Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/1D7005546EAD11F185C6581561A30FBC.roa
File: 1D7005546EAD11F185C6581561A30FBC.roa (raw, json)
Hash identifier: pEHOOvZ1PdsfkVZuBVU3witniKDdBj3pdFgv+GPFrng=
Subject key identifier: 43:17:4B:7E:CD:60:37:B3:5D:63:F1:18:C6:7C:0D:14:3E:8B:72:F3
Certificate issuer: /CN=A913089B/serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Certificate serial: 0105
Authority key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/1D7005546EAD11F185C6581561A30FBC.roa
Signing time: Thu 03 Sep 2026 07:05:48 +0000
ROA not before: Thu 03 Sep 2026 07:05:48 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 134175
IP address blocks: 177.210.0.0/15 maxlen: 24
179.252.64.0/20 maxlen: 24
179.254.0.0/20 maxlen: 24
186.241.32.0/19 maxlen: 24
186.241.144.0/20 maxlen: 24
186.242.224.0/19 maxlen: 24
186.244.0.0/20 maxlen: 24
186.244.32.0/19 maxlen: 24
186.244.64.0/19 maxlen: 24
186.247.112.0/20 maxlen: 24
186.247.144.0/20 maxlen: 24
187.5.160.0/20 maxlen: 24
187.14.0.0/19 maxlen: 24
187.40.96.0/19 maxlen: 24
189.49.0.0/18 maxlen: 24
189.72.224.0/20 maxlen: 24
189.73.64.0/19 maxlen: 24
189.73.160.0/19 maxlen: 24
189.73.208.0/20 maxlen: 24
189.74.32.0/19 maxlen: 24
189.74.64.0/20 maxlen: 24
189.74.192.0/19 maxlen: 24
189.75.240.0/20 maxlen: 24
191.214.0.0/16 maxlen: 24
191.217.64.0/20 maxlen: 24
191.218.192.0/18 maxlen: 24
191.219.32.0/19 maxlen: 24
191.219.96.0/19 maxlen: 24
191.219.160.0/20 maxlen: 24
191.223.96.0/19 maxlen: 24
191.223.240.0/20 maxlen: 24
200.97.192.0/18 maxlen: 24
200.102.208.0/20 maxlen: 24
200.102.224.0/20 maxlen: 24
200.103.80.0/20 maxlen: 24
200.103.160.0/20 maxlen: 24
200.103.192.0/19 maxlen: 24
200.219.64.0/20 maxlen: 24
200.219.96.0/19 maxlen: 24
200.222.160.0/19 maxlen: 24
200.234.16.0/20 maxlen: 24
201.5.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 261 (0x105)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Validity
Not Before: Sep 3 07:05:48 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a991c4c-53bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3c:ae:e7:c6:50:2a:c2:3f:5b:79:61:38:50:
36:7d:83:6e:f4:92:e1:a1:7c:f9:99:eb:8a:ac:73:
20:cc:c5:d6:fb:e9:de:69:17:fd:fd:40:57:f7:e4:
2a:8e:23:02:68:78:d8:ef:21:9d:dd:b9:3e:ba:72:
27:11:7b:96:b4:7d:37:4f:75:b3:51:81:91:09:7c:
18:55:e8:67:b1:c2:1a:5c:1c:7b:e7:a3:e5:46:df:
b9:54:1a:be:78:9e:e1:b6:2a:46:c1:89:f7:da:c2:
40:93:9c:a1:7c:7c:f1:6f:a9:35:75:ed:91:1e:24:
39:c9:e5:aa:1a:72:dc:a1:f9:9d:62:80:83:a6:90:
48:83:19:08:f8:68:ca:a4:30:41:cb:73:c1:3f:b5:
b5:c2:d7:75:42:34:c2:24:aa:d1:23:09:4b:6c:4b:
71:c0:86:65:bc:c8:b5:35:bb:b5:e7:19:96:95:40:
7f:a7:a6:a0:2d:fb:78:84:19:7c:42:a4:b0:1b:04:
ee:fc:af:ac:30:12:dc:57:48:ab:2f:8f:00:45:d2:
35:7e:0d:d1:4c:08:bb:aa:d1:39:36:b5:be:b8:26:
7b:ba:6d:9b:ab:38:cf:d5:1e:b3:5b:b8:80:1a:36:
9c:3d:e6:e6:a5:44:77:ec:93:d4:0f:66:bb:9a:d2:
31:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:17:4B:7E:CD:60:37:B3:5D:63:F1:18:C6:7C:0D:14:3E:8B:72:F3
X509v3 Authority Key Identifier:
keyid:9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/1D7005546EAD11F185C6581561A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
177.210.0.0/15
179.252.64.0/20
179.254.0.0/20
186.241.32.0/19
186.241.144.0/20
186.242.224.0/19
186.244.0.0/20
186.244.32.0-186.244.95.255
186.247.112.0/20
186.247.144.0/20
187.5.160.0/20
