Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/1E6A1BFC6EAD11F185C6581561A30FBC.roa
File: 1E6A1BFC6EAD11F185C6581561A30FBC.roa (raw, json)
Hash identifier: Q5EVHHSwq7XB+Z7hDZj6ZgQeOyC+Rwsa8gTVO3PCllQ=
Subject key identifier: 8A:A5:4E:50:AF:4C:FB:B3:CD:09:2B:04:27:25:9B:31:AB:BB:7B:E3
Certificate issuer: /CN=A913089B/serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Certificate serial: CD
Authority key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/1E6A1BFC6EAD11F185C6581561A30FBC.roa
Signing time: Wed 24 Jun 2026 17:18:09 +0000
ROA not before: Wed 24 Jun 2026 17:18:09 +0000
ROA not after: Fri 30 Jul 2027 00:00:00 +0000
asID: 58658
IP address blocks: 179.252.64.0/20 maxlen: 24
179.254.0.0/20 maxlen: 24
186.241.32.0/19 maxlen: 24
186.241.144.0/20 maxlen: 24
186.242.224.0/19 maxlen: 24
186.244.0.0/20 maxlen: 24
186.244.32.0/19 maxlen: 24
186.244.64.0/19 maxlen: 24
186.247.112.0/20 maxlen: 24
186.247.144.0/20 maxlen: 24
187.5.160.0/20 maxlen: 24
187.14.0.0/19 maxlen: 24
187.40.96.0/19 maxlen: 24
189.49.0.0/18 maxlen: 24
189.72.224.0/20 maxlen: 24
189.73.64.0/19 maxlen: 24
189.73.160.0/19 maxlen: 24
189.73.208.0/20 maxlen: 24
189.74.32.0/19 maxlen: 24
189.74.64.0/20 maxlen: 24
189.74.192.0/19 maxlen: 24
189.75.240.0/20 maxlen: 24
191.217.64.0/20 maxlen: 24
191.218.192.0/18 maxlen: 24
191.219.32.0/19 maxlen: 24
191.219.96.0/19 maxlen: 24
191.219.160.0/20 maxlen: 24
191.223.96.0/19 maxlen: 24
191.223.240.0/20 maxlen: 24
200.97.192.0/18 maxlen: 24
200.102.208.0/20 maxlen: 24
200.102.224.0/20 maxlen: 24
200.103.80.0/20 maxlen: 24
200.103.160.0/20 maxlen: 24
200.103.192.0/19 maxlen: 24
200.219.64.0/20 maxlen: 24
200.219.96.0/19 maxlen: 24
200.222.160.0/19 maxlen: 24
200.234.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 08:47:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205 (0xcd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Validity
Not Before: Jun 24 17:18:09 2026 GMT
Not After : Jul 30 00:00:00 2027 GMT
Subject: CN=6a3c1150-6cda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:81:22:5b:c0:42:79:b9:d5:60:e2:ba:50:7d:
b7:d3:b2:57:d7:9e:26:a1:4f:ea:74:28:24:20:c0:
9e:9c:78:45:eb:bc:ce:71:e0:32:51:b9:6a:ab:ea:
f9:0d:20:b5:b8:aa:ca:d9:e6:ad:35:95:84:bc:c2:
f3:06:c0:df:7c:26:c4:b3:ec:3f:af:55:8a:cf:84:
30:d7:77:2f:32:a3:8a:4e:8a:95:60:b1:14:c6:b8:
79:e8:f2:f1:3b:07:af:b9:96:9e:f8:68:87:b9:d7:
36:86:ba:0d:72:4e:94:99:e9:b9:0a:b9:c2:2c:46:
5b:d6:81:ec:a3:6d:b8:98:43:39:fc:26:14:f6:25:
98:9e:c7:3e:38:4a:3b:69:0d:9c:85:72:83:a3:b0:
61:37:0a:35:e6:e4:ba:e8:c2:9c:4a:24:8d:3a:87:
7e:9f:85:1a:7f:b8:8a:c2:71:7a:5f:b0:48:93:8c:
09:e1:95:16:94:f3:aa:0f:ca:c9:3d:af:25:ec:81:
d9:26:c5:8a:75:cd:ca:bf:c0:89:e4:49:e4:82:27:
44:3d:ba:12:f1:cb:96:3f:59:7c:31:d5:75:53:60:
27:3b:c1:dd:00:7f:51:d8:bf:6d:2a:03:ac:2c:28:
90:d6:57:b0:6d:2a:d8:f2:38:7a:e7:ea:3c:c2:b8:
bc:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:4E:50:AF:4C:FB:B3:CD:09:2B:04:27:25:9B:31:AB:BB:7B:E3
X509v3 Authority Key Identifier:
keyid:9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/1E6A1BFC6EAD11F185C6581561A30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
179.252.64.0/20
179.254.0.0/20
186.241.32.0/19
186.241.144.0/20
186.242.224.0/19
186.244.0.0/20
186.244.32.0-186.244.95.255
186.247.112.0/20
186.247.144.0/20
187.5.160.0/20
187.14.0.0/19
187.40.96.0/19
189.49.0.0/18
189.72.224.0/20
189.73.64.0/19
189.73.160.0/19
189.73.208.0/20
189.74.32.0-189.74.79.255
189.74.192.0/19
189.75.240.0/20
191.217.64.0/20
191.218.192.0/18
191.219.32.0/19
191.219.96.0/19
191.219.160.0/20
191.223.96.0/19
191.223.240.0/20
200.97.192.0/18
200.102.208.0-200.102.239.255
200.103.80.0/20
200.103.160.0/20
200.103.192.0/19
200.219.64.0/20
200.219.96.0/19
200.222.160.0/19
200.234.16.0/20
Signature Algorithm: sha256WithRSAEncryption
df:7b:1e:0a:f5:23:29:e1:ef:e0:d4:aa:d0:08:75:98:f8:98:
15:b1:0e:0d:0d:e6:3d:60:75:af:66:e4:08:57:51:b4:bc:70:
4d:74:de:20:fb:8f:d3:59:10:57:58:76:d7:92:e2:c1:88:37:
2c:9f:3c:0c:fa:e0:a4:25:a8:c4:95:aa:e8:1c:db:9f:f9:45:
50:b0:f3:ee:0c:05:72:4c:2b:d6:bf:7d:df:14:f4:0e:ff:63:
a0:70:e1:c2:40:2d:e4:c9:18:d5:ae:7a:b0:46:4a:cd:5d:4b:
c6:8f:59:a0:13:2f:41:13:86:7f:44:3f:f3:74:e3:47:b4:c1:
3e:0f:21:77:fc:7a:1a:18:6b:f1:21:3e:2e:2a:cc:b1:06:3a:
46:61:b6:15:97:0f:3d:55:aa:12:45:44:36:21:62:2f:69:c7:
ab:73:4a:59:43:d3:0e:30:45:7c:c5:fd:7d:23:69:7c:16:72:
7f:46:6e:ac:ac:e0:ba:f5:26:8e:6f:30:18:0c:73:67:67:c3:
4b:e8:ff:e8:a3:1e:84:dc:98:f8:75:c4:59:a5:03:da:df:71:
8e:e7:e8:87:5f:88:30:9b:68:48:42:bb:77:dc:31:f3:0a:22:
48:cf:7c:ab:89:cb:18:c2:28:da:d2:50:fe:71:55:9c:88:5f:
71:49:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:45 2026 by rpki-client