Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AEC0C8428C5811EFA0E8E859C4F9AE02.roa
File: AEC0C8428C5811EFA0E8E859C4F9AE02.roa (raw, json)
Hash identifier: E6mwK6fKqTUEUkTD13ZIpl18GlxnvDCjbMfOKUzvatc=
Subject key identifier: BF:CB:82:F9:22:8E:B7:71:25:40:23:2C:88:FC:70:5E:C0:E5:47:64
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 028E
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AEC0C8428C5811EFA0E8E859C4F9AE02.roa
Signing time: Mon 02 Mar 2026 06:38:44 +0000
ROA not before: Mon 02 Mar 2026 06:38:44 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 132280
IP address blocks: 96.30.64.0/18 maxlen: 18
96.30.64.0/22 maxlen: 22
96.30.72.0/21 maxlen: 21
96.30.74.0/23 maxlen: 24
96.30.76.0/23 maxlen: 24
96.30.80.0/21 maxlen: 21
96.30.80.0/22 maxlen: 22
96.30.83.0/24 maxlen: 24
96.30.88.0/21 maxlen: 21
96.30.88.0/23 maxlen: 24
96.30.90.0/23 maxlen: 24
96.30.92.0/22 maxlen: 22
96.30.93.0/24 maxlen: 24
96.30.94.0/23 maxlen: 23
96.30.96.0/21 maxlen: 21
96.30.96.0/22 maxlen: 23
96.30.97.0/24 maxlen: 24
96.30.104.0/23 maxlen: 24
96.30.106.0/24 maxlen: 24
96.30.110.0/24 maxlen: 24
96.30.112.0/21 maxlen: 21
96.30.113.0/24 maxlen: 24
96.30.114.0/23 maxlen: 24
96.30.116.0/22 maxlen: 23
96.30.116.0/24 maxlen: 24
96.30.120.0/21 maxlen: 21
96.30.120.0/23 maxlen: 23
96.30.120.0/24 maxlen: 24
96.30.123.0/24 maxlen: 24
96.30.124.0/24 maxlen: 24
96.30.125.0/24 maxlen: 24
96.30.126.0/23 maxlen: 24
146.88.32.0/19 maxlen: 19
146.88.32.0/20 maxlen: 21
146.88.32.0/22 maxlen: 22
146.88.32.0/24 maxlen: 24
146.88.33.0/24 maxlen: 24
146.88.40.0/24 maxlen: 24
146.88.48.0/21 maxlen: 21
146.88.48.0/22 maxlen: 23
146.88.56.0/21 maxlen: 21
146.88.56.0/23 maxlen: 24
146.88.58.0/24 maxlen: 24
146.88.59.0/24 maxlen: 24
146.88.60.0/24 maxlen: 24
146.88.61.0/24 maxlen: 24
146.88.62.0/24 maxlen: 24
146.88.63.0/24 maxlen: 24
161.82.128.0/17 maxlen: 19
161.82.128.0/21 maxlen: 22
161.82.135.0/24 maxlen: 24
161.82.136.0/21 maxlen: 22
161.82.138.0/24 maxlen: 24
161.82.142.0/24 maxlen: 24
161.82.144.0/21 maxlen: 22
161.82.146.0/24 maxlen: 24
161.82.152.0/21 maxlen: 22
161.82.156.0/24 maxlen: 24
161.82.157.0/24 maxlen: 24
161.82.160.0/21 maxlen: 22
161.82.164.0/24 maxlen: 24
161.82.168.0/21 maxlen: 22
161.82.173.0/24 maxlen: 24
161.82.176.0/21 maxlen: 22
161.82.180.0/24 maxlen: 24
161.82.182.0/24 maxlen: 24
161.82.184.0/21 maxlen: 22
161.82.189.0/24 maxlen: 24
161.82.192.0/21 maxlen: 22
161.82.197.0/24 maxlen: 24
161.82.200.0/21 maxlen: 22
161.82.203.0/24 maxlen: 24
161.82.204.0/24 maxlen: 24
161.82.208.0/21 maxlen: 22
161.82.208.0/24 maxlen: 24
161.82.210.0/24 maxlen: 24
161.82.211.0/24 maxlen: 24
161.82.212.0/24 maxlen: 24
161.82.213.0/24 maxlen: 24
