen: 22
147.136.180.0/23 maxlen: 23
147.136.180.0/24 maxlen: 24
147.136.181.0/24 maxlen: 24
147.136.182.0/23 maxlen: 23
147.136.182.0/24 maxlen: 24
147.136.183.0/24 maxlen: 24
147.136.184.0/22 maxlen: 22
147.136.184.0/23 maxlen: 23
147.136.184.0/24 maxlen: 24
147.136.185.0/24 maxlen: 24
147.136.186.0/23 maxlen: 23
147.136.186.0/24 maxlen: 24
147.136.187.0/24 maxlen: 24
147.136.188.0/22 maxlen: 22
147.136.188.0/23 maxlen: 23
147.136.188.0/24 maxlen: 24
147.136.189.0/24 maxlen: 24
147.136.190.0/23 maxlen: 23
147.136.190.0/24 maxlen: 24
147.136.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Apr 2026 00:59:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 870 (0x366)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Validity
Not Before: Apr 10 08:28:01 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69d8b491-5c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:b1:80:ee:86:08:14:d2:0b:c3:0c:93:c2:
61:06:3b:ad:73:37:a7:49:ee:d9:8a:b9:5c:b8:a2:
aa:27:2d:67:f8:39:5b:e1:8e:99:db:d4:1e:43:da:
cd:b8:af:a5:ae:c3:19:ad:08:d0:21:5a:3b:f8:22:
ee:3e:1d:f0:dc:57:f0:25:db:94:0b:9c:4a:d4:e7:
ca:81:fb:80:11:5f:c8:4e:3b:61:e8:e2:a6:1e:ca:
09:a8:0c:de:95:bd:2d:4d:89:89:3a:7d:bb:86:77:
b3:dd:fe:39:04:c7:e8:2d:1b:24:61:e1:b6:d2:05:
cf:e7:86:d9:e5:e6:a6:4d:fc:89:14:58:10:84:90:
4b:b1:9f:5b:50:f1:c2:5b:d3:a1:ab:cc:71:25:9b:
07:69:b8:8d:3f:a0:01:bf:2c:bf:b4:bb:98:0a:92:
ec:fd:b2:36:a1:7e:f0:7f:6e:c4:d7:ca:8d:6d:ec:
ff:92:26:27:ed:5e:ba:ef:67:ba:20:21:75:ed:89:
2e:7a:86:58:4f:a9:44:32:a3:a0:b2:1f:4d:15:7d:
4a:b9:46:fc:fc:a5:2a:2b:ea:9e:1a:9d:28:fb:60:
9f:24:60:b7:e5:dc:cd:2b:dd:34:af:78:d5:95:b0:
fe:59:45:23:7b:32:bf:e4:ea:5a:33:2b:3d:94:50:
3b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:35:17:00:9E:6C:72:04:D4:C5:9A:0C:C6:2E:ED:6C:B8:49:C6:07
X509v3 Authority Key Identifier:
keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/9BA94A4A0D8911ED999D4F3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
134.65.64.0/18
143.92.64.0-143.92.101.255
143.92.108.0/23
147.136.128.0/18
Signature Algorithm: sha256WithRSAEncryption
26:05:d4:64:a9:0f:a3:f5:d1:9b:ad:80:a8:ef:08:59:f3:b8:
69:93:fe:a6:d7:1b:03:99:5c:cd:41:1e:da:1f:7c:f8:72:fe:
cf:d5:b0:02:7c:d7:c4:ff:00:8b:78:f8:13:28:f9:35:7f:61:
e7:10:d3:45:ac:c9:09:2c:5d:2b:c1:aa:79:75:c1:8d:a9:36:
58:3b:cf:9c:f3:ee:76:06:10:5d:03:ad:54:44:92:90:18:3a:
50:f5:62:36:7c:17:85:c6:7c:a6:31:21:1d:5b:c6:d4:ee:f9:
cc:4a:64:cc:f5:0d:b8:39:27:48:e9:b0:c2:27:ad:a2:ee:ea:
ea:10:69:7b:b2:22:4d:b5:4c:89:7d:34:ee:4e:a2:ab:17:bf:
2b:e3:c7:e5:3c:a8:53:e0:ef:cf:2b:58:de:aa:66:0d:d9:90:
55:d5:45:16:6e:5c:70:e7:07:ff:a1:d3:74:db:54:b0:78:19:
e4:ab:18:ae:77:96:57:cf:9e:df:ec:44:f2:47:41:88:d4:6b:
ce:05:db:a0:a0:73:1d:17:81:39:50:8d:76:92:ef:34:5e:26:
91:2e:67:aa:cc:a0:78:47:cc:bc:88:47:2c:a9:11:6b:e9:3e:
fd:3f:3e:5f:19:af:cf:17:9d:83:8e:6f:94:dd:4e:3c:cf:f5:
00:b7:ed:6b
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgICA2YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw
MjM4MzZCQTAwHhcNMjYwNDEwMDgyODAxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWQ4YjQ5MS01YzAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtoOxgO6GCBTSC8MMk8JhBjutczenSe7ZirlcuKKqJy1n+Dlb4Y6Z29QeQ9rN
uK+lrsMZrQjQIVo7+CLuPh3w3FfwJduUC5xK1OfKgfuAEV/ITjth6OKmHsoJqAze
lb0tTYmJOn27hnez3f45BMfoLRskYeG20gXP54bZ5eamTfyJFFgQhJBLsZ9bUPHC
W9Ohq8xxJZsHabiNP6ABvyy/tLuYCpLs/bI2oX7wf27E18qNbez/kiYn7V6672e6
ICF17YkueoZYT6lEMqOgsh9NFX1KuUb8/KUqK+qeGp0o+2CfJGC35dzNK900r3jV
lbD+WUUjezK/5OpaMys9lFA7rwIDAQABo4ICejCCAnYwHQYDVR0OBBYEFHc1FwCe
bHIE1MWaDMYu7Wy4ScYHMB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4
REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjM5OTgvMzBDQzA4NEEwOERDMTFFREJFREU2MTJCQzRGOUFFMDIvOUJBOTRBNEEw
RDg5MTFFRDk5OUQ0RjNCQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm
BAIAATAgAwQGhkFAMAwDBAaPXEADBAGPXGQDBAGPXGwDBAaTiIAwDQYJKoZIhvcN
AQELBQADggEBACYF1GSpD6P10ZutgKjvCFnzuGmT/qbXGwOZXM1BHtoffPhy/s/V
sAJ818T/AIt4+BMo+TV/YecQ00WsyQksXSvBqnl1wY2pNlg7z5zz7nYGEF0DrVRE
kpAYOlD1YjZ8F4XGfKYxIR1bxtTu+cxKZMz1Dbg5J0jpsMInraLu6uoQaXuyIk21
TIl9NO5OoqsXvyvjx+U8qFPg788rWN6qZg3ZkFXVRRZuXHDnB/+h03TbVLB4GeSr
GK53llfPnt/sRPJHQYjUa84F26Cgcx0XgTlQjXaS7zReJpEuZ6rMoHhHzLyIRyyp
EWvpPv0/Pl8Zr88XnYOOb5TdTjzP9QC37Ws=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:10 2026 by rpki-client