Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/3A8C7518B72111EFA9A92F26C4F9AE02.roa
File: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (raw, json)
Hash identifier: O/afFCUP8vi3DtNxbtCLXq4PUJjWlL9Mty/w2HiZ0No=
Subject key identifier: 3D:06:73:2D:A7:8D:38:44:07:43:D1:37:A4:68:1E:4A:3C:F8:AE:59
Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial: 015F
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/3A8C7518B72111EFA9A92F26C4F9AE02.roa
Signing time: Fri 17 Jul 2026 07:33:50 +0000
ROA not before: Fri 17 Jul 2026 07:33:50 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2402:2500:10a0::/44 maxlen: 44
2402:2500:10a0::/48 maxlen: 48
2402:2500:10a1::/48 maxlen: 48
2402:2500:10a2::/48 maxlen: 48
2402:2500:10a3::/48 maxlen: 48
2402:2500:10a4::/48 maxlen: 48
2402:2500:10a5::/48 maxlen: 48
2402:2500:10a6::/48 maxlen: 48
2402:2500:10a7::/48 maxlen: 48
2402:2500:10a8::/48 maxlen: 48
2402:2500:10a9::/48 maxlen: 48
2402:2500:10aa::/48 maxlen: 48
2402:2500:10ab::/48 maxlen: 48
2402:2500:10ac::/48 maxlen: 48
2402:2500:10ad::/48 maxlen: 48
2402:2500:10ae::/48 maxlen: 48
2402:2500:10af::/48 maxlen: 48
2402:2500:20a0::/44 maxlen: 44
2402:2500:20a0::/48 maxlen: 48
2402:2500:20a1::/48 maxlen: 48
2402:2500:20a2::/48 maxlen: 48
2402:2500:20a3::/48 maxlen: 48
2402:2500:20a4::/48 maxlen: 48
2402:2500:20a5::/48 maxlen: 48
2402:2500:20a6::/48 maxlen: 48
2402:2500:20a7::/48 maxlen: 48
2402:2500:20a8::/48 maxlen: 48
2402:2500:20a9::/48 maxlen: 48
2402:2500:20aa::/48 maxlen: 48
2402:2500:20ab::/48 maxlen: 48
2402:2500:20ac::/48 maxlen: 48
2402:2500:20ad::/48 maxlen: 48
2402:2500:20ae::/48 maxlen: 48
2402:2500:20af::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 351 (0x15f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Validity
Not Before: Jul 17 07:33:50 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a59dade-a40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:c5:a9:6e:fc:0a:f2:cd:d2:d5:77:2e:ff:
a1:6a:af:fc:36:34:1d:d6:fd:6d:5e:8e:99:bc:f6:
3c:5c:dc:6f:9f:9c:d7:7a:0a:d3:1e:21:9c:c1:6d:
5f:a3:b4:af:41:89:6f:0a:83:f7:f9:67:64:9a:34:
98:c3:1a:27:d4:ac:ed:c1:41:90:5e:4e:ac:25:76:
80:23:88:ff:a6:fe:b8:7a:03:2d:db:0d:3b:3a:59:
69:b4:8a:fc:d6:30:43:92:74:3f:e7:31:dc:0f:c2:
86:5a:76:04:68:22:70:bb:34:d2:b9:0c:fe:d2:0d:
fc:a8:88:85:9a:60:3d:ef:26:0d:f6:45:d7:ed:d3:
13:60:c5:2b:5b:3c:07:e4:91:ac:79:10:40:06:73:
52:f5:05:dc:93:44:b6:81:d8:43:da:1c:22:dd:1a:
99:6f:2b:73:c4:04:6a:ce:76:44:18:4c:4c:b2:ad:
5d:de:d9:eb:fe:85:59:ac:81:c3:eb:72:46:7b:c2:
fe:0e:20:8d:db:d5:fa:f1:3c:d2:05:07:de:77:6d:
fb:a8:a6:46:ca:cb:21:37:ec:4c:85:6e:71:93:86:
67:02:ae:ff:7c:63:76:dd:20:e0:eb:34:96:72:27:
79:a0:d4:8b:86:11:73:01:0f:70:aa:ac:24:0f:80:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:06:73:2D:A7:8D:38:44:07:43:D1:37:A4:68:1E:4A:3C:F8:AE:59
X509v3 Authority Key Identifier:
keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/3A8C7518B72111EFA9A92F26C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:2500:10a0::/44
2402:2500:20a0::/44
Signature Algorithm: sha256WithRSAEncryption
4e:63:62:94:03:d4:05:13:4e:e3:60:12:07:08:45:49:f8:de:
39:ac:57:b6:90:fa:45:40:36:16:2c:30:ee:dd:99:a4:92:c6:
f5:3c:1c:a5:78:7f:f9:af:a9:de:56:17:9a:30:3a:91:45:e7:
f6:aa:c8:0f:b4:09:f7:62:bf:a3:22:4a:b3:b6:c4:9d:f7:3f:
eb:c5:2d:2f:10:3b:8d:32:40:e7:b1:e6:e7:8c:88:4c:22:b4:
76:de:f4:c0:d2:7e:43:97:fe:16:ce:73:bf:37:f8:f8:b8:7a:
e0:d7:23:88:15:6f:43:cb:c4:56:2f:dd:f0:a6:99:38:7f:0f:
6f:9b:25:12:e4:41:d8:6e:65:82:fc:fc:f4:cd:e2:8e:aa:75:
7b:28:15:8c:cf:87:33:b3:e6:65:c2:f5:d7:cc:1b:49:23:40:
df:37:25:b3:98:03:76:96:19:3d:d4:5f:8f:68:4c:56:d2:87:
b5:bc:61:1b:30:f7:0c:b7:f6:e2:5a:5d:3d:66:e0:d6:6a:ac:
4f:95:0f:8d:8f:96:70:9d:b9:bc:8c:b7:64:c5:34:78:8e:e3:
80:8c:f2:37:db:f1:6c:a0:d5:1f:52:54:57:27:6b:63:b1:25:
bd:2c:f0:ac:83:d6:91:82:7e:d1:0b:74:7e:19:6e:a9:0c:d3:
15:39:43:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:02:08 2026 by rpki-client