Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/5FADE68E288811EE97A1EC5CC4F9AE02.roa
File: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (raw, json)
Hash identifier: gWT3dZiCVcOTO9tCs4898pv+uN/dOotWc6hnQ6gZf58=
Subject key identifier: 6D:86:7A:23:37:D8:09:C7:6A:E3:E3:7D:E0:F3:D1:3A:BF:38:9C:94
Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial: 11AD
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/5FADE68E288811EE97A1EC5CC4F9AE02.roa
Signing time: Fri 30 Oct 2026 17:35:13 +0000
ROA not before: Fri 30 Oct 2026 17:35:13 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 17547
IP address blocks: 64.45.0.0/18 maxlen: 19
64.45.0.0/24 maxlen: 24
129.126.0.0/16 maxlen: 17
129.126.0.0/24 maxlen: 24
129.126.1.0/24 maxlen: 24
129.126.2.0/24 maxlen: 24
129.126.3.0/24 maxlen: 24
129.126.4.0/24 maxlen: 24
129.126.5.0/24 maxlen: 24
129.126.6.0/24 maxlen: 24
129.126.7.0/24 maxlen: 24
129.126.8.0/24 maxlen: 24
129.126.9.0/24 maxlen: 24
129.126.10.0/24 maxlen: 24
129.126.11.0/24 maxlen: 24
129.126.12.0/24 maxlen: 24
129.126.13.0/24 maxlen: 24
129.126.14.0/24 maxlen: 24
129.126.15.0/24 maxlen: 24
129.126.16.0/24 maxlen: 24
129.126.17.0/24 maxlen: 24
129.126.18.0/24 maxlen: 24
129.126.19.0/24 maxlen: 24
129.126.20.0/24 maxlen: 24
129.126.21.0/24 maxlen: 24
129.126.22.0/24 maxlen: 24
129.126.23.0/24 maxlen: 24
129.126.24.0/24 maxlen: 24
129.126.25.0/24 maxlen: 24
129.126.26.0/24 maxlen: 24
129.126.27.0/24 maxlen: 24
129.126.28.0/24 maxlen: 24
129.126.29.0/24 maxlen: 24
129.126.30.0/24 maxlen: 24
129.126.31.0/24 maxlen: 24
129.126.32.0/22 maxlen: 22
129.126.32.0/24 maxlen: 24
129.126.33.0/24 maxlen: 24
129.126.34.0/24 maxlen: 24
129.126.35.0/24 maxlen: 24
129.126.36.0/22 maxlen: 22
129.126.36.0/24 maxlen: 24
129.126.37.0/24 maxlen: 24
129.126.38.0/24 maxlen: 24
129.126.40.0/24 maxlen: 24
129.126.41.0/24 maxlen: 24
129.126.43.0/24 maxlen: 24
129.126.44.0/24 maxlen: 24
129.126.45.0/24 maxlen: 24
129.126.46.0/24 maxlen: 24
129.126.47.0/24 maxlen: 24
129.126.48.0/24 maxlen: 24
129.126.49.0/24 maxlen: 24
129.126.50.0/24 maxlen: 24
129.126.51.0/24 maxlen: 24
129.126.52.0/24 maxlen: 24
129.126.53.0/24 maxlen: 24
129.126.54.0/24 maxlen: 24
129.126.55.0/24 maxlen: 24
129.126.56.0/24 maxlen: 24
129.126.57.0/24 maxlen: 24
129.126.58.0/24 maxlen: 24
129.126.59.0/24 maxlen: 24
129.126.60.0/24 maxlen: 24
129.126.61.0/24 maxlen: 24
129.126.62.0/24 maxlen: 24
129.126.63.0/24 maxlen: 24
129.126.64.0/24 maxlen: 24
129.126.65.0/24 maxlen: 24
129.126.66.0/24 maxlen: 24
