Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F4FCC41E648311EC88370386C4F9AE02.roa
File: F4FCC41E648311EC88370386C4F9AE02.roa (raw, json)
Hash identifier: 2wQvvhttQQFvtvmxnPq6NXZn3bUMgE5kswhBwNt4I+c=
Subject key identifier: 45:45:D3:90:8E:E3:83:9B:C1:33:21:89:0F:09:D6:B4:6D:BC:59:30
Certificate issuer: /CN=A9182502/serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Certificate serial: 0B4A
Authority key identifier: 8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F4FCC41E648311EC88370386C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:07:18 +0000
ROA not before: Tue 12 Aug 2025 20:31:16 +0000
ROA not after: Sat 31 Oct 2026 00:00:00 +0000
asID: 149175
IP address blocks: 39.109.67.0/24 maxlen: 24
39.109.68.0/24 maxlen: 24
39.109.69.0/24 maxlen: 24
39.109.70.0/24 maxlen: 24
39.109.71.0/24 maxlen: 24
39.109.72.0/24 maxlen: 24
39.109.73.0/24 maxlen: 24
39.109.74.0/24 maxlen: 24
39.109.75.0/24 maxlen: 24
39.109.76.0/24 maxlen: 24
39.109.78.0/24 maxlen: 24
39.109.79.0/24 maxlen: 24
39.109.80.0/24 maxlen: 24
39.109.82.0/24 maxlen: 24
39.109.84.0/24 maxlen: 24
39.109.85.0/24 maxlen: 24
39.109.88.0/24 maxlen: 24
39.109.89.0/24 maxlen: 24
103.82.216.0/24 maxlen: 24
103.82.217.0/24 maxlen: 24
103.82.218.0/24 maxlen: 24
103.82.219.0/24 maxlen: 24
103.98.14.0/24 maxlen: 24
103.98.15.0/24 maxlen: 24
103.119.132.0/24 maxlen: 24
103.119.133.0/24 maxlen: 24
2403:e840::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:37:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2890 (0xb4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9182502, serialNumber=8C3CCB4FFB89189C6EF5B34DFDAABE1806A5218A
Validity
Not Before: Aug 12 20:31:16 2025 GMT
Not After : Oct 31 00:00:00 2026 GMT
Subject: CN=69a48056-4cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:c1:f1:0d:e8:af:e4:61:66:ac:44:e1:07:
83:fb:e3:a2:87:62:cc:de:31:84:e4:53:69:94:83:
f6:f3:2c:0f:35:ce:4f:50:72:5e:0d:4c:a3:f6:15:
e7:12:bf:0f:c9:d6:e7:e5:d5:51:d2:a8:62:42:fd:
70:19:06:18:a0:f4:b7:fd:a2:f9:8d:5b:80:c7:cb:
8d:6b:37:51:64:d2:4f:40:2f:d1:bf:af:99:e2:a1:
4e:3d:72:78:8e:6f:61:af:7d:16:7e:e1:1c:f4:43:
b9:82:27:16:c3:7c:2b:d7:0e:2b:c0:49:cf:fe:e3:
8e:8f:81:64:9a:61:a4:84:34:5a:38:bb:d3:b7:8b:
88:0d:c3:03:23:94:b4:72:21:8d:36:52:17:b3:4b:
e9:1f:f6:86:70:7c:c0:5f:35:d2:df:da:38:e3:e9:
d7:d0:c4:a0:19:20:59:ec:53:03:33:37:4e:5b:1c:
0d:10:19:9d:c7:f1:97:63:58:b7:23:7c:5c:f7:45:
57:05:b0:e5:43:be:f5:a8:2f:45:2e:a3:ba:d4:e6:
4b:b6:ab:8c:36:9f:2b:05:60:fd:38:d0:22:6b:02:
c2:6a:8d:f4:22:a7:69:d6:b2:1f:23:ba:c6:b7:f0:
b2:42:06:5a:d4:5c:4f:6f:78:74:fa:c9:e1:96:ba:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:45:D3:90:8E:E3:83:9B:C1:33:21:89:0F:09:D6:B4:6D:BC:59:30
X509v3 Authority Key Identifier:
keyid:8C:3C:CB:4F:FB:89:18:9C:6E:F5:B3:4D:FD:AA:BE:18:06:A5:21:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/jDzLT_uJGJxu9bNN_aq-GAalIYo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jDzLT_uJGJxu9bNN_aq-GAalIYo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182502/DA16C63A73CC11EAA3995326C4F9AE02/F4FCC41E648311EC88370386C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
39.109.67.0-39.109.76.255
39.109.78.0-39.109.80.255
39.109.82.0/24
39.109.84.0/23
39.109.88.0/23
103.82.216.0/22
103.98.14.0/23
103.119.132.0/23
IPv6:
2403:e840::/33
Signature Algorithm: sha256WithRSAEncryption
6b:c5:2b:f1:d0:0e:d1:18:dd:f8:44:32:8b:08:30:89:99:67:
a3:e8:6f:f4:03:29:4e:98:9b:55:6f:22:91:5d:f3:42:9e:76:
b4:b1:b7:6c:67:e8:aa:80:a6:cc:71:45:56:9f:94:d0:97:f6:
f3:2e:84:68:05:1a:e2:d7:d0:b1:32:b6:b9:a0:e6:11:8b:85:
16:03:09:4c:2b:c2:af:13:c0:c5:03:d6:f5:f7:55:cf:4a:fe:
d6:7e:3f:b9:30:79:6b:51:14:62:1d:40:48:ee:fc:76:bb:bf:
1e:6c:68:2f:ff:2c:d8:0a:3f:cf:d6:14:57:59:a9:8e:fd:af:
1a:ee:66:a2:f7:67:42:50:c6:26:d7:1f:be:f3:1f:6a:2c:ca:
f7:62:16:f5:d2:4a:5d:e4:75:dd:b3:69:d3:30:1f:2f:41:f3:
e4:76:09:d2:35:ed:e7:11:cd:91:92:cc:0b:4e:fb:a6:f3:00:
5b:97:21:4f:31:0e:b7:66:9a:7e:43:16:9b:bd:3d:54:05:b9:
6f:8b:5c:93:7d:e2:86:1f:ab:6f:48:a7:a4:98:cc:9d:69:89:
8f:9f:4d:71:9e:3e:8b:a9:ed:08:d7:b4:c8:00:a1:bc:82:c6:
ef:9c:bb:db:66:65:75:44:c7:48:84:1b:32:89:e5:e6:b1:52:
d9:bc:0e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:38 2026 by rpki-client