Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/91E868D4902B11EF87435A54C4F9AE02.roa
File: 91E868D4902B11EF87435A54C4F9AE02.roa (raw, json)
Hash identifier: +C2epm2cuJ3GR0nAkShPOcsEF6oYoWgKxDRuq2dxIhE=
Subject key identifier: B1:ED:75:0B:8C:D8:9D:94:DE:39:30:67:A6:30:84:65:02:4E:91:5C
Certificate issuer: /CN=A917E678/serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Certificate serial: 0734
Authority key identifier: E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/91E868D4902B11EF87435A54C4F9AE02.roa
Signing time: Sun 01 Mar 2026 12:15:31 +0000
ROA not before: Tue 08 Jul 2025 17:26:07 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 136907
IP address blocks: 189.1.192.0/18 maxlen: 18
189.1.192.0/20 maxlen: 20
189.1.192.0/24 maxlen: 24
189.1.193.0/24 maxlen: 24
189.1.194.0/24 maxlen: 24
189.1.195.0/24 maxlen: 24
189.1.196.0/24 maxlen: 24
189.1.197.0/24 maxlen: 24
189.1.198.0/24 maxlen: 24
189.1.199.0/24 maxlen: 24
189.1.200.0/24 maxlen: 24
189.1.201.0/24 maxlen: 24
189.1.202.0/24 maxlen: 24
189.1.203.0/24 maxlen: 24
189.1.204.0/24 maxlen: 24
189.1.205.0/24 maxlen: 24
189.1.206.0/24 maxlen: 24
189.1.207.0/24 maxlen: 24
189.1.208.0/20 maxlen: 20
189.1.208.0/24 maxlen: 24
189.1.209.0/24 maxlen: 24
189.1.210.0/24 maxlen: 24
189.1.211.0/24 maxlen: 24
189.1.212.0/24 maxlen: 24
189.1.213.0/24 maxlen: 24
189.1.214.0/24 maxlen: 24
189.1.215.0/24 maxlen: 24
189.1.216.0/24 maxlen: 24
189.1.217.0/24 maxlen: 24
189.1.218.0/24 maxlen: 24
189.1.219.0/24 maxlen: 24
189.1.220.0/24 maxlen: 24
189.1.221.0/24 maxlen: 24
189.1.222.0/24 maxlen: 24
189.1.223.0/24 maxlen: 24
189.1.224.0/20 maxlen: 20
189.1.224.0/24 maxlen: 24
189.1.225.0/24 maxlen: 24
189.1.226.0/24 maxlen: 24
189.1.227.0/24 maxlen: 24
189.1.228.0/24 maxlen: 24
189.1.229.0/24 maxlen: 24
189.1.230.0/24 maxlen: 24
189.1.231.0/24 maxlen: 24
189.1.232.0/24 maxlen: 24
189.1.233.0/24 maxlen: 24
189.1.234.0/24 maxlen: 24
189.1.235.0/24 maxlen: 24
189.1.236.0/24 maxlen: 24
189.1.237.0/24 maxlen: 24
189.1.238.0/24 maxlen: 24
189.1.239.0/24 maxlen: 24
189.1.240.0/20 maxlen: 20
189.1.240.0/24 maxlen: 24
189.1.241.0/24 maxlen: 24
189.1.242.0/24 maxlen: 24
189.1.243.0/24 maxlen: 24
189.1.244.0/24 maxlen: 24
189.1.245.0/24 maxlen: 24
189.1.246.0/24 maxlen: 24
189.1.247.0/24 maxlen: 24
189.1.248.0/24 maxlen: 24
189.1.249.0/24 maxlen: 24
189.1.250.0/24 maxlen: 24
189.1.251.0/24 maxlen: 24
189.1.252.0/24 maxlen: 24
189.1.253.0/24 maxlen: 24
189.1.254.0/24 maxlen: 24
189.1.255.0/24 maxlen: 24
