Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E035B480E8C11F0AD0C273AC4F9AE02.roa
File: 5E035B480E8C11F0AD0C273AC4F9AE02.roa (raw, json)
Hash identifier: 1J8BGj6ux8dzUkXyMsv1X2ohA6fefO05OgZEdzP+sZg=
Subject key identifier: C9:8C:23:5D:98:74:87:9C:1B:D9:22:62:1F:70:E7:A7:53:CA:38:5C
Certificate issuer: /CN=A9149F3E/serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Certificate serial: 3EA6
Authority key identifier: EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E035B480E8C11F0AD0C273AC4F9AE02.roa
Signing time: Thu 01 Oct 2026 00:24:21 +0000
ROA not before: Thu 01 Oct 2026 00:24:21 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 38661
IP address blocks: 61.97.128.0/19 maxlen: 19
61.252.128.0/19 maxlen: 19
101.79.0.0/22 maxlen: 24
101.79.72.0/22 maxlen: 24
101.79.136.0/23 maxlen: 24
101.79.240.0/21 maxlen: 24
101.79.248.0/22 maxlen: 24
101.79.254.0/23 maxlen: 24
110.4.104.0/22 maxlen: 24
118.91.144.0/20 maxlen: 20
121.0.128.0/17 maxlen: 17
180.210.60.0/22 maxlen: 24
182.252.140.0/22 maxlen: 24
182.252.176.0/21 maxlen: 24
210.4.220.0/22 maxlen: 24
210.16.192.0/18 maxlen: 18
211.47.176.0/20 maxlen: 20
211.63.64.0/22 maxlen: 22
211.63.68.0/22 maxlen: 22
211.63.72.0/22 maxlen: 22
211.63.76.0/22 maxlen: 22
211.63.80.0/20 maxlen: 20
211.172.228.0/22 maxlen: 24
211.172.232.0/22 maxlen: 24
211.236.160.0/22 maxlen: 24
211.236.168.0/21 maxlen: 24
211.236.180.0/22 maxlen: 24
211.236.184.0/21 maxlen: 24
211.237.32.0/20 maxlen: 20
211.238.128.0/20 maxlen: 20
211.238.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 14:22:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16038 (0x3ea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9149F3E, serialNumber=EB389FB339B3908D549A65390C92E15F9DF7C54B
Validity
Not Before: Oct 1 00:24:21 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6abda835-e561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d4:96:fd:c5:2c:26:9c:fc:08:33:f0:60:78:
3b:58:70:3b:1a:da:6d:a3:cf:6c:1e:b6:77:2e:d7:
34:79:99:03:5d:b8:ae:2b:ea:90:77:66:97:4b:de:
0f:15:ed:9d:ad:4c:da:c5:66:68:8a:c8:5b:24:e1:
c7:91:1a:1c:46:80:e8:f6:c4:f0:cc:f6:c8:20:32:
68:e1:80:ed:c6:66:69:d1:e0:61:46:2b:c5:31:3e:
85:9d:e7:c1:a8:45:c8:36:f2:1d:40:f1:d1:6f:9a:
00:fc:ce:3e:49:f1:d1:48:88:2e:a2:cb:63:6f:33:
d8:e7:47:dd:e8:7e:f8:05:e3:f8:80:3c:53:d0:1a:
d9:af:4d:1a:0d:6b:78:cc:07:94:5e:bf:b1:be:24:
18:8f:12:4b:da:f9:03:85:03:24:d9:44:cf:6f:70:
9a:d2:54:9a:2c:f9:fc:5e:e2:05:45:ff:f4:9f:a2:
c9:e3:6f:90:f3:51:76:b7:40:f2:37:be:6c:67:7d:
a4:26:d9:96:bd:b4:40:7b:11:de:2a:1e:22:9c:48:
08:ea:f5:16:fd:1f:f5:a9:e5:41:6e:b6:fd:01:b3:
8b:eb:fc:15:2d:c6:03:68:d2:df:c9:1d:b4:51:87:
e1:4a:3a:99:87:4a:ba:df:48:3c:a9:1a:ed:0e:fb:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8C:23:5D:98:74:87:9C:1B:D9:22:62:1F:70:E7:A7:53:CA:38:5C
X509v3 Authority Key Identifier:
keyid:EB:38:9F:B3:39:B3:90:8D:54:9A:65:39:0C:92:E1:5F:9D:F7:C5:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/6zifszmzkI1UmmU5DJLhX533xUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zifszmzkI1UmmU5DJLhX533xUs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F3E/AC52B7481D8211E2BC6417D708B02CD2/5E035B480E8C11F0AD0C273AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
61.97.128.0/19
61.252.128.0/19
101.79.0.0/22
101.79.72.0/22
101.79.136.0/23
101.79.240.0-101.79.251.255
101.79.254.0/23
110.4.104.0/22
118.91.144.0/20
121.0.128.0/17
180.210.60.0/22
182.252.140.0/22
182.252.176.0/21
210.4.220.0/22
210.16.192.0/18
211.47.176.0/20
211.63.64.0/19
211.172.228.0-211.172.235.255
211.236.160.0/22
211.236.168.0/21
211.236.180.0-211.236.191.255
211.237.32.0/20
211.238.128.0/19
Signature Algorithm: sha256WithRSAEncryption
44:c1:15:c4:ff:97:a5:ab:3a:0e:6e:eb:fb:ef:38:56:36:16:
99:a4:31:b0:dd:3c:c5:7b:b4:09:8f:6c:e6:42:fb:22:9f:b6:
37:47:51:09:d0:c2:9e:bb:ff:05:09:4a:74:da:b8:3b:d3:d9:
08:b3:0a:63:81:25:d1:f9:e3:55:3a:d8:9e:93:83:a1:4c:08:
93:1e:5d:3c:12:59:de:87:80:28:07:b3:7d:30:8a:56:ff:f6:
f1:aa:f0:d4:9f:39:60:ec:f2:70:de:bd:cb:82:5b:74:95:79:
d1:29:62:ed:3e:6f:50:1c:17:aa:2c:c7:00:8b:77:9d:7e:3c:
ba:b2:d8:c8:05:a8:c3:93:4b:5d:35:62:04:2e:4a:3a:e4:f2:
02:02:4e:4d:0b:09:f5:f4:66:f0:7d:0b:29:ab:b3:d0:ae:0f:
2a:6d:d4:c6:9e:a8:cb:55:e4:1f:06:50:e9:6d:1e:a9:b6:56:
e1:3c:dc:12:45:69:89:d4:4c:94:30:74:b1:7a:84:69:8a:82:
48:43:e2:09:b3:09:e2:b5:92:3a:7c:66:de:2f:2c:9d:79:7b:
d1:26:1d:4e:18:07:76:a6:c0:17:93:e8:aa:df:0c:58:8e:5d:
52:74:0a:f3:03:b2:29:ef:fe:6e:11:95:76:ac:f0:63:fc:24:
94:77:1b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:25:20 2026 by rpki-client