Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/1E6A1BFC6EAD11F185C6581561A30FBC.roa
File: 1E6A1BFC6EAD11F185C6581561A30FBC.roa (raw, json)
Hash identifier: nTPB13r30wY22KpCyEZvwPqN/xzBcakubS/w5N8fP+Y=
Subject key identifier: E8:32:09:16:E6:EB:F2:71:5A:CF:3F:28:5E:8A:B1:C7:56:C3:BD:84
Certificate issuer: /CN=A913089B/serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Certificate serial: 0107
Authority key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/1E6A1BFC6EAD11F185C6581561A30FBC.roa
Signing time: Thu 03 Sep 2026 07:05:52 +0000
ROA not before: Thu 03 Sep 2026 07:05:52 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 58658
IP address blocks: 177.210.0.0/15 maxlen: 24
179.252.64.0/20 maxlen: 24
179.254.0.0/20 maxlen: 24
186.241.32.0/19 maxlen: 24
186.241.144.0/20 maxlen: 24
186.242.224.0/19 maxlen: 24
186.244.0.0/20 maxlen: 24
186.244.32.0/19 maxlen: 24
186.244.64.0/19 maxlen: 24
186.247.112.0/20 maxlen: 24
186.247.144.0/20 maxlen: 24
187.5.160.0/20 maxlen: 24
187.14.0.0/19 maxlen: 24
187.40.96.0/19 maxlen: 24
189.49.0.0/18 maxlen: 24
189.72.224.0/20 maxlen: 24
189.73.64.0/19 maxlen: 24
189.73.160.0/19 maxlen: 24
189.73.208.0/20 maxlen: 24
189.74.32.0/19 maxlen: 24
189.74.64.0/20 maxlen: 24
189.74.192.0/19 maxlen: 24
189.75.240.0/20 maxlen: 24
191.214.0.0/16 maxlen: 24
191.217.64.0/20 maxlen: 24
191.218.192.0/18 maxlen: 24
191.219.32.0/19 maxlen: 24
191.219.96.0/19 maxlen: 24
191.219.160.0/20 maxlen: 24
191.223.96.0/19 maxlen: 24
191.223.240.0/20 maxlen: 24
200.97.192.0/18 maxlen: 24
200.102.208.0/20 maxlen: 24
200.102.224.0/20 maxlen: 24
200.103.80.0/20 maxlen: 24
200.103.160.0/20 maxlen: 24
200.103.192.0/19 maxlen: 24
200.219.64.0/20 maxlen: 24
200.219.96.0/19 maxlen: 24
200.222.160.0/19 maxlen: 24
200.234.16.0/20 maxlen: 24
201.5.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 06:20:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 263 (0x107)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Validity
Not Before: Sep 3 07:05:52 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a991c50-5a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:90:4c:71:7b:ca:ea:65:cb:aa:fb:e3:48:
9e:40:86:d9:14:9e:48:9b:18:7c:4b:9a:05:32:a0:
22:5c:96:f2:68:eb:98:1b:f9:dd:0d:7d:9f:34:f1:
8c:f1:d5:f8:2c:f5:e4:36:ad:3b:5e:0d:c1:a4:37:
88:f8:3b:e8:56:1e:97:4c:65:10:99:1d:f6:2c:f1:
60:c1:f8:cd:f5:64:d2:6b:e6:7d:03:54:d9:29:f2:
95:d0:2e:7a:ee:3a:21:7f:04:29:66:25:e8:5e:52:
f3:02:68:ee:d1:3e:48:ff:9c:28:ab:48:e5:a1:0a:
31:c8:f2:a0:07:04:0a:96:de:ea:45:6f:50:19:3b:
56:dd:ea:bd:c8:3e:9e:35:8d:b9:c5:13:94:2a:9a:
b0:c2:7a:ed:bb:db:77:04:ed:b2:a4:ea:59:db:71:
58:5d:bc:6a:87:ee:17:14:7d:27:17:87:46:58:ee:
5c:e3:a7:64:54:d2:41:d4:d6:35:50:bd:b6:43:c3:
67:62:cf:0e:bb:b0:52:7e:8d:d1:4c:82:18:39:93:
b4:52:98:bd:7f:94:53:bb:ac:66:ac:9f:fe:91:b5:
52:5b:cd:8f:17:59:87:85:d2:d6:58:5e:18:36:26:
33:86:1d:3d:68:90:9e:f5:fa:e5:d7:a3:fc:e8:a3:
3c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:32:09:16:E6:EB:F2:71:5A:CF:3F:28:5E:8A:B1:C7:56:C3:BD:84
X509v3 Authority Key Identifier:
keyid:9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/1E6A1BFC6EAD11F185C6581561A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
177.210.0.0/15
179.252.64.0/20
179.254.0.0/20
186.241.32.0/19
186.241.144.0/20
186.242.224.0/19
186.244.0.0/20
186.244.32.0-186.244.95.255
186.247.112.0/20
186.247.144.0/20
187.5.160.0/20
187.14.0.0/19
187.40.96.0/19
189.49.0.0/18
189.72.224.0/20
189.73.64.0/19
189.73.160.0/19
189.73.208.0/20
189.74.32.0-189.74.79.255
189.74.192.0/19
189.75.240.0/20
191.214.0.0/16
191.217.64.0/20
191.218.192.0/18
191.219.32.0/19
191.219.96.0/19
191.219.160.0/20
191.223.96.0/19
191.223.240.0/20
200.97.192.0/18
200.102.208.0-200.102.239.255
200.103.80.0/20
200.103.160.0/20
200.103.192.0/19
200.219.64.0/20
200.219.96.0/19
200.222.160.0/19
200.234.16.0/20
201.5.0.0/16
Signature Algorithm: sha256WithRSAEncryption
38:71:78:65:1f:ff:6e:5e:eb:95:3f:0b:21:6d:e4:bb:a3:1a:
45:93:cd:3d:34:58:7a:f6:54:10:e4:f7:13:11:6f:28:56:67:
1f:90:1d:50:fd:55:2b:af:e2:19:4a:be:24:77:c6:93:40:77:
9d:17:42:d2:a2:6d:3d:3b:cc:f8:91:6f:a0:7f:0a:ae:95:b4:
f6:14:f2:67:01:2a:0a:18:9f:93:67:d7:79:c6:4a:7e:31:cd:
a9:04:4e:a7:e9:8e:7a:c6:4e:91:7e:cc:e1:90:02:3b:da:ce:
73:09:35:34:37:6f:9b:43:ab:04:fd:18:56:ad:6d:27:ba:1a:
83:3a:7b:9c:dd:7d:e7:d3:91:78:13:91:c8:12:b7:83:d3:69:
10:c3:ee:4d:92:59:6a:22:ff:36:0b:37:6a:f3:83:0b:4e:d7:
52:62:42:c3:0e:10:7c:08:95:5d:e3:c0:22:93:ea:31:22:92:
9c:91:72:3a:19:0a:84:c6:4f:52:70:a1:6c:c3:7e:ba:63:77:
d0:de:20:54:3f:04:18:e2:a4:6f:d4:a4:8b:75:2a:78:9f:c1:
2e:ae:ff:f8:4c:e7:7c:10:9f:b7:e3:3a:37:50:0f:e6:38:80:
36:d5:03:1b:6f:2f:5f:9e:69:59:56:91:b1:d5:34:82:ed:d5:
d7:12:e9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 19:10:33 2026 by rpki-client