Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/1D7005546EAD11F185C6581561A30FBC.roa
File: 1D7005546EAD11F185C6581561A30FBC.roa (raw, json)
Hash identifier: OYYGlFht5ekZJsmjVJ/0bc+ldBNUi7YvxrLIuI1yYPM=
Subject key identifier: D6:06:1B:44:84:72:B7:E5:C2:0A:60:5D:F0:F3:92:ED:F0:2F:46:F7
Certificate issuer: /CN=A913089B/serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Certificate serial: C6
Authority key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/1D7005546EAD11F185C6581561A30FBC.roa
Signing time: Tue 23 Jun 2026 04:03:53 +0000
ROA not before: Tue 23 Jun 2026 04:03:53 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 134175
IP address blocks: 179.252.64.0/20 maxlen: 24
179.254.0.0/20 maxlen: 24
186.241.32.0/19 maxlen: 24
186.241.144.0/20 maxlen: 24
186.242.224.0/19 maxlen: 24
186.244.0.0/20 maxlen: 24
186.244.32.0/19 maxlen: 24
186.244.64.0/19 maxlen: 24
186.247.112.0/20 maxlen: 24
186.247.144.0/20 maxlen: 24
187.5.160.0/20 maxlen: 24
187.14.0.0/19 maxlen: 24
187.40.96.0/19 maxlen: 24
189.49.0.0/18 maxlen: 24
189.72.224.0/20 maxlen: 24
189.73.64.0/19 maxlen: 24
189.73.160.0/19 maxlen: 24
189.73.208.0/20 maxlen: 24
189.74.32.0/19 maxlen: 24
189.74.64.0/20 maxlen: 24
189.74.192.0/19 maxlen: 24
189.75.240.0/20 maxlen: 24
191.217.64.0/20 maxlen: 24
191.218.192.0/18 maxlen: 24
191.219.32.0/19 maxlen: 24
191.219.96.0/19 maxlen: 24
191.219.160.0/20 maxlen: 24
191.223.96.0/19 maxlen: 24
191.223.240.0/20 maxlen: 24
200.97.192.0/18 maxlen: 24
200.102.208.0/20 maxlen: 24
200.102.224.0/20 maxlen: 24
200.103.80.0/20 maxlen: 24
200.103.160.0/20 maxlen: 24
200.103.192.0/19 maxlen: 24
200.219.64.0/20 maxlen: 24
200.219.96.0/19 maxlen: 24
200.222.160.0/19 maxlen: 24
200.234.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 198 (0xc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Validity
Not Before: Jun 23 04:03:53 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3a05a9-eb22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:54:2b:ab:62:c7:7b:b1:d3:26:fb:00:cd:b6:
73:6f:fd:41:f7:30:b9:3b:8c:f1:eb:64:f4:26:2e:
29:4c:01:f8:85:c3:81:8b:2a:c9:a6:1a:2d:3e:9b:
cd:1b:97:45:5d:b3:7f:2b:d1:bc:1e:4d:cc:39:57:
40:32:23:fa:b3:6c:fd:4e:47:b9:fd:00:4c:a8:d9:
bf:9e:ca:9d:38:48:e7:30:e9:2b:c7:3e:e0:de:b5:
d5:66:01:d5:cd:ed:bc:16:70:b3:0b:38:fd:80:78:
f1:ae:3a:de:7c:5c:fa:6c:00:46:7e:88:54:55:8f:
81:8e:53:e5:cf:32:f8:dc:7c:92:59:95:41:fc:98:
76:bf:f0:66:95:d2:ad:d1:66:a1:13:14:7e:a7:bf:
70:d1:34:08:53:50:c3:d6:ee:b1:23:1f:ab:ab:cd:
de:7b:4b:6f:c9:16:be:4c:30:fe:fc:53:4b:b0:e4:
3b:4e:43:95:15:15:f2:c0:5c:ce:35:ea:55:d2:5b:
6b:80:ef:83:9d:e0:ae:35:6a:c4:af:ea:3d:63:80:
f2:7b:ae:e4:55:d5:b0:0d:e1:a0:ce:9f:f3:bc:f1:
9c:f7:c6:a6:89:eb:ba:02:a5:b6:8b:51:56:49:21:
44:de:e1:68:7b:28:d2:a7:fe:2e:f2:24:49:20:b5:
a3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:06:1B:44:84:72:B7:E5:C2:0A:60:5D:F0:F3:92:ED:F0:2F:46:F7
X509v3 Authority Key Identifier:
keyid:9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/1D7005546EAD11F185C6581561A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
179.252.64.0/20
179.254.0.0/20
186.241.32.0/19
186.241.144.0/20
186.242.224.0/19
186.244.0.0/20
186.244.32.0-186.244.95.255
186.247.112.0/20
186.247.144.0/20
187.5.160.0/20
187.14.0.0/19
187.40.96.0/19
189.49.0.0/18
189.72.224.0/20
189.73.64.0/19
189.73.160.0/19
189.73.208.0/20
189.74.32.0-189.74.79.255
189.74.192.0/19
189.75.240.0/20
191.217.64.0/20
191.218.192.0/18
191.219.32.0/19
191.219.96.0/19
191.219.160.0/20
191.223.96.0/19
191.223.240.0/20
200.97.192.0/18
200.102.208.0-200.102.239.255
200.103.80.0/20
200.103.160.0/20
200.103.192.0/19
200.219.64.0/20
200.219.96.0/19
200.222.160.0/19
200.234.16.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:6b:a0:05:39:c7:71:ce:a6:fe:7b:57:e9:6d:21:7f:e4:1c:
62:72:4c:c9:ca:de:4c:f0:6c:b1:f9:ec:10:54:fd:69:08:65:
b9:93:df:31:72:3e:ad:f7:12:55:7b:6b:5e:42:0e:40:23:d1:
64:9c:03:a8:b0:fd:05:6e:79:bf:18:f2:cb:21:94:8d:07:78:
a3:56:93:42:be:1c:be:fc:3e:02:69:ce:95:1b:0b:23:37:0a:
7b:8b:b0:38:10:02:9f:5c:10:c5:44:aa:bb:46:0b:c1:48:c3:
0a:99:a9:84:74:3c:70:c6:50:2f:b8:2d:f1:98:b7:cc:01:8f:
be:8b:f9:61:7d:e5:b2:9c:0e:84:71:ee:07:47:16:3b:eb:81:
05:da:23:db:a3:2b:00:1c:90:9e:0e:11:ae:99:37:b4:dd:b0:
04:cd:01:59:c9:b8:fd:a6:e9:45:6b:f0:aa:fe:db:ea:90:6b:
70:4b:c6:ac:92:93:64:fc:12:7f:91:5e:a5:21:23:b0:0a:da:
bb:e1:a7:03:05:ac:72:90:6c:72:89:e9:a0:72:f0:a7:09:a9:
d0:0e:b0:23:f4:d0:d5:fb:fe:8a:21:e8:f3:d9:de:69:9f:c3:
51:66:e1:4b:c9:40:ed:fd:a5:2a:22:bc:0d:e4:31:54:81:2c:
8a:b0:bd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:32 2026 by rpki-client