Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/6205FF52113D11F1BF40122E203D8C67.roa
File: 6205FF52113D11F1BF40122E203D8C67.roa (raw, json)
Hash identifier: HYGpX1P0ZQb1AWd79Cf4Iy8OWUD08H2zPMbvoOVsRME=
Subject key identifier: 98:81:AF:F8:7C:A4:3C:2D:B1:98:34:5F:D5:B0:FD:A9:68:48:86:BE
Certificate issuer: /CN=A9146207/serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Certificate serial: 08FD
Authority key identifier: 89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/6205FF52113D11F1BF40122E203D8C67.roa
Signing time: Thu 23 Jul 2026 01:42:31 +0000
ROA not before: Thu 23 Jul 2026 01:42:31 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 4775
IP address blocks: 64.224.21.0/24 maxlen: 24
64.224.96.0/19 maxlen: 19
64.224.128.0/20 maxlen: 20
64.226.56.0/21 maxlen: 21
64.226.56.0/24 maxlen: 24
64.226.57.0/24 maxlen: 24
64.226.58.0/24 maxlen: 24
64.226.59.0/24 maxlen: 24
64.226.60.0/24 maxlen: 24
64.226.61.0/24 maxlen: 24
64.226.62.0/24 maxlen: 24
64.226.63.0/24 maxlen: 24
138.84.64.0/18 maxlen: 18
138.84.64.0/24 maxlen: 24
138.84.65.0/24 maxlen: 24
138.84.66.0/24 maxlen: 24
138.84.67.0/24 maxlen: 24
138.84.69.0/24 maxlen: 24
138.84.70.0/23 maxlen: 23
138.84.70.0/24 maxlen: 24
138.84.71.0/24 maxlen: 24
138.84.72.0/24 maxlen: 24
138.84.73.0/24 maxlen: 24
138.84.74.0/23 maxlen: 23
138.84.74.0/24 maxlen: 24
138.84.75.0/24 maxlen: 24
138.84.76.0/22 maxlen: 22
138.84.78.0/23 maxlen: 23
138.84.110.0/23 maxlen: 23
138.84.112.0/23 maxlen: 23
138.84.114.0/23 maxlen: 23
138.84.126.0/23 maxlen: 23
138.84.128.0/19 maxlen: 19
138.84.136.0/22 maxlen: 22
138.84.140.0/22 maxlen: 22
138.84.152.0/22 maxlen: 22
138.84.156.0/22 maxlen: 22
138.84.192.0/21 maxlen: 21
138.84.192.0/22 maxlen: 22
138.84.196.0/22 maxlen: 22
147.185.169.0/24 maxlen: 24
158.62.0.0/17 maxlen: 17
158.62.106.0/24 maxlen: 24
192.112.243.0/24 maxlen: 24
209.35.160.0/20 maxlen: 20
209.35.160.0/24 maxlen: 24
209.35.161.0/24 maxlen: 24
209.35.162.0/24 maxlen: 24
209.35.163.0/24 maxlen: 24
209.35.164.0/24 maxlen: 24
209.35.165.0/24 maxlen: 24
209.35.166.0/24 maxlen: 24
209.35.167.0/24 maxlen: 24
209.35.169.0/24 maxlen: 24
209.35.170.0/24 maxlen: 24
209.35.171.0/24 maxlen: 24
209.35.172.0/24 maxlen: 24
209.35.173.0/24 maxlen: 24
209.35.174.0/24 maxlen: 24
216.247.0.0/18 maxlen: 18
216.247.80.0/20 maxlen: 20
216.247.80.0/24 maxlen: 24
216.247.81.0/24 maxlen: 24
216.247.82.0/24 maxlen: 24
216.247.83.0/24 maxlen: 24
216.247.84.0/24 maxlen: 24
216.247.85.0/24 maxlen: 24
216.247.86.0/24 maxlen: 24
216.247.87.0/24 maxlen: 24
216.247.88.0/24 maxlen: 24
216.247.89.0/24 maxlen: 24
216.247.90.0/24 maxlen: 24
216.247.91.0/24 maxlen: 24
216.247.92.0/24 maxlen: 24
216.247.93.0/24 maxlen: 24
216.247.94.0/24 maxlen: 24
