Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/9894B43E80DA11F1AF01F71A5DA30FBC.roa
File: 9894B43E80DA11F1AF01F71A5DA30FBC.roa (raw, json)
Hash identifier: 746pRPtMH1SGiVoQbklMO4Qp6QGnZ4g3CyOw0Szk53A=
Subject key identifier: A9:DA:C1:09:13:31:97:62:9E:0E:C3:77:3E:17:41:A0:95:2C:AC:25
Certificate issuer: /CN=A9165568/serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Certificate serial: 1DED
Authority key identifier: 67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/9894B43E80DA11F1AF01F71A5DA30FBC.roa
Signing time: Thu 16 Jul 2026 05:52:58 +0000
ROA not before: Thu 16 Jul 2026 05:52:58 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 23966
IP address blocks: 119.30.80.0/20 maxlen: 20
119.30.82.0/24 maxlen: 24
119.30.86.0/24 maxlen: 24
119.30.87.0/24 maxlen: 24
119.30.100.0/24 maxlen: 24
119.30.106.0/24 maxlen: 24
119.30.107.0/24 maxlen: 24
119.30.108.0/24 maxlen: 24
119.30.112.0/22 maxlen: 24
119.30.124.0/22 maxlen: 24
119.73.0.0/18 maxlen: 24
202.61.32.0/19 maxlen: 19
202.61.32.0/20 maxlen: 20
202.61.32.0/24 maxlen: 24
202.61.34.0/24 maxlen: 24
202.61.40.0/24 maxlen: 24
202.61.41.0/24 maxlen: 24
202.61.42.0/24 maxlen: 24
202.61.43.0/24 maxlen: 24
202.61.44.0/24 maxlen: 24
202.61.46.0/24 maxlen: 24
202.61.47.0/24 maxlen: 24
202.61.48.0/21 maxlen: 24
202.61.56.0/21 maxlen: 24
202.147.160.0/20 maxlen: 24
202.147.176.0/20 maxlen: 20
202.147.176.0/21 maxlen: 24
202.147.184.0/21 maxlen: 24
202.154.224.0/19 maxlen: 19
202.154.224.0/20 maxlen: 20
202.154.224.0/24 maxlen: 24
202.154.225.0/24 maxlen: 24
202.154.226.0/24 maxlen: 24
202.154.227.0/24 maxlen: 24
202.154.228.0/24 maxlen: 24
202.154.229.0/24 maxlen: 24
202.154.230.0/24 maxlen: 24
202.154.231.0/24 maxlen: 24
202.154.232.0/24 maxlen: 24
202.154.233.0/24 maxlen: 24
202.154.234.0/24 maxlen: 24
202.154.235.0/24 maxlen: 24
202.154.236.0/24 maxlen: 24
202.154.237.0/24 maxlen: 24
202.154.238.0/24 maxlen: 24
202.154.239.0/24 maxlen: 24
202.154.240.0/20 maxlen: 20
202.154.240.0/24 maxlen: 24
202.154.241.0/24 maxlen: 24
202.154.242.0/24 maxlen: 24
202.154.243.0/24 maxlen: 24
202.154.244.0/24 maxlen: 24
202.154.245.0/24 maxlen: 24
202.154.246.0/24 maxlen: 24
202.154.247.0/24 maxlen: 24
202.154.248.0/24 maxlen: 24
202.154.249.0/24 maxlen: 24
202.154.250.0/24 maxlen: 24
202.154.251.0/24 maxlen: 24
202.154.252.0/24 maxlen: 24
202.154.253.0/24 maxlen: 24
202.154.254.0/24 maxlen: 24
202.154.255.0/24 maxlen: 24
203.223.160.0/20 maxlen: 24
210.2.128.0/18 maxlen: 18
210.2.128.0/20 maxlen: 21
210.2.128.0/24 maxlen: 24
210.2.129.0/24 maxlen: 24
210.2.130.0/24 maxlen: 24
210.2.131.0/24 maxlen: 24
210.2.132.0/22 maxlen: 22
210.2.132.0/24 maxlen: 24
210.2.133.0/24 maxlen: 24
210.2.134.0/24 maxlen: 24
210.2.135.0/24 maxlen: 24
210.2.136.0/21 maxlen: 22
210.2.136.0/24 maxlen: 24
210.2.137.0/24 maxlen: 24
210.2.138.0/24 maxlen: 24
210.2.139.0/24 maxlen: 24
210.2.140.0/24 maxlen: 24
210.2.141.0/24 maxlen: 24
210.2.142.0/24 maxlen: 24
210.2.143.0/24 maxlen: 24
210.2.144.0/20 maxlen: 21
210.2.144.0/24 maxlen: 24
210.2.145.0/24 maxlen: 24
210.2.146.0/24 maxlen: 24
210.2.147.0/24 maxlen: 24
210.2.148.0/24 maxlen: 24
210.2.149.0/24 maxlen: 24
210.2.150.0/24 maxlen: 24
210.2.151.0/24 maxlen: 24
210.2.152.0/24 maxlen: 24
210.2.153.0/24 maxlen: 24
210.2.154.0/24 maxlen: 24
210.2.155.0/24 maxlen: 24
210.2.156.0/24 maxlen: 24
210.2.157.0/24 maxlen: 24
210.2.158.0/24 maxlen: 24
210.2.159.0/24 maxlen: 24
210.2.160.0/20 maxlen: 21
210.2.160.0/24 maxlen: 24
210.2.161.0/24 maxlen: 24
210.2.162.0/24 maxlen: 24
210.2.163.0/24 maxlen: 24
210.2.164.0/24 maxlen: 24
210.2.165.0/24 maxlen: 24
210.2.166.0/24 maxlen: 24
210.2.167.0/24 maxlen: 24
210.2.168.0/24 maxlen: 24
210.2.169.0/24 maxlen: 24
210.2.170.0/24 maxlen: 24
210.2.171.0/24 maxlen: 24
210.2.172.0/24 maxlen: 24
210.2.173.0/24 maxlen: 24
210.2.174.0/24 maxlen: 24
210.2.175.0/24 maxlen: 24
210.2.176.0/20 maxlen: 22
210.2.176.0/24 maxlen: 24
210.2.177.0/24 maxlen: 24
210.2.178.0/24 maxlen: 24
210.2.179.0/24 maxlen: 24
210.2.180.0/24 maxlen: 24
210.2.181.0/24 maxlen: 24
210.2.182.0/24 maxlen: 24
210.2.183.0/24 maxlen: 24
210.2.184.0/24 maxlen: 24
210.2.185.0/24 maxlen: 24
210.2.186.0/24 maxlen: 24
210.2.187.0/24 maxlen: 24
210.2.188.0/24 maxlen: 24
210.2.189.0/24 maxlen: 24
210.2.190.0/24 maxlen: 24
210.2.191.0/24 maxlen: 24
2401:0:201::/48 maxlen: 48
2401:0:4000::/40 maxlen: 40
2401:0:8001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 14:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 7661 (0x1ded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9165568, serialNumber=67097E492F73D6DBD31FA016A2D5B5B86A9B3FD8
Validity
Not Before: Jul 16 05:52:58 2026 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=6a5871ba-b9f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f0:c6:69:95:d1:5c:8d:0a:e2:a5:29:eb:12:
10:b2:c5:17:9d:f9:4d:4c:98:04:ce:c7:66:15:5e:
80:39:b5:7e:82:24:c3:13:a5:4e:7a:39:75:36:e1:
2f:4d:6b:7a:ae:1c:be:0e:02:aa:b0:1f:06:c2:03:
c1:46:a2:9c:ff:33:44:8a:30:0c:b8:54:27:65:a0:
46:2d:6c:62:03:d1:c5:f1:21:67:d0:1f:c0:f3:f6:
01:d3:a4:14:f9:59:78:fc:39:52:54:68:7a:be:40:
1e:a2:d1:1f:b9:3b:4b:a9:4b:df:3d:a7:52:44:06:
85:47:eb:6e:11:df:3e:a7:19:00:e7:a4:cc:73:b6:
69:93:51:af:45:da:6b:eb:db:26:07:aa:a3:1f:f3:
e6:b1:0d:fa:d2:37:3a:61:a7:78:c5:94:80:e5:2d:
91:98:08:5a:b6:71:7e:85:76:28:70:f9:35:35:37:
1f:91:cd:c1:c9:0c:f5:e1:df:cb:9f:f7:09:92:0b:
66:48:18:f6:34:8c:fd:cf:52:28:48:95:60:81:45:
80:d5:3f:a3:7c:a1:2c:d2:db:2b:a6:87:1c:49:38:
cc:85:58:90:bc:11:7c:eb:3a:5e:7b:c0:b0:f5:a0:
56:fb:a0:28:b0:48:b7:2d:42:f7:14:f4:60:b4:bb:
f8:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DA:C1:09:13:31:97:62:9E:0E:C3:77:3E:17:41:A0:95:2C:AC:25
X509v3 Authority Key Identifier:
keyid:67:09:7E:49:2F:73:D6:DB:D3:1F:A0:16:A2:D5:B5:B8:6A:9B:3F:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zwl-SS9z1tvTH6AWotW1uGqbP9g.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165568/BD1A95D21D8711E29BE3E6DF08B02CD2/9894B43E80DA11F1AF01F71A5DA30FBC.roa
sbgp-ipAddrBlock: critical
IPv4:
119.30.80.0/20
119.30.100.0/24
119.30.106.0-119.30.108.255
119.30.112.0/22
119.30.124.0/22
119.73.0.0/18
202.61.32.0/19
202.147.160.0/19
202.154.224.0/19
203.223.160.0/20
210.2.128.0/18
IPv6:
2401:0:201::/48
2401:0:4000::/40
2401:0:8001::/48
Signature Algorithm: sha256WithRSAEncryption
61:8e:54:89:a4:d6:15:36:59:53:ec:18:ef:6e:43:d3:e0:3e:
0a:3b:92:8a:60:7a:87:13:4e:0f:ab:14:b4:ec:2c:7d:f9:dd:
cc:ca:a7:a8:6a:2c:84:a9:b3:47:86:cf:ad:aa:55:67:ae:05:
c6:e9:bd:f2:d4:98:db:36:79:46:bc:d2:01:a1:49:c8:3a:0d:
81:92:95:e4:73:4e:0e:68:bb:dc:76:86:6a:8c:3e:15:68:56:
b6:3d:aa:ce:80:2b:c8:73:36:7a:a5:b0:ff:5a:2e:eb:4a:77:
81:a8:f1:57:58:3f:b2:72:74:fa:51:32:8b:83:e8:07:4e:00:
78:17:b9:12:24:48:25:fb:be:14:e0:e2:03:c4:0c:0d:3b:c4:
68:99:1d:dc:b2:52:c9:a0:34:76:d7:35:48:df:ed:1b:a8:76:
dd:af:e4:cd:3d:3b:dd:f2:02:d9:49:5b:c6:da:a3:ff:1a:be:
fe:ab:a7:cd:0e:68:af:91:9a:81:39:8f:6a:47:8e:c9:76:eb:
57:d3:24:52:ea:45:39:3d:e2:64:0c:1f:0c:60:00:99:00:f7:
99:15:9e:f2:42:9e:33:8f:ce:78:28:f5:a2:30:a0:e2:d5:51:
24:af:e6:2e:c5:53:fe:54:db:cd:cb:72:e0:c4:16:0e:0e:05:
8d:c6:e4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:57 2026 by rpki-client