Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/26E184C2B56D11F0939EAE46C4F9AE02.roa
File: 26E184C2B56D11F0939EAE46C4F9AE02.roa (raw, json)
Hash identifier: fJzWMt/lGCbQqk4mF3i/8P1wkDCnq471kJQMBy/Sczg=
Subject key identifier: 8F:05:FE:0F:51:5D:05:40:01:30:42:E2:95:37:67:63:6E:83:79:DB
Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial: 0821
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/26E184C2B56D11F0939EAE46C4F9AE02.roa
Signing time: Thu 30 Oct 2025 08:50:19 +0000
ROA not before: Thu 30 Oct 2025 08:50:19 +0000
ROA not after: Thu 28 May 2026 00:00:00 +0000
asID: 135377
IP address blocks: 45.249.244.0/24 maxlen: 24
45.249.245.0/24 maxlen: 24
45.249.246.0/24 maxlen: 24
45.249.247.0/24 maxlen: 24
101.36.96.0/24 maxlen: 24
101.36.97.0/24 maxlen: 24
101.36.98.0/24 maxlen: 24
101.36.99.0/24 maxlen: 24
101.36.100.0/24 maxlen: 24
101.36.101.0/24 maxlen: 24
101.36.102.0/24 maxlen: 24
101.36.103.0/24 maxlen: 24
101.36.104.0/24 maxlen: 24
101.36.105.0/24 maxlen: 24
101.36.106.0/24 maxlen: 24
101.36.107.0/24 maxlen: 24
101.36.108.0/24 maxlen: 24
101.36.109.0/24 maxlen: 24
101.36.110.0/24 maxlen: 24
101.36.111.0/24 maxlen: 24
101.36.112.0/24 maxlen: 24
101.36.113.0/24 maxlen: 24
101.36.114.0/24 maxlen: 24
101.36.115.0/24 maxlen: 24
101.36.116.0/24 maxlen: 24
101.36.117.0/24 maxlen: 24
101.36.118.0/24 maxlen: 24
101.36.119.0/24 maxlen: 24
101.36.120.0/24 maxlen: 24
101.36.121.0/24 maxlen: 24
101.36.122.0/24 maxlen: 24
101.36.123.0/24 maxlen: 24
101.36.124.0/24 maxlen: 24
101.36.125.0/24 maxlen: 24
101.36.126.0/24 maxlen: 24
101.36.127.0/24 maxlen: 24
103.149.26.0/24 maxlen: 24
103.149.27.0/24 maxlen: 24
103.218.240.0/24 maxlen: 24
103.218.241.0/24 maxlen: 24
103.218.242.0/24 maxlen: 24
103.218.243.0/24 maxlen: 24
103.234.60.0/24 maxlen: 24
103.234.61.0/24 maxlen: 24
103.234.62.0/24 maxlen: 24
103.234.63.0/24 maxlen: 24
118.26.36.0/24 maxlen: 24
118.26.37.0/24 maxlen: 24
118.26.38.0/24 maxlen: 24
118.26.39.0/24 maxlen: 24
118.26.104.0/24 maxlen: 24
118.26.105.0/24 maxlen: 24
118.26.106.0/24 maxlen: 24
118.26.107.0/24 maxlen: 24
118.26.108.0/24 maxlen: 24
118.26.109.0/24 maxlen: 24
118.26.110.0/24 maxlen: 24
118.26.111.0/24 maxlen: 24
118.193.32.0/24 maxlen: 24
118.193.33.0/24 maxlen: 24
118.193.34.0/24 maxlen: 24
118.193.35.0/24 maxlen: 24
118.193.36.0/24 maxlen: 24
118.193.37.0/24 maxlen: 24
118.193.38.0/24 maxlen: 24
118.193.39.0/24 maxlen: 24
118.193.40.0/24 maxlen: 24
118.193.41.0/24 maxlen: 24
118.193.42.0/24 maxlen: 24
118.193.43.0/24 maxlen: 24
118.193.44.0/24 maxlen: 24
