Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/26E184C2B56D11F0939EAE46C4F9AE02.roa
File: 26E184C2B56D11F0939EAE46C4F9AE02.roa (raw, json)
Hash identifier: azCbrnSmOuKDp+iW9o/dWdbmL/D2BIUAZALDZgMZy1k=
Subject key identifier: 3C:F7:00:D0:0C:93:45:7F:4F:4A:AA:F5:96:47:FA:94:4B:FD:D3:23
Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial: 0889
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/26E184C2B56D11F0939EAE46C4F9AE02.roa
Signing time: Wed 25 Mar 2026 02:26:15 +0000
ROA not before: Wed 25 Mar 2026 02:26:15 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135377
IP address blocks: 45.249.244.0/24 maxlen: 24
45.249.245.0/24 maxlen: 24
45.249.246.0/24 maxlen: 24
45.249.247.0/24 maxlen: 24
101.36.96.0/24 maxlen: 24
101.36.97.0/24 maxlen: 24
101.36.98.0/24 maxlen: 24
101.36.99.0/24 maxlen: 24
101.36.100.0/24 maxlen: 24
101.36.101.0/24 maxlen: 24
101.36.102.0/24 maxlen: 24
101.36.103.0/24 maxlen: 24
101.36.104.0/24 maxlen: 24
101.36.105.0/24 maxlen: 24
101.36.106.0/24 maxlen: 24
101.36.107.0/24 maxlen: 24
101.36.108.0/24 maxlen: 24
101.36.109.0/24 maxlen: 24
101.36.110.0/24 maxlen: 24
101.36.111.0/24 maxlen: 24
101.36.112.0/24 maxlen: 24
101.36.113.0/24 maxlen: 24
101.36.114.0/24 maxlen: 24
101.36.115.0/24 maxlen: 24
101.36.116.0/24 maxlen: 24
101.36.117.0/24 maxlen: 24
101.36.118.0/24 maxlen: 24
101.36.119.0/24 maxlen: 24
101.36.120.0/24 maxlen: 24
101.36.121.0/24 maxlen: 24
101.36.122.0/24 maxlen: 24
101.36.123.0/24 maxlen: 24
101.36.124.0/24 maxlen: 24
101.36.125.0/24 maxlen: 24
101.36.126.0/24 maxlen: 24
101.36.127.0/24 maxlen: 24
103.149.26.0/24 maxlen: 24
103.149.27.0/24 maxlen: 24
103.218.240.0/24 maxlen: 24
103.218.241.0/24 maxlen: 24
103.218.242.0/24 maxlen: 24
103.218.243.0/24 maxlen: 24
103.234.60.0/24 maxlen: 24
103.234.61.0/24 maxlen: 24
103.234.62.0/24 maxlen: 24
103.234.63.0/24 maxlen: 24
118.26.36.0/24 maxlen: 24
118.26.37.0/24 maxlen: 24
118.26.38.0/24 maxlen: 24
118.26.39.0/24 maxlen: 24
118.26.104.0/24 maxlen: 24
118.26.105.0/24 maxlen: 24
118.26.106.0/24 maxlen: 24
118.26.107.0/24 maxlen: 24
118.26.108.0/24 maxlen: 24
118.26.109.0/24 maxlen: 24
118.26.110.0/24 maxlen: 24
118.26.111.0/24 maxlen: 24
118.193.32.0/24 maxlen: 24
118.193.33.0/24 maxlen: 24
118.193.34.0/24 maxlen: 24
118.193.35.0/24 maxlen: 24
118.193.36.0/24 maxlen: 24
118.193.37.0/24 maxlen: 24
118.193.38.0/24 maxlen: 24
118.193.39.0/24 maxlen: 24
118.193.40.0/24 maxlen: 24
