Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/9BA94A4A0D8911ED999D4F3BC4F9AE02.roa
File: 9BA94A4A0D8911ED999D4F3BC4F9AE02.roa (raw, json)
Hash identifier: vYHZq2xb0Jwx3SKxaas7feWTueGXOTOiaR8vALOBHQs=
Subject key identifier: 80:77:93:9B:CD:70:5B:8A:91:4B:E5:A1:0A:5C:7C:3F:91:F2:5C:5E
Certificate issuer: /CN=A9163998/serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Certificate serial: 0376
Authority key identifier: 74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/9BA94A4A0D8911ED999D4F3BC4F9AE02.roa
Signing time: Tue 28 Apr 2026 14:25:43 +0000
ROA not before: Tue 28 Apr 2026 14:25:43 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 138341
IP address blocks: 134.65.64.0/18 maxlen: 18
134.65.64.0/22 maxlen: 24
134.65.68.0/22 maxlen: 24
134.65.72.0/22 maxlen: 24
134.65.76.0/22 maxlen: 22
134.65.76.0/23 maxlen: 23
134.65.76.0/24 maxlen: 24
134.65.77.0/24 maxlen: 24
134.65.78.0/23 maxlen: 23
134.65.78.0/24 maxlen: 24
134.65.79.0/24 maxlen: 24
134.65.80.0/22 maxlen: 22
134.65.80.0/23 maxlen: 23
134.65.80.0/24 maxlen: 24
134.65.81.0/24 maxlen: 24
134.65.82.0/23 maxlen: 23
134.65.82.0/24 maxlen: 24
134.65.83.0/24 maxlen: 24
134.65.84.0/22 maxlen: 22
134.65.84.0/23 maxlen: 23
134.65.84.0/24 maxlen: 24
134.65.85.0/24 maxlen: 24
134.65.86.0/23 maxlen: 23
134.65.86.0/24 maxlen: 24
134.65.87.0/24 maxlen: 24
143.92.64.0/19 maxlen: 19
143.92.64.0/24 maxlen: 24
143.92.65.0/24 maxlen: 24
143.92.66.0/24 maxlen: 24
143.92.67.0/24 maxlen: 24
143.92.68.0/24 maxlen: 24
143.92.69.0/24 maxlen: 24
143.92.70.0/24 maxlen: 24
143.92.72.0/24 maxlen: 24
143.92.73.0/24 maxlen: 24
143.92.74.0/23 maxlen: 23
143.92.74.0/24 maxlen: 24
143.92.75.0/24 maxlen: 24
143.92.76.0/24 maxlen: 24
143.92.77.0/24 maxlen: 24
143.92.78.0/24 maxlen: 24
143.92.79.0/24 maxlen: 24
143.92.80.0/24 maxlen: 24
143.92.81.0/24 maxlen: 24
143.92.82.0/23 maxlen: 23
143.92.82.0/24 maxlen: 24
143.92.83.0/24 maxlen: 24
143.92.84.0/23 maxlen: 23
143.92.84.0/24 maxlen: 24
143.92.85.0/24 maxlen: 24
143.92.86.0/24 maxlen: 24
143.92.87.0/24 maxlen: 24
143.92.88.0/24 maxlen: 24
143.92.89.0/24 maxlen: 24
143.92.90.0/24 maxlen: 24
143.92.91.0/24 maxlen: 24
143.92.92.0/23 maxlen: 23
143.92.92.0/24 maxlen: 24
143.92.93.0/24 maxlen: 24
143.92.94.0/23 maxlen: 23
143.92.94.0/24 maxlen: 24
143.92.95.0/24 maxlen: 24
143.92.96.0/22 maxlen: 22
143.92.97.0/24 maxlen: 24
143.92.98.0/24 maxlen: 24
143.92.99.0/24 maxlen: 24
143.92.100.0/23 maxlen: 23
143.92.100.0/24 maxlen: 24
143.92.101.0/24 maxlen: 24
