Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/D9750E78F01111EFB1720645C4F9AE02.roa
File: D9750E78F01111EFB1720645C4F9AE02.roa (raw, json)
Hash identifier: oVrqPdNtzKEI9//1BRfPNFTrey+6zp4wX4J32E0xBc4=
Subject key identifier: D1:E2:B1:A2:5E:9F:F5:12:60:95:0F:75:0D:EE:3A:96:FF:4A:CD:F4
Certificate issuer: /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Certificate serial: 0450
Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/D9750E78F01111EFB1720645C4F9AE02.roa
Signing time: Wed 09 Sep 2026 00:50:44 +0000
ROA not before: Wed 09 Sep 2026 00:50:44 +0000
ROA not after: Wed 01 Dec 2027 00:00:00 +0000
asID: 6262
IP address blocks: 130.116.0.0/16 maxlen: 24
130.155.0.0/16 maxlen: 24
138.194.0.0/16 maxlen: 24
140.79.0.0/16 maxlen: 24
140.253.0.0/16 maxlen: 24
144.110.0.0/16 maxlen: 24
146.118.0.0/16 maxlen: 24
152.83.0.0/16 maxlen: 24
192.16.180.0/24 maxlen: 24
192.41.146.0/24 maxlen: 24
192.42.60.0/23 maxlen: 24
192.42.62.0/24 maxlen: 24
192.54.105.0/24 maxlen: 24
192.54.106.0/24 maxlen: 24
192.55.219.0/24 maxlen: 24
192.55.232.0/24 maxlen: 24
192.65.130.0/24 maxlen: 24
192.67.12.0/24 maxlen: 24
192.67.171.0/24 maxlen: 24
192.68.132.0/24 maxlen: 24
192.82.140.0/24 maxlen: 24
192.83.238.0/24 maxlen: 24
192.84.237.0/24 maxlen: 24
192.84.238.0/24 maxlen: 24
192.94.62.0/23 maxlen: 24
192.94.64.0/24 maxlen: 24
192.94.209.0/24 maxlen: 24
192.102.250.0/23 maxlen: 24
192.107.9.0/24 maxlen: 24
192.111.32.0/24 maxlen: 24
192.122.176.0/24 maxlen: 24
192.124.117.0/24 maxlen: 24
192.124.152.0/24 maxlen: 24
192.138.100.0/24 maxlen: 24
192.149.36.0/24 maxlen: 24
192.150.202.0/24 maxlen: 24
192.160.16.0/24 maxlen: 24
192.188.115.0/24 maxlen: 24
192.188.186.0/24 maxlen: 24
192.207.156.0/23 maxlen: 24
192.207.158.0/24 maxlen: 24
192.207.197.0/24 maxlen: 24
192.207.198.0/24 maxlen: 24
192.245.210.0/23 maxlen: 24
192.245.212.0/22 maxlen: 24
192.245.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 30 Sep 2026 00:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1104 (0x450)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91F33A5, serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B
Validity
Not Before: Sep 9 00:50:44 2026 GMT
Not After : Dec 1 00:00:00 2027 GMT
Subject: CN=6aa0ad64-3432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ab:1e:c7:eb:6b:82:cb:76:2d:e9:84:51:16:
e6:74:b7:54:a0:af:fb:af:6c:b7:0c:88:8c:98:86:
2f:a7:3f:ab:4a:c4:52:26:1a:1b:ba:89:55:cc:65:
c4:b9:56:fc:c2:7f:19:86:2c:c0:5f:d8:c0:ac:05:
2c:e8:79:2c:a6:59:92:39:2a:89:2d:09:26:fa:52:
71:44:70:34:68:f1:93:ff:08:74:69:80:a4:aa:23:
08:6f:6e:2c:30:0b:c3:7d:cd:22:3d:7b:7f:4b:c8:
1c:70:0d:9d:86:11:d2:7a:22:12:d7:4f:2f:bf:42:
48:0a:23:45:c5:a1:90:71:1a:d1:b6:c6:e9:80:09:
d9:cb:d7:bb:4b:a7:3c:05:24:52:89:18:31:d5:3b:
9d:4f:cf:c2:2c:fa:ab:32:b7:e8:ad:c4:22:43:d3:
ba:e5:a7:04:4d:c1:f1:2e:ae:54:46:3b:14:fc:8b:
29:55:15:5f:d9:f5:b5:0e:16:1e:61:50:4b:6c:dc:
c7:57:07:a7:b7:1e:c6:c6:a8:21:b7:51:dd:1a:7f:
b4:b0:cc:18:ca:4b:cf:4e:de:d2:6e:58:5d:80:42:
64:f6:29:7a:d8:25:04:78:f2:b8:41:a2:c9:30:fe:
4f:0b:66:e8:22:26:44:97:48:6a:26:49:5b:4a:08:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E2:B1:A2:5E:9F:F5:12:60:95:0F:75:0D:EE:3A:96:FF:4A:CD:F4
X509v3 Authority Key Identifier:
keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/D9750E78F01111EFB1720645C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
130.116.0.0/16
130.155.0.0/16
138.194.0.0/16
140.79.0.0/16
140.253.0.0/16
144.110.0.0/16
146.118.0.0/16
152.83.0.0/16
192.16.180.0/24
192.41.146.0/24
192.42.60.0-192.42.62.255
192.54.105.0-192.54.106.255
192.55.219.0/24
192.55.232.0/24
192.65.130.0/24
192.67.12.0/24
192.67.171.0/24
192.68.132.0/24
192.82.140.0/24
192.83.238.0/24
192.84.237.0-192.84.238.255
192.94.62.0-192.94.64.255
192.94.209.0/24
192.102.250.0/23
192.107.9.0/24
192.111.32.0/24
192.122.176.0/24
192.124.117.0/24
192.124.152.0/24
192.138.100.0/24
192.149.36.0/24
192.150.202.0/24
192.160.16.0/24
192.188.115.0/24
192.188.186.0/24
192.207.156.0-192.207.158.255
192.207.197.0-192.207.198.255
192.245.210.0-192.245.217.255
Signature Algorithm: sha256WithRSAEncryption
22:f4:9e:65:21:b3:af:f3:48:84:c8:22:65:bc:14:a2:e0:3a:
e0:a8:11:41:ea:43:79:43:38:67:9b:2e:c9:64:39:57:e7:2a:
b3:a1:c9:56:d4:ad:d1:c4:58:52:c7:c3:62:05:95:1e:95:f5:
ef:9d:4f:a4:ff:c5:29:4f:6c:fb:7a:9d:e3:34:71:2d:16:a2:
f8:2a:e3:27:56:90:4d:5a:01:e9:66:0d:1c:58:73:19:7a:f1:
df:56:d6:eb:76:a0:00:99:25:8f:8a:08:49:00:48:2b:18:9b:
92:d0:aa:11:c7:3f:0d:f5:26:a9:94:a6:64:32:29:63:d0:af:
4c:ef:0b:b9:06:ab:b0:4b:4d:1c:1d:8e:af:f9:c8:93:68:71:
50:19:aa:6e:ad:4e:c0:f7:93:b5:dd:26:69:11:21:54:42:29:
ab:bd:db:89:00:d9:a9:b9:f2:9e:c7:24:dc:41:64:7e:8c:39:
4a:0f:c0:3c:5d:e6:66:31:d9:c3:ac:7b:49:ad:3f:2e:76:23:
13:6e:90:7c:73:b7:4a:5d:70:ec:b2:35:f0:49:8d:6b:5d:e1:
75:23:a2:69:e1:79:33:ea:53:57:c9:48:5e:bb:3f:6a:f3:1e:
7b:f8:24:0e:ff:12:51:ba:c7:a7:34:0b:b9:6b:c3:06:19:99:
df:ce:98:06
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgICBFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjMzQTUxMTAvBgNVBAUTKDRGRjUyODQ3MjE1QzRBMjJFOUYxMTQ5RTZDQkZFREY3
NEQ2MUNFOEIwHhcNMjYwOTA5MDA1MDQ0WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWEwYWQ2NC0zNDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoKsex+trgst2LemEURbmdLdUoK/7r2y3DIiMmIYvpz+rSsRSJhobuolVzGXE
uVb8wn8ZhizAX9jArAUs6HksplmSOSqJLQkm+lJxRHA0aPGT/wh0aYCkqiMIb24s
MAvDfc0iPXt/S8gccA2dhhHSeiIS108vv0JICiNFxaGQcRrRtsbpgAnZy9e7S6c8
BSRSiRgx1TudT8/CLPqrMrforcQiQ9O65acETcHxLq5URjsU/IspVRVf2fW1DhYe
YVBLbNzHVwentx7Gxqght1HdGn+0sMwYykvPTt7SblhdgEJk9il62CUEePK4QaLJ
MP5PC2boIiZEl0hqJklbSggqgwIDAQABo4IDeDCCA3QwHQYDVR0OBBYEFNHisaJe
n/USYJUPdQ3uOpb/Ss30MB8GA1UdIwQYMBaAFE/1KEchXEoi6fEUnmy/7fdNYc6L
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xMTg3MDk3MkQ0
RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1NpTHA4UlNlYkxfdDkwMWh6
b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1RfVW9SeUZjU2lMcDhSU2ViTF90OTAxaHpvcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjMzQTUvMTE4NzA5NzJENEQ4MTFFQ0E0MjQ1RjEwQzRGOUFFMDIvRDk3NTBFNzhG
MDExMTFFRkIxNzIwNjQ1QzRGOUFFMDIucm9hMIIBNQYIKwYBBQUHAQcBAf8EggEk
MIIBIDCCARwEAgABMIIBFAMDAIJ0AwMAgpsDAwCKwgMDAIxPAwMAjP0DAwCQbgMD
AJJ2AwMAmFMDBADAELQDBADAKZIwDAMEAsAqPAMEAMAqPjAMAwQAwDZpAwQAwDZq
AwQAwDfbAwQAwDfoAwQAwEGCAwQAwEMMAwQAwEOrAwQAwESEAwQAwFKMAwQAwFPu
MAwDBADAVO0DBADAVO4wDAMEAcBePgMEAMBeQAMEAMBe0QMEAcBm+gMEAMBrCQME
AMBvIAMEAMB6sAMEAMB8dQMEAMB8mAMEAMCKZAMEAMCVJAMEAMCWygMEAMCgEAME
AMC8cwMEAMC8ujAMAwQCwM+cAwQAwM+eMAwDBADAz8UDBADAz8YwDAMEAcD10gME
AcD12DANBgkqhkiG9w0BAQsFAAOCAQEAIvSeZSGzr/NIhMgiZbwUouA64KgRQepD
eUM4Z5suyWQ5V+cqs6HJVtSt0cRYUsfDYgWVHpX1751PpP/FKU9s+3qd4zRxLRai
+CrjJ1aQTVoB6WYNHFhzGXrx31bW63agAJklj4oISQBIKxibktCqEcc/DfUmqZSm
ZDIpY9CvTO8LuQarsEtNHB2Or/nIk2hxUBmqbq1OwPeTtd0maREhVEIpq73biQDZ
qbnynsck3EFkfow5Sg/APF3mZjHZw6x7Sa0/LnYjE26QfHO3Sl1w7LI18EmNa13h
dSOiaeF5M+pTV8lIXrs/avMee/gkDv8SUbrHpzQLuWvDBhmZ386YBg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 22:19:49 2026 by rpki-client