Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/F33309A2B72011EFB3A5D772C4F9AE02.roa
File: F33309A2B72011EFB3A5D772C4F9AE02.roa (raw, json)
Hash identifier: HYHec9orOca+00gsDqMx8Gss9C7gqHvPJgzKMMmNDKk=
Subject key identifier: AB:34:FE:DB:33:FA:5F:47:A2:27:55:3A:5A:97:34:D8:A9:BE:9D:28
Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial: 010F
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/F33309A2B72011EFB3A5D772C4F9AE02.roa
Signing time: Mon 02 Mar 2026 14:10:16 +0000
ROA not before: Wed 09 Jul 2025 08:13:51 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 13445
IP address blocks: 2402:2500:10::/44 maxlen: 44
2402:2500:20::/44 maxlen: 44
2402:2500:30::/44 maxlen: 44
2402:2500:40::/44 maxlen: 44
2402:2500:50::/44 maxlen: 44
2402:2500:100::/40 maxlen: 40
2402:2500:200::/40 maxlen: 40
2402:2500:300::/40 maxlen: 40
2402:2500:400::/40 maxlen: 40
2402:2500:500::/40 maxlen: 40
2402:2500:1010::/44 maxlen: 44
2402:2500:1020::/44 maxlen: 44
2402:2500:1030::/44 maxlen: 44
2402:2500:1040::/44 maxlen: 44
2402:2500:1050::/44 maxlen: 44
2402:2500:10a0::/44 maxlen: 44
2402:2500:10a0::/48 maxlen: 48
2402:2500:10a1::/48 maxlen: 48
2402:2500:10a2::/48 maxlen: 48
2402:2500:10a3::/48 maxlen: 48
2402:2500:10a4::/48 maxlen: 48
2402:2500:10a5::/48 maxlen: 48
2402:2500:10a6::/48 maxlen: 48
2402:2500:10a7::/48 maxlen: 48
2402:2500:10a8::/48 maxlen: 48
2402:2500:10a9::/48 maxlen: 48
2402:2500:10aa::/48 maxlen: 48
2402:2500:10ab::/48 maxlen: 48
2402:2500:10ac::/48 maxlen: 48
2402:2500:10ad::/48 maxlen: 48
2402:2500:10ae::/48 maxlen: 48
2402:2500:10af::/48 maxlen: 48
2402:2500:1100::/44 maxlen: 44
2402:2500:1200::/44 maxlen: 44
2402:2500:1300::/44 maxlen: 44
2402:2500:1400::/44 maxlen: 44
2402:2500:1500::/44 maxlen: 44
2402:2500:2010::/44 maxlen: 44
2402:2500:2020::/44 maxlen: 44
2402:2500:2030::/44 maxlen: 44
2402:2500:2040::/44 maxlen: 44
2402:2500:2050::/44 maxlen: 44
2402:2500:20a0::/44 maxlen: 44
2402:2500:20a0::/48 maxlen: 48
2402:2500:20a1::/48 maxlen: 48
2402:2500:20a2::/48 maxlen: 48
2402:2500:20a3::/48 maxlen: 48
2402:2500:20a4::/48 maxlen: 48
2402:2500:20a5::/48 maxlen: 48
2402:2500:20a6::/48 maxlen: 48
2402:2500:20a7::/48 maxlen: 48
2402:2500:20a8::/48 maxlen: 48
2402:2500:20a9::/48 maxlen: 48
2402:2500:20aa::/48 maxlen: 48
2402:2500:20ab::/48 maxlen: 48
2402:2500:20ac::/48 maxlen: 48
2402:2500:20ad::/48 maxlen: 48
