Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/37E2DBD0D65611F1B87D0DE11C66CEF9.roa
File: 37E2DBD0D65611F1B87D0DE11C66CEF9.roa (raw, json)
Hash identifier: Gbtdt/MuwvTSm/uoSrFuBJ19rMnQRa8t/8xkBAoxSCk=
Subject key identifier: B5:54:46:86:C8:63:E5:53:C8:87:83:F3:95:81:DE:83:79:F6:F5:F7
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0FA4
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/37E2DBD0D65611F1B87D0DE11C66CEF9.roa
Signing time: Sat 14 Nov 2026 01:47:25 +0000
ROA not before: Sat 14 Nov 2026 01:47:25 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 834
IP address blocks: 61.15.192.0/24 maxlen: 24
61.15.194.0/24 maxlen: 24
61.15.195.0/24 maxlen: 24
61.15.197.0/24 maxlen: 24
61.15.198.0/24 maxlen: 24
61.15.199.0/24 maxlen: 24
61.15.202.0/24 maxlen: 24
61.15.203.0/24 maxlen: 24
61.15.204.0/24 maxlen: 24
61.15.205.0/24 maxlen: 24
61.15.213.0/24 maxlen: 24
61.15.215.0/24 maxlen: 24
61.15.233.0/24 maxlen: 24
61.15.240.0/24 maxlen: 24
61.18.129.0/24 maxlen: 24
61.18.131.0/24 maxlen: 24
61.18.134.0/24 maxlen: 24
61.18.135.0/24 maxlen: 24
61.18.144.0/24 maxlen: 24
61.18.146.0/24 maxlen: 24
61.18.147.0/24 maxlen: 24
61.18.148.0/24 maxlen: 24
61.18.149.0/24 maxlen: 24
61.18.150.0/24 maxlen: 24
61.18.152.0/24 maxlen: 24
61.18.153.0/24 maxlen: 24
61.18.155.0/24 maxlen: 24
61.18.156.0/24 maxlen: 24
61.18.157.0/24 maxlen: 24
61.18.158.0/24 maxlen: 24
61.18.159.0/24 maxlen: 24
61.18.160.0/24 maxlen: 24
61.18.161.0/24 maxlen: 24
61.18.162.0/24 maxlen: 24
61.18.163.0/24 maxlen: 24
61.18.164.0/24 maxlen: 24
61.18.165.0/24 maxlen: 24
61.18.171.0/24 maxlen: 24
61.18.172.0/24 maxlen: 24
61.18.173.0/24 maxlen: 24
61.18.174.0/24 maxlen: 24
61.18.175.0/24 maxlen: 24
61.18.177.0/24 maxlen: 24
61.18.178.0/24 maxlen: 24
61.18.179.0/24 maxlen: 24
61.18.180.0/24 maxlen: 24
61.18.182.0/24 maxlen: 24
61.18.185.0/24 maxlen: 24
61.18.187.0/24 maxlen: 24
61.18.188.0/24 maxlen: 24
61.18.190.0/24 maxlen: 24
61.18.191.0/24 maxlen: 24
61.18.193.0/24 maxlen: 24
61.18.195.0/24 maxlen: 24
61.18.197.0/24 maxlen: 24
61.18.198.0/24 maxlen: 24
61.18.199.0/24 maxlen: 24
61.18.200.0/24 maxlen: 24
61.18.201.0/24 maxlen: 24
61.18.202.0/24 maxlen: 24
61.18.203.0/24 maxlen: 24
61.18.205.0/24 maxlen: 24
61.18.206.0/24 maxlen: 24
61.18.207.0/24 maxlen: 24
61.18.210.0/24 maxlen: 24
61.18.211.0/24 maxlen: 24
61.18.212.0/24 maxlen: 24
61.18.213.0/24 maxlen: 24
61.18.214.0/24 maxlen: 24
61.18.215.0/24 maxlen: 24
61.18.216.0/24 maxlen: 24
61.18.217.0/24 maxlen: 24
61.18.218.0/24 maxlen: 24
61.18.219.0/24 maxlen: 24
61.18.220.0/24 maxlen: 24
61.18.222.0/24 maxlen: 24
61.18.223.0/24 maxlen: 24
