Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/F33309A2B72011EFB3A5D772C4F9AE02.roa
File: F33309A2B72011EFB3A5D772C4F9AE02.roa (raw, json)
Hash identifier: n9XHNHcl2xF8ubtL4a2OwVIihOJ0QV9E2Gddb2c8vlo=
Subject key identifier: AD:CE:14:78:D0:5A:D7:D7:8C:46:A1:20:AE:83:F7:F0:98:81:C9:24
Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial: 015D
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/F33309A2B72011EFB3A5D772C4F9AE02.roa
Signing time: Fri 17 Jul 2026 07:33:46 +0000
ROA not before: Fri 17 Jul 2026 07:33:46 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 13445
IP address blocks: 2402:2500:10::/44 maxlen: 44
2402:2500:20::/44 maxlen: 44
2402:2500:30::/44 maxlen: 44
2402:2500:40::/44 maxlen: 44
2402:2500:50::/44 maxlen: 44
2402:2500:100::/40 maxlen: 40
2402:2500:200::/40 maxlen: 40
2402:2500:300::/40 maxlen: 40
2402:2500:400::/40 maxlen: 40
2402:2500:500::/40 maxlen: 40
2402:2500:1010::/44 maxlen: 44
2402:2500:1020::/44 maxlen: 44
2402:2500:1030::/44 maxlen: 44
2402:2500:1040::/44 maxlen: 44
2402:2500:1050::/44 maxlen: 44
2402:2500:10a0::/44 maxlen: 44
2402:2500:10a0::/48 maxlen: 48
2402:2500:10a1::/48 maxlen: 48
2402:2500:10a2::/48 maxlen: 48
2402:2500:10a3::/48 maxlen: 48
2402:2500:10a4::/48 maxlen: 48
2402:2500:10a5::/48 maxlen: 48
2402:2500:10a6::/48 maxlen: 48
2402:2500:10a7::/48 maxlen: 48
2402:2500:10a8::/48 maxlen: 48
2402:2500:10a9::/48 maxlen: 48
2402:2500:10aa::/48 maxlen: 48
2402:2500:10ab::/48 maxlen: 48
2402:2500:10ac::/48 maxlen: 48
2402:2500:10ad::/48 maxlen: 48
2402:2500:10ae::/48 maxlen: 48
2402:2500:10af::/48 maxlen: 48
2402:2500:1100::/44 maxlen: 44
2402:2500:1200::/44 maxlen: 44
2402:2500:1300::/44 maxlen: 44
2402:2500:1400::/44 maxlen: 44
2402:2500:1500::/44 maxlen: 44
2402:2500:2010::/44 maxlen: 44
2402:2500:2020::/44 maxlen: 44
2402:2500:2030::/44 maxlen: 44
2402:2500:2040::/44 maxlen: 44
2402:2500:2050::/44 maxlen: 44
2402:2500:20a0::/44 maxlen: 44
2402:2500:20a0::/48 maxlen: 48
2402:2500:20a1::/48 maxlen: 48
2402:2500:20a2::/48 maxlen: 48
2402:2500:20a3::/48 maxlen: 48
2402:2500:20a4::/48 maxlen: 48
2402:2500:20a5::/48 maxlen: 48
2402:2500:20a6::/48 maxlen: 48
2402:2500:20a7::/48 maxlen: 48
2402:2500:20a8::/48 maxlen: 48
2402:2500:20a9::/48 maxlen: 48
2402:2500:20aa::/48 maxlen: 48
2402:2500:20ab::/48 maxlen: 48
2402:2500:20ac::/48 maxlen: 48
2402:2500:20ad::/48 maxlen: 48
2402:2500:20ae::/48 maxlen: 48
2402:2500:20af::/48 maxlen: 48
2402:2500:2100::/44 maxlen: 44
2402:2500:2200::/44 maxlen: 44
2402:2500:2300::/44 maxlen: 44
2402:2500:2400::/44 maxlen: 44
2402:2500:2500::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 07:16:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349 (0x15d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Validity
