Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/4CAE21E8A80F11F1B862E5936B11F970.roa
File: 4CAE21E8A80F11F1B862E5936B11F970.roa (raw, json)
Hash identifier: MSYpWP4583BwiCkIv1gou3Zl4ibmuTy8PTOvgxGbRRM=
Subject key identifier: 4E:AD:3F:43:17:90:46:DB:31:30:55:24:15:60:99:8F:19:DF:9D:7E
Certificate issuer: /CN=A9186E8A/serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Certificate serial: 08F5
Authority key identifier: A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/4CAE21E8A80F11F1B862E5936B11F970.roa
Signing time: Mon 21 Sep 2026 07:12:14 +0000
ROA not before: Mon 21 Sep 2026 07:12:14 +0000
ROA not after: Fri 28 May 2027 00:00:00 +0000
asID: 135377
IP address blocks: 45.249.244.0/24 maxlen: 24
45.249.245.0/24 maxlen: 24
45.249.246.0/24 maxlen: 24
45.249.247.0/24 maxlen: 24
101.36.96.0/24 maxlen: 24
101.36.97.0/24 maxlen: 24
101.36.98.0/24 maxlen: 24
101.36.99.0/24 maxlen: 24
101.36.100.0/24 maxlen: 24
101.36.101.0/24 maxlen: 24
101.36.102.0/24 maxlen: 24
101.36.103.0/24 maxlen: 24
101.36.104.0/24 maxlen: 24
101.36.105.0/24 maxlen: 24
101.36.106.0/24 maxlen: 24
101.36.107.0/24 maxlen: 24
101.36.108.0/24 maxlen: 24
101.36.109.0/24 maxlen: 24
101.36.110.0/24 maxlen: 24
101.36.111.0/24 maxlen: 24
101.36.112.0/24 maxlen: 24
101.36.113.0/24 maxlen: 24
101.36.114.0/24 maxlen: 24
101.36.115.0/24 maxlen: 24
101.36.116.0/24 maxlen: 24
101.36.117.0/24 maxlen: 24
101.36.118.0/24 maxlen: 24
101.36.119.0/24 maxlen: 24
101.36.120.0/24 maxlen: 24
101.36.121.0/24 maxlen: 24
101.36.122.0/24 maxlen: 24
101.36.123.0/24 maxlen: 24
101.36.124.0/24 maxlen: 24
101.36.125.0/24 maxlen: 24
101.36.126.0/24 maxlen: 24
101.36.127.0/24 maxlen: 24
103.149.26.0/24 maxlen: 24
103.149.27.0/24 maxlen: 24
103.218.240.0/24 maxlen: 24
103.218.241.0/24 maxlen: 24
103.218.242.0/24 maxlen: 24
103.218.243.0/24 maxlen: 24
103.234.60.0/24 maxlen: 24
103.234.61.0/24 maxlen: 24
103.234.62.0/24 maxlen: 24
118.26.36.0/24 maxlen: 24
118.26.37.0/24 maxlen: 24
118.26.38.0/24 maxlen: 24
118.26.39.0/24 maxlen: 24
118.26.104.0/24 maxlen: 24
118.26.105.0/24 maxlen: 24
118.26.106.0/24 maxlen: 24
118.26.107.0/24 maxlen: 24
118.26.108.0/24 maxlen: 24
118.26.109.0/24 maxlen: 24
118.26.110.0/24 maxlen: 24
118.26.111.0/24 maxlen: 24
118.193.32.0/24 maxlen: 24
118.193.33.0/24 maxlen: 24
118.193.34.0/24 maxlen: 24
118.193.35.0/24 maxlen: 24
118.193.36.0/24 maxlen: 24
118.193.37.0/24 maxlen: 24
118.193.38.0/24 maxlen: 24
118.193.39.0/24 maxlen: 24
118.193.40.0/24 maxlen: 24
118.193.41.0/24 maxlen: 24
118.193.42.0/24 maxlen: 24
118.193.43.0/24 maxlen: 24
118.193.44.0/24 maxlen: 24
118.193.45.0/24 maxlen: 24
118.193.46.0/24 maxlen: 24
118.193.47.0/24 maxlen: 24
118.193.56.0/24 maxlen: 24
118.193.57.0/24 maxlen: 24
118.193.58.0/24 maxlen: 24