61.18.224.0/24 maxlen: 24
61.18.225.0/24 maxlen: 24
61.18.226.0/24 maxlen: 24
61.18.227.0/24 maxlen: 24
61.18.228.0/24 maxlen: 24
61.18.229.0/24 maxlen: 24
61.18.230.0/24 maxlen: 24
61.18.231.0/24 maxlen: 24
61.18.232.0/24 maxlen: 24
61.18.233.0/24 maxlen: 24
61.18.234.0/24 maxlen: 24
61.18.235.0/24 maxlen: 24
61.18.236.0/24 maxlen: 24
61.18.237.0/24 maxlen: 24
61.18.238.0/24 maxlen: 24
61.18.239.0/24 maxlen: 24
61.18.240.0/24 maxlen: 24
61.18.241.0/24 maxlen: 24
61.18.242.0/24 maxlen: 24
61.18.243.0/24 maxlen: 24
61.18.244.0/24 maxlen: 24
61.18.245.0/24 maxlen: 24
61.18.246.0/24 maxlen: 24
61.18.247.0/24 maxlen: 24
61.18.248.0/24 maxlen: 24
61.18.249.0/24 maxlen: 24
61.18.250.0/24 maxlen: 24
61.18.251.0/24 maxlen: 24
61.18.254.0/24 maxlen: 24
203.168.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 01:47:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4004 (0xfa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Nov 14 01:47:25 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6af7bdad-1a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:48:66:6d:4a:58:22:e1:9c:b2:5a:2d:3e:33:
b4:cc:2a:ed:a9:2f:de:df:95:01:38:04:71:15:45:
c0:8d:a2:7b:77:7d:f1:46:86:ed:d7:ac:ad:46:54:
30:b1:69:0a:36:98:04:05:10:a2:79:dc:25:70:2e:
2a:1f:8d:0d:38:3a:5e:20:4b:13:61:ba:95:bd:d4:
60:fe:f1:ec:9a:f8:24:bd:af:3e:fc:c8:c7:f8:5d:
9b:7f:39:77:04:1a:2c:b8:b6:e2:84:c9:22:ee:d3:
41:7f:74:06:85:63:fa:05:ca:42:55:01:88:85:69:
9b:c7:d4:7d:28:04:99:c9:6d:a1:46:b1:b8:cf:30:
00:29:b6:62:ba:5d:24:31:17:3f:3d:fc:25:47:f3:
46:10:68:f1:c2:f8:8d:24:8b:d6:f1:62:eb:1f:75:
a0:4a:95:17:d9:73:35:0e:54:7f:60:93:81:b6:df:
78:0a:50:00:91:50:ce:b7:a9:0e:35:96:61:03:37:
99:ca:e9:16:fa:3e:b5:ef:36:75:95:20:bc:a4:2c:
8e:55:9c:6f:57:ce:4f:e0:ee:0d:8e:3e:47:c3:a4:
60:4b:ec:cb:90:00:55:f4:f7:a8:37:80:9e:ac:10:
36:ae:8c:f8:e6:60:87:16:db:34:99:5a:38:7d:a5:
07:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:54:46:86:C8:63:E5:53:C8:87:83:F3:95:81:DE:83:79:F6:F5:F7
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/37E2DBD0D65611F1B87D0DE11C66CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
61.15.192.0/24
61.15.194.0/23
61.15.197.0-61.15.199.255
61.15.202.0-61.15.205.255
61.15.213.0/24
61.15.215.0/24
61.15.233.0/24
61.15.240.0/24
61.18.129.0/24
61.18.131.0/24
61.18.134.0/23
61.18.144.0/24
61.18.146.0-61.18.150.255
61.18.152.0/23
61.18.155.0-61.18.165.255
61.18.171.0-61.18.175.255
61.18.177.0-61.18.180.255
61.18.182.0/24
61.18.185.0/24
61.18.187.0-61.18.188.255
61.18.190.0/23
61.18.193.0/24
61.18.195.0/24
61.18.197.0-61.18.203.255
61.18.205.0-61.18.207.255
