Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
File: AE0A263AB00411EF95939E11C4F9AE02.roa (raw, json)
Hash identifier: ReF63GSm2O+gtXtmlx8BHNojorN+E9KGwuwKb5krouk=
Subject key identifier: D1:4D:CD:40:01:72:DF:D7:9F:D0:A5:74:5D:2C:E4:9F:42:54:E6:C5
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 02D8
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
Signing time: Wed 06 May 2026 10:10:49 +0000
ROA not before: Wed 06 May 2026 10:10:49 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 202662
IP address blocks: 2401:b60::/48 maxlen: 48
2401:b60:1::/48 maxlen: 48
2401:b60:2::/48 maxlen: 48
2401:b60:3::/48 maxlen: 48
2401:b60:4::/48 maxlen: 48
2401:b60:8::/48 maxlen: 48
2401:b60:9::/48 maxlen: 48
2401:b60:a::/48 maxlen: 48
2401:b60:10::/48 maxlen: 48
2401:b60:11::/48 maxlen: 48
2401:b60:12::/48 maxlen: 48
2401:b60:13::/48 maxlen: 48
2401:b60:14::/48 maxlen: 48
2401:b60:15::/48 maxlen: 48
2401:b60:16::/48 maxlen: 48
2401:b60:17::/48 maxlen: 48
2401:b60:18::/48 maxlen: 48
2401:b60:19::/48 maxlen: 48
2401:b60:1a::/48 maxlen: 48
2401:b60:1b::/48 maxlen: 48
2401:b60:22::/48 maxlen: 48
2401:b60:23::/48 maxlen: 48
2401:b60:24::/48 maxlen: 48
2401:b60:25::/48 maxlen: 48
2401:b60:26::/48 maxlen: 48
2401:b60:27::/48 maxlen: 48
2401:b60:28::/48 maxlen: 48
2401:b60:29::/48 maxlen: 48
2401:b60:30::/48 maxlen: 48
2401:b60:31::/48 maxlen: 48
2401:b60:32::/48 maxlen: 48
2401:b60:33::/48 maxlen: 48
2401:