143.92.108.0/23 maxlen: 23
143.92.109.0/24 maxlen: 24
147.136.128.0/22 maxlen: 22
147.136.128.0/23 maxlen: 23
147.136.128.0/24 maxlen: 24
147.136.129.0/24 maxlen: 24
147.136.130.0/23 maxlen: 23
147.136.130.0/24 maxlen: 24
147.136.131.0/24 maxlen: 24
147.136.132.0/22 maxlen: 22
147.136.132.0/23 maxlen: 23
147.136.132.0/24 maxlen: 24
147.136.133.0/24 maxlen: 24
147.136.134.0/23 maxlen: 23
147.136.134.0/24 maxlen: 24
147.136.135.0/24 maxlen: 24
147.136.136.0/22 maxlen: 22
147.136.136.0/23 maxlen: 23
147.136.136.0/24 maxlen: 24
147.136.137.0/24 maxlen: 24
147.136.138.0/23 maxlen: 23
147.136.138.0/24 maxlen: 24
147.136.139.0/24 maxlen: 24
147.136.140.0/22 maxlen: 22
147.136.140.0/23 maxlen: 23
147.136.140.0/24 maxlen: 24
147.136.141.0/24 maxlen: 24
147.136.142.0/23 maxlen: 23
147.136.142.0/24 maxlen: 24
147.136.143.0/24 maxlen: 24
147.136.144.0/22 maxlen: 22
147.136.144.0/23 maxlen: 23
147.136.144.0/24 maxlen: 24
147.136.145.0/24 maxlen: 24
147.136.146.0/23 maxlen: 23
147.136.146.0/24 maxlen: 24
147.136.147.0/24 maxlen: 24
147.136.148.0/22 maxlen: 22
147.136.148.0/23 maxlen: 23
147.136.148.0/24 maxlen: 24
147.136.149.0/24 maxlen: 24
147.136.150.0/23 maxlen: 23
147.136.150.0/24 maxlen: 24
147.136.151.0/24 maxlen: 24
147.136.152.0/22 maxlen: 22
147.136.152.0/23 maxlen: 23
147.136.152.0/24 maxlen: 24
147.136.153.0/24 maxlen: 24
147.136.154.0/23 maxlen: 23
147.136.154.0/24 maxlen: 24
147.136.155.0/24 maxlen: 24
147.136.156.0/22 maxlen: 22
147.136.156.0/23 maxlen: 23
147.136.156.0/24 maxlen: 24
147.136.157.0/24 maxlen: 24
147.136.158.0/23 maxlen: 23
147.136.158.0/24 maxlen: 24
147.136.159.0/24 maxlen: 24
147.136.160.0/22 maxlen: 22
147.136.160.0/23 maxlen: 23
147.136.160.0/24 maxlen: 24
147.136.161.0/24 maxlen: 24
147.136.162.0/23 maxlen: 23
147.136.162.0/24 maxlen: 24
147.136.163.0/24 maxlen: 24
147.136.164.0/22 maxlen: 22
147.136.164.0/23 maxlen: 23
147.136.164.0/24 maxlen: 24
147.136.165.0/24 maxlen: 24
147.136.166.0/23 maxlen: 23
147.136.166.0/24 maxlen: 24
147.136.167.0/24 maxlen: 24
147.136.168.0/22 maxlen: 22
147.136.168.0/23 maxlen: 23
147.136.168.0/24 maxlen: 24
147.136.169.0/24 maxlen: 24
147.136.170.0/23 maxlen: 23
147.136.170.0/24 maxlen: 24
147.136.171.0/24 maxlen: 24
147.136.172.0/22 maxlen: 22
147.136.172.0/23 maxlen: 23
147.136.172.0/24 maxlen: 24
147.136.173.0/24 maxlen: 24
147.136.174.0/23 maxlen: 23
147.136.174.0/24 maxlen: 24
147.136.175.0/24 maxlen: 24
147.136.176.0/22 maxlen: 22
147.136.176.0/23 maxlen: 23
147.136.176.0/24 maxlen: 24
