Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/49FC44B0162A11F18FE9298B373D8C67.roa
File: 49FC44B0162A11F18FE9298B373D8C67.roa (raw, json)
Hash identifier: zOKxQxHBIClXa7SK7lv75vi8fEUHv381/lbkm79W98w=
Subject key identifier: A8:7C:34:7C:0C:38:1D:A5:02:80:68:22:30:A9:E8:3E:74:B3:24:62
Certificate issuer: /CN=A919536C/serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Certificate serial: 02EC
Authority key identifier: A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/49FC44B0162A11F18FE9298B373D8C67.roa
Signing time: Tue 07 Jul 2026 03:13:47 +0000
ROA not before: Tue 07 Jul 2026 03:13:47 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 132280
IP address blocks: 96.30.64.0/18 maxlen: 18
96.30.64.0/22 maxlen: 22
96.30.64.0/24 maxlen: 24
96.30.72.0/21 maxlen: 21
96.30.74.0/23 maxlen: 24
96.30.76.0/23 maxlen: 24
96.30.80.0/21 maxlen: 21
96.30.80.0/22 maxlen: 22
96.30.83.0/24 maxlen: 24
96.30.88.0/21 maxlen: 21
96.30.88.0/23 maxlen: 24
96.30.90.0/23 maxlen: 24
96.30.92.0/22 maxlen: 22
96.30.93.0/24 maxlen: 24
96.30.94.0/23 maxlen: 23
96.30.96.0/21 maxlen: 21
96.30.96.0/22 maxlen: 23
96.30.97.0/24 maxlen: 24
96.30.104.0/23 maxlen: 24
96.30.106.0/24 maxlen: 24
96.30.110.0/24 maxlen: 24
96.30.112.0/21 maxlen: 21
96.30.113.0/24 maxlen: 24
96.30.114.0/23 maxlen: 24
96.30.116.0/22 maxlen: 23
96.30.116.0/24 maxlen: 24
96.30.120.0/21 maxlen: 21
96.30.120.0/23 maxlen: 23
96.30.120.0/24 maxlen: 24
96.30.123.0/24 maxlen: 24
96.30.124.0/24 maxlen: 24
96.30.125.0/24 maxlen: 24
96.30.126.0/23 maxlen: 24
146.88.32.0/19 maxlen: 19
146.88.32.0/20 maxlen: 21
146.88.32.0/22 maxlen: 22
146.88.32.0/24 maxlen: 24
146.88.33.0/24 maxlen: 24
146.88.40.0/24 maxlen: 24
146.88.48.0/21 maxlen: 21
146.88.48.0/22 maxlen: 23
146.88.56.0/21 maxlen: 21
146.88.56.0/23 maxlen: 24
146.88.58.0/24 maxlen: 24
146.88.59.0/24 maxlen: 24
146.88.60.0/24 maxlen: 24
146.88.62.0/24 maxlen: 24
146.88.63.0/24 maxlen: 24
161.82.128.0/17 maxlen: 19
161.82.128.0/21 maxlen: 22
161.82.135.0/24 maxlen: 24
161.82.136.0/21 maxlen: 22
161.82.138.0/24 maxlen: 24
161.82.142.0/24 maxlen: 24
161.82.144.0/21 maxlen: 22
161.82.146.0/24 maxlen: 24
161.82.152.0/21 maxlen: 22
161.82.156.0/24 maxlen: 24
161.82.157.0/24 maxlen: 24
161.82.160.0/21 maxlen: 22
161.82.164.0/24 maxlen: 24
161.82.168.0/21 maxlen: 22
161.82.173.0/24 maxlen: 24
161.82.176.0/21 maxlen: 22
161.82.180.0/24 maxlen: 24
161.82.182.0/24 maxlen: 24
161.82.184.0/21 maxlen: 22
161.82.189.0/24 maxlen: 24
161.82.192.0/21 maxlen: 22
161.82.197.0/24 maxlen: 24
161.82.200.0/21 maxlen: 22
161.82.203.0/24 maxlen: 24
161.82.204.0/24 maxlen: 24
161.82.208.0/21 maxlen: 22
161.82.208.0/24 maxlen: 24
161.82.210.0/24 maxlen: 24
161.82.211.0/24 maxlen: 24
161.82.212.0/24 maxlen: 24
161.82.213.0/24 maxlen: 24
161.82.214.0/24 maxlen: 24
161.82.216.0/21 maxlen: 22
161.82.216.0/24 maxlen: 24
161.82.220.0/24 maxlen: 24
