Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/49FC44B0162A11F18FE9298B373D8C67.roa
File: 49FC44B0162A11F18FE9298B373D8C67.roa (raw, json)
Hash identifier: R7i2wINlOt7SeQns86jhCdT1p2Hh0s8++plJe6v+zKs=
Subject key identifier: 09:01:4D:F1:32:E2:E7:7D:AF:5B:8D:D7:74:FF:0F:5E:8B:A2:E3:73
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 0290
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/49FC44B0162A11F18FE9298B373D8C67.roa
Signing time: Mon 02 Mar 2026 11:23:51 +0000
ROA not before: Mon 02 Mar 2026 11:23:51 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132280
IP address blocks: 96.30.64.0/18 maxlen: 18
96.30.64.0/22 maxlen: 22
96.30.72.0/21 maxlen: 21
96.30.74.0/23 maxlen: 24
96.30.76.0/23 maxlen: 24
96.30.80.0/21 maxlen: 21
96.30.80.0/22 maxlen: 22
96.30.83.0/24 maxlen: 24
96.30.88.0/21 maxlen: 21
96.30.88.0/23 maxlen: 24
96.30.90.0/23 maxlen: 24
96.30.92.0/22 maxlen: 22
96.30.93.0/24 maxlen: 24
96.30.94.0/23 maxlen: 23
96.30.96.0/21 maxlen: 21
96.30.96.0/22 maxlen: 23
96.30.97.0/24 maxlen: 24
96.30.104.0/23 maxlen: 24
96.30.106.0/24 maxlen: 24
96.30.110.0/24 maxlen: 24
96.30.112.0/21 maxlen: 21
96.30.113.0/24 maxlen: 24
96.30.114.0/23 maxlen: 24
96.30.116.0/22 maxlen: 23
96.30.116.0/24 maxlen: 24
96.30.120.0/21 maxlen: 21
96.30.120.0/23 maxlen: 23
96.30.120.0/24 maxlen: 24
96.30.123.0/24 maxlen: 24
96.30.124.0/24 maxlen: 24
96.30.125.0/24 maxlen: 24
96.30.126.0/23 maxlen: 24
146.88.32.0/19 maxlen: 19
146.88.32.0/20 maxlen: 21
146.88.32.0/22 maxlen: 22
146.88.32.0/24 maxlen: 24
146.88.33.0/24 maxlen: 24
146.88.40.0/24 maxlen: 24
146.88.48.0/21 maxlen: 21
146.88.48.0/22 maxlen: 23
146.88.56.0/21 maxlen: 21
146.88.56.0/23 maxlen: 24
146.88.58.0/24 maxlen: 24
146.88.59.0/24 maxlen: 24
146.88.60.0/24 maxlen: 24
146.88.62.0/24 maxlen: 24
146.88.63.0/24 maxlen: 24
161.82.128.0/17 maxlen: 19
161.82.128.0/21 maxlen: 22
161.82.135.0/24 maxlen: 24
161.82.136.0/21 maxlen: 22
161.82.138.0/24 maxlen: 24
161.82.142.0/24 maxlen: 24
161.82.144.0/21 maxlen: 22
161.82.146.0/24 maxlen: 24
161.82.152.0/21 maxlen: 22
161.82.156.0/24 maxlen: 24
161.82.157.0/24 maxlen: 24
161.82.160.0/21 maxlen: 22
161.82.164.0/24 maxlen: 24
161.82.168.0/21 maxlen: 22
161.82.173.0/24 maxlen: 24
161.82.176.0/21 maxlen: 22
161.82.180.0/24 maxlen: 24
161.82.182.0/24 maxlen: 24
161.82.184.0/21 maxlen: 22
161.82.189.0/24 maxlen: 24
161.82.192.0/21 maxlen: 22
161.82.197.0/24 maxlen: 24
161.82.200.0/21 maxlen: 22
161.82.203.0/24 maxlen: 24
161.82.204.0/24 maxlen: 24
161.82.208.0/21 maxlen: 22
161.82.208.0/24 maxlen: 24
161.82.210.0/24 maxlen: 24
161.82.211.0/24 maxlen: 24
161.82.212.0/24 maxlen: 24
161.82.213.0/24 maxlen: 24
161.82.214.0/24 maxlen: 24