118.193.45.0/24 maxlen: 24
118.193.46.0/24 maxlen: 24
118.193.47.0/24 maxlen: 24
118.193.56.0/24 maxlen: 24
118.193.57.0/24 maxlen: 24
118.193.58.0/24 maxlen: 24
118.193.59.0/24 maxlen: 24
118.193.60.0/24 maxlen: 24
118.193.61.0/24 maxlen: 24
118.193.62.0/24 maxlen: 24
118.193.63.0/24 maxlen: 24
118.193.64.0/24 maxlen: 24
118.193.65.0/24 maxlen: 24
118.193.66.0/24 maxlen: 24
118.193.67.0/24 maxlen: 24
118.193.68.0/24 maxlen: 24
118.193.69.0/24 maxlen: 24
118.193.70.0/24 maxlen: 24
118.193.71.0/24 maxlen: 24
118.193.72.0/24 maxlen: 24
118.193.73.0/24 maxlen: 24
118.193.74.0/24 maxlen: 24
118.193.75.0/24 maxlen: 24
118.193.76.0/24 maxlen: 24
118.193.77.0/24 maxlen: 24
118.193.78.0/24 maxlen: 24
118.193.79.0/24 maxlen: 24
118.194.228.0/24 maxlen: 24
118.194.229.0/24 maxlen: 24
118.194.230.0/24 maxlen: 24
118.194.231.0/24 maxlen: 24
118.194.232.0/24 maxlen: 24
118.194.233.0/24 maxlen: 24
118.194.234.0/24 maxlen: 24
118.194.235.0/24 maxlen: 24
118.194.236.0/24 maxlen: 24
118.194.237.0/24 maxlen: 24
118.194.238.0/24 maxlen: 24
118.194.239.0/24 maxlen: 24
118.194.248.0/24 maxlen: 24
118.194.249.0/24 maxlen: 24
118.194.250.0/24 maxlen: 24
118.194.251.0/24 maxlen: 24
118.194.252.0/24 maxlen: 24
118.194.253.0/24 maxlen: 24
118.194.254.0/24 maxlen: 24
118.194.255.0/24 maxlen: 24
123.58.192.0/24 maxlen: 24
123.58.193.0/24 maxlen: 24
123.58.194.0/24 maxlen: 24
123.58.195.0/24 maxlen: 24
123.58.196.0/24 maxlen: 24
123.58.197.0/24 maxlen: 24
123.58.198.0/24 maxlen: 24
123.58.199.0/24 maxlen: 24
123.58.200.0/24 maxlen: 24
123.58.201.0/24 maxlen: 24
123.58.202.0/24 maxlen: 24
123.58.203.0/24 maxlen: 24
123.58.204.0/24 maxlen: 24
123.58.205.0/24 maxlen: 24
123.58.206.0/24 maxlen: 24
123.58.207.0/24 maxlen: 24
123.58.208.0/24 maxlen: 24
123.58.209.0/24 maxlen: 24
123.58.210.0/24 maxlen: 24
123.58.211.0/24 maxlen: 24
123.58.212.0/24 maxlen: 24
123.58.213.0/24 maxlen: 24
123.58.214.0/24 maxlen: 24
123.58.215.0/24 maxlen: 24
123.58.216.0/24 maxlen: 24
123.58.217.0/24 maxlen: 24
123.58.218.0/24 maxlen: 24
123.58.219.0/24 maxlen: 24
123.58.220.0/24 maxlen: 24
123.58.221.0/24 maxlen: 24
123.58.222.0/24 maxlen: 24
123.58.223.0/24 maxlen: 24
150.107.36.0/24 maxlen: 24
150.107.37.0/24 maxlen: 24
150.107.38.0/24 maxlen: 24
150.107.39.0/24 maxlen: 24
2001:df3:9500::/48 maxlen: 48
2404:82c0::/42 maxlen: 42
2404:82c0:40::/48 maxlen: 48
2404:82c0:41::/48 maxlen: 48
2404:82c0:42::/48 maxlen: 48
