Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/7B306A34218D11EC87C96D6DC4F9AE02.roa
File: 7B306A34218D11EC87C96D6DC4F9AE02.roa (raw, json)
Hash identifier: z1v34Fgdw7bv3EfMi5OBpflsJhGYuz2L6xUJ7PMA4Fo=
Subject key identifier: D3:17:13:80:96:86:5A:78:F3:F7:D6:E8:CA:A0:3E:B1:1E:62:4D:4D
Certificate issuer: /CN=A9136DD6/serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Certificate serial: 11A8
Authority key identifier: CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/7B306A34218D11EC87C96D6DC4F9AE02.roa
Signing time: Fri 30 Oct 2026 17:35:25 +0000
ROA not before: Fri 30 Oct 2026 17:35:25 +0000
ROA not after: Mon 31 Jan 2028 00:00:00 +0000
asID: 4773
IP address blocks: 118.189.34.0/24 maxlen: 24
118.189.44.0/22 maxlen: 22
118.189.78.0/24 maxlen: 24
118.189.82.0/24 maxlen: 24
118.189.176.0/20 maxlen: 20
118.189.176.0/22 maxlen: 22
118.189.176.0/24 maxlen: 24
118.189.177.0/24 maxlen: 24
118.189.178.0/24 maxlen: 24
118.189.179.0/24 maxlen: 24
118.189.180.0/23 maxlen: 24
118.189.182.0/23 maxlen: 24
118.189.184.0/21 maxlen: 21
118.189.184.0/24 maxlen: 24
118.189.185.0/24 maxlen: 24
118.189.186.0/24 maxlen: 24
118.189.187.0/24 maxlen: 24
118.189.188.0/24 maxlen: 24
118.189.189.0/24 maxlen: 24
118.189.190.0/24 maxlen: 24
118.189.191.0/24 maxlen: 24
118.189.192.0/20 maxlen: 22
118.189.192.0/24 maxlen: 24
118.189.193.0/24 maxlen: 24
118.189.194.0/24 maxlen: 24
118.189.195.0/24 maxlen: 24
118.189.196.0/24 maxlen: 24
118.189.197.0/24 maxlen: 24
118.189.198.0/24 maxlen: 24
118.189.199.0/24 maxlen: 24
118.189.200.0/24 maxlen: 24
118.189.201.0/24 maxlen: 24
118.189.202.0/24 maxlen: 24
118.189.203.0/24 maxlen: 24
118.189.204.0/24 maxlen: 24
118.189.205.0/24 maxlen: 24
118.189.206.0/24 maxlen: 24
118.189.207.0/24 maxlen: 24
118.189.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 21 Nov 2026 17:09:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4520 (0x11a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9136DD6, serialNumber=CA83D43E5A5E59C7759B1B9B2FBD98A947DFD3BC
Validity
Not Before: Oct 30 17:35:25 2026 GMT
Not After : Jan 31 00:00:00 2028 GMT
Subject: CN=6ae4d55d-d64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:da:d6:7e:cb:15:66:d6:51:46:98:1b:fd:7d:
81:af:eb:e1:78:a6:e9:8d:98:27:b5:84:15:5a:b0:
3d:b3:03:be:90:c9:ae:7f:a4:4e:72:7f:e4:05:10:
88:76:86:f8:28:61:3c:00:52:c1:12:35:04:58:0f:
09:cd:dd:d0:36:d0:0b:37:59:3f:54:98:20:22:dd:
ae:fe:66:6e:de:35:3f:0c:bd:34:bc:99:9f:a9:fe:
d8:6a:88:b6:09:7b:ec:72:e2:78:19:d3:fb:a3:6d:
bd:4e:0a:90:3f:6e:59:d5:08:2a:4f:66:7c:3f:86:
c7:dd:8f:e1:d3:51:ed:da:1b:7a:f1:27:2b:a4:4e:
43:4c:e0:76:2e:7d:fb:6e:87:bc:25:2e:d1:59:0c:
f7:67:5a:11:55:04:77:e2:0c:a3:a3:23:ea:e0:47:
b6:0a:a7:cc:8f:ae:21:e6:eb:2f:b5:71:eb:dd:33:
28:4f:9d:f5:45:a8:14:df:7b:2f:42:8b:f0:ad:a6:
24:46:08:0e:37:02:4d:3d:cc:93:5f:d0:a8:b9:b6:
a1:7f:31:f9:06:b8:15:c0:28:b1:de:4d:38:90:98:
76:5e:55:ce:c8:82:52:98:b9:88:49:1e:58:a6:c2:
f0:77:2f:06:a9:1a:e5:23:07:10:38:a7:e6:fc:bc:
e2:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:17:13:80:96:86:5A:78:F3:F7:D6:E8:CA:A0:3E:B1:1E:62:4D:4D
X509v3 Authority Key Identifier:
keyid:CA:83:D4:3E:5A:5E:59:C7:75:9B:1B:9B:2F:BD:98:A9:47:DF:D3:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/yoPUPlpeWcd1mxubL72YqUff07w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yoPUPlpeWcd1mxubL72YqUff07w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136DD6/DF38955E3B3711E9A038AB2AC4F9AE02/7B306A34218D11EC87C96D6DC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
118.189.34.0/24
118.189.44.0/22
118.189.78.0/24
118.189.82.0/24
118.189.176.0-118.189.215.255
Signature Algorithm: sha256WithRSAEncryption
80:50:b8:84:b1:d9:28:8d:cf:fa:32:e7:80:5d:75:4d:2a:20:
6b:ad:b9:8c:08:62:7b:3f:84:bb:6c:db:e5:81:e2:04:39:12:
c9:e5:c7:18:37:e3:12:f8:21:d8:e0:ea:ce:bb:21:b9:e1:b5:
f2:5c:d9:39:0b:2a:83:4b:a0:31:7a:15:ac:aa:43:f5:a5:dc:
2d:bd:dd:9f:c1:8b:e6:66:cc:7d:2f:eb:5e:2a:fd:14:cd:8b:
ee:5a:bb:17:27:79:94:82:10:00:f0:93:cf:e0:34:44:f0:a5:
a8:d5:1c:a6:86:d8:46:d5:f7:dc:75:9c:10:8d:36:7f:00:61:
02:66:33:a4:c1:4b:09:c7:8f:50:1d:e7:6d:63:58:02:a1:b5:
73:23:48:bf:a9:d6:dd:c9:89:e8:42:21:c3:69:01:d5:67:c5:
a2:6c:f3:e6:a8:a1:c0:f6:c0:fa:ee:fd:e9:0c:66:1a:f6:3d:
63:d9:04:24:28:ff:89:a1:cb:ab:bc:22:ff:49:a4:df:f7:af:
56:fe:f3:db:b1:ca:75:61:96:08:68:09:c1:aa:9d:23:de:a7:
38:ee:42:58:ec:b0:fd:ef:0c:29:52:ce:11:63:9c:90:c9:af:
57:fe:4c:a6:ac:d1:9f:5e:0c:0e:75:91:a6:2b:12:92:3f:05:
de:fe:17:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:09:25 2026 by rpki-client