Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/68D217FAC13F11F19B446DC24B11F970.roa
File: 68D217FAC13F11F19B446DC24B11F970.roa (raw, json)
Hash identifier: BlpUlWSTK1YCBErgzoQ1r4Y5bTUx8NUvclRfgr8y0l0=
Subject key identifier: 74:02:27:7F:59:9B:55:A4:06:C2:A6:07:DD:21:04:26:5B:B7:6F:E9
Certificate issuer: /CN=A9178EB0/serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Certificate serial: 0584
Authority key identifier: E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/68D217FAC13F11F19B446DC24B11F970.roa
Signing time: Mon 02 Nov 2026 20:39:59 +0000
ROA not before: Mon 02 Nov 2026 20:39:59 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 45753
IP address blocks: 52.128.224.0/19 maxlen: 19
52.128.224.0/24 maxlen: 24
52.128.225.0/24 maxlen: 24
52.128.226.0/24 maxlen: 24
52.128.227.0/24 maxlen: 24
52.128.228.0/24 maxlen: 24
52.128.229.0/24 maxlen: 24
52.128.230.0/24 maxlen: 24
52.128.231.0/24 maxlen: 24
52.128.232.0/24 maxlen: 24
52.128.233.0/24 maxlen: 24
52.128.234.0/24 maxlen: 24
52.128.235.0/24 maxlen: 24
52.128.236.0/24 maxlen: 24
52.128.237.0/24 maxlen: 24
52.128.238.0/24 maxlen: 24
52.128.239.0/24 maxlen: 24
52.128.240.0/24 maxlen: 24
52.128.241.0/24 maxlen: 24
52.128.242.0/24 maxlen: 24
52.128.243.0/24 maxlen: 24
52.128.244.0/24 maxlen: 24
52.128.245.0/24 maxlen: 24
52.128.246.0/24 maxlen: 24
52.128.247.0/24 maxlen: 24
52.128.248.0/24 maxlen: 24
52.128.249.0/24 maxlen: 24
52.128.250.0/24 maxlen: 24
52.128.251.0/24 maxlen: 24
52.128.252.0/24 maxlen: 24
52.128.253.0/24 maxlen: 24
52.128.254.0/24 maxlen: 24
52.128.255.0/24 maxlen: 24
148.66.0.0/19 maxlen: 19
148.66.0.0/24 maxlen: 24
148.66.1.0/24 maxlen: 24
148.66.2.0/24 maxlen: 24
148.66.3.0/24 maxlen: 24
148.66.4.0/24 maxlen: 24
148.66.5.0/24 maxlen: 24
148.66.6.0/24 maxlen: 24
148.66.7.0/24 maxlen: 24
148.66.8.0/24 maxlen: 24
148.66.9.0/24 maxlen: 24
148.66.10.0/24 maxlen: 24
148.66.11.0/24 maxlen: 24
148.66.12.0/24 maxlen: 24
148.66.13.0/24 maxlen: 24
148.66.14.0/24 maxlen: 24
148.66.15.0/24 maxlen: 24
148.66.16.0/24 maxlen: 24
148.66.17.0/24 maxlen: 24
148.66.18.0/24 maxlen: 24
148.66.19.0/24 maxlen: 24
148.66.20.0/24 maxlen: 24
148.66.21.0/24 maxlen: 24
148.66.22.0/24 maxlen: 24
148.66.23.0/24 maxlen: 24
148.66.24.0/24 maxlen: 24
148.66.25.0/24 maxlen: 24
148.66.26.0/24 maxlen: 24
148.66.27.0/24 maxlen: 24
148.66.28.0/24 maxlen: 24
148.66.29.0/24 maxlen: 24
148.66.30.0/24 maxlen: 24
148.66.31.0/24 maxlen: 24
216.118.224.0/19 maxlen: 19
216.118.224.0/20 maxlen: 20
216.118.224.0/21 maxlen: 21
216.118.224.0/22 maxlen: 22
216.118.224.0/23 maxlen: 24
216.118.226.0/24 maxlen: 24
216.118.227.0/24 maxlen: 24
216.118.228.0/24 maxlen: 24
216.118.229.0/24 maxlen: 24
216.118.230.0/24 maxlen: 24
216.118.231.0/24 maxlen: 24
216.118.232.0/24 maxlen: 24
216.118.233.0/24 maxlen: 24
216.118.234.0/24 maxlen: 24
216.118.235.0/24 maxlen: 24
216.118.236.0/24 maxlen: 24
216.118.237.0/24 maxlen: 24
216.118.238.0/24 maxlen: 24
216.118.239.0/24 maxlen: 24
216.118.240.0/24 maxlen: 24
216.118.241.0/24 maxlen: 24