189.28.96.0/19 maxlen: 19
189.28.96.0/20 maxlen: 20
189.28.96.0/24 maxlen: 24
189.28.97.0/24 maxlen: 24
189.28.98.0/24 maxlen: 24
189.28.99.0/24 maxlen: 24
189.28.100.0/24 maxlen: 24
189.28.101.0/24 maxlen: 24
189.28.102.0/24 maxlen: 24
189.28.103.0/24 maxlen: 24
189.28.104.0/24 maxlen: 24
189.28.105.0/24 maxlen: 24
189.28.106.0/24 maxlen: 24
189.28.107.0/24 maxlen: 24
189.28.108.0/24 maxlen: 24
189.28.109.0/24 maxlen: 24
189.28.110.0/24 maxlen: 24
189.28.111.0/24 maxlen: 24
189.28.112.0/20 maxlen: 20
189.28.112.0/24 maxlen: 24
189.28.113.0/24 maxlen: 24
189.28.114.0/24 maxlen: 24
189.28.115.0/24 maxlen: 24
189.28.116.0/24 maxlen: 24
189.28.117.0/24 maxlen: 24
189.28.118.0/24 maxlen: 24
189.28.119.0/24 maxlen: 24
189.28.120.0/24 maxlen: 24
189.28.121.0/24 maxlen: 24
189.28.122.0/24 maxlen: 24
189.28.123.0/24 maxlen: 24
189.28.124.0/24 maxlen: 24
189.28.125.0/24 maxlen: 24
189.28.126.0/24 maxlen: 24
189.28.127.0/24 maxlen: 24
190.92.192.0/19 maxlen: 24
190.92.224.0/19 maxlen: 19
190.92.224.0/24 maxlen: 24
190.92.225.0/24 maxlen: 24
190.92.226.0/24 maxlen: 24
190.92.227.0/24 maxlen: 24
190.92.228.0/24 maxlen: 24
190.92.229.0/24 maxlen: 24
190.92.230.0/24 maxlen: 24
190.92.231.0/24 maxlen: 24
190.92.232.0/24 maxlen: 24
190.92.233.0/24 maxlen: 24
190.92.234.0/24 maxlen: 24
190.92.235.0/24 maxlen: 24
190.92.236.0/24 maxlen: 24
190.92.237.0/24 maxlen: 24
190.92.238.0/24 maxlen: 24
190.92.239.0/24 maxlen: 24
190.92.240.0/24 maxlen: 24
190.92.241.0/24 maxlen: 24
190.92.242.0/24 maxlen: 24
190.92.243.0/24 maxlen: 24
190.92.244.0/24 maxlen: 24
190.92.245.0/24 maxlen: 24
190.92.246.0/24 maxlen: 24
190.92.247.0/24 maxlen: 24
190.92.248.0/24 maxlen: 24
190.92.249.0/24 maxlen: 24
190.92.250.0/24 maxlen: 24
190.92.251.0/24 maxlen: 24
190.92.252.0/24 maxlen: 24
190.92.253.0/24 maxlen: 24
190.92.254.0/24 maxlen: 24
190.92.255.0/24 maxlen: 24
201.77.32.0/20 maxlen: 20
201.77.32.0/24 maxlen: 24
201.77.33.0/24 maxlen: 24
201.77.34.0/24 maxlen: 24
201.77.35.0/24 maxlen: 24
201.77.36.0/24 maxlen: 24
201.77.37.0/24 maxlen: 24
201.77.38.0/24 maxlen: 24
201.77.39.0/24 maxlen: 24
201.77.40.0/24 maxlen: 24
201.77.41.0/24 maxlen: 24
201.77.42.0/24 maxlen: 24
201.77.43.0/24 maxlen: 24
201.77.44.0/24 maxlen: 24
201.77.45.0/24 maxlen: 24
201.77.46.0/24 maxlen: 24
201.77.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:36:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1844 (0x734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917E678, serialNumber=E243F3BE825569BB16ACB374BC98DABE690B17C1