147.136.177.0/24 maxlen: 24
147.136.178.0/23 maxlen: 23
147.136.178.0/24 maxlen: 24
147.136.179.0/24 maxlen: 24
147.136.180.0/22 maxlen: 22
147.136.180.0/23 maxlen: 23
147.136.180.0/24 maxlen: 24
147.136.181.0/24 maxlen: 24
147.136.182.0/23 maxlen: 23
147.136.182.0/24 maxlen: 24
147.136.183.0/24 maxlen: 24
147.136.184.0/22 maxlen: 22
147.136.184.0/23 maxlen: 23
147.136.184.0/24 maxlen: 24
147.136.185.0/24 maxlen: 24
147.136.186.0/23 maxlen: 23
147.136.186.0/24 maxlen: 24
147.136.187.0/24 maxlen: 24
147.136.188.0/22 maxlen: 22
147.136.188.0/23 maxlen: 23
147.136.188.0/24 maxlen: 24
147.136.189.0/24 maxlen: 24
147.136.190.0/23 maxlen: 23
147.136.190.0/24 maxlen: 24
147.136.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 14:50:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 886 (0x376)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9163998, serialNumber=7425AAE16DDB464A3E2B479C7A40C99023836BA0
Validity
Not Before: Apr 28 14:25:43 2026 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69f0c367-b739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c6:47:54:81:a3:3e:1a:f3:f6:bd:9d:6a:5f:
a2:35:e5:94:5f:90:53:a9:98:e3:4d:ee:28:ef:c4:
5d:c5:dd:62:09:ed:8d:0f:4d:a8:a7:65:d3:6d:4d:
04:fa:5b:bf:12:dd:90:77:43:33:a3:07:08:17:ba:
af:de:35:71:7a:f5:0a:d1:21:18:8d:6c:d5:11:c2:
3c:c9:d0:86:53:ab:1b:1d:77:cb:aa:4b:21:71:5a:
65:6b:d0:00:30:5d:a8:2c:28:ed:8c:00:b4:cc:3a:
51:c8:79:01:af:bf:32:9f:be:8c:60:14:38:c7:be:
65:27:c2:32:ae:47:d8:cd:a9:50:0c:ef:46:c6:2d:
93:8b:05:4a:bd:70:39:11:83:00:27:1c:76:44:b7:
85:d8:d2:9b:e0:a5:75:29:19:98:e6:73:c6:3f:85:
ff:76:c6:b8:5b:08:cf:ab:29:1c:4b:11:b8:e6:ee:
ce:d7:71:31:d2:c9:8f:55:b7:e5:f5:ae:39:8a:66:
9c:f3:0e:0e:9c:50:23:eb:b9:58:98:a9:03:04:fc:
3e:e8:09:02:bf:79:92:be:94:78:3b:e2:a5:5c:e1:
e5:0a:2b:f1:81:48:af:60:66:57:82:4a:19:57:70:
93:1a:d0:2e:f4:f6:37:0e:99:e9:1b:fa:e8:78:7f:
da:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:77:93:9B:CD:70:5B:8A:91:4B:E5:A1:0A:5C:7C:3F:91:F2:5C:5E
X509v3 Authority Key Identifier:
keyid:74:25:AA:E1:6D:DB:46:4A:3E:2B:47:9C:7A:40:C9:90:23:83:6B:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/dCWq4W3bRko-K0ecekDJkCODa6A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dCWq4W3bRko-K0ecekDJkCODa6A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9163998/30CC084A08DC11EDBEDE612BC4F9AE02/9BA94A4A0D8911ED999D4F3BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
134.65.64.0/18
143.92.64.0-143.92.101.255
143.92.108.0/23
147.136.128.0/18
Signature Algorithm: sha256WithRSAEncryption