129.126.67.0/24 maxlen: 24
129.126.68.0/24 maxlen: 24
129.126.69.0/24 maxlen: 24
129.126.70.0/24 maxlen: 24
129.126.71.0/24 maxlen: 24
129.126.72.0/24 maxlen: 24
129.126.73.0/24 maxlen: 24
129.126.74.0/24 maxlen: 24
129.126.75.0/24 maxlen: 24
129.126.76.0/24 maxlen: 24
129.126.77.0/24 maxlen: 24
129.126.78.0/24 maxlen: 24
129.126.79.0/24 maxlen: 24
129.126.80.0/24 maxlen: 24
129.126.81.0/24 maxlen: 24
129.126.82.0/24 maxlen: 24
129.126.83.0/24 maxlen: 24
129.126.84.0/24 maxlen: 24
129.126.85.0/24 maxlen: 24
129.126.86.0/24 maxlen: 24
129.126.87.0/24 maxlen: 24
129.126.88.0/24 maxlen: 24
129.126.89.0/24 maxlen: 24
129.126.90.0/24 maxlen: 24
129.126.91.0/24 maxlen: 24
129.126.92.0/24 maxlen: 24
129.126.93.0/24 maxlen: 24
129.126.94.0/24 maxlen: 24
129.126.95.0/24 maxlen: 24
129.126.96.0/24 maxlen: 24
129.126.97.0/24 maxlen: 24
129.126.98.0/24 maxlen: 24
129.126.99.0/24 maxlen: 24
129.126.100.0/24 maxlen: 24
129.126.101.0/24 maxlen: 24
129.126.102.0/24 maxlen: 24
129.126.103.0/24 maxlen: 24
129.126.104.0/24 maxlen: 24
129.126.105.0/24 maxlen: 24
129.126.106.0/24 maxlen: 24
129.126.107.0/24 maxlen: 24
129.126.108.0/24 maxlen: 24
129.126.109.0/24 maxlen: 24
129.126.110.0/24 maxlen: 24
129.126.111.0/24 maxlen: 24
129.126.112.0/24 maxlen: 24
129.126.113.0/24 maxlen: 24
129.126.114.0/24 maxlen: 24
129.126.115.0/24 maxlen: 24
129.126.116.0/24 maxlen: 24
129.126.117.0/24 maxlen: 24
129.126.118.0/24 maxlen: 24
129.126.119.0/24 maxlen: 24
129.126.120.0/24 maxlen: 24
129.126.121.0/24 maxlen: 24
129.126.122.0/24 maxlen: 24
129.126.123.0/24 maxlen: 24
129.126.124.0/24 maxlen: 24
129.126.125.0/24 maxlen: 24
129.126.126.0/24 maxlen: 24
129.126.127.0/24 maxlen: 24
129.126.128.0/20 maxlen: 20
129.126.128.0/24 maxlen: 24
129.126.129.0/24 maxlen: 24
129.126.130.0/24 maxlen: 24
129.126.131.0/24 maxlen: 24
129.126.132.0/24 maxlen: 24
129.126.134.0/24 maxlen: 24
129.126.135.0/24 maxlen: 24
129.126.136.0/24 maxlen: 24
129.126.137.0/24 maxlen: 24
129.126.138.0/24 maxlen: 24
129.126.139.0/24 maxlen: 24
129.126.140.0/24 maxlen: 24
129.126.141.0/24 maxlen: 24
129.126.142.0/24 maxlen: 24
129.126.143.0/24 maxlen: 24
129.126.144.0/24 maxlen: 24
129.126.145.0/24 maxlen: 24
129.126.146.0/24 maxlen: 24
129.126.147.0/24 maxlen: 24
129.126.148.0/24 maxlen: 24
129.126.149.0/24 maxlen: 24
129.126.150.0/24 maxlen: 24
129.126.151.0/24 maxlen: 24
129.126.152.0/24 maxlen: 24
129.126.153.0/24 maxlen: 24
129.126.154.0/24 maxlen: 24
129.126.155.0/24 maxlen: 24
129.126.156.0/24 maxlen: 24
