Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/98AEAB84B72111EF8A087D30C4F9AE02.roa
File: 98AEAB84B72111EF8A087D30C4F9AE02.roa (raw, json)
Hash identifier: d33D0nn4vSuDr9mrd9PxLM5FRlHIJ8B/2JN7+OeYbXY=
Subject key identifier: A7:B9:77:10:3C:F1:C1:68:F2:15:22:4F:9C:AE:D8:F0:EF:53:A2:35
Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial: 015E
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/98AEAB84B72111EF8A087D30C4F9AE02.roa
Signing time: Fri 17 Jul 2026 07:33:49 +0000
ROA not before: Fri 17 Jul 2026 07:33:49 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 14618
IP address blocks: 2402:2500:10a0::/44 maxlen: 44
2402:2500:10a0::/48 maxlen: 48
2402:2500:10a1::/48 maxlen: 48
2402:2500:10a2::/48 maxlen: 48
2402:2500:10a3::/48 maxlen: 48
2402:2500:10a4::/48 maxlen: 48
2402:2500:10a5::/48 maxlen: 48
2402:2500:10a6::/48 maxlen: 48
2402:2500:10a7::/48 maxlen: 48
2402:2500:10a8::/48 maxlen: 48
2402:2500:10a9::/48 maxlen: 48
2402:2500:10aa::/48 maxlen: 48
2402:2500:10ab::/48 maxlen: 48
2402:2500:10ac::/48 maxlen: 48
2402:2500:10ad::/48 maxlen: 48
2402:2500:10ae::/48 maxlen: 48
2402:2500:10af::/48 maxlen: 48
2402:2500:20a0::/44 maxlen: 44
2402:2500:20a0::/48 maxlen: 48
2402:2500:20a1::/48 maxlen: 48
2402:2500:20a2::/48 maxlen: 48
2402:2500:20a3::/48 maxlen: 48
2402:2500:20a4::/48 maxlen: 48
2402:2500:20a5::/48 maxlen: 48
2402:2500:20a6::/48 maxlen: 48
2402:2500:20a7::/48 maxlen: 48
2402:2500:20a8::/48 maxlen: 48
2402:2500:20a9::/48 maxlen: 48
2402:2500:20aa::/48 maxlen: 48
2402:2500:20ab::/48 maxlen: 48
2402:2500:20ac::/48 maxlen: 48
2402:2500:20ad::/48 maxlen: 48
2402:2500:20ae::/48 maxlen: 48
2402:2500:20af::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350 (0x15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Validity
Not Before: Jul 17 07:33:49 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a59dadc-8c30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:75:b7:12:be:8e:44:74:81:96:f3:be:64:2e:
4e:18:11:50:dd:6c:ee:e2:76:9b:e1:ba:f2:75:80:
c9:d1:fc:20:37:cc:80:f8:ad:f5:c3:9f:79:96:94:
c8:6d:a7:15:38:74:1d:04:87:0b:4f:d8:cc:fd:46:
ac:4f:02:2d:e7:4d:06:97:69:b9:73:c5:e3:9c:17:
3b:39:af:ed:44:c2:93:f4:c5:96:63:58:c5:f4:e2:
ca:1d:6d:88:9c:a5:0e:a0:c5:3b:39:85:63:c7:83:
64:42:06:77:98:e9:a0:24:a7:d9:60:64:c3:78:21:
29:21:12:31:56:69:26:65:74:31:56:0e:ad:23:d7:
ed:9b:c7:e6:09:e9:65:c5:95:4a:fb:6d:56:32:85:
ff:2f:6d:a2:98:d0:bf:57:85:82:22:a6:90:99:53:
fa:46:24:35:7a:35:23:80:a8:3b:ae:61:09:09:1b:
fc:08:1c:65:61:89:66:cf:34:17:9e:ce:40:12:6b:
9e:a0:87:ec:2e:f4:f1:b4:d0:84:4a:b9:15:48:c6:
d2:dd:04:f4:0f:aa:3e:96:1d:c8:28:57:92:21:09:
6f:0d:33:13:f6:ed:e3:94:bc:13:7c:1c:a6:44:a5:
47:f9:b0:a1:92:64:9e:68:77:8d:e0:03:a3:44:2c:
f0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B9:77:10:3C:F1:C1:68:F2:15:22:4F:9C:AE:D8:F0:EF:53:A2:35
X509v3 Authority Key Identifier:
keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/98AEAB84B72111EF8A087D30C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:2500:10a0::/44
2402:2500:20a0::/44
Signature Algorithm: sha256WithRSAEncryption
7a:86:1a:61:fa:3f:44:e1:d1:99:ab:82:2b:1e:60:fd:01:e9:
fa:c0:d5:d7:92:07:85:5a:f0:db:87:4e:d8:7b:95:d4:4f:1c:
d2:61:00:9f:d9:f6:31:c9:df:40:a8:29:9a:8b:94:1c:81:09:
ab:cd:81:28:06:0c:2b:b1:d1:a8:4a:67:79:1f:55:da:b8:fc:
ba:db:c7:a3:6d:5e:9d:b3:02:42:c1:c4:ba:12:f7:64:62:ef:
ca:fa:6f:9a:3d:cd:9d:db:c7:19:0b:35:94:a4:ad:e2:8b:a6:
c8:83:f2:66:cc:36:e1:09:f4:b2:51:51:09:80:7b:5d:27:35:
3e:13:73:56:94:f5:c3:9f:8e:3a:e2:2d:af:bc:49:73:a8:4b:
22:88:6e:8b:58:d1:10:21:a4:d4:8d:e3:83:b5:36:0e:13:7d:
4c:41:fb:40:55:22:8f:35:e0:9e:27:1f:75:32:4f:1f:55:fa:
ae:4a:ee:a7:e7:86:21:5a:dd:47:b7:31:f8:a3:5e:48:13:35:
29:47:e1:87:65:e8:51:a9:5a:1c:3f:b3:47:a0:db:d3:01:c4:
d5:1e:48:51:13:42:06:b1:10:5e:a8:b1:90:e2:3e:af:25:cf:
23:3e:31:5a:82:1c:ff:30:b4:b9:4e:28:8f:48:c3:8b:09:15:
a2:ef:28:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:38 2026 by rpki-client