Not Before: Jul 17 07:33:46 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a59dada-7d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:36:8f:4b:b4:65:fc:a7:92:47:35:80:dd:
49:22:ce:81:bd:8d:6d:ac:44:63:91:ac:4d:f2:97:
95:09:07:5d:e0:26:55:dc:cd:17:a8:6d:71:ff:68:
3f:41:ff:62:2f:c9:97:ae:c0:4a:cf:6f:f4:2b:22:
b2:a7:f8:1a:42:dc:76:b8:93:b2:f2:de:64:93:32:
c4:e3:04:0e:1e:2e:15:a9:3f:d3:b3:68:90:12:46:
2e:97:f1:dd:da:3d:5f:c5:d1:ef:0a:4f:38:b9:83:
da:94:b3:8f:f3:8a:c0:96:d3:13:f9:4d:e0:b9:a8:
e7:d4:6f:51:4b:cc:4a:10:8b:d3:08:d6:1b:87:ce:
9f:f4:fe:e5:4b:b1:bc:5a:8a:07:3b:67:2c:e3:ae:
96:8b:c6:5a:25:11:26:e4:e9:7c:0a:6d:d8:b6:7f:
31:f3:c3:46:c3:d8:36:23:58:6a:cb:30:16:89:d2:
91:fd:7a:e5:d8:56:67:ee:30:bd:9f:93:9c:0a:16:
f5:45:f0:36:28:7b:bc:f5:cb:45:f3:98:30:0e:3b:
92:58:35:a9:a2:e9:e4:b0:75:22:e9:98:55:98:00:
46:38:19:b6:0b:6a:d8:02:15:6a:a9:ea:20:c3:3e:
d6:6c:1e:88:25:d1:da:8d:ad:ae:64:6f:a5:7f:0e:
63:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CE:14:78:D0:5A:D7:D7:8C:46:A1:20:AE:83:F7:F0:98:81:C9:24
X509v3 Authority Key Identifier:
keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/F33309A2B72011EFB3A5D772C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:2500:10::-2402:2500:5f:ffff:ffff:ffff:ffff:ffff
2402:2500:100::-2402:2500:5ff:ffff:ffff:ffff:ffff:ffff
2402:2500:1010::-2402:2500:105f:ffff:ffff:ffff:ffff:ffff
2402:2500:10a0::/44
2402:2500:1100::/44
2402:2500:1200::/44
2402:2500:1300::/44
2402:2500:1400::/44
2402:2500:1500::/44
2402:2500:2010::-2402:2500:205f:ffff:ffff:ffff:ffff:ffff
2402:2500:20a0::/44
2402:2500:2100::/44
2402:2500:2200::/44
2402:2500:2300::/44
2402:2500:2400::/44
2402:2500:2500::/44
Signature Algorithm: sha256WithRSAEncryption
3a:16:1b:66:33:21:f1:9b:5a:5c:35:44:4a:86:9a:0c:85:d5:
ad:0a:2f:c3:e7:67:f3:9c:88:5b:a1:0e:02:6f:1e:57:d0:25:
19:7a:70:4d:f2:3c:9c:b6:7f:fd:e4:89:ee:d2:e0:94:1e:ca:
41:7b:ba:43:a2:27:04:cb:95:a6:78:57:7c:04:51:6d:5f:1f:
1d:f3:c9:7e:03:4f:e3:16:e1:02:5c:dc:06:d7:1b:21:1d:00:
6c:90:fb:4e:0c:2c:96:ea:e3:e0:cd:99:2e:bd:ad:e6:9a:f9:
fc:cc:bf:43:a4:c2:b4:36:59:fe:73:e0:2d:a2:66:02:8b:92:
87:ed:d2:83:6b:83:f8:0e:ed:dc:25:e7:25:77:41:0a:9d:f9:
d4:24:bb:8a:b6:d8:8d:dd:da:e0:3a:ca:ec:3f:d0:43:50:44:
ff:8f:a5:59:90:0a:83:cb:0c:b6:8f:28:85:d3:43:16:f7:9b:
49:d9:2f:52:7a:8f:23:ea:eb:df:57:2d:df:8a:fc:22:05:ea:
fd:1f:11:3d:c2:38:45:57:96:a6:09:50:ea:12:1d:c1:5d:fe:
ad:8d:07:4b:6e:e4:61:f3:24:04:d1:99:23:ce:ff:34:b2:28:
48:3d:63:f2:f4:9d:28:3d:e4:29:05:f4:01:80:44:ed:44:0b:
c9:46:48:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:23:12 2026 by rpki-client