Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/566800AE193C11F094773636C4F9AE02.roa
File: 566800AE193C11F094773636C4F9AE02.roa (raw, json)
Hash identifier: z8eMELWvGD9RiYY3uqJc97NK+qwf06Jq58+etYDZR/I=
Subject key identifier: 2E:3E:A3:F1:5B:8C:FD:17:3A:2F:72:8A:77:99:F2:A9:A1:3C:F3:73
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0DC1
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/566800AE193C11F094773636C4F9AE02.roa
Signing time: Fri 01 May 2026 12:32:32 +0000
ROA not before: Fri 01 May 2026 12:32:32 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 141030
IP address blocks: 2400:3dc0:41::/48 maxlen: 48
2400:3dc0:42::/48 maxlen: 48
2400:3dc0:44::/48 maxlen: 48
2400:3dc0:47::/48 maxlen: 48
2400:3dc0:48::/48 maxlen: 48
2400:3dc0:4d::/48 maxlen: 48
2400:3dc0:4e::/48 maxlen: 48
2400:3dc0:4f::/48 maxlen: 48
2400:3dc0:50::/48 maxlen: 48
2400:3dc0:51::/48 maxlen: 48
2400:3dc0:52::/48 maxlen: 48
2400:3dc0:53::/48 maxlen: 48
2400:3dc0:54::/48 maxlen: 48
2400:3dc0:55::/48 maxlen: 48
2400:3dc0:56::/48 maxlen: 48
2400:3dc0:59::/48 maxlen: 48
2400:3dc0:5c::/48 maxlen: 48
2400:3dc0:5d::/48 maxlen: 48
2400:3dc0:5e::/48 maxlen: 48
2400:3dc0:5f::/48 maxlen: 48
2400:3dc0:62::/48 maxlen: 48
2400:3dc0:63::/48 maxlen: 48
2400:3dc0:64::/48 maxlen: 48
2400:3dc0:65::/48 maxlen: 48
2400:3dc0:66::/48 maxlen: 48
2400:3dc0:67::/48 maxlen: 48
2400:3dc0:6b::/48 maxlen: 48
2400:3dc0:6d::/48 maxlen: 48
2400:3dc0:6e::/48 maxlen: 48
2400:3dc0:73::/48 maxlen: 48
2400:3dc0:74::/48 maxlen: 48
2400:3dc0:75::/48 maxlen: 48
2400:3dc0:76::/48 maxlen: 48
2400:3dc0:77::/48 maxlen: 48
2400:3dc0:79::/48 maxlen: 48
2400:3dc0:7a::/48 maxlen: 48
2400:3dc0:81::/48 maxlen: 48
2400:3dc0:82::/48 maxlen: 48
2400:3dc0:90::/48 maxlen: 48
2400:3dc0:91::/48 maxlen: 48
2400:3dc0:92::/48 maxlen: 48
2400:3dc0:93::/48 maxlen: 48
2400:3dc0:94::/48 maxlen: 48
2400:3dc0:95::/48 maxlen: 48
2400:3dc0:96::/48 maxlen: 48
2400:3dc0:97::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 19 May 2026 18:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3521 (0xdc1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: May 1 12:32:32 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69f49d60-e1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:45:45:95:de:06:a3:7a:41:b6:ac:57:9a:
bb:33:f1:4c:bf:76:c2:93:2c:09:08:07:d7:5f:d7:
0e:5c:64:85:f3:cc:f1:a3:33:f8:3f:d7:e8:38:f0:
52:8f:ce:fd:99:24:15:86:1f:7d:d9:1b:6f:a0:69:
55:06:73:a6:30:58:bf:dd:19:3e:85:a4:e6:9a:eb:
69:4b:70:01:94:10:1b:52:54:83:0a:4f:7f:6c:a0:
fa:27:84:b3:09:b1:e6:ce:e3:bd:8e:23:ee:ca:a6:
fc:a4:57:49:fa:fa:2d:82:17:68:b5:a6:da:5a:b5:
1f:06:6f:bc:37:b7:43:fb:cf:a4:a9:fd:67:1e:45:
e6:90:c6:60:a5:94:53:24:8a:22:bd:ea:10:f8:73:
34:a9:57:7d:d4:14:98:bf:2f:81:b1:60:6e:69:02:
69:3f:65:02:3e:06:99:fe:34:4b:63:07:19:36:96:
a0:c1:9b:4b:10:12:e8:3e:0a:60:80:ae:14:f4:76:
fd:5b:56:53:44:12:e5:5a:43:46:4d:29:7c:88:5a:
9d:47:85:ba:bf:16:47:84:a1:4c:53:64:c0:ba:04:
e1:31:56:21:f8:8f:ac:eb:0b:c8:93:01:d0:25:25:
06:af:99:59:53:0b:4e:b0:8b:f8:d4:83:b2:7f:9c:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3E:A3:F1:5B:8C:FD:17:3A:2F:72:8A:77:99:F2:A9:A1:3C:F3:73
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/566800AE193C11F094773636C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:3dc0:41::-2400:3dc0:42:ffff:ffff:ffff:ffff:ffff
2400:3dc0:44::/48
2400:3dc0:47::-2400:3dc0:48:ffff:ffff:ffff:ffff:ffff
2400:3dc0:4d::-2400:3dc0:56:ffff:ffff:ffff:ffff:ffff
2400:3dc0:59::/48
2400:3dc0:5c::/46
2400:3dc0:62::-2400:3dc0:67:ffff:ffff:ffff:ffff:ffff
2400:3dc0:6b::/48
2400:3dc0:6d::-2400:3dc0:6e:ffff:ffff:ffff:ffff:ffff
2400:3dc0:73::-2400:3dc0:77:ffff:ffff:ffff:ffff:ffff
2400:3dc0:79::-2400:3dc0:7a:ffff:ffff:ffff:ffff:ffff
2400:3dc0:81::-2400:3dc0:82:ffff:ffff:ffff:ffff:ffff
2400:3dc0:90::/45
Signature Algorithm: sha256WithRSAEncryption
4d:cf:1e:95:41:2f:12:75:aa:a8:8b:a5:d0:04:1f:dc:84:c5:
12:28:0f:ad:5c:97:35:07:65:df:18:fe:ac:3c:3a:91:5f:82:
a9:76:32:7b:7b:1a:f1:75:62:fc:8a:c6:72:94:bd:97:92:86:
88:f0:6e:6f:40:9c:0c:74:a6:5b:1e:48:90:f3:3b:01:ca:11:
5b:8c:b9:97:09:b7:d2:a9:e4:5a:e7:dc:d7:63:b7:9a:df:ec:
26:b6:e7:29:08:2b:93:25:a6:24:1d:ae:f9:05:eb:02:4a:e6:
5c:58:75:8c:e1:9f:43:e8:35:d8:ae:44:ed:ca:a5:07:f5:70:
ff:b6:8c:e2:76:49:a2:d3:39:0b:c0:5d:cb:99:1b:e6:a1:ae:
99:dc:f9:bb:cb:ac:5a:69:d3:3d:33:c0:71:76:64:6f:0d:7c:
49:ef:d2:20:9c:db:f3:7b:25:70:19:dc:0d:80:c8:c3:7b:52:
34:3a:08:e3:0f:67:7c:2b:1a:9b:98:d5:56:2d:ce:60:9b:16:
fa:63:b1:73:fa:ef:73:77:8e:68:6a:c2:91:0f:1b:1b:96:4c:
3b:e6:10:be:50:ae:52:58:fb:bf:47:23:39:f0:9a:83:1d:95:
92:bb:32:01:4f:ea:78:58:ac:f0:8a:60:58:74:16:19:68:f6:
2e:f7:6f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:14 2026 by rpki-client