Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/5FADE68E288811EE97A1EC5CC4F9AE02.roa
File: 5FADE68E288811EE97A1EC5CC4F9AE02.roa (raw, json)
Hash identifier: WQc9hbcV/9/ZJvWP0KRffXJvpdZU9wVHnwh3amFuHz0=
Subject key identifier: E8:B9:01:16:EA:E4:33:C1:BF:EA:EA:E0:19:61:73:A7:85:FC:22:20
Certificate issuer: /CN=A9136DD6/serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Certificate serial: 112C
Authority key identifier: 7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/5FADE68E288811EE97A1EC5CC4F9AE02.roa
Signing time: Sun 01 Mar 2026 15:57:11 +0000
ROA not before: Wed 26 Nov 2025 17:06:29 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 17547
IP address blocks: 64.45.0.0/18 maxlen: 19
64.45.0.0/24 maxlen: 24
129.126.0.0/16 maxlen: 17
129.126.0.0/24 maxlen: 24
129.126.1.0/24 maxlen: 24
129.126.2.0/24 maxlen: 24
129.126.3.0/24 maxlen: 24
129.126.4.0/24 maxlen: 24
129.126.5.0/24 maxlen: 24
129.126.6.0/24 maxlen: 24
129.126.7.0/24 maxlen: 24
129.126.8.0/24 maxlen: 24
129.126.9.0/24 maxlen: 24
129.126.10.0/24 maxlen: 24
129.126.11.0/24 maxlen: 24
129.126.12.0/24 maxlen: 24
129.126.13.0/24 maxlen: 24
129.126.14.0/24 maxlen: 24
129.126.15.0/24 maxlen: 24
129.126.16.0/24 maxlen: 24
129.126.17.0/24 maxlen: 24
129.126.18.0/24 maxlen: 24
129.126.19.0/24 maxlen: 24
129.126.20.0/24 maxlen: 24
129.126.21.0/24 maxlen: 24
129.126.22.0/24 maxlen: 24
129.126.23.0/24 maxlen: 24
129.126.24.0/24 maxlen: 24
129.126.25.0/24 maxlen: 24
129.126.26.0/24 maxlen: 24
129.126.27.0/24 maxlen: 24
129.126.28.0/24 maxlen: 24
129.126.29.0/24 maxlen: 24
129.126.30.0/24 maxlen: 24
129.126.31.0/24 maxlen: 24
129.126.32.0/22 maxlen: 22
129.126.32.0/24 maxlen: 24
129.126.33.0/24 maxlen: 24
129.126.34.0/24 maxlen: 24
129.126.35.0/24 maxlen: 24
129.126.36.0/22 maxlen: 22
129.126.36.0/24 maxlen: 24
129.126.37.0/24 maxlen: 24
129.126.38.0/24 maxlen: 24
129.126.40.0/24 maxlen: 24
129.126.41.0/24 maxlen: 24
129.126.43.0/24 maxlen: 24
129.126.44.0/24 maxlen: 24
129.126.45.0/24 maxlen: 24
129.126.46.0/24 maxlen: 24
129.126.47.0/24 maxlen: 24
129.126.48.0/24 maxlen: 24
129.126.49.0/24 maxlen: 24
129.126.50.0/24 maxlen: 24
129.126.51.0/24 maxlen: 24
129.126.52.0/24 maxlen: 24
129.126.53.0/24 maxlen: 24
129.126.54.0/24 maxlen: 24
129.126.55.0/24 maxlen: 24
129.126.56.0/24 maxlen: 24
129.126.57.0/24 maxlen: 24
129.126.58.0/24 maxlen: 24
129.126.59.0/24 maxlen: 24
129.126.60.0/24 maxlen: 24
129.126.61.0/24 maxlen: 24
129.126.62.0/24 maxlen: 24
129.126.63.0/24 maxlen: 24
129.126.64.0/24 maxlen: 24
129.126.65.0/24 maxlen: 24
129.126.66.0/24 maxlen: 24
129.126.67.0/24 maxlen: 24