216.247.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 01:42:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2301 (0x8fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9146207, serialNumber=897E02CCD8EB4039A783D02379C55FEE9F0CEE59
Validity
Not Before: Jul 23 01:42:31 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a617187-9f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a0:9d:58:3a:d3:b7:a7:e9:e6:fa:5a:e3:df:
91:77:a5:fb:7b:8a:96:87:0e:bc:28:28:2b:20:7d:
8d:03:b6:ca:0a:4d:19:1f:45:d6:88:1e:25:fd:ee:
21:ae:de:b0:fb:f2:71:2e:35:79:e7:b2:88:92:3c:
90:72:5b:f4:60:0a:f9:b1:17:b8:70:44:4f:63:71:
1b:de:76:70:b7:f4:39:e8:b3:e2:5f:26:a0:2e:90:
5d:e1:a5:34:2f:53:68:2a:84:46:b9:f4:53:3e:27:
50:18:3d:48:53:e2:0e:7d:da:eb:2b:3f:eb:11:20:
f0:7b:c4:d1:46:6a:ae:08:9c:df:3a:65:46:a9:37:
24:15:9f:9a:7d:2b:a4:24:a3:85:bf:a1:6c:93:3f:
dc:64:2e:1f:ec:e6:bd:fb:2b:82:0b:e4:7e:f9:8c:
f8:97:bc:56:5a:33:33:3d:a8:be:6a:36:ae:28:93:
d5:de:2b:08:cc:f9:bf:86:3b:61:9e:79:99:88:06:
1d:50:4f:cb:95:38:fd:ac:e0:b1:97:c0:f6:fe:e2:
95:ba:68:31:0f:0c:d8:e6:e4:04:ca:a8:23:7e:89:
d9:3f:e3:f5:85:41:a1:51:5d:8f:ad:ca:8c:db:9b:
bb:16:48:68:04:31:2c:f5:3f:8a:24:25:04:74:63:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:81:AF:F8:7C:A4:3C:2D:B1:98:34:5F:D5:B0:FD:A9:68:48:86:BE
X509v3 Authority Key Identifier:
keyid:89:7E:02:CC:D8:EB:40:39:A7:83:D0:23:79:C5:5F:EE:9F:0C:EE:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/iX4CzNjrQDmng9AjecVf7p8M7lk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/iX4CzNjrQDmng9AjecVf7p8M7lk.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146207/8C68B9A2098111EB9D461B30C4F9AE02/6205FF52113D11F1BF40122E203D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
64.224.21.0/24
64.224.96.0-64.224.143.255
64.226.56.0/21
138.84.64.0-138.84.159.255
138.84.192.0/21
147.185.169.0/24
158.62.0.0/17
192.112.243.0/24
209.35.160.0/20
216.247.0.0/18
216.247.80.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:44:86:f9:fe:4c:f5:23:b9:f6:67:02:05:00:96:da:3d:a8:
ed:de:7f:de:28:d5:85:43:14:50:17:86:b8:99:03:e8:05:48:
00:ce:9c:b7:84:11:96:bc:2e:7f:31:af:49:41:5a:2a:cf:ee:
85:28:70:5d:9d:e5:92:4f:66:e3:21:7f:96:c3:cb:53:f8:3c:
68:38:79:2d:e5:22:3e:07:7e:85:31:40:20:92:8d:c0:ed:0e:
01:fc:11:87:93:fa:01:37:61:a4:09:7e:e6:28:2f:55:d5:44:
91:53:7a:7b:8c:64:bb:03:d9:a6:69:75:23:5b:08:84:ea:a7:
e7:7d:4c:c2:82:8d:55:49:2e:ff:94:b5:08:1b:76:c1:29:a1:
ec:61:f4:d2:1d:ac:cf:69:46:57:24:a2:c7:3a:11:dc:24:ba:
bb:88:04:6f:60:95:fc:e7:4a:41:33:97:a3:b0:77:c9:f9:93:
4d:fd:b8:ae:05:5b:e4:19:9b:8b:f2:9b:d4:47:fd:d5:a8:06:
a3:0f:7e:ab:20:3a:86:91:95:64:3f:fe:f0:e5:7e:aa:80:de:
13:60:0f:f1:df:71:de:4d:ae:db:64:4e:d3:ed:b7:ba:6b:8e:
cb:8b:28:fc:c2:4d:45:e3:1c:db:b5:54:38:b4:51:7f:ce:f1:
b5:e8:9d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:46:20 2026 by rpki-client