118.193.41.0/24 maxlen: 24
118.193.42.0/24 maxlen: 24
118.193.43.0/24 maxlen: 24
118.193.44.0/24 maxlen: 24
118.193.45.0/24 maxlen: 24
118.193.46.0/24 maxlen: 24
118.193.47.0/24 maxlen: 24
118.193.56.0/24 maxlen: 24
118.193.57.0/24 maxlen: 24
118.193.58.0/24 maxlen: 24
118.193.59.0/24 maxlen: 24
118.193.60.0/24 maxlen: 24
118.193.61.0/24 maxlen: 24
118.193.62.0/24 maxlen: 24
118.193.63.0/24 maxlen: 24
118.193.64.0/24 maxlen: 24
118.193.65.0/24 maxlen: 24
118.193.66.0/24 maxlen: 24
118.193.67.0/24 maxlen: 24
118.193.68.0/24 maxlen: 24
118.193.69.0/24 maxlen: 24
118.193.70.0/24 maxlen: 24
118.193.71.0/24 maxlen: 24
118.193.72.0/24 maxlen: 24
118.193.73.0/24 maxlen: 24
118.193.74.0/24 maxlen: 24
118.193.75.0/24 maxlen: 24
118.193.76.0/24 maxlen: 24
118.193.77.0/24 maxlen: 24
118.193.78.0/24 maxlen: 24
118.193.79.0/24 maxlen: 24
118.194.228.0/24 maxlen: 24
118.194.229.0/24 maxlen: 24
118.194.230.0/24 maxlen: 24
118.194.231.0/24 maxlen: 24
118.194.232.0/24 maxlen: 24
118.194.233.0/24 maxlen: 24
118.194.234.0/24 maxlen: 24
118.194.235.0/24 maxlen: 24
118.194.236.0/24 maxlen: 24
118.194.237.0/24 maxlen: 24
118.194.238.0/24 maxlen: 24
118.194.239.0/24 maxlen: 24
118.194.248.0/24 maxlen: 24
118.194.249.0/24 maxlen: 24
118.194.250.0/24 maxlen: 24
118.194.251.0/24 maxlen: 24
118.194.252.0/24 maxlen: 24
118.194.253.0/24 maxlen: 24
118.194.254.0/24 maxlen: 24
118.194.255.0/24 maxlen: 24
123.58.192.0/24 maxlen: 24
123.58.193.0/24 maxlen: 24
123.58.194.0/24 maxlen: 24
123.58.195.0/24 maxlen: 24
123.58.196.0/24 maxlen: 24
123.58.197.0/24 maxlen: 24
123.58.198.0/24 maxlen: 24
123.58.199.0/24 maxlen: 24
123.58.200.0/24 maxlen: 24
123.58.201.0/24 maxlen: 24
123.58.202.0/24 maxlen: 24
123.58.203.0/24 maxlen: 24
123.58.204.0/24 maxlen: 24
123.58.205.0/24 maxlen: 24
123.58.206.0/24 maxlen: 24
123.58.207.0/24 maxlen: 24
123.58.208.0/24 maxlen: 24
123.58.209.0/24 maxlen: 24
123.58.210.0/24 maxlen: 24
123.58.211.0/24 maxlen: 24
123.58.212.0/24 maxlen: 24
123.58.213.0/24 maxlen: 24
123.58.214.0/24 maxlen: 24
123.58.215.0/24 maxlen: 24
123.58.216.0/24 maxlen: 24
123.58.217.0/24 maxlen: 24
123.58.218.0/24 maxlen: 24
123.58.219.0/24 maxlen: 24
123.58.220.0/24 maxlen: 24
123.58.221.0/24 maxlen: 24
123.58.222.0/24 maxlen: 24
123.58.223.0/24 maxlen: 24
150.107.36.0/24 maxlen: 24
150.107.37.0/24 maxlen: 24
150.107.38.0/24 maxlen: 24
150.107.39.0/24 maxlen: 24
2001:df3:9500::/48 maxlen: 48