129.126.68.0/24 maxlen: 24
129.126.69.0/24 maxlen: 24
129.126.70.0/24 maxlen: 24
129.126.71.0/24 maxlen: 24
129.126.72.0/24 maxlen: 24
129.126.73.0/24 maxlen: 24
129.126.74.0/24 maxlen: 24
129.126.75.0/24 maxlen: 24
129.126.76.0/24 maxlen: 24
129.126.77.0/24 maxlen: 24
129.126.78.0/24 maxlen: 24
129.126.79.0/24 maxlen: 24
129.126.80.0/24 maxlen: 24
129.126.81.0/24 maxlen: 24
129.126.82.0/24 maxlen: 24
129.126.83.0/24 maxlen: 24
129.126.84.0/24 maxlen: 24
129.126.85.0/24 maxlen: 24
129.126.86.0/24 maxlen: 24
129.126.87.0/24 maxlen: 24
129.126.88.0/24 maxlen: 24
129.126.89.0/24 maxlen: 24
129.126.90.0/24 maxlen: 24
129.126.91.0/24 maxlen: 24
129.126.92.0/24 maxlen: 24
129.126.93.0/24 maxlen: 24
129.126.94.0/24 maxlen: 24
129.126.95.0/24 maxlen: 24
129.126.96.0/24 maxlen: 24
129.126.97.0/24 maxlen: 24
129.126.98.0/24 maxlen: 24
129.126.99.0/24 maxlen: 24
129.126.100.0/24 maxlen: 24
129.126.101.0/24 maxlen: 24
129.126.102.0/24 maxlen: 24
129.126.103.0/24 maxlen: 24
129.126.104.0/24 maxlen: 24
129.126.105.0/24 maxlen: 24
129.126.106.0/24 maxlen: 24
129.126.107.0/24 maxlen: 24
129.126.108.0/24 maxlen: 24
129.126.109.0/24 maxlen: 24
129.126.110.0/24 maxlen: 24
129.126.111.0/24 maxlen: 24
129.126.112.0/24 maxlen: 24
129.126.113.0/24 maxlen: 24
129.126.114.0/24 maxlen: 24
129.126.115.0/24 maxlen: 24
129.126.116.0/24 maxlen: 24
129.126.117.0/24 maxlen: 24
129.126.118.0/24 maxlen: 24
129.126.119.0/24 maxlen: 24
129.126.120.0/24 maxlen: 24
129.126.121.0/24 maxlen: 24
129.126.122.0/24 maxlen: 24
129.126.123.0/24 maxlen: 24
129.126.124.0/24 maxlen: 24
129.126.125.0/24 maxlen: 24
129.126.126.0/24 maxlen: 24
129.126.127.0/24 maxlen: 24
129.126.128.0/20 maxlen: 20
129.126.128.0/24 maxlen: 24
129.126.129.0/24 maxlen: 24
129.126.130.0/24 maxlen: 24
129.126.131.0/24 maxlen: 24
129.126.132.0/24 maxlen: 24
129.126.134.0/24 maxlen: 24
129.126.135.0/24 maxlen: 24
129.126.136.0/24 maxlen: 24
129.126.137.0/24 maxlen: 24
129.126.138.0/24 maxlen: 24
129.126.139.0/24 maxlen: 24
129.126.140.0/24 maxlen: 24
129.126.141.0/24 maxlen: 24
129.126.142.0/24 maxlen: 24
129.126.143.0/24 maxlen: 24
129.126.144.0/24 maxlen: 24
129.126.145.0/24 maxlen: 24
129.126.146.0/24 maxlen: 24
129.126.147.0/24 maxlen: 24
129.126.148.0/24 maxlen: 24
129.126.149.0/24 maxlen: 24
129.126.150.0/24 maxlen: 24
129.126.151.0/24 maxlen: 24
129.126.152.0/24 maxlen: 24
129.126.153.0/24 maxlen: 24
129.126.154.0/24 maxlen: 24
129.126.155.0/24 maxlen: 24
129.126.156.0/24 maxlen: 24
129.126.157.0/24 maxlen: 24
129.126.158.0/24 maxlen: 24
129.126.159.0/24 maxlen: 24
129.126.160.0/24 maxlen: 24
129.126.161.0/24 maxlen: 24
