Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/53647CC8284511EE8A9EF045C4F9AE02.roa
File: 53647CC8284511EE8A9EF045C4F9AE02.roa (raw, json)
Hash identifier: 259/hkBu9AQgxVDNpsj4Tf0esdQuubuLOjUHMhDWH5I=
Subject key identifier: 94:A4:D1:BF:37:4C:2D:72:5C:E9:F7:01:1B:AC:C2:EF:D6:8E:7A:A5
Certificate issuer: /CN=A9136DD6/serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
Certificate serial: 05B2
Authority key identifier: F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/53647CC8284511EE8A9EF045C4F9AE02.roa
Signing time: Fri 30 Oct 2026 17:35:28 +0000
ROA not before: Fri 30 Oct 2026 17:35:27 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 17547
IP address blocks: 178.160.128.0/18 maxlen: 19
178.160.128.0/24 maxlen: 24
178.160.129.0/24 maxlen: 24
178.160.130.0/24 maxlen: 24
178.160.131.0/24 maxlen: 24
178.160.132.0/24 maxlen: 24
178.160.133.0/24 maxlen: 24
178.160.135.0/24 maxlen: 24
178.160.137.0/24 maxlen: 24
178.160.138.0/24 maxlen: 24
178.160.139.0/24 maxlen: 24
178.160.140.0/24 maxlen: 24
178.160.141.0/24 maxlen: 24
178.160.142.0/24 maxlen: 24
178.160.143.0/24 maxlen: 24
178.160.144.0/24 maxlen: 24
178.160.145.0/24 maxlen: 24
178.160.146.0/24 maxlen: 24
178.160.147.0/24 maxlen: 24
178.160.148.0/24 maxlen: 24
178.160.149.0/24 maxlen: 24
178.160.150.0/24 maxlen: 24
178.160.151.0/24 maxlen: 24
178.160.152.0/24 maxlen: 24
178.160.153.0/24 maxlen: 24
178.160.154.0/24 maxlen: 24
178.160.155.0/24 maxlen: 24
178.160.156.0/24 maxlen: 24
178.160.157.0/24 maxlen: 24
178.160.158.0/24 maxlen: 24
178.160.159.0/24 maxlen: 24
178.160.160.0/24 maxlen: 24
178.160.161.0/24 maxlen: 24
178.160.162.0/24 maxlen: 24
178.160.163.0/24 maxlen: 24
178.160.164.0/24 maxlen: 24
178.160.165.0/24 maxlen: 24
178.160.166.0/24 maxlen: 24
178.160.167.0/24 maxlen: 24
178.160.168.0/24 maxlen: 24
178.160.169.0/24 maxlen: 24
178.160.170.0/24 maxlen: 24
178.160.171.0/24 maxlen: 24
178.160.172.0/24 maxlen: 24
178.160.173.0/24 maxlen: 24
178.160.174.0/24 maxlen: 24
178.160.175.0/24 maxlen: 24
178.160.176.0/24 maxlen: 24
178.160.177.0/24 maxlen: 24
178.160.178.0/24 maxlen: 24
178.160.179.0/24 maxlen: 24
178.160.180.0/24 maxlen: 24
178.160.181.0/24 maxlen: 24
178.160.182.0/24 maxlen: 24
178.160.183.0/24 maxlen: 24
178.160.184.0/24 maxlen: 24
178.160.185.0/24 maxlen: 24
178.160.186.0/24 maxlen: 24
178.160.187.0/24 maxlen: 24
178.160.188.0/24 maxlen: 24
178.160.189.0/24 maxlen: 24
178.160.190.0/24 maxlen: 24