187.14.0.0/19
187.40.96.0/19
189.49.0.0/18
189.72.224.0/20
189.73.64.0/19
189.73.160.0/19
189.73.208.0/20
189.74.32.0-189.74.79.255
189.74.192.0/19
189.75.240.0/20
191.214.0.0/16
191.217.64.0/20
191.218.192.0/18
191.219.32.0/19
191.219.96.0/19
191.219.160.0/20
191.223.96.0/19
191.223.240.0/20
200.97.192.0/18
200.102.208.0-200.102.239.255
200.103.80.0/20
200.103.160.0/20
200.103.192.0/19
200.219.64.0/20
200.219.96.0/19
200.222.160.0/19
200.234.16.0/20
201.5.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8f:bb:ee:d7:24:03:8f:3f:aa:c0:28:cd:27:f7:42:e8:73:e3:
2d:23:b3:3f:88:4f:68:66:7e:3d:88:73:ea:5b:d8:e9:b4:86:
c6:d0:ee:8e:20:73:62:5b:b2:17:6f:9d:e0:12:d8:c9:6a:30:
ae:df:56:f8:45:07:5f:57:dc:eb:44:b2:33:3c:89:f9:85:18:
98:19:ef:50:a5:6b:4b:ad:73:e6:9d:58:0c:d2:c6:3a:a1:0f:
90:f9:c6:f2:4b:6c:ba:1b:3b:13:a7:b0:b0:89:52:b5:47:c9:
86:2c:1c:93:4a:7e:4e:df:fa:de:d7:7d:90:2b:1c:68:ca:81:
77:de:7f:d0:e4:5d:3f:b6:f7:f3:77:a7:a4:1c:a1:b7:36:87:
d4:aa:69:40:c9:47:f6:52:d3:c0:52:b0:42:92:cd:71:d0:c9:
0f:ad:96:e3:05:dd:59:db:22:ff:36:b0:d3:5f:3b:d5:20:26:
a9:5c:a5:f1:7f:91:b6:19:2a:78:f1:51:e0:a2:30:e7:16:3c:
76:0a:6a:d7:47:90:5e:17:c6:7f:67:d1:df:9c:82:8e:2b:2f:
8c:d9:0f:86:0d:7d:f3:7f:66:e2:dc:5b:c8:9d:4d:9a:f6:1b:
f1:81:47:bc:88:30:55:46:14:79:39:b3:97:a6:ea:85:21:46:
44:af:23:70
-----BEGIN CERTIFICATE-----
MIIGPjCCBSagAwIBAgICAQUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA4OUIxMTAvBgNVBAUTKDlCQzQ4REFDMTAwRTc1NEVFOEUxQ0E2QUJBOTQyNEUz
M0QzNURFNkEwHhcNMjYwOTAzMDcwNTQ4WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTk5MWM0Yy01M2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjzyu58ZQKsI/W3lhOFA2fYNu9JLhoXz5meuKrHMgzMXW++neaRf9/UBX9+Qq
jiMCaHjY7yGd3bk+unInEXuWtH03T3WzUYGRCXwYVehnscIaXBx756PlRt+5VBq+
eJ7htipGwYn32sJAk5yhfHzxb6k1de2RHiQ5yeWqGnLcofmdYoCDppBIgxkI+GjK
pDBBy3PBP7W1wtd1QjTCJKrRIwlLbEtxwIZlvMi1Nbu15xmWlUB/p6agLft4hBl8
QqSwGwTu/K+sMBLcV0irL48ARdI1fg3RTAi7qtE5NrW+uCZ7um2bqzjP1R6zW7iA
GjacPebmpUR37JPUD2a7mtIxFwIDAQABo4IDYjCCA14wHQYDVR0OBBYEFEMXS37N
YDezXWPxGMZ8DRQ+i3LzMB8GA1UdIwQYMBaAFJvEjawQDnVO6OHKarqUJOM9Nd5q
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDg5Qi9ENTRBMkUzRTAw
Q0IxMUYxQkY3NDkxMDM4RUVFNTI4RS9tOFNOckJBT2RVN280Y3BxdXBRazR6MDEz
bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy
RkQxRkYyL204U05yQkFPZFU3bzRjcHF1cFFrNHowMTNtby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA4OUIvRDU0QTJFM0UwMENCMTFGMUJGNzQ5MTAzOEVFRTUyOEUvMUQ3MDA1NTQ2
RUFEMTFGMTg1QzY1ODE1NjFBMzBGQkMucm9hMIIBHwYIKwYBBQUHAQcBAf8EggEO
MIIBCjCCAQYEAgABMIH/AwMBsdIDBASz/EADBASz/gADBAW68SADBAS68ZADBAW6
8uADBAS69AAwDAMEBbr0IAMEBbr0QAMEBLr3cAMEBLr3kAMEBLsFoAMEBbsOAAME
BbsoYAMEBr0xAAMEBL1I4AMEBb1JQAMEBb1JoAMEBL1J0DAMAwQFvUogAwQEvUpA
AwQFvUrAAwQEvUvwAwMAv9YDBAS/2UADBAa/2sADBAW/2yADBAW/22ADBAS/26AD
BAW/32ADBAS/3/ADBAbIYcAwDAMEBMhm0AMEBMhm4AMEBMhnUAMEBMhnoAMEBchn
wAMEBMjbQAMEBcjbYAMEBcjeoAMEBMjqEAMDAMkFMA0GCSqGSIb3DQEBCwUAA4IB
AQCPu+7XJAOPP6rAKM0n90Loc+MtI7M/iE9oZn49iHPqW9jptIbG0O6OIHNiW7IX
b53gEtjJajCu31b4RQdfV9zrRLIzPIn5hRiYGe9QpWtLrXPmnVgM0sY6oQ+Q+cby
S2y6GzsTp7CwiVK1R8mGLByTSn5O3/re132QKxxoyoF33n/Q5F0/tvfzd6ekHKG3
NofUqmlAyUf2UtPAUrBCks1x0MkPrZbjBd1Z2yL/NrDTXzvVICapXKXxf5G2GSp4
8VHgojDnFjx2CmrXR5BeF8Z/Z9HfnIKOKy+M2Q+GDX3zf2bi3FvInU2a9hvxgUe8
iDBVRhR5ObOXpuqFIUZEryNw
-----END CERTIFICATE-----
Generated at Thu Sep 24 19:04:31 2026 by rpki-client