Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/566800AE193C11F094773636C4F9AE02.roa
File: 566800AE193C11F094773636C4F9AE02.roa (raw, json)
Hash identifier: n+6S6drduflW8vmKudlFPF0ZyDGO0es3RyPNjv25FYY=
Subject key identifier: 38:40:26:CC:17:DA:56:81:FD:73:3E:B3:06:15:9A:CE:78:00:1A:09
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0DA4
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/566800AE193C11F094773636C4F9AE02.roa
Signing time: Mon 16 Mar 2026 14:49:42 +0000
ROA not before: Mon 16 Mar 2026 14:49:42 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 141030
IP address blocks: 2400:3dc0:41::/48 maxlen: 48
2400:3dc0:42::/48 maxlen: 48
2400:3dc0:44::/48 maxlen: 48
2400:3dc0:47::/48 maxlen: 48
2400:3dc0:48::/48 maxlen: 48
2400:3dc0:4d::/48 maxlen: 48
2400:3dc0:4e::/48 maxlen: 48
2400:3dc0:4f::/48 maxlen: 48
2400:3dc0:50::/48 maxlen: 48
2400:3dc0:51::/48 maxlen: 48
2400:3dc0:52::/48 maxlen: 48
2400:3dc0:53::/48 maxlen: 48
2400:3dc0:54::/48 maxlen: 48
2400:3dc0:55::/48 maxlen: 48
2400:3dc0:59::/48 maxlen: 48
2400:3dc0:5c::/48 maxlen: 48
2400:3dc0:5d::/48 maxlen: 48
2400:3dc0:5e::/48 maxlen: 48
2400:3dc0:5f::/48 maxlen: 48
2400:3dc0:62::/48 maxlen: 48
2400:3dc0:63::/48 maxlen: 48
2400:3dc0:64::/48 maxlen: 48
2400:3dc0:65::/48 maxlen: 48
2400:3dc0:66::/48 maxlen: 48
2400:3dc0:67::/48 maxlen: 48
2400:3dc0:6b::/48 maxlen: 48
2400:3dc0:6d::/48 maxlen: 48
2400:3dc0:6e::/48 maxlen: 48
2400:3dc0:73::/48 maxlen: 48
2400:3dc0:74::/48 maxlen: 48
2400:3dc0:75::/48 maxlen: 48
2400:3dc0:76::/48 maxlen: 48
2400:3dc0:77::/48 maxlen: 48
2400:3dc0:79::/48 maxlen: 48
2400:3dc0:7a::/48 maxlen: 48
2400:3dc0:81::/48 maxlen: 48
2400:3dc0:82::/48 maxlen: 48
2400:3dc0:90::/48 maxlen: 48
2400:3dc0:91::/48 maxlen: 48
2400:3dc0:92::/48 maxlen: 48
2400:3dc0:93::/48 maxlen: 48
2400:3dc0:94::/48 maxlen: 48
2400:3dc0:95::/48 maxlen: 48
2400:3dc0:96::/48 maxlen: 48
2400:3dc0:97::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 31 Mar 2026 18:08:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3492 (0xda4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Mar 16 14:49:42 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69b81886-8ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:37:40:21:66:69:8f:c1:00:3f:2f:2a:fb:20:
4f:de:7e:92:ec:46:dd:29:45:f8:cb:d8:65:ae:a0:
b1:c7:5e:b5:99:12:33:e1:72:f8:50:d3:5a:03:49:
f6:a7:08:7c:0c:26:55:8b:8a:e1:98:fd:3a:da:98:
13:c3:fa:61:dd:1a:d6:cd:1e:51:95:f1:64:d8:c4:
1a:0f:cc:cd:93:0d:c8:0b:d2:ca:09:60:2e:51:34:
11:20:1d:1b:7d:b1:a3:81:70:0e:ac:0b:af:f1:82:
32:ff:3d:91:b9:b0:ae:1f:5e:85:1f:3d:34:c1:10:
14:93:49:f9:53:24:2d:51:34:8a:9a:3f:ce:a0:49:
c8:7a:8a:72:7b:9c:57:15:51:6e:3d:41:18:91:73:
94:3b:ee:b9:25:be:39:da:eb:1b:4c:5e:70:e8:aa:
ac:c7:f2:25:63:f6:4b:c3:c0:f0:c9:7e:ab:23:03:
06:6a:23:1c:43:15:b1:63:5c:2d:7c:86:c1:10:e1:
bf:14:48:1d:4d:11:36:27:40:62:f6:07:15:04:81:
cd:ee:05:0d:da:38:08:04:06:92:9d:a2:e1:63:b1:
94:00:63:4b:19:c1:11:cf:c3:c0:78:5c:3f:3f:15:
b6:d4:7e:c2:c1:3b:79:32:4e:6b:7c:89:bb:8e:36:
20:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:40:26:CC:17:DA:56:81:FD:73:3E:B3:06:15:9A:CE:78:00:1A:09
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/566800AE193C11F094773636C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:3dc0:41::-2400:3dc0:42:ffff:ffff:ffff:ffff:ffff
2400:3dc0:44::/48
2400:3dc0:47::-2400:3dc0:48:ffff:ffff:ffff:ffff:ffff
2400:3dc0:4d::-2400:3dc0:55:ffff:ffff:ffff:ffff:ffff
2400:3dc0:59::/48
2400:3dc0:5c::/46
2400:3dc0:62::-2400:3dc0:67:ffff:ffff:ffff:ffff:ffff
2400:3dc0:6b::/48
2400:3dc0:6d::-2400:3dc0:6e:ffff:ffff:ffff:ffff:ffff
2400:3dc0:73::-2400:3dc0:77:ffff:ffff:ffff:ffff:ffff
2400:3dc0:79::-2400:3dc0:7a:ffff:ffff:ffff:ffff:ffff
2400:3dc0:81::-2400:3dc0:82:ffff:ffff:ffff:ffff:ffff
2400:3dc0:90::/45
Signature Algorithm: sha256WithRSAEncryption
6e:12:f2:aa:2b:52:22:9c:9c:7a:10:0f:c1:24:1e:7d:38:d9:
cd:4e:69:bd:5a:c0:54:36:be:87:63:c9:90:90:65:92:da:f5:
37:42:9f:fd:2f:c2:c3:d3:9c:13:dd:62:74:8e:76:7e:62:20:
32:17:cc:f6:5f:22:8e:e8:93:48:4a:73:35:9f:26:f5:62:d2:
f3:3f:1b:dc:80:d3:bd:3e:d2:36:bc:6c:d3:95:91:fb:58:07:
71:fb:22:bc:a9:df:2e:53:8a:9e:e7:a2:fd:b8:8a:58:36:91:
60:f2:3f:07:8e:7c:20:0b:56:34:7f:f6:64:1a:7b:0f:ef:40:
cd:7f:7a:90:d6:3e:47:ae:06:57:14:21:b7:32:3a:6d:0b:1c:
d3:08:18:47:b0:b6:bc:af:7f:50:47:7e:5d:61:81:64:93:33:
97:fd:6d:b0:ff:04:86:03:8a:1d:82:a8:bd:85:54:de:c6:89:
4b:31:e8:25:89:0a:5a:0b:c5:77:ce:ec:be:70:31:fa:fc:4f:
03:64:d2:27:ec:8b:29:e3:c9:52:5d:ab:b6:ee:07:3b:a7:a7:
4f:8a:98:01:b4:ab:52:65:47:de:bc:06:6a:94:50:1a:43:e5:
eb:cb:b1:f6:37:90:0d:80:a3:ce:95:97:c0:bc:b6:76:83:d7:
63:7e:de:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:56:01 2026 by rpki-client