Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/C0BDE4BAA2C911F1A97622974011F970.roa
File: C0BDE4BAA2C911F1A97622974011F970.roa (raw, json)
Hash identifier: m3/UetBd79b91+uJQUmp0Ahqq9hcRp1hQdoWcYgI8kA=
Subject key identifier: F5:6B:FD:E2:97:A3:85:4C:D6:BE:55:5D:71:00:74:4B:5C:24:2C:5B
Certificate issuer: /CN=A9134172/serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Certificate serial: 0C8E
Authority key identifier: F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/C0BDE4BAA2C911F1A97622974011F970.roa
Signing time: Wed 02 Sep 2026 10:26:47 +0000
ROA not before: Wed 02 Sep 2026 10:26:46 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 219182
IP address blocks: 61.18.129.0/24 maxlen: 24
61.18.131.0/24 maxlen: 24
61.18.132.0/24 maxlen: 24
61.18.135.0/24 maxlen: 24
61.18.144.0/24 maxlen: 24
61.18.145.0/24 maxlen: 24
61.18.146.0/24 maxlen: 24
61.18.148.0/24 maxlen: 24
61.18.150.0/24 maxlen: 24
61.18.152.0/24 maxlen: 24
61.18.153.0/24 maxlen: 24
61.18.155.0/24 maxlen: 24
61.18.157.0/24 maxlen: 24
61.18.159.0/24 maxlen: 24
61.18.161.0/24 maxlen: 24
61.18.163.0/24 maxlen: 24
61.18.165.0/24 maxlen: 24
61.18.192.0/24 maxlen: 24
61.18.193.0/24 maxlen: 24
61.18.194.0/24 maxlen: 24
61.18.195.0/24 maxlen: 24
61.18.197.0/24 maxlen: 24
61.18.198.0/24 maxlen: 24
61.18.200.0/24 maxlen: 24
61.18.203.0/24 maxlen: 24
61.18.206.0/24 maxlen: 24
61.18.207.0/24 maxlen: 24
61.18.211.0/24 maxlen: 24
61.18.213.0/24 maxlen: 24
61.18.215.0/24 maxlen: 24
61.18.216.0/24 maxlen: 24
61.18.217.0/24 maxlen: 24
61.18.218.0/24 maxlen: 24
61.18.219.0/24 maxlen: 24
61.18.220.0/24 maxlen: 24
61.18.221.0/24 maxlen: 24
61.18.222.0/24 maxlen: 24
61.18.223.0/24 maxlen: 24
61.18.224.0/24 maxlen: 24
61.18.226.0/24 maxlen: 24
61.18.228.0/24 maxlen: 24
61.18.229.0/24 maxlen: 24
61.18.230.0/24 maxlen: 24
61.18.231.0/24 maxlen: 24
61.18.232.0/24 maxlen: 24
61.18.234.0/24 maxlen: 24
61.18.236.0/24 maxlen: 24
61.18.240.0/24 maxlen: 24
61.18.241.0/24 maxlen: 24
61.18.242.0/24 maxlen: 24
61.18.243.0/24 maxlen: 24
61.18.244.0/24 maxlen: 24
61.18.245.0/24 maxlen: 24
61.18.246.0/24 maxlen: 24
61.18.247.0/24 maxlen: 24
61.18.248.0/24 maxlen: 24
61.18.249.0/24 maxlen: 24
61.18.250.0/24 maxlen: 24
61.18.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 12:18:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3214 (0xc8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134172, serialNumber=F45C0F4F467CE1576E5EE9E41E5576F0348C46A7
Validity
Not Before: Sep 2 10:26:46 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6a97f9e6-4590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7a:ae:81:f4:04:4c:01:aa:8f:1a:7b:01:b1:
ae:69:09:3b:f6:04:be:e0:83:ac:be:40:cb:aa:fe:
e6:45:f2:aa:67:cf:0a:26:da:02:98:99:86:3d:e8:
4f:25:3e:ab:a0:32:e4:71:eb:7c:00:97:1d:46:10:
a9:07:3f:60:f8:fb:74:1c:f0:52:3f:90:00:ba:c4:
ef:2a:b4:3d:3b:e8:0b:85:4e:12:59:0e:56:c0:36:
2e:e9:c9:8e:59:db:50:50:a2:aa:5b:4b:82:b7:23:
e9:82:fa:1f:1d:4b:b7:1b:38:27:e3:14:0e:15:cb:
0a:9d:7e:87:d8:63:d1:23:33:fd:fe:16:9e:29:94:
77:f4:d9:4e:a3:15:f2:30:78:96:fe:ee:ab:cc:63:
a6:5f:54:75:61:02:ef:a9:98:19:c3:c4:ca:01:7f:
b1:21:03:cf:e9:5f:4a:0d:c9:ff:1c:a1:21:f8:bc:
10:39:f8:88:83:47:fc:db:e9:f8:a2:a9:b1:cd:a3:
cf:a4:54:81:97:6e:70:dd:03:d0:5f:b8:99:80:2c:
2b:e5:98:80:b8:7b:13:c7:fb:0e:39:9f:8e:6a:87:
b6:36:36:c5:a1:03:92:14:a4:0c:6f:3e:83:55:97:
02:c0:90:44:1f:76:12:06:d6:79:cc:5c:f3:21:5e:
b4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6B:FD:E2:97:A3:85:4C:D6:BE:55:5D:71:00:74:4B:5C:24:2C:5B
X509v3 Authority Key Identifier:
keyid:F4:5C:0F:4F:46:7C:E1:57:6E:5E:E9:E4:1E:55:76:F0:34:8C:46:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/9FwPT0Z84VduXunkHlV28DSMRqc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FwPT0Z84VduXunkHlV28DSMRqc.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134172/597612649E4D11EA9C23AF1FC4F9AE02/C0BDE4BAA2C911F1A97622974011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
61.18.129.0/24
61.18.131.0-61.18.132.255
61.18.135.0/24
61.18.144.0-61.18.146.255
61.18.148.0/24
61.18.150.0/24
61.18.152.0/23
61.18.155.0/24
61.18.157.0/24
61.18.159.0/24
61.18.161.0/24
61.18.163.0/24
61.18.165.0/24
61.18.192.0/22
61.18.197.0-61.18.198.255
61.18.200.0/24
61.18.203.0/24
61.18.206.0/23
61.18.211.0/24
61.18.213.0/24
61.18.215.0-61.18.224.255
61.18.226.0/24
61.18.228.0-61.18.232.255
61.18.234.0/24
61.18.236.0/24
61.18.240.0-61.18.251.255
Signature Algorithm: sha256WithRSAEncryption
96:41:92:ce:67:28:df:c1:30:ad:37:6a:61:80:ba:c6:fa:8f:
1a:5f:ca:62:b1:a0:d9:8e:69:d2:0e:7b:9c:73:e0:20:5f:1c:
77:77:d9:58:ac:a0:95:32:31:7a:45:da:2a:97:b1:b9:7e:f1:
42:f3:54:14:92:8d:33:f7:cf:72:18:14:27:88:db:1d:db:36:
3a:bd:33:11:74:80:30:ca:17:0d:d5:8e:ac:e7:ca:3a:32:fb:
0a:97:df:5e:4b:ce:38:15:24:85:ef:a0:d0:5c:35:83:cc:b4:
8a:eb:5a:15:e2:d3:71:48:88:07:3a:b7:3e:c3:42:ef:3b:bf:
3a:28:5b:3b:5e:be:63:9b:e9:9c:a9:a0:4e:74:29:34:72:a7:
02:94:ea:91:a9:4a:1e:a4:b4:e0:95:ad:55:10:d7:00:61:43:
52:ac:3f:04:22:9a:ba:ca:e7:70:70:cc:4e:c3:9b:f4:99:40:
1b:4b:99:ac:f8:83:7c:60:20:b4:05:9a:ae:5c:a6:9c:40:55:
be:21:ed:a1:8e:73:e0:25:df:6d:b9:77:c6:59:f9:fe:bf:48:
c3:69:b8:c6:10:4a:5e:4b:8e:48:56:20:05:5f:80:db:87:ec:
86:75:7d:d6:0b:3f:36:98:0a:73:fd:e9:95:be:06:dc:d1:d5:
c4:d8:34:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:29:08 2026 by rpki-client