161.82.214.0/24 maxlen: 24
161.82.216.0/21 maxlen: 22
161.82.216.0/24 maxlen: 24
161.82.220.0/24 maxlen: 24
161.82.221.0/24 maxlen: 24
161.82.222.0/24 maxlen: 24
161.82.223.0/24 maxlen: 24
161.82.224.0/19 maxlen: 22
161.82.226.0/24 maxlen: 24
161.82.233.0/24 maxlen: 24
161.82.237.0/24 maxlen: 24
161.82.246.0/24 maxlen: 24
161.82.248.0/24 maxlen: 24
161.82.249.0/24 maxlen: 24
161.82.250.0/24 maxlen: 24
161.82.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 02:50:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 654 (0x28e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Mar 2 06:38:44 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a53074-d961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:6f:4c:89:59:1e:7d:15:c0:84:e0:36:97:ad:
d6:3d:11:de:f7:a9:42:45:c0:7c:2d:13:7a:1b:8f:
2a:bf:ec:42:42:d6:35:5b:48:78:d0:f2:de:1a:3e:
35:df:e1:34:69:3b:3e:01:3c:52:55:03:44:79:cc:
0c:f9:ec:6f:f0:a7:86:ef:0d:fe:21:49:29:21:73:
70:25:66:54:10:dc:a5:1a:08:cd:52:3f:fa:8d:4a:
14:54:e6:d1:1b:e5:d2:96:7c:1b:16:57:43:34:31:
7d:79:94:b8:d8:ea:dd:8b:fc:c0:de:a6:e1:5e:af:
bb:ad:b7:e7:8e:0d:86:f6:38:14:46:7c:01:fb:8a:
3f:05:92:18:9b:48:c9:df:40:5a:98:de:92:23:5c:
53:21:3f:6e:79:9f:74:a6:06:dd:fb:7a:f1:8e:80:
ff:5a:a3:a6:0b:fb:72:62:d6:43:55:dc:20:8c:44:
39:0a:a7:24:cc:f2:2a:8f:14:46:38:6d:a8:99:1e:
9f:fd:79:ae:f8:cd:f7:88:47:d0:3b:e7:4b:b0:6e:
3b:1a:c4:18:cf:c1:ed:a9:de:cf:c7:c6:6f:7b:7f:
ce:92:d8:be:4f:18:39:a1:56:07:66:b6:8d:36:b0:
b2:53:ae:40:71:4d:ae:77:e5:a1:db:67:98:5f:e8:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CB:82:F9:22:8E:B7:71:25:40:23:2C:88:FC:70:5E:C0:E5:47:64
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/AEC0C8428C5811EFA0E8E859C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
96.30.64.0/18
146.88.32.0/19
161.82.128.0/17
Signature Algorithm: sha256WithRSAEncryption
07:31:9e:02:67:75:2e:91:cf:4d:16:13:81:31:e2:9b:79:18:
e3:0d:69:44:db:38:6b:ef:b8:b3:ef:c7:c1:f5:5e:c5:e3:fa:
ea:56:0b:5d:0d:2d:a3:43:d3:74:66:54:54:34:d9:15:63:c2:
f0:dc:f3:84:32:c5:be:a0:1e:dc:48:3a:5d:00:30:9e:2a:bb:
4c:46:af:c2:5d:e2:b6:81:dd:f1:27:41:0d:76:46:c9:e6:f3:
66:cb:49:ca:74:34:21:f4:6e:bc:76:e1:db:d3:2a:e7:46:af:
86:28:f0:67:da:05:d6:79:cd:7b:4b:0f:aa:f5:fa:7f:41:56:
ff:db:03:d3:62:30:ac:a1:4d:9e:13:a2:0d:9a:8b:7f:3d:4d:
9d:14:51:9f:fe:a2:11:ce:26:d6:97:b4:96:40:63:76:28:1c:
1e:e4:d3:17:03:16:05:73:e7:79:d2:d8:f9:d7:bf:08:29:21:
88:15:c6:16:72:c2:23:12:3d:bb:3d:c2:10:37:f9:94:e9:f0:
ea:1f:0f:0d:cb:24:c4:ba:71:90:7d:78:4b:f3:07:0a:c3:f0:
13:63:e4:0c:20:c3:3c:b3:00:96:31:bf:a2:50:26:08:95:ed:
ad:bf:d8:ec:ec:ad:c1:73:09:f6:a4:ea:c0:e1:e3:fe:8e:22:
18:8a:2a:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:02:12 2026 by rpki-client