216.118.242.0/24 maxlen: 24
216.118.243.0/24 maxlen: 24
216.118.244.0/24 maxlen: 24
216.118.245.0/24 maxlen: 24
216.118.246.0/24 maxlen: 24
216.118.247.0/24 maxlen: 24
216.118.248.0/24 maxlen: 24
216.118.249.0/24 maxlen: 24
216.118.250.0/24 maxlen: 24
216.118.251.0/24 maxlen: 24
216.118.252.0/24 maxlen: 24
216.118.253.0/24 maxlen: 24
216.118.254.0/24 maxlen: 24
216.118.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 20:05:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1412 (0x584)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9178EB0, serialNumber=E1B910B9C7310C9F65594FC6E8989FC953B36E51
Validity
Not Before: Nov 2 20:39:59 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ae8f51f-26f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cb:9a:77:67:bb:26:ee:9a:16:a7:d7:84:ca:
4c:d5:ce:52:c9:8c:47:55:5d:4e:28:f3:f3:dc:6c:
66:2f:85:b4:c7:a9:f2:05:5d:57:21:cf:8a:66:a1:
1e:8f:74:b6:fe:07:3a:47:bd:22:86:f4:04:40:8b:
f0:d0:82:e6:bb:91:3b:49:67:58:d7:b7:9b:58:d7:
9c:f0:62:9f:4b:2f:ae:8c:53:f4:9d:a1:42:ab:32:
12:34:05:37:75:cd:dd:45:af:d2:7b:18:a7:85:18:
40:87:7b:24:e5:e5:1d:28:9f:a3:13:16:11:2c:1e:
97:34:24:04:7a:79:07:2e:5a:5b:68:16:d8:b7:32:
89:1d:43:35:5a:f9:57:11:70:0b:e7:a9:ac:17:01:
ca:5d:14:8d:4f:b3:e6:fe:3f:94:f7:db:b6:9d:db:
c1:12:18:25:75:80:03:d7:f5:b5:4b:e9:3e:9e:52:
08:a7:6c:51:7b:5f:0e:ed:5a:b5:9b:19:cd:31:6b:
fb:d0:42:fa:a0:d9:26:da:b6:ce:e6:52:17:a5:4a:
22:c4:93:da:d6:94:20:2e:d5:31:40:d8:ef:7d:a3:
92:b5:df:54:f3:e6:9e:be:df:50:7c:f1:b4:1e:e7:
da:27:ea:6d:9c:29:aa:aa:9f:fb:06:03:4e:14:91:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:02:27:7F:59:9B:55:A4:06:C2:A6:07:DD:21:04:26:5B:B7:6F:E9
X509v3 Authority Key Identifier:
keyid:E1:B9:10:B9:C7:31:0C:9F:65:59:4F:C6:E8:98:9F:C9:53:B3:6E:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/4bkQuccxDJ9lWU_G6JifyVOzblE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4bkQuccxDJ9lWU_G6JifyVOzblE.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9178EB0/E32C87CC50D511ECB3F8D529C4F9AE02/68D217FAC13F11F19B446DC24B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
52.128.224.0/19
148.66.0.0/19
216.118.224.0/19
Signature Algorithm: sha256WithRSAEncryption
27:cc:c6:13:b8:17:ea:b7:99:fc:bc:a4:e2:ec:24:5d:31:cb:
19:b2:e8:4c:75:cf:0d:0f:b0:55:8b:7d:57:4a:48:6f:7e:e3:
4f:17:88:92:2c:5d:d6:a1:5f:67:5f:30:58:a2:54:71:29:24:
13:1e:01:75:3b:7d:6b:9d:e9:ac:3d:70:2e:6d:74:1c:9c:a2:
49:e9:1c:b2:9b:d0:f9:c7:a0:14:fc:69:d7:a2:58:55:ac:a3:
47:6e:4c:01:9f:73:dc:e9:a0:e0:1c:b3:20:e5:8e:2a:de:11:
44:62:75:ee:0a:a1:3e:1d:0c:f5:d6:f9:5f:a9:25:94:cc:2a:
5f:b4:97:73:16:f7:64:da:e0:a6:01:38:ee:46:32:c2:af:ae:
a0:d2:08:55:86:a1:d8:09:eb:da:5b:e5:29:56:fb:3e:0d:e3:
6c:3f:f4:4e:2a:7c:f2:49:6b:03:37:a7:bc:06:0d:85:c9:8b:
fe:b9:e6:1e:5f:6c:3d:72:ec:59:e1:29:05:10:04:7f:5f:81:
99:93:4f:2e:d5:84:31:ff:5d:e0:47:e0:74:07:31:6e:78:3f:
fd:38:87:7d:cc:8d:16:bb:5d:c6:c0:4a:2b:15:ac:a7:63:5f:
25:0a:76:04:8c:4c:e6:ac:4b:90:88:bc:f9:32:28:00:16:f4:
92:10:27:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:43:53 2026 by rpki-client