2404:82c0::/42 maxlen: 42
2404:82c0:40::/48 maxlen: 48
2404:82c0:41::/48 maxlen: 48
2404:82c0:42::/48 maxlen: 48
2404:82c0:43::/48 maxlen: 48
2404:82c0:44::/48 maxlen: 48
2404:82c0:45::/48 maxlen: 48
2404:82c0:46::/48 maxlen: 48
2404:82c0:47::/48 maxlen: 48
2404:82c0:48::/48 maxlen: 48
2404:82c0:49::/48 maxlen: 48
2404:82c0:4a::/48 maxlen: 48
2404:82c0:4c::/48 maxlen: 48
2404:82c0:4d::/48 maxlen: 48
2404:82c0:4e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 02:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2185 (0x889)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Validity
Not Before: Mar 25 02:26:15 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=69c347c7-76f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3d:2d:89:5f:85:f5:1a:3e:2a:c5:59:2f:95:
cb:43:4a:46:ef:ce:b6:09:af:e5:31:c4:a2:31:64:
db:18:ea:b2:ef:b8:7a:35:6c:a1:31:4c:ee:79:51:
69:08:ea:bb:d7:5c:92:fa:cb:d0:b0:3b:62:40:11:
e3:7e:de:4c:65:a7:01:fa:0e:8c:63:4a:b4:7a:42:
15:4f:78:6e:c2:20:57:6e:b5:05:aa:76:fc:b5:23:
2d:1d:71:a3:4b:17:ba:c9:43:cb:55:02:24:73:0c:
23:0c:29:d4:e0:2f:92:b4:76:d3:01:20:fa:49:07:
a2:78:91:0d:df:44:95:bc:f6:09:9f:16:68:a7:c1:
d1:8a:e9:59:d0:ce:88:78:db:e6:ec:e0:2e:ca:2c:
2e:13:05:20:13:a1:18:2f:00:c8:8e:87:04:f0:5f:
77:c5:6b:2f:a2:e9:0a:69:81:ec:c9:11:e1:e3:16:
be:e7:82:c9:26:43:2e:33:fd:43:84:d2:17:32:34:
1d:cc:f0:7a:be:6a:03:03:c1:43:1a:c6:9c:33:3d:
fe:47:3e:7b:7b:82:e0:7a:d5:c9:e7:d0:b0:f3:19:
fc:89:e6:07:37:41:13:84:7f:22:b5:03:49:d8:3c:
63:8d:57:42:fd:b4:60:2a:87:00:b0:d6:8f:8f:7f:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F7:00:D0:0C:93:45:7F:4F:4A:AA:F5:96:47:FA:94:4B:FD:D3:23
X509v3 Authority Key Identifier:
keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/26E184C2B56D11F0939EAE46C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
45.249.244.0/22
101.36.96.0/19
103.149.26.0/23
103.218.240.0/22
103.234.60.0/22
118.26.36.0/22
118.26.104.0/21
118.193.32.0/20
118.193.56.0-118.193.79.255
118.194.228.0-118.194.239.255
118.194.248.0/21
123.58.192.0/19
150.107.36.0/22
IPv6:
2001:df3:9500::/48
2404:82c0::-2404:82c0:4a:ffff:ffff:ffff:ffff:ffff
2404:82c0:4c::-2404:82c0:4e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
c8:0d:2d:51:fd:09:0d:e7:16:50:2b:e9:6f:0a:a4:d8:88:d0:
66:f6:11:44:fc:56:f7:ed:4c:0f:8c:94:e6:48:8b:09:be:9f:
59:c6:b0:13:e6:d6:d5:2d:44:94:36:27:7a:12:7e:86:c4:87:
a6:a7:4e:85:a5:15:30:7f:81:83:65:57:2d:04:9c:b2:11:ab:
ec:90:14:c7:db:f8:5f:51:36:f8:0d:d9:a8:a5:b6:be:ef:77:
73:f8:95:48:8d:25:35:39:17:d2:36:75:6a:04:68:b3:e3:18:
38:c4:78:a8:7e:75:3c:50:6a:d4:9c:8c:a2:78:a9:06:ab:08:
64:48:b3:45:f4:09:2b:6e:7c:ae:eb:44:7b:fc:9f:eb:52:2a:
fa:b2:61:fe:be:51:33:92:44:d0:33:d5:c2:0e:e9:24:ef:00:
05:bc:1d:92:03:d1:09:fd:9e:72:82:4e:15:2c:b2:c4:16:39:
d6:3d:10:f4:b5:07:c2:39:ba:b2:3a:48:ef:ac:f1:ee:c1:e7:
6f:00:c5:8c:90:7f:99:06:06:17:d1:54:ae:fe:a7:b0:71:ab:
e9:d2:a9:72:47:2c:89:6a:2d:85:5c:b5:4c:61:f1:f8:b6:c2:
c0:84:e1:10:2d:55:72:cc:ed:ce:1c:18:8b:11:39:60:3f:2b:
b6:f3:eb:65
-----BEGIN CERTIFICATE-----
MIIFzjCCBLagAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODZFOEExMTAvBgNVBAUTKEE5QkNDQTZEMzREM0Q1RjFFRkY4QkJFNzgzRDQ5Nzcz
ODEzRTVFRjgwHhcNMjYwMzI1MDIyNjE1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWMzNDdjNy03NmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtj0tiV+F9Ro+KsVZL5XLQ0pG7862Ca/lMcSiMWTbGOqy77h6NWyhMUzueVFp
COq711yS+svQsDtiQBHjft5MZacB+g6MY0q0ekIVT3huwiBXbrUFqnb8tSMtHXGj
Sxe6yUPLVQIkcwwjDCnU4C+StHbTASD6SQeieJEN30SVvPYJnxZop8HRiulZ0M6I
eNvm7OAuyiwuEwUgE6EYLwDIjocE8F93xWsvoukKaYHsyRHh4xa+54LJJkMuM/1D
hNIXMjQdzPB6vmoDA8FDGsacMz3+Rz57e4LgetXJ59Cw8xn8ieYHN0EThH8itQNJ
2DxjjVdC/bRgKocAsNaPj38ukwIDAQABo4IC8jCCAu4wHQYDVR0OBBYEFDz3ANAM
k0V/T0qq9ZZH+pRL/dMjMB8GA1UdIwQYMBaAFKm8ym0009Xx7/i754PUl3OBPl74
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NkU4QS8zQjQ3NkU3QzJE
RkYxMUVCODY4QTkxMzVDNEY5QUUwMi9xYnpLYlRUVDFmSHYtTHZuZzlTWGM0RS1Y
dmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3FiektiVFRUMWZIdi1Mdm5nOVNYYzRFLVh2Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODZFOEEvM0I0NzZFN0MyREZGMTFFQjg2OEE5MTM1QzRGOUFFMDIvMjZFMTg0QzJC
NTZEMTFGMDkzOUVBRTQ2QzRGOUFFMDIucm9hMIGwBggrBgEFBQcBBwEB/wSBoDCB
nTBkBAIAATBeAwQCLfn0AwQFZSRgAwQBZ5UaAwQCZ9rwAwQCZ+o8AwQCdhokAwQD
dhpoAwQEdsEgMAwDBAN2wTgDBAR2wUAwDAMEAnbC5AMEBHbC4AMEA3bC+AMEBXs6
wAMEApZrJDA1BAIAAjAvAwcAIAEN85UAMBADBQYkBILAAwcAJASCwABKMBIDBwIk
BILAAEwDBwAkBILAAE4wDQYJKoZIhvcNAQELBQADggEBAMgNLVH9CQ3nFlAr6W8K
pNiI0Gb2EUT8VvftTA+MlOZIiwm+n1nGsBPm1tUtRJQ2J3oSfobEh6anToWlFTB/
gYNlVy0EnLIRq+yQFMfb+F9RNvgN2ailtr7vd3P4lUiNJTU5F9I2dWoEaLPjGDjE
eKh+dTxQatScjKJ4qQarCGRIs0X0CStufK7rRHv8n+tSKvqyYf6+UTOSRNAz1cIO
6STvAAW8HZID0Qn9nnKCThUsssQWOdY9EPS1B8I5urI6SO+s8e7B528AxYyQf5kG
BhfRVK7+p7Bxq+nSqXJHLIlqLYVctUxh8fi2wsCE4RAtVXLM7c4cGIsROWA/K7bz
62U=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:38 2026 by rpki-client