2404:82c0:43::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 11 Nov 2025 21:35:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2081 (0x821)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Validity
Not Before: Oct 30 08:50:19 2025 GMT
Not After : May 28 00:00:00 2026 GMT
Subject: CN=690326cb-f0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a4:de:68:8e:b7:ce:ee:53:09:00:b8:ca:8e:
9e:0b:1c:dc:5e:93:6c:c5:b3:b4:1d:2f:9a:6d:51:
df:7b:07:db:b8:c7:c3:88:e7:26:e6:ac:e3:1c:e3:
16:f4:96:eb:29:3e:9f:14:37:33:b5:68:04:9e:bb:
a4:ec:57:ca:e2:ec:71:39:43:1b:55:f7:9f:97:29:
de:3c:71:ec:06:0e:7f:c1:db:23:23:6b:dd:e6:aa:
6e:8e:79:c6:e5:20:05:bd:9d:bc:86:24:da:f2:37:
d5:3c:43:85:99:57:be:cf:5b:44:b3:33:b8:f0:e6:
84:ab:79:d0:f2:b2:3c:23:b5:c7:b1:52:72:32:7a:
a4:c3:a8:80:f9:cb:1a:27:8f:3a:9b:6c:ce:ea:61:
f1:61:e0:74:e7:9e:b5:9a:26:37:e5:93:78:5f:4b:
05:11:cc:59:65:bc:4c:d3:a6:31:a3:76:bb:87:26:
bc:8a:f7:5c:ec:2c:a3:7d:5b:a5:58:73:b9:ac:0c:
f6:f9:86:fe:7f:be:df:43:46:17:ea:d8:56:8c:63:
44:26:12:e1:2c:44:fa:27:cc:b9:df:05:a9:7e:41:
d6:ce:49:18:be:69:a7:c9:76:14:30:2b:b8:bf:4c:
37:11:0d:f2:9a:0e:04:2a:be:cf:04:2c:72:10:90:
5a:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:05:FE:0F:51:5D:05:40:01:30:42:E2:95:37:67:63:6E:83:79:DB
X509v3 Authority Key Identifier:
keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/26E184C2B56D11F0939EAE46C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.249.244.0/22
101.36.96.0/19
103.149.26.0/23
103.218.240.0/22
103.234.60.0/22
118.26.36.0/22
118.26.104.0/21
118.193.32.0/20
118.193.56.0-118.193.79.255
118.194.228.0-118.194.239.255
118.194.248.0/21
123.58.192.0/19
150.107.36.0/22
IPv6:
2001:df3:9500::/48
2404:82c0::-2404:82c0:43:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
d9:c3:c4:51:00:e7:7b:e8:c2:9c:e3:ee:e6:b8:27:54:36:84:
27:3c:61:6b:66:8a:14:4e:50:bc:87:9e:4f:c8:86:fb:0e:5f:
31:c2:75:61:84:bf:03:51:2d:af:2b:67:4a:a0:6a:f9:56:4e:
23:f3:1a:31:a0:cd:d4:31:b3:28:e9:05:b4:6f:c9:30:14:bd:
4e:1f:99:41:77:d4:d2:fb:0d:80:30:5e:1f:41:80:9b:f3:8b:
ba:71:a1:b8:e2:85:44:70:19:34:a5:94:99:f7:c8:41:c1:8b:
cc:62:4e:4f:d3:d9:95:9b:2c:ae:27:a1:81:20:53:f5:7f:48:
8b:17:98:0b:04:49:09:e5:95:18:0e:fd:cb:9a:1b:cb:d7:59:
c8:da:63:ab:81:04:55:b0:b0:5f:1f:1d:0c:24:c2:a7:d3:ee:
e4:91:09:dc:f9:15:45:ee:7d:dd:b9:55:af:fb:32:fc:92:2f:
3f:63:68:e4:81:06:a8:c1:9b:ba:29:08:cb:0d:47:f3:60:06:
dd:af:62:78:09:35:71:5a:5b:01:7f:81:03:5b:f7:32:16:e1:
c6:00:1f:b1:bb:2c:a8:dd:42:03:b6:07:68:0d:51:da:25:44:
ee:ac:23:33:86:7f:f4:0a:90:e0:a1:e6:c3:27:63:53:b3:b8:
82:6c:08:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:38:25 2025 by rpki-client