118.193.59.0/24 maxlen: 24
118.193.60.0/24 maxlen: 24
118.193.61.0/24 maxlen: 24
118.193.62.0/24 maxlen: 24
118.193.63.0/24 maxlen: 24
118.193.64.0/24 maxlen: 24
118.193.65.0/24 maxlen: 24
118.193.66.0/24 maxlen: 24
118.193.67.0/24 maxlen: 24
118.193.68.0/24 maxlen: 24
118.193.69.0/24 maxlen: 24
118.193.70.0/24 maxlen: 24
118.193.71.0/24 maxlen: 24
118.193.72.0/24 maxlen: 24
118.193.73.0/24 maxlen: 24
118.193.74.0/24 maxlen: 24
118.193.75.0/24 maxlen: 24
118.193.76.0/24 maxlen: 24
118.193.77.0/24 maxlen: 24
118.193.78.0/24 maxlen: 24
118.193.79.0/24 maxlen: 24
118.194.228.0/24 maxlen: 24
118.194.229.0/24 maxlen: 24
118.194.230.0/24 maxlen: 24
118.194.231.0/24 maxlen: 24
118.194.232.0/24 maxlen: 24
118.194.233.0/24 maxlen: 24
118.194.234.0/24 maxlen: 24
118.194.235.0/24 maxlen: 24
118.194.236.0/24 maxlen: 24
118.194.237.0/24 maxlen: 24
118.194.238.0/24 maxlen: 24
118.194.239.0/24 maxlen: 24
118.194.248.0/24 maxlen: 24
118.194.249.0/24 maxlen: 24
118.194.250.0/24 maxlen: 24
118.194.251.0/24 maxlen: 24
118.194.252.0/24 maxlen: 24
118.194.253.0/24 maxlen: 24
118.194.254.0/24 maxlen: 24
118.194.255.0/24 maxlen: 24
123.58.192.0/24 maxlen: 24
123.58.193.0/24 maxlen: 24
123.58.194.0/24 maxlen: 24
123.58.195.0/24 maxlen: 24
123.58.196.0/24 maxlen: 24
123.58.197.0/24 maxlen: 24
123.58.198.0/24 maxlen: 24
123.58.199.0/24 maxlen: 24
123.58.200.0/24 maxlen: 24
123.58.201.0/24 maxlen: 24
123.58.203.0/24 maxlen: 24
123.58.204.0/24 maxlen: 24
123.58.205.0/24 maxlen: 24
123.58.206.0/24 maxlen: 24
123.58.207.0/24 maxlen: 24
123.58.208.0/24 maxlen: 24
123.58.209.0/24 maxlen: 24
123.58.210.0/24 maxlen: 24
123.58.211.0/24 maxlen: 24
123.58.212.0/24 maxlen: 24
123.58.213.0/24 maxlen: 24
123.58.214.0/24 maxlen: 24
123.58.215.0/24 maxlen: 24
123.58.216.0/24 maxlen: 24
123.58.217.0/24 maxlen: 24
123.58.218.0/24 maxlen: 24
123.58.219.0/24 maxlen: 24
123.58.220.0/24 maxlen: 24
123.58.221.0/24 maxlen: 24
123.58.222.0/24 maxlen: 24
123.58.223.0/24 maxlen: 24
150.107.36.0/24 maxlen: 24
150.107.37.0/24 maxlen: 24
150.107.38.0/24 maxlen: 24
150.107.39.0/24 maxlen: 24
2001:df3:9500::/48 maxlen: 48
2404:82c0::/42 maxlen: 42
2404:82c0:40::/48 maxlen: 48
2404:82c0:41::/48 maxlen: 48
2404:82c0:42::/48 maxlen: 48
2404:82c0:43::/48 maxlen: 48
2404:82c0:44::/48 maxlen: 48
2404:82c0:45::/48 maxlen: 48
2404:82c0:46::/48 maxlen: 48
2404:82c0:47::/48 maxlen: 48
2404:82c0:48::/48 maxlen: 48
2404:82c0:49::/48 maxlen: 48
2404:82c0:4a::/48 maxlen: 48
2404:82c0:4b::/48 maxlen: 48
2404:82c0:4c::/48 maxlen: 48
2404:82c0:4d::/48 maxlen: 48
2404:82c0:4e::/48 maxlen: 48
2404:82c0:4f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 01 Oct 2026 21:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2293 (0x8f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186E8A, serialNumber=A9BCCA6D34D3D5F1EFF8BBE783D49773813E5EF8