Validity
Not Before: Jul 8 17:26:07 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a42de2-7321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4a:ae:62:5d:3f:08:56:2d:c8:c4:1f:b7:f8:
45:1c:d1:10:9f:9d:0c:44:32:90:05:56:e0:5f:73:
5e:ab:16:e4:f5:4f:cb:54:87:b2:9c:0c:d6:0c:f9:
fe:c2:4b:54:e0:9b:b6:04:64:46:c3:a7:c3:1a:4d:
8d:74:35:f0:12:27:6f:7a:a7:dd:4c:e8:0c:19:8e:
db:56:1e:99:b7:c5:27:a9:07:95:46:ed:c0:dc:f8:
ca:69:ba:b5:ed:5f:a8:0c:20:3c:fa:ed:68:57:61:
f1:26:12:2c:00:c4:1a:0e:a5:b5:6a:97:ab:69:ec:
a4:ae:92:16:22:70:ed:97:03:ba:10:57:8f:ce:c2:
cd:47:cc:84:12:4c:a5:f2:22:e7:48:67:a4:7b:a8:
3b:40:99:59:db:23:2f:8a:03:62:5c:1d:5e:64:b9:
1b:83:84:86:8e:20:8b:e9:0f:bd:df:51:cf:43:ee:
e7:75:12:1b:83:27:e6:bb:01:43:f3:08:8c:ec:7d:
bf:f5:01:27:bb:8a:e2:b5:91:3f:87:c8:1b:0a:19:
8d:72:87:dd:54:f8:17:aa:38:0e:03:53:2f:67:10:
a6:02:b2:8e:b2:74:e5:70:3f:86:9a:4f:1b:f0:22:
4d:4b:3b:1b:36:32:bb:0b:80:38:82:75:47:f1:db:
a9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:ED:75:0B:8C:D8:9D:94:DE:39:30:67:A6:30:84:65:02:4E:91:5C
X509v3 Authority Key Identifier:
keyid:E2:43:F3:BE:82:55:69:BB:16:AC:B3:74:BC:98:DA:BE:69:0B:17:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/4kPzvoJVabsWrLN0vJjavmkLF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/4kPzvoJVabsWrLN0vJjavmkLF8E.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E678/B897C582A19C11EB92A2DF29C4F9AE02/91E868D4902B11EF87435A54C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
189.1.192.0/18
189.28.96.0/19
190.92.192.0/18
201.77.32.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:8e:5d:ff:25:c0:ea:b2:01:bc:c3:10:2a:2b:39:09:48:b0:
43:2d:73:26:69:27:83:e7:98:8a:a4:e1:28:13:eb:0f:88:2f:
3d:3f:a7:fb:59:16:a4:88:43:e8:59:bb:e7:82:5e:aa:f0:1b:
5b:c8:1b:bd:03:d7:6d:60:39:e2:96:24:c8:42:77:f2:3b:7b:
d0:8b:c0:01:3c:bf:ba:1c:e2:39:a8:8e:f9:ba:4b:b4:7c:e7:
35:75:a0:b4:83:cb:46:8f:61:3f:e0:71:a0:31:41:fa:7a:bf:
2d:91:f7:0d:92:ef:26:c1:62:8e:4a:b7:cd:62:b5:8b:d7:ec:
77:51:76:f2:ca:18:55:cb:d6:08:d1:96:10:ce:91:c1:a1:06:
c9:71:ca:73:df:c9:bf:0a:32:ed:b6:db:60:eb:40:48:0c:82:
0e:a1:d0:25:6b:a7:9a:ec:d2:29:89:8f:3f:03:64:2e:be:15:
e3:90:0b:6d:63:b2:ea:aa:26:1c:90:c9:01:1d:e1:2b:d9:13:
f1:e8:9d:ac:01:fe:c2:08:5a:99:4f:d0:bf:97:e1:5c:ed:53:
7e:a1:b2:f7:1a:5f:b5:13:3e:66:d4:65:cc:53:63:83:06:8d:
13:c8:d9:18:b1:75:27:6d:f6:7b:59:62:92:5c:86:72:8f:20:
19:70:e1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:37 2026 by rpki-client