Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/564EB4ECDFCD11F19844AB94F965CEF9.roa
File: 564EB4ECDFCD11F19844AB94F965CEF9.roa (raw, json)
Hash identifier: KQNs7l226eUTstJW8oeqabNidRrk1NXT25zchFlbMcs=
Subject key identifier: BD:68:4C:05:C2:7E:EC:30:92:97:37:B2:68:79:D9:63:40:BC:73:67
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0FA3
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/564EB4ECDFCD11F19844AB94F965CEF9.roa
Signing time: Sat 14 Nov 2026 01:47:23 +0000
ROA not before: Sat 14 Nov 2026 01:47:23 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 219075
IP address blocks: 61.15.206.0/24 maxlen: 24
61.15.211.0/24 maxlen: 24
61.15.218.0/24 maxlen: 24
61.15.219.0/24 maxlen: 24
61.15.220.0/24 maxlen: 24
61.15.221.0/24 maxlen: 24
61.15.222.0/24 maxlen: 24
61.15.224.0/24 maxlen: 24
61.15.228.0/24 maxlen: 24
61.15.230.0/24 maxlen: 24
61.15.234.0/24 maxlen: 24
61.18.132.0/24 maxlen: 24
61.18.145.0/24 maxlen: 24
61.18.151.0/24 maxlen: 24
61.18.154.0/24 maxlen: 24
61.18.166.0/24 maxlen: 24
61.18.167.0/24 maxlen: 24
61.18.168.0/24 maxlen: 24
61.18.176.0/24 maxlen: 24
61.18.192.0/24 maxlen: 24
61.18.194.0/24 maxlen: 24
61.18.196.0/24 maxlen: 24
61.18.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 14:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4003 (0xfa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Nov 14 01:47:23 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6af7bdab-da48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:46:76:49:82:41:df:15:7c:65:96:f4:a0:ec:
9b:d0:b1:65:d3:5e:7c:12:db:96:2a:f6:48:37:98:
7c:72:7b:67:cc:16:18:c8:98:c2:f1:42:b7:d5:3f:
10:78:e6:53:96:f6:70:90:04:4e:16:04:88:19:4e:
3a:5e:77:92:2d:ff:67:54:df:66:58:4f:da:43:fc:
19:a2:1d:39:54:14:59:15:07:a0:86:a5:db:8b:76:
5f:f5:7f:e5:7b:17:32:58:61:6a:1d:49:8d:f3:98:
3a:40:6d:89:4f:fb:a1:9a:7c:47:e9:b6:01:f3:29:
65:9c:71:f5:fa:c7:bd:cd:28:58:99:b6:4e:82:56:
7a:0c:8a:63:ef:05:7e:a8:ba:46:21:48:fd:d8:0d:
13:6e:9d:15:02:bc:27:e6:bd:ac:b9:c5:db:bb:ae:
37:90:b2:0e:bc:ad:99:60:80:3d:78:69:ef:25:9d:
52:c0:07:e1:e0:3f:3a:c0:03:95:db:47:0b:7c:8f:
e0:18:df:d0:6f:bc:8e:68:f1:d5:7e:bd:e7:4d:0e:
76:2c:2d:7a:49:01:a9:4c:48:4f:ac:12:97:18:82:
fc:cd:db:90:43:4b:60:2c:04:c5:cc:26:17:38:97:
d7:c2:eb:8a:d2:c2:04:5c:a3:b5:24:27:34:8d:f5:
ab:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:68:4C:05:C2:7E:EC:30:92:97:37:B2:68:79:D9:63:40:BC:73:67
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/564EB4ECDFCD11F19844AB94F965CEF9.roa
sbgp-ipAddrBlock: critical
IPv4:
61.15.206.0/24
61.15.211.0/24
61.15.218.0-61.15.222.255
61.15.224.0/24
61.15.228.0/24
61.15.230.0/24
61.15.234.0/24
61.18.132.0/24
61.18.145.0/24
61.18.151.0/24
61.18.154.0/24
61.18.166.0-61.18.168.255