Validity
Not Before: Sep 21 07:12:14 2026 GMT
Not After : May 28 00:00:00 2027 GMT
Subject: CN=6ab0d8ce-04c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a8:b1:21:71:0d:d3:f1:ea:40:41:6c:ea:27:
37:69:cf:df:5b:9c:36:43:fb:a6:2e:21:f4:fe:9c:
83:5c:8d:5f:fe:f4:42:dd:eb:80:44:0c:99:5b:5b:
b4:56:cc:3b:88:b4:3b:79:11:ba:90:7d:9a:f1:ef:
de:1f:62:cc:a5:d4:54:e6:4b:43:f1:ff:3f:0e:2b:
32:7d:81:87:b7:c7:05:45:a6:4a:1f:9f:1b:61:2f:
99:7d:54:8b:e0:ca:e3:69:55:76:2c:27:29:0e:28:
f0:0f:05:c5:03:4f:27:9a:3f:15:af:16:6e:09:07:
c3:6b:24:06:c0:3f:fc:cd:5e:b8:65:5c:28:99:eb:
aa:9f:45:45:f4:aa:28:de:69:47:34:34:05:0a:c4:
dc:23:14:72:5c:84:29:bd:b3:1f:48:9f:73:47:10:
cb:d9:75:de:12:fd:13:10:5e:18:41:2c:49:6c:e4:
10:50:2d:9d:24:74:d3:b5:5a:1e:2b:4f:03:ce:78:
70:8e:dc:c0:5e:d3:44:41:46:9c:4d:37:ea:ca:32:
1d:bb:61:20:3a:2f:65:86:2e:b4:a6:81:2c:6a:72:
54:36:b8:0d:4c:dd:87:86:f1:c9:a8:53:44:ac:37:
57:a4:02:f0:57:67:90:1a:74:a3:a3:d6:2d:b4:17:
58:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AD:3F:43:17:90:46:DB:31:30:55:24:15:60:99:8F:19:DF:9D:7E
X509v3 Authority Key Identifier:
keyid:A9:BC:CA:6D:34:D3:D5:F1:EF:F8:BB:E7:83:D4:97:73:81:3E:5E:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qbzKbTTT1fHv-Lvng9SXc4E-Xvg.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186E8A/3B476E7C2DFF11EB868A9135C4F9AE02/4CAE21E8A80F11F1B862E5936B11F970.roa
sbgp-ipAddrBlock: critical
IPv4:
45.249.244.0/22
101.36.96.0/19
103.149.26.0/23
103.218.240.0/22
103.234.60.0-103.234.62.255
118.26.36.0/22
118.26.104.0/21
118.193.32.0/20
118.193.56.0-118.193.79.255
118.194.228.0-118.194.239.255
118.194.248.0/21
123.58.192.0-123.58.201.255
123.58.203.0-123.58.223.255
150.107.36.0/22
IPv6:
2001:df3:9500::/48
2404:82c0::-2404:82c0:4f:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
46:7d:34:d7:f5:a0:ef:5b:5a:72:e9:80:f5:98:a1:42:1d:c3:
c0:92:5f:f5:24:1c:6d:0b:6e:60:1a:95:58:d9:af:b7:98:d2:
b4:d1:2a:a9:cb:da:e0:15:76:f4:41:8f:76:b1:f8:94:7b:f8:
56:51:e2:27:6b:ba:2f:ed:74:36:10:ed:f5:18:35:76:14:d0:
8f:1c:c6:d5:9f:d3:34:b4:95:62:ea:dd:88:90:b0:df:9e:65:
72:ff:a6:71:15:5f:31:a7:8d:5a:e3:ec:09:a0:c3:96:b7:14:
11:c2:90:da:e5:b1:cc:2f:37:24:fd:30:6e:b1:66:ab:6f:63:
b4:15:46:bc:0e:9d:00:91:0c:d5:90:b6:e7:1d:1f:73:36:ec:
cb:ce:cc:fe:61:52:fb:a0:56:9e:50:b9:57:ad:c5:f5:5e:59:
f1:84:f0:cf:44:d7:d0:a2:e3:f1:6b:1f:4e:7e:bf:10:3b:a5:
8d:35:c7:67:b9:25:c1:23:57:5d:bb:84:75:0d:da:3b:70:b8:
d5:08:cb:d5:5b:dc:b2:d4:e3:1a:e5:e3:0c:24:a1:d9:97:29:
cf:77:cc:e9:04:62:9e:c4:32:d6:14:f3:23:de:96:f8:eb:b4:
ce:50:4c:36:e3:40:e0:cf:65:b6:9b:99:46:81:19:48:3d:0f:
1d:32:ae:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:26:03 2026 by rpki-client