129.126.157.0/24 maxlen: 24
129.126.158.0/24 maxlen: 24
129.126.159.0/24 maxlen: 24
129.126.160.0/24 maxlen: 24
129.126.161.0/24 maxlen: 24
129.126.162.0/24 maxlen: 24
129.126.163.0/24 maxlen: 24
129.126.164.0/24 maxlen: 24
129.126.165.0/24 maxlen: 24
129.126.166.0/24 maxlen: 24
129.126.167.0/24 maxlen: 24
129.126.168.0/24 maxlen: 24
129.126.169.0/24 maxlen: 24
129.126.170.0/24 maxlen: 24
129.126.171.0/24 maxlen: 24
129.126.172.0/24 maxlen: 24
129.126.173.0/24 maxlen: 24
129.126.174.0/24 maxlen: 24
129.126.175.0/24 maxlen: 24
129.126.176.0/24 maxlen: 24
129.126.177.0/24 maxlen: 24
129.126.178.0/24 maxlen: 24
129.126.179.0/24 maxlen: 24
129.126.180.0/24 maxlen: 24
129.126.181.0/24 maxlen: 24
129.126.182.0/24 maxlen: 24
129.126.183.0/24 maxlen: 24
129.126.184.0/24 maxlen: 24
129.126.185.0/24 maxlen: 24
129.126.186.0/24 maxlen: 24
129.126.187.0/24 maxlen: 24
129.126.188.0/24 maxlen: 24
129.126.189.0/24 maxlen: 24
129.126.190.0/24 maxlen: 24
129.126.191.0/24 maxlen: 24
129.126.192.0/24 maxlen: 24
129.126.193.0/24 maxlen: 24
129.126.194.0/24 maxlen: 24
129.126.195.0/24 maxlen: 24
129.126.196.0/24 maxlen: 24
129.126.197.0/24 maxlen: 24
129.126.198.0/24 maxlen: 24
129.126.199.0/24 maxlen: 24
129.126.200.0/24 maxlen: 24
129.126.201.0/24 maxlen: 24
129.126.202.0/24 maxlen: 24
129.126.203.0/24 maxlen: 24
129.126.204.0/24 maxlen: 24
129.126.205.0/24 maxlen: 24
129.126.206.0/24 maxlen: 24
129.126.207.0/24 maxlen: 24
129.126.210.0/24 maxlen: 24
129.126.211.0/24 maxlen: 24
129.126.212.0/24 maxlen: 24
129.126.213.0/24 maxlen: 24
129.126.214.0/24 maxlen: 24
129.126.215.0/24 maxlen: 24
129.126.216.0/24 maxlen: 24
129.126.217.0/24 maxlen: 24
129.126.218.0/24 maxlen: 24
129.126.219.0/24 maxlen: 24
129.126.220.0/24 maxlen: 24
129.126.221.0/24 maxlen: 24
129.126.222.0/24 maxlen: 24
129.126.223.0/24 maxlen: 24
129.126.224.0/24 maxlen: 24
129.126.225.0/24 maxlen: 24
129.126.226.0/24 maxlen: 24
129.126.227.0/24 maxlen: 24
129.126.228.0/24 maxlen: 24
129.126.229.0/24 maxlen: 24
129.126.230.0/24 maxlen: 24
129.126.231.0/24 maxlen: 24
129.126.232.0/24 maxlen: 24
129.126.233.0/24 maxlen: 24
129.126.234.0/24 maxlen: 24
129.126.235.0/24 maxlen: 24
129.126.236.0/24 maxlen: 24
129.126.237.0/24 maxlen: 24
129.126.238.0/24 maxlen: 24
129.126.239.0/24 maxlen: 24
129.126.240.0/24 maxlen: 24
129.126.241.0/24 maxlen: 24
129.126.242.0/24 maxlen: 24
129.126.243.0/24 maxlen: 24
129.126.244.0/24 maxlen: 24
129.126.245.0/24 maxlen: 24
129.126.246.0/24 maxlen: 24
129.126.247.0/24 maxlen: 24
129.126.248.0/24 maxlen: 24
129.126.249.0/24 maxlen: 24
129.126.250.0/24 maxlen: 24
129.126.251.0/24 maxlen: 24
129.126.252.0/24 maxlen: 24
129.126.253.0/24 maxlen: 24
129.126.254.0/24 maxlen: 24
129.126.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 17:09:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4525 (0x11ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Validity
Not Before: Oct 30 17:35:13 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ae4d550-6a29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0a:01:64:8a:0c:c6:31:fc:64:67:a7:0b:d6:
10:3b:fb:0a:13:8c:a0:3d:ea:23:cb:26:ed:ec:74:
25:fd:3e:ba:b2:e1:d8:ca:93:19:50:67:9b:1f:cd:
69:f1:d6:27:7d:ec:bc:60:a4:a7:ee:79:b9:50:9d:
d4:e1:ac:64:65:13:c8:8c:aa:07:86:9d:f5:59:a0:
98:8e:fb:de:9f:e5:71:ae:a6:69:c6:c1:da:a1:20:
80:e7:45:74:2a:da:c0:0d:cb:d0:21:67:27:43:2d:
c8:45:9b:70:03:f2:51:ba:44:63:e3:29:07:47:04:
40:0d:a8:23:bf:65:af:a9:53:2f:8c:db:3c:0d:f1:
b0:2f:cb:fc:46:21:62:ff:ce:36:95:a0:c6:88:00:
43:c0:b1:a0:18:71:b4:70:5a:2f:7b:5d:39:32:68:
1d:f9:c6:b4:d7:90:75:c0:94:1f:7b:ed:ba:d8:71:
ee:70:14:cf:d5:5d:9e:bd:e3:c5:98:bc:ae:3f:45:
1c:23:34:a6:c8:39:e6:ce:c2:6a:3a:a0:22:70:22:
80:8d:71:83:09:08:5e:8c:39:65:fc:02:94:65:74:
33:05:44:8b:26:5f:27:3a:3a:2a:ea:50:86:26:34:
16:97:72:1e:eb:76:ef:19:0c:7d:ae:c6:cd:67:d8:
9e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:86:7A:23:37:D8:09:C7:6A:E3:E3:7D:E0:F3:D1:3A:BF:38:9C:94
X509v3 Authority Key Identifier:
keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/5FADE68E288811EE97A1EC5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
64.45.0.0/18
129.126.0.0/16
Signature Algorithm: sha256WithRSAEncryption
16:35:0a:8a:13:41:d9:6d:fd:a2:dc:64:e1:34:91:ab:79:91:
65:3f:98:0c:db:f0:cd:85:ca:74:8f:3b:e6:0b:e0:1e:d7:dd:
fb:8f:0e:f5:e6:28:9f:d2:52:03:78:bf:8f:fd:0c:49:8b:bf:
eb:77:bc:4c:15:5b:81:3f:61:85:a4:ee:a8:3a:4d:73:5a:5d:
3a:ab:88:aa:aa:64:30:79:b8:f7:2d:9e:ab:98:80:de:94:c4:
e0:18:f7:49:c6:35:7e:02:9c:e6:c8:8b:a7:8e:be:22:86:81:
e2:a2:c0:1d:79:42:2e:00:99:49:79:43:59:14:df:f2:a2:2f:
a0:2e:7f:af:fa:53:f0:81:fb:de:ba:4d:07:d2:6f:ce:6e:64:
f7:9c:5f:48:a6:01:71:c6:10:0c:29:8a:53:d9:0a:bb:67:54:
5a:c7:41:4b:86:27:cc:40:37:8e:73:28:60:c1:de:b5:16:2a:
0c:7f:8f:bd:65:1c:c9:29:e9:61:17:7c:ef:f3:b9:d6:3e:60:
26:e7:c0:be:7c:5d:e5:ec:3b:2c:5e:97:85:c0:75:6a:d8:17:
b1:13:6a:a4:00:22:fc:08:d7:e8:c5:0a:d2:f0:77:e6:5c:e7:
35:71:ca:bb:b8:1d:08:0b:63:33:8e:86:e1:d5:a2:30:f4:99:
10:c5:e2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:18:20 2026 by rpki-client