161.82.216.0/21 maxlen: 22
161.82.216.0/24 maxlen: 24
161.82.220.0/24 maxlen: 24
161.82.221.0/24 maxlen: 24
161.82.222.0/24 maxlen: 24
161.82.223.0/24 maxlen: 24
161.82.224.0/19 maxlen: 22
161.82.226.0/24 maxlen: 24
161.82.233.0/24 maxlen: 24
161.82.237.0/24 maxlen: 24
161.82.246.0/24 maxlen: 24
161.82.248.0/24 maxlen: 24
161.82.249.0/24 maxlen: 24
161.82.250.0/24 maxlen: 24
161.82.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 13:35:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 656 (0x290)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Mar 2 11:23:51 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a57347-22c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:25:31:fa:72:40:62:12:01:ed:c5:0b:9c:ee:
b6:a7:30:25:e1:24:e7:8d:82:be:a0:d4:3a:34:4e:
c9:8a:54:79:45:61:c8:53:22:73:d7:d4:55:2f:b3:
38:bb:17:cd:21:8a:f8:e9:10:49:8c:39:ad:e1:7b:
e4:79:77:90:9e:4f:d3:5f:b1:b1:b0:93:80:cb:e5:
40:19:c8:f4:a5:92:fe:11:67:61:4f:bb:43:1e:bb:
3d:2b:ed:93:86:cb:ec:a9:3f:3a:45:c7:87:2b:f0:
e9:c6:89:1d:d2:37:19:e8:29:20:57:78:fb:f4:7d:
00:7d:51:f0:6e:c5:0a:35:7f:7e:24:da:39:fd:d8:
ed:be:ba:76:26:fe:de:7d:bd:40:a3:03:46:c5:c3:
ac:73:cd:42:cc:62:ff:2c:3e:02:04:be:55:3c:2e:
ca:75:6f:bb:5e:4c:cc:be:2c:f9:f1:28:47:6f:93:
54:51:9b:d6:a8:a3:2d:1f:09:27:e2:2e:27:7b:f2:
14:eb:0a:46:db:e1:e1:4e:1d:cd:06:4a:15:ec:11:
27:1c:1a:b0:dc:7e:65:48:00:40:a0:6a:3a:36:70:
4a:af:eb:02:d8:2e:c2:7d:4d:fe:11:b4:d1:9b:27:
1c:2c:0f:ab:87:58:d4:67:86:8a:cd:65:30:7a:4c:
eb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:01:4D:F1:32:E2:E7:7D:AF:5B:8D:D7:74:FF:0F:5E:8B:A2:E3:73
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/49FC44B0162A11F18FE9298B373D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
96.30.64.0/18
146.88.32.0/19
161.82.128.0/17
Signature Algorithm: sha256WithRSAEncryption
79:46:fa:bc:32:5a:54:7f:62:33:d2:62:23:a0:94:65:4a:46:
6b:9c:a9:87:f2:bc:0f:91:c2:dc:f5:0f:30:0f:b2:2b:03:7b:
91:3c:0c:b6:5b:65:ee:af:20:60:e1:0f:ef:4e:cf:b0:29:e6:
2f:ad:3d:7d:12:19:ed:26:17:f6:27:6a:54:ff:90:a6:7b:03:
d3:fd:ef:2c:8b:de:fd:dd:f2:9f:74:c4:e4:19:9c:b0:03:90:
84:1d:e9:b8:6b:e2:5b:a5:38:0b:2b:8d:c3:4f:de:20:ee:c1:
56:c3:37:e0:72:ac:d3:5c:c8:95:23:89:26:dc:6d:47:72:9b:
95:fc:80:91:74:78:19:62:69:52:bd:09:28:b7:b1:dd:13:c5:
6e:71:3d:7e:84:cc:a2:3f:bf:4d:8c:29:74:c2:20:98:8e:39:
20:32:9c:d4:dc:8e:d8:da:ff:ce:16:f7:12:8f:ec:06:32:13:
d6:33:9f:21:bb:df:4c:7b:be:9d:69:23:9c:a6:1b:df:4c:ba:
b2:aa:ab:6d:e5:6f:84:87:3e:65:64:dc:b4:4c:d0:4c:d6:68:
83:96:d4:e9:33:80:5a:71:71:bb:53:6b:2e:53:2a:e1:74:a5:
ca:f8:52:9a:ad:d7:b5:83:18:92:08:91:a5:96:b2:95:55:ec:
68:9f:81:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:32:01 2026 by rpki-client