178.160.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 17:10:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1458 (0x5b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=F7F9D8A4355D673B9D4E7F155D3A78E5E660FEA5
Validity
Not Before: Oct 30 17:35:27 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ae4d55f-b074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:12:ea:69:6f:55:39:49:78:ad:84:b9:81:25:
75:1e:0e:af:ee:14:92:a7:3a:ff:f4:63:c4:82:55:
28:5c:29:68:21:27:09:41:47:60:05:dd:1f:21:b5:
ad:7f:3b:01:78:a7:1d:44:85:b0:ba:0f:06:c1:03:
41:18:dc:6b:a8:a9:ba:35:48:30:22:ab:7e:d3:f1:
4c:df:bc:e9:b7:ac:57:b4:fe:72:a5:6d:44:00:e7:
04:c3:3c:59:88:5f:ea:d4:7a:80:13:f5:83:d1:92:
8a:71:25:6a:ed:2b:36:59:67:a2:c9:7a:d6:65:91:
6d:9b:17:eb:14:c8:94:81:a3:fe:6a:5f:60:ec:54:
a9:38:53:5e:c5:1e:f0:32:42:41:24:f0:36:72:f7:
35:07:4c:2a:4f:7f:9f:95:c4:88:0d:4d:d6:54:42:
c5:31:f9:f0:ed:b5:52:d2:c5:54:e4:e9:81:23:65:
ad:f2:65:be:f1:c0:26:d4:ce:b1:66:e3:35:c9:93:
56:33:b3:d4:e9:56:90:38:80:72:b6:ad:c6:23:27:
63:bf:d5:94:f9:84:56:a4:96:4d:76:a7:36:72:8a:
73:a1:d4:06:1b:41:11:64:a2:9f:19:de:de:2c:22:
c9:c7:60:e7:a4:d2:21:39:61:c5:84:fc:37:d1:0d:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A4:D1:BF:37:4C:2D:72:5C:E9:F7:01:1B:AC:C2:EF:D6:8E:7A:A5
X509v3 Authority Key Identifier:
keyid:F7:F9:D8:A4:35:5D:67:3B:9D:4E:7F:15:5D:3A:78:E5:E6:60:FE:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/9_nYpDVdZzudTn8VXTp45eZg_qU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/9_nYpDVdZzudTn8VXTp45eZg_qU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D162E03A3D3A11ECBEF77C76C4F9AE02/53647CC8284511EE8A9EF045C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
178.160.128.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:22:0b:fc:f1:f9:17:65:a3:c8:44:53:9b:3b:22:95:03:06:
a0:e4:f3:58:32:56:a2:73:d4:43:9f:91:25:87:2d:00:33:ee:
be:fb:0c:c3:a8:5b:2a:04:5a:24:d5:28:b6:98:9e:a5:09:9d:
ed:7a:fe:aa:93:d7:ff:c0:e9:33:6f:24:57:18:c9:11:6e:a4:
f5:e5:e7:de:09:61:5e:3e:8a:80:27:db:c5:b9:df:9b:2f:fc:
ca:ae:3b:bb:5d:c0:6b:91:f0:ed:68:7f:0c:44:ec:dd:f3:fc:
1b:9d:48:54:62:9d:b7:a1:11:f7:89:a8:2b:51:3c:5a:74:fc:
c8:f8:df:6d:7b:b3:10:7d:c3:8b:40:e9:24:1e:1f:e5:eb:09:
6b:68:16:74:c8:e8:3d:89:37:88:b4:30:34:02:fa:16:ba:0f:
9b:d4:a9:2c:c6:c0:1b:5f:c1:36:03:a8:1d:76:e2:6f:a0:1e:
54:3c:a8:fb:30:29:68:22:df:e3:8c:2d:0f:63:82:dd:21:42:
5f:8c:2b:91:96:04:72:79:18:e3:c2:58:27:0d:57:63:c3:ec:
65:d8:44:b1:07:32:06:85:16:b3:fd:f6:87:01:e8:56:84:30:
84:59:61:0a:19:e6:b4:21:13:7d:ad:12:86:d5:6f:86:0b:6e:
a0:cf:db:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:02:52 2026 by rpki-client