61.18.176.0/24
61.18.192.0/24
61.18.194.0/24
61.18.196.0/24
61.18.221.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:33:76:07:2a:29:9d:52:36:be:8a:97:31:e9:bd:86:a5:29:
61:16:2b:89:26:9f:ae:82:97:22:7d:34:db:b5:7c:92:a8:00:
26:a4:f1:86:59:e5:fa:23:c4:cc:ba:97:98:c1:96:5b:c3:f2:
e6:33:3a:48:31:9f:7d:b6:c9:39:05:3d:5a:39:08:54:10:e8:
7a:0f:6d:1f:db:ec:31:e2:b1:65:9a:7c:48:4d:67:64:c3:dd:
6d:ff:74:00:55:5c:00:8a:4f:5d:d4:72:96:91:40:34:11:87:
18:53:3d:6c:88:ac:73:9d:b0:32:41:1a:04:6b:e9:b3:39:16:
ca:6a:30:4c:4a:66:1c:0a:84:db:3a:40:98:e0:38:f2:05:f2:
79:5f:6a:09:18:42:60:bf:de:2a:b8:f7:07:ea:c0:08:68:03:
87:71:89:e7:65:9f:80:ac:28:c7:d6:c4:f4:92:02:76:aa:c6:
c2:75:04:95:c7:14:fa:77:a9:6d:09:49:ca:35:e7:44:c0:d0:
3d:32:96:1c:98:ca:d5:ea:70:94:ba:34:53:67:be:d8:85:63:
91:5e:68:88:3a:5a:8e:8e:49:6c:11:a2:6f:55:8a:07:de:7a:
aa:16:de:db:0b:ae:f1:25:60:4d:a2:91:01:12:1b:39:5d:93:
a5:26:2b:2d
-----BEGIN CERTIFICATE-----
MIIFrjCCBJagAwIBAgICD6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQxNzIxMTAvBgNVBAUTKEY0NUMwRjRGNDY3Q0UxNTc2RTVFRTlFNDFFNTU3NkYw
MzQ4QzQ2QTcwHhcNMjYxMTE0MDE0NzIzWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02YWY3YmRhYi1kYTQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+0Z2SYJB3xV8ZZb0oOyb0LFl0158EtuWKvZIN5h8cntnzBYYyJjC8UK31T8Q
eOZTlvZwkAROFgSIGU46XneSLf9nVN9mWE/aQ/wZoh05VBRZFQeghqXbi3Zf9X/l
excyWGFqHUmN85g6QG2JT/uhmnxH6bYB8yllnHH1+se9zShYmbZOglZ6DIpj7wV+
qLpGIUj92A0Tbp0VArwn5r2sucXbu643kLIOvK2ZYIA9eGnvJZ1SwAfh4D86wAOV
20cLfI/gGN/Qb7yOaPHVfr3nTQ52LC16SQGpTEhPrBKXGIL8zduQQ0tgLATFzCYX
OJfXwuuK0sIEXKO1JCc0jfWrrQIDAQABo4IC0jCCAs4wHQYDVR0OBBYEFL1oTAXC
fuwwkpc3smh52WNAvHNnMB8GA1UdIwQYMBaAFPRcD09GfOFXbl7p5B5VdvA0jEan
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDE3Mi81OTc2MTI2NDlF
NEQxMUVBOUMyM0FGMUZDNEY5QUUwMi85RndQVDBaODRWZHVYdW5rSGxWMjhEU01S
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlGd1BUMFo4NFZkdVh1bmtIbFYyOERTTVJxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzQxNzIvNTk3NjEyNjQ5RTREMTFFQTlDMjNBRjFGQzRGOUFFMDIvNTY0RUI0RUNE
RkNEMTFGMTk4NDRBQjk0Rjk2NUNFRjkucm9hMIGQBggrBgEFBQcBBwEB/wSBgDB+
MHwEAgABMHYDBAA9D84DBAA9D9MwDAMEAT0P2gMEAD0P3gMEAD0P4AMEAD0P5AME
AD0P5gMEAD0P6gMEAD0ShAMEAD0SkQMEAD0SlwMEAD0SmjAMAwQBPRKmAwQAPRKo
AwQAPRKwAwQAPRLAAwQAPRLCAwQAPRLEAwQAPRLdMA0GCSqGSIb3DQEBCwUAA4IB
AQCsM3YHKimdUja+ipcx6b2GpSlhFiuJJp+ugpcifTTbtXySqAAmpPGGWeX6I8TM
upeYwZZbw/LmMzpIMZ99tsk5BT1aOQhUEOh6D20f2+wx4rFlmnxITWdkw91t/3QA
VVwAik9d1HKWkUA0EYcYUz1siKxznbAyQRoEa+mzORbKajBMSmYcCoTbOkCY4Djy
BfJ5X2oJGEJgv94quPcH6sAIaAOHcYnnZZ+ArCjH1sT0kgJ2qsbCdQSVxxT6d6lt
CUnKNedEwNA9MpYcmMrV6nCUujRTZ77YhWORXmiIOlqOjklsEaJvVYoH3nqqFt7b
C67xJWBNopEBEhs5XZOlJist
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:34:16 2026 by rpki-client