129.126.162.0/24 maxlen: 24
129.126.163.0/24 maxlen: 24
129.126.164.0/24 maxlen: 24
129.126.165.0/24 maxlen: 24
129.126.166.0/24 maxlen: 24
129.126.167.0/24 maxlen: 24
129.126.168.0/24 maxlen: 24
129.126.169.0/24 maxlen: 24
129.126.170.0/24 maxlen: 24
129.126.171.0/24 maxlen: 24
129.126.172.0/24 maxlen: 24
129.126.173.0/24 maxlen: 24
129.126.174.0/24 maxlen: 24
129.126.175.0/24 maxlen: 24
129.126.176.0/24 maxlen: 24
129.126.177.0/24 maxlen: 24
129.126.178.0/24 maxlen: 24
129.126.179.0/24 maxlen: 24
129.126.180.0/24 maxlen: 24
129.126.181.0/24 maxlen: 24
129.126.182.0/24 maxlen: 24
129.126.183.0/24 maxlen: 24
129.126.184.0/24 maxlen: 24
129.126.185.0/24 maxlen: 24
129.126.186.0/24 maxlen: 24
129.126.187.0/24 maxlen: 24
129.126.188.0/24 maxlen: 24
129.126.189.0/24 maxlen: 24
129.126.190.0/24 maxlen: 24
129.126.191.0/24 maxlen: 24
129.126.192.0/24 maxlen: 24
129.126.193.0/24 maxlen: 24
129.126.194.0/24 maxlen: 24
129.126.195.0/24 maxlen: 24
129.126.196.0/24 maxlen: 24
129.126.197.0/24 maxlen: 24
129.126.198.0/24 maxlen: 24
129.126.199.0/24 maxlen: 24
129.126.200.0/24 maxlen: 24
129.126.201.0/24 maxlen: 24
129.126.202.0/24 maxlen: 24
129.126.203.0/24 maxlen: 24
129.126.204.0/24 maxlen: 24
129.126.205.0/24 maxlen: 24
129.126.206.0/24 maxlen: 24
129.126.207.0/24 maxlen: 24
129.126.210.0/24 maxlen: 24
129.126.211.0/24 maxlen: 24
129.126.212.0/24 maxlen: 24
129.126.213.0/24 maxlen: 24
129.126.214.0/24 maxlen: 24
129.126.215.0/24 maxlen: 24
129.126.216.0/24 maxlen: 24
129.126.217.0/24 maxlen: 24
129.126.218.0/24 maxlen: 24
129.126.219.0/24 maxlen: 24
129.126.220.0/24 maxlen: 24
129.126.221.0/24 maxlen: 24
129.126.222.0/24 maxlen: 24
129.126.223.0/24 maxlen: 24
129.126.224.0/24 maxlen: 24
129.126.225.0/24 maxlen: 24
129.126.226.0/24 maxlen: 24
129.126.227.0/24 maxlen: 24
129.126.228.0/24 maxlen: 24
129.126.229.0/24 maxlen: 24
129.126.230.0/24 maxlen: 24
129.126.231.0/24 maxlen: 24
129.126.232.0/24 maxlen: 24
129.126.233.0/24 maxlen: 24
129.126.234.0/24 maxlen: 24
129.126.235.0/24 maxlen: 24
129.126.236.0/24 maxlen: 24
129.126.237.0/24 maxlen: 24
129.126.238.0/24 maxlen: 24
129.126.239.0/24 maxlen: 24
129.126.240.0/24 maxlen: 24
129.126.241.0/24 maxlen: 24
129.126.242.0/24 maxlen: 24
129.126.243.0/24 maxlen: 24
129.126.244.0/24 maxlen: 24
129.126.245.0/24 maxlen: 24
129.126.246.0/24 maxlen: 24
129.126.247.0/24 maxlen: 24
129.126.248.0/24 maxlen: 24
129.126.249.0/24 maxlen: 24
129.126.250.0/24 maxlen: 24
129.126.251.0/24 maxlen: 24
129.126.252.0/24 maxlen: 24
129.126.253.0/24 maxlen: 24
129.126.254.0/24 maxlen: 24
