Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/485D694A454911EEB8718378C4F9AE02.roa
File: 485D694A454911EEB8718378C4F9AE02.roa (raw, json)
Hash identifier: FhKO3k6jVCfM+szlLsC6cQIMW2FIlONUIe/rRWLdCeE=
Subject key identifier: 21:3C:5B:8C:86:96:3B:5A:F6:06:09:EB:64:F7:6E:D0:DE:52:CC:FA
Certificate issuer: /CN=A9125C22/serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
Certificate serial: 076B
Authority key identifier: C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/485D694A454911EEB8718378C4F9AE02.roa
Signing time: Thu 24 Sep 2026 21:43:00 +0000
ROA not before: Thu 24 Sep 2026 21:43:00 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 133771
IP address blocks: 207.174.176.0/20 maxlen: 20
207.174.176.0/22 maxlen: 22
207.174.176.0/24 maxlen: 24
207.174.177.0/24 maxlen: 24
207.174.178.0/24 maxlen: 24
207.174.179.0/24 maxlen: 24
207.174.180.0/22 maxlen: 22
207.174.180.0/24 maxlen: 24
207.174.181.0/24 maxlen: 24
207.174.182.0/24 maxlen: 24
207.174.183.0/24 maxlen: 24
207.174.184.0/22 maxlen: 22
207.174.184.0/24 maxlen: 24
207.174.185.0/24 maxlen: 24
207.174.186.0/24 maxlen: 24
207.174.187.0/24 maxlen: 24
207.174.188.0/22 maxlen: 22
207.174.188.0/24 maxlen: 24
207.174.189.0/24 maxlen: 24
207.174.190.0/24 maxlen: 24
207.174.191.0/24 maxlen: 24
216.108.240.0/20 maxlen: 20
216.108.240.0/22 maxlen: 24
216.108.244.0/22 maxlen: 22
216.108.244.0/24 maxlen: 24
216.108.245.0/24 maxlen: 24
216.108.246.0/24 maxlen: 24
216.108.247.0/24 maxlen: 24
216.108.248.0/22 maxlen: 22
216.108.248.0/24 maxlen: 24
216.108.249.0/24 maxlen: 24
216.108.250.0/24 maxlen: 24
216.108.251.0/24 maxlen: 24
216.108.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl
rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1899 (0x76b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9125C22, serialNumber=C70B4E047CAA737724B89D584DB5C0C1A858D28E
Validity
Not Before: Sep 24 21:43:00 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ab59964-d3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7c:fe:01:72:56:58:8e:ba:a4:57:3a:f2:a6:
30:15:a2:6e:59:cd:ae:44:06:26:9c:71:6f:a5:90:
4b:fe:8b:b3:48:e7:3f:91:38:9a:38:fb:ba:9d:1e:
ec:12:05:d4:21:c9:81:db:85:2e:b4:9c:8c:54:b1:
58:73:df:79:26:5a:df:4a:23:72:56:a2:1f:24:b1:
00:1d:e8:4f:d5:c3:50:bb:e0:d1:39:56:b8:11:5f:
31:fa:cc:04:84:d0:27:27:23:99:8f:31:22:a4:50:
2e:79:a3:4b:8f:33:35:b0:0b:a6:41:35:81:d9:dd:
c2:43:ff:c4:cb:24:cc:a8:7f:41:41:9e:4e:7b:b5:
83:89:20:2e:63:10:93:62:ef:4f:c4:18:fa:d4:0e:
d3:c1:3a:43:eb:97:18:aa:32:ee:a6:af:90:70:95:
44:6d:08:5e:7f:a3:bf:ac:09:a5:1c:b3:50:b9:31:
69:61:dd:2b:50:39:6c:a4:fc:e6:a3:5b:3f:9a:f8:
ad:43:35:f2:43:38:5d:50:6b:ff:ad:fc:d8:21:f4:
c6:0f:17:75:54:5e:b6:43:b6:12:94:7f:ae:63:2e:
99:15:56:5c:73:e0:9a:23:b1:c3:6c:1a:af:8b:ab:
3d:74:32:b1:a2:5f:ac:b7:08:0b:50:72:ed:76:7d:
7f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3C:5B:8C:86:96:3B:5A:F6:06:09:EB:64:F7:6E:D0:DE:52:CC:FA
X509v3 Authority Key Identifier:
keyid:C7:0B:4E:04:7C:AA:73:77:24:B8:9D:58:4D:B5:C0:C1:A8:58:D2:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/xwtOBHyqc3ckuJ1YTbXAwahY0o4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xwtOBHyqc3ckuJ1YTbXAwahY0o4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9125C22/FACCBC5C7FAD11EB977B5335C4F9AE02/485D694A454911EEB8718378C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
207.174.176.0/20
216.108.240.0/20
Signature Algorithm: sha256WithRSAEncryption
a3:a4:e2:11:2d:23:f5:c7:42:58:00:2c:d0:21:53:ab:e2:0e:
53:5a:ea:e5:e2:69:96:1d:77:35:b6:1c:cf:60:1e:de:34:b7:
ec:f9:38:ae:47:2a:f7:82:93:f2:d8:f9:c4:e3:14:4c:f9:7a:
c9:76:cd:12:d2:1f:9b:4a:47:bc:45:fc:a3:86:f3:05:41:62:
ea:8b:56:d3:c9:13:14:62:e9:1b:1e:a6:79:c3:7a:16:7b:d7:
19:43:3e:9a:3c:1d:7d:87:05:f0:52:72:25:24:c9:76:f1:d2:
5f:99:e7:5b:75:c8:f7:37:4c:e9:a5:e5:69:ca:5f:de:1e:9d:
56:3e:63:c8:4d:ad:60:ee:85:a3:7f:7b:84:f5:db:45:2a:46:
9a:7f:38:a9:48:5a:91:23:0a:8a:d2:60:bf:6d:31:45:37:75:
d8:0c:85:49:c8:ce:72:5c:98:d0:3b:0a:d9:dd:e0:9c:46:98:
8b:58:5d:25:c5:19:09:b7:ca:8c:fc:c1:72:6b:87:04:b7:57:
44:a2:c6:e5:98:25:a6:a9:40:70:19:20:44:43:18:90:56:f2:
56:c3:17:ff:43:c9:e9:1c:ac:69:76:bd:0f:bd:e7:aa:59:c8:
36:25:ac:52:e9:c1:f6:d1:1a:58:53:aa:2a:35:cc:80:e2:62:
49:bc:b2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 12:41:51 2026 by rpki-client