9a:c1:b3:42:59:a1:30:6f:c3:3d:12:a4:5c:81:9c:07:00:cf:
97:16:8e:5b:84:d1:0a:a1:4a:6c:44:03:94:71:27:9a:5b:2a:
ae:56:55:88:69:d7:56:4e:62:21:18:92:4e:be:a5:e5:1d:fb:
d5:28:42:d3:61:da:fc:fb:c7:7f:8a:b1:dc:9b:7f:68:0d:8e:
56:3c:cf:d9:64:f2:65:ec:dc:fd:93:32:91:c7:b0:11:49:b3:
a2:6b:0e:02:46:b1:63:dc:20:82:ab:52:c3:98:8c:cb:f9:98:
ed:06:3d:e5:47:45:f5:0d:4e:e8:f9:56:01:69:e8:a9:42:3f:
ba:45:fb:d9:10:35:f8:02:90:5a:75:4e:07:38:1b:31:6d:20:
50:6e:37:8d:e5:3d:00:da:b7:d5:1e:60:54:86:70:94:69:f9:
0a:7d:6e:ea:c3:2a:93:52:a8:03:91:be:71:3d:d2:c5:ad:3e:
5b:7d:39:58:41:0d:78:ff:1c:3b:a9:bd:65:de:68:4c:88:6f:
23:0f:ef:11:e0:57:79:44:2a:a6:cb:9d:9f:47:7b:b6:7f:db:
66:b5:9e:6d:40:f8:a7:85:67:6e:66:fd:ed:f7:79:b6:b9:fb:
b2:6d:d9:29:5e:a2:da:fa:f8:73:b8:4c:76:8e:8a:e3:d4:51:
8d:39:09:fd
-----BEGIN CERTIFICATE-----
MIIFVjCCBD6gAwIBAgICA3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjM5OTgxMTAvBgNVBAUTKDc0MjVBQUUxNkREQjQ2NEEzRTJCNDc5QzdBNDBDOTkw
MjM4MzZCQTAwHhcNMjYwNDI4MTQyNTQzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWYwYzM2Ny1iNzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtcZHVIGjPhrz9r2dal+iNeWUX5BTqZjjTe4o78Rdxd1iCe2ND02op2XTbU0E
+lu/Et2Qd0MzowcIF7qv3jVxevUK0SEYjWzVEcI8ydCGU6sbHXfLqkshcVpla9AA
MF2oLCjtjAC0zDpRyHkBr78yn76MYBQ4x75lJ8IyrkfYzalQDO9Gxi2TiwVKvXA5
EYMAJxx2RLeF2NKb4KV1KRmY5nPGP4X/dsa4WwjPqykcSxG45u7O13Ex0smPVbfl
9a45imac8w4OnFAj67lYmKkDBPw+6AkCv3mSvpR4O+KlXOHlCivxgUivYGZXgkoZ
V3CTGtAu9PY3DpnpG/roeH/a0QIDAQABo4ICejCCAnYwHQYDVR0OBBYEFIB3k5vN
cFuKkUvloQpcfD+R8lxeMB8GA1UdIwQYMBaAFHQlquFt20ZKPitHnHpAyZAjg2ug
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Mzk5OC8zMENDMDg0QTA4
REMxMUVEQkVERTYxMkJDNEY5QUUwMi9kQ1dxNFczYlJrby1LMGVjZWtESmtDT0Rh
NkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2RDV3E0VzNiUmtvLUswZWNla0RKa0NPRGE2QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjM5OTgvMzBDQzA4NEEwOERDMTFFREJFREU2MTJCQzRGOUFFMDIvOUJBOTRBNEEw
RDg5MTFFRDk5OUQ0RjNCQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm
BAIAATAgAwQGhkFAMAwDBAaPXEADBAGPXGQDBAGPXGwDBAaTiIAwDQYJKoZIhvcN
AQELBQADggEBAJrBs0JZoTBvwz0SpFyBnAcAz5cWjluE0QqhSmxEA5RxJ5pbKq5W
VYhp11ZOYiEYkk6+peUd+9UoQtNh2vz7x3+Ksdybf2gNjlY8z9lk8mXs3P2TMpHH
sBFJs6JrDgJGsWPcIIKrUsOYjMv5mO0GPeVHRfUNTuj5VgFp6KlCP7pF+9kQNfgC
kFp1Tgc4GzFtIFBuN43lPQDat9UeYFSGcJRp+Qp9burDKpNSqAORvnE90sWtPlt9
OVhBDXj/HDupvWXeaEyIbyMP7xHgV3lEKqbLnZ9He7Z/22a1nm1A+KeFZ25m/e33
eba5+7Jt2Sleotr6+HO4THaOiuPUUY05Cf0=
-----END CERTIFICATE-----
Generated at Wed May 13 03:44:53 2026 by rpki-client