129.126.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 17:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4396 (0x112c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=7C7CA081950DAEFC7C54B8C44698B48E8D7C69B8
Validity
Not Before: Nov 26 17:06:29 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a461d7-6fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:e6:e8:73:e1:7c:1d:3c:33:69:ab:13:23:
04:e5:ad:3b:7f:3b:cf:90:70:34:bf:7c:1c:8b:56:
38:f1:1f:7e:6c:86:81:16:a9:0d:09:88:bc:a7:9b:
f3:0e:03:77:53:49:92:fc:a1:7c:41:09:a2:f6:70:
f0:50:1f:54:8e:a7:1e:fc:f1:1d:19:22:ba:54:b1:
5c:84:88:61:3e:f1:22:c6:81:92:87:fa:0c:f0:e9:
b5:52:2f:81:a7:ca:00:cb:bd:80:37:73:64:db:ed:
35:af:c9:fa:06:f4:f9:df:58:b6:18:5b:7c:a1:83:
23:20:83:7f:0e:17:88:aa:4f:ff:1f:71:21:6b:f4:
4f:48:f2:08:1a:74:21:67:77:48:90:8f:d7:34:f1:
a1:46:90:92:44:d1:6f:f4:16:43:c6:6b:96:f4:97:
3d:e1:df:7c:74:8e:f2:07:38:ab:d6:b7:aa:98:8d:
65:0d:5c:4a:9c:70:93:1e:d0:fb:2e:8f:e7:8b:46:
a8:a3:b0:a5:5e:9a:40:50:21:b8:ec:9c:fb:a8:c2:
fa:1c:74:bd:81:d7:b7:36:57:82:51:a3:e0:9a:d2:
d9:f3:3e:b0:79:55:5d:30:04:62:d4:4f:53:58:64:
09:f2:ed:2e:4e:c6:2a:d9:00:48:e7:4b:85:2a:86:
75:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B9:01:16:EA:E4:33:C1:BF:EA:EA:E0:19:61:73:A7:85:FC:22:20
X509v3 Authority Key Identifier:
keyid:7C:7C:A0:81:95:0D:AE:FC:7C:54:B8:C4:46:98:B4:8E:8D:7C:69:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/fHyggZUNrvx8VLjERpi0jo18abg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fHyggZUNrvx8VLjERpi0jo18abg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/D362A1CA3B3711E9A038AB2AC4F9AE02/5FADE68E288811EE97A1EC5CC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
64.45.0.0/18
129.126.0.0/16
Signature Algorithm: sha256WithRSAEncryption
8e:b1:35:ce:16:27:9f:07:63:fc:d1:b6:7d:81:4a:b3:86:f2:
90:5d:e6:64:0e:cf:a5:5f:b0:4e:6d:f7:a1:df:1f:2e:91:3c:
93:b3:73:2b:62:f9:d8:95:6f:59:e5:6c:41:a7:54:88:63:2a:
56:c4:c6:d7:6e:12:34:e7:19:05:00:24:8a:b3:e8:16:db:f9:
fd:6d:f0:8a:94:b8:5c:4f:1a:4b:1e:2d:d8:8f:65:81:0c:75:
5e:87:86:d1:eb:e6:5d:ce:e8:54:39:93:f2:23:b1:e4:49:67:
1a:bb:2f:df:d4:43:58:be:bd:88:6c:e6:39:7c:17:d1:63:87:
d6:32:a5:5d:65:b5:fe:5e:9d:42:aa:38:90:4b:44:f1:fa:3a:
3e:d5:db:c1:66:3f:9d:ac:b5:19:98:a5:b4:f4:77:23:75:6c:
1e:ee:a8:55:d0:98:f9:44:7b:8e:3c:4f:c7:ce:1b:ae:dd:e7:
ee:1f:95:b6:c8:d4:f2:d5:63:a5:bc:99:2f:c4:c6:4a:2e:0d:
00:99:80:d5:77:89:51:0f:e8:be:f2:03:3e:33:b5:5c:50:25:
97:53:f3:07:f7:09:97:73:77:82:af:d4:71:1d:6e:dc:a6:82:
c7:38:fd:ae:bf:70:e0:05:fd:8b:19:95:ec:66:00:d5:cc:aa:
b2:e1:9a:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:57:40 2026 by rpki-client