2402:2500:20ae::/48 maxlen: 48
2402:2500:20af::/48 maxlen: 48
2402:2500:2100::/44 maxlen: 44
2402:2500:2200::/44 maxlen: 44
2402:2500:2300::/44 maxlen: 44
2402:2500:2400::/44 maxlen: 44
2402:2500:2500::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 01 Apr 2026 19:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271 (0x10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Validity
Not Before: Jul 9 08:13:51 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=69a59a48-e1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:61:f1:29:c7:7d:d3:da:19:0c:80:10:d3:58:
e1:eb:2f:db:16:95:13:4a:fb:68:d8:26:5a:62:34:
49:0c:08:95:a6:50:cf:b3:e4:ba:3c:12:ba:69:07:
e4:fe:51:b3:57:c9:c7:4d:82:bf:0f:a0:9b:26:44:
d5:6e:1c:24:86:a0:e0:bd:ff:09:1d:6a:b8:10:d6:
79:3d:51:77:16:4f:8f:ba:08:4f:12:d7:1c:42:52:
a1:36:d1:4d:d6:32:c2:ee:28:64:74:6d:b5:ba:4b:
5c:44:76:49:26:7f:12:74:de:bf:89:16:ce:92:4b:
7b:2e:0e:6e:af:84:89:64:1f:12:17:a9:ae:d0:c3:
95:8e:8b:94:fe:eb:e2:c7:da:4c:bf:de:c1:ba:ff:
01:bf:68:4a:11:61:c1:4a:86:a8:c2:96:a2:bd:43:
99:dd:05:a3:ed:eb:3e:19:c1:23:3b:e9:1a:89:3b:
7b:db:be:c4:39:c2:20:84:0b:b3:8a:3d:13:42:38:
77:09:97:15:f7:fb:00:91:c4:75:0a:20:8c:16:f3:
81:66:78:e6:10:e6:77:82:0c:33:87:1c:b0:ec:15:
e0:52:10:e0:f9:7f:d7:9b:f3:63:84:02:59:33:a8:
b5:d1:e5:a8:23:d1:76:dd:72:27:2f:24:fd:ab:9f:
f4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:34:FE:DB:33:FA:5F:47:A2:27:55:3A:5A:97:34:D8:A9:BE:9D:28
X509v3 Authority Key Identifier:
keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/F33309A2B72011EFB3A5D772C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:2500:10::-2402:2500:5f:ffff:ffff:ffff:ffff:ffff
2402:2500:100::-2402:2500:5ff:ffff:ffff:ffff:ffff:ffff
2402:2500:1010::-2402:2500:105f:ffff:ffff:ffff:ffff:ffff
2402:2500:10a0::/44
2402:2500:1100::/44
2402:2500:1200::/44
2402:2500:1300::/44
2402:2500:1400::/44
2402:2500:1500::/44
2402:2500:2010::-2402:2500:205f:ffff:ffff:ffff:ffff:ffff
2402:2500:20a0::/44
2402:2500:2100::/44
2402:2500:2200::/44
2402:2500:2300::/44
2402:2500:2400::/44
2402:2500:2500::/44
Signature Algorithm: sha256WithRSAEncryption
55:fa:34:aa:9d:1c:de:2e:1b:c2:1b:36:5c:0f:25:48:23:90:
9e:40:24:d4:3b:c7:7d:77:56:e5:02:4d:f4:65:76:d5:5a:eb:
fa:5a:da:3a:70:8f:d4:43:57:e9:bb:ab:a7:dd:d4:83:d1:94:
7b:1d:17:c4:4e:41:c1:e7:53:d3:de:b7:33:92:d4:5f:ea:5c:
36:0e:39:b5:06:99:7e:77:1a:9f:b1:bb:71:66:48:99:b6:32:
ae:c3:3f:db:c2:4b:16:48:79:9f:61:6e:b0:82:41:eb:3c:3a:
2b:1c:1a:e7:07:44:de:e4:9a:a3:72:14:ae:59:15:45:f7:f8:
aa:1b:fa:1b:74:e5:60:2b:8b:06:64:fa:22:60:02:9f:99:de:
50:de:48:90:1c:33:6c:51:6e:35:ef:04:de:6c:fb:1f:47:60:
19:08:7e:42:54:09:2c:55:e9:b4:e3:71:2e:81:df:07:0f:9d:
0e:1d:e9:59:b8:ae:b0:8f:99:0d:b8:b6:ea:7d:7d:8e:d9:79:
99:de:7e:d3:45:44:fa:1b:c4:b8:fd:47:56:14:8b:18:80:17:
a4:e2:79:8d:6d:ce:3f:66:4d:3b:e1:4f:d7:5f:53:24:d4:e5:
96:20:09:33:b8:1f:30:9b:07:a9:c2:9f:38:2f:c8:9b:79:ef:
13:60:39:48
-----BEGIN CERTIFICATE-----
MIIF9TCCBN2gAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTgyRUYxMTAvBgNVBAUTKDg3MTk3RkQ1NDZEQzMxNTIzMTExREQ5MzkwQjFCQTNG
M0Q3MDI2NTYwHhcNMjUwNzA5MDgxMzUxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1OWE0OC1lMWFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjGHxKcd909oZDIAQ01jh6y/bFpUTSvto2CZaYjRJDAiVplDPs+S6PBK6aQfk
/lGzV8nHTYK/D6CbJkTVbhwkhqDgvf8JHWq4ENZ5PVF3Fk+PughPEtccQlKhNtFN
1jLC7ihkdG21uktcRHZJJn8SdN6/iRbOkkt7Lg5ur4SJZB8SF6mu0MOVjouU/uvi
x9pMv97Buv8Bv2hKEWHBSoaowpaivUOZ3QWj7es+GcEjO+kaiTt7277EOcIghAuz
ij0TQjh3CZcV9/sAkcR1CiCMFvOBZnjmEOZ3ggwzhxyw7BXgUhDg+X/Xm/NjhAJZ
M6i10eWoI9F23XInLyT9q5/0KQIDAQABo4IDGTCCAxUwHQYDVR0OBBYEFKs0/tsz
+l9HoidVOlqXNNipvp0oMB8GA1UdIwQYMBaAFIcZf9VG3DFSMRHdk5Cxuj89cCZW
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5ODJFRi9GQzY1MEI3MkI3
MUQxMUVGODk4MkM0MENDNEY5QUUwMi9oeGxfMVViY01WSXhFZDJUa0xHNlB6MXdK
bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2h4bF8xVWJjTVZJeEVkMlRrTEc2UHoxd0psWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OTgyRUYvRkM2NTBCNzJCNzFEMTFFRjg5ODJDNDBDQzRGOUFFMDIvRjMzMzA5QTJC
NzIwMTFFRkIzQTVENzcyQzRGOUFFMDIucm9hMIHXBggrBgEFBQcBBwEB/wSBxzCB
xDCBwQQCAAIwgbowEgMHBCQCJQAAEAMHBSQCJQAAQDAQAwYAJAIlAAEDBgEkAiUA
BDASAwcEJAIlABAQAwcFJAIlABBAAwcEJAIlABCgAwcEJAIlABEAAwcEJAIlABIA
AwcEJAIlABMAAwcEJAIlABQAAwcEJAIlABUAMBIDBwQkAiUAIBADBwUkAiUAIEAD
BwQkAiUAIKADBwQkAiUAIQADBwQkAiUAIgADBwQkAiUAIwADBwQkAiUAJAADBwQk
AiUAJQAwDQYJKoZIhvcNAQELBQADggEBAFX6NKqdHN4uG8IbNlwPJUgjkJ5AJNQ7
x313VuUCTfRldtVa6/pa2jpwj9RDV+m7q6fd1IPRlHsdF8ROQcHnU9PetzOS1F/q
XDYOObUGmX53Gp+xu3FmSJm2Mq7DP9vCSxZIeZ9hbrCCQes8OiscGucHRN7kmqNy
FK5ZFUX3+Kob+ht05WAriwZk+iJgAp+Z3lDeSJAcM2xRbjXvBN5s+x9HYBkIfkJU
CSxV6bTjcS6B3wcPnQ4d6Vm4rrCPmQ24tup9fY7ZeZneftNFRPobxLj9R1YUixiA
F6TieY1tzj9mTTvhT9dfUyTU5ZYgCTO4HzCbB6nCnzgvyJt57xNgOUg=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:46 2026 by rpki-client