61.18.210.0-61.18.220.255
61.18.222.0-61.18.251.255
61.18.254.0/24
203.168.254.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b4:46:21:9d:74:bf:6d:ec:68:50:40:e4:59:3a:e0:f7:98:
ae:0e:f0:58:f9:7a:df:d8:c3:5c:97:5e:a4:03:12:55:5d:a7:
d0:94:ce:0a:02:be:ee:80:a2:6a:3a:a1:e6:c3:18:1e:b5:60:
7f:e5:b2:03:84:ae:28:6a:1d:29:ab:5d:0b:08:bb:1a:c6:64:
70:ea:f9:77:04:b0:eb:d5:57:2b:12:bf:90:d4:07:98:57:fa:
5c:f7:78:1e:d6:d6:5c:1b:09:75:6a:45:96:ac:d4:67:43:cd:
23:94:13:c3:f0:53:f1:da:35:2d:8b:8d:8f:ab:5a:f7:29:ec:
bd:e0:e0:2c:b6:23:8b:74:10:19:bb:63:2d:3c:8b:7f:98:12:
7d:3d:8e:a6:77:7f:ad:ba:55:ec:e6:b1:e6:bc:2f:2c:10:de:
56:84:3a:0b:4d:9b:6d:27:91:b7:ef:e8:45:a1:c3:ab:f7:c4:
15:99:53:a0:3a:bb:c0:91:d1:5d:de:9c:4b:7c:d5:3f:8d:72:
cf:ab:12:86:a0:68:cf:e2:41:a2:c8:bc:75:0b:9f:35:f2:44:
04:b1:3f:cd:22:81:46:9c:b3:6c:6f:53:22:12:1d:67:1e:0e:
a2:7b:c5:7f:99:68:0a:a7:6e:d4:48:d1:ab:2b:fc:57:11:55:
2e:34:cf:09
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgICD6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw
MzQ4QzQ2QTcwHhcNMjYxMTE0MDE0NzI1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YWY3YmRhZC0xYTVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzEhmbUpYIuGcslotPjO0zCrtqS/e35UBOARxFUXAjaJ7d33xRobt16ytRlQw
sWkKNpgEBRCiedwlcC4qH40NODpeIEsTYbqVvdRg/vHsmvgkva8+/MjH+F2bfzl3
BBosuLbihMki7tNBf3QGhWP6BcpCVQGIhWmbx9R9KASZyW2hRrG4zzAAKbZiul0k
MRc/PfwlR/NGEGjxwviNJIvW8WLrH3WgSpUX2XM1DlR/YJOBtt94ClAAkVDOt6kO
NZZhAzeZyukW+j617zZ1lSC8pCyOVZxvV85P4O4Njj5Hw6RgS+zLkABV9PeoN4Ce
rBA2roz45mCHFts0mVo4faUHmQIDAQABo4IDajCCA2YwHQYDVR0OBBYEFLVURobI
Y+VTyIeD85WB3oN59vX3MB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF
NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvMzdFMkRCRDBE
NjU2MTFGMUI4N0QwREUxMUM2NkNFRjkucm9hMIIBJwYIKwYBBQUHAQcBAf8EggEW
MIIBEjCCAQ4EAgABMIIBBgMEAD0PwAMEAT0PwjAMAwQAPQ/FAwQDPQ/AMAwDBAE9
D8oDBAE9D8wDBAA9D9UDBAA9D9cDBAA9D+kDBAA9D/ADBAA9EoEDBAA9EoMDBAE9
EoYDBAA9EpAwDAMEAT0SkgMEAD0SlgMEAT0SmDAMAwQAPRKbAwQBPRKkMAwDBAA9
EqsDBAQ9EqAwDAMEAD0SsQMEAD0StAMEAD0StgMEAD0SuTAMAwQAPRK7AwQAPRK8
AwQBPRK+AwQAPRLBAwQAPRLDMAwDBAA9EsUDBAI9EsgwDAMEAD0SzQMEBD0SwDAM
AwQBPRLSAwQAPRLcMAwDBAE9Et4DBAI9EvgDBAA9Ev4DBADLqP4wDQYJKoZIhvcN
AQELBQADggEBAKu0RiGddL9t7GhQQORZOuD3mK4O8Fj5et/Yw1yXXqQDElVdp9CU
zgoCvu6Aomo6oebDGB61YH/lsgOErihqHSmrXQsIuxrGZHDq+XcEsOvVVysSv5DU
B5hX+lz3eB7W1lwbCXVqRZas1GdDzSOUE8PwU/HaNS2LjY+rWvcp7L3g4Cy2I4t0
EBm7Yy08i3+YEn09jqZ3f626Vezmsea8LywQ3laEOgtNm20nkbfv6EWhw6v3xBWZ
U6A6u8CR0V3enEt81T+Ncs+rEoagaM/iQaLIvHULnzXyRASxP80igUacs2xvUyIS
HWceDqJ7xX+ZaAqnbtRI0asr/FcRVS40zwk=
-----END CERTIFICATE-----
Generated at Sat Nov 14 20:48:51 2026 by rpki-client