161.82.221.0/24 maxlen: 24
161.82.222.0/24 maxlen: 24
161.82.223.0/24 maxlen: 24
161.82.224.0/19 maxlen: 22
161.82.226.0/24 maxlen: 24
161.82.233.0/24 maxlen: 24
161.82.237.0/24 maxlen: 24
161.82.246.0/24 maxlen: 24
161.82.248.0/24 maxlen: 24
161.82.249.0/24 maxlen: 24
161.82.250.0/24 maxlen: 24
161.82.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 03:56:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 748 (0x2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919536C, serialNumber=A090E520BF9D51F2FDCEED413AF27AC758F6AE1D
Validity
Not Before: Jul 7 03:13:47 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a4c6eeb-44c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:55:42:b6:59:1a:44:b9:93:95:20:4b:31:
f4:60:01:9d:51:0c:46:74:bb:e4:3e:4f:33:3f:60:
2b:f2:8b:7a:5c:8f:98:5d:43:c2:cf:39:53:be:7d:
7d:b4:bc:3d:b2:4e:bf:43:38:c8:3f:3a:5f:46:09:
2e:d0:57:a0:11:b0:58:e1:d6:aa:50:7e:f7:13:92:
b5:68:95:04:ac:55:05:f8:a3:df:a6:c2:4f:e2:e8:
2d:ca:75:31:b2:4e:ca:c8:bc:ad:7b:66:bb:cd:32:
cf:eb:1f:71:50:f2:ee:04:3b:f6:2e:99:2a:c8:0c:
2e:b2:aa:ae:b2:b9:41:47:4b:01:d4:f6:d5:c4:20:
c6:66:a1:c8:7e:26:d2:22:56:c1:b2:39:80:aa:37:
31:60:64:ec:53:9f:69:5f:b2:cd:6a:e8:7b:a3:b5:
2c:ef:71:9d:9a:12:0b:9c:74:c6:ea:5f:24:d9:39:
af:01:cd:91:ba:fb:f8:98:21:88:e9:8c:5d:ca:9f:
5f:97:32:e2:88:d7:a5:02:de:10:bd:85:6a:5d:41:
1c:d4:9b:4a:0e:21:2f:cc:53:3a:2e:f1:dd:56:7d:
0b:5e:f6:35:04:db:4b:47:d8:ad:45:72:6e:c8:38:
43:30:4f:84:6f:f5:d0:e9:ad:ca:4d:8f:9d:cf:a7:
82:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7C:34:7C:0C:38:1D:A5:02:80:68:22:30:A9:E8:3E:74:B3:24:62
X509v3 Authority Key Identifier:
keyid:A0:90:E5:20:BF:9D:51:F2:FD:CE:ED:41:3A:F2:7A:C7:58:F6:AE:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oJDlIL-dUfL9zu1BOvJ6x1j2rh0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919536C/75B98BF0366011EE88E0F530C4F9AE02/49FC44B0162A11F18FE9298B373D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
96.30.64.0/18
146.88.32.0/19
161.82.128.0/17
Signature Algorithm: sha256WithRSAEncryption
17:0c:fb:77:80:c9:cf:48:e0:66:de:37:ec:7c:ef:e1:06:be:
2b:49:42:aa:da:a7:93:c2:6c:19:0d:17:32:0e:92:ba:73:18:
31:ff:35:1f:80:cd:a4:95:a7:43:ce:08:34:ef:fb:18:84:94:
fc:09:a4:9d:21:6e:a3:d8:00:6a:34:55:24:23:02:5a:c9:35:
29:60:8b:71:21:e0:8b:9b:57:0b:da:2d:74:ac:05:ff:53:5f:
b1:1a:ca:79:87:bc:72:b8:a0:cc:35:6a:76:9c:0b:aa:9b:30:
45:a5:70:4e:6d:0e:17:1b:9e:2c:56:e4:57:20:86:e1:ba:86:
9c:28:75:1e:29:56:38:7f:6e:68:5b:58:d1:1b:ff:c3:40:36:
78:41:58:00:c6:ee:1f:20:06:92:4e:ec:4f:05:70:13:18:70:
0b:2a:87:cd:e7:f5:ae:cb:55:c1:74:51:eb:78:36:27:ad:1c:
0e:ee:86:6a:e0:b1:da:bf:76:9d:71:b3:9e:d8:91:82:b3:56:
c4:ea:b0:58:78:8d:62:05:93:d5:9d:26:e7:81:74:16:22:94:
76:32:82:88:5b:35:81:2c:a4:66:12:f9:32:ac:ec:cc:ba:f5:
f7:84:57:97:4f:09:be:d4:5e:9d:6c:55:b6:2e:4a:dc:20:1e:
62:20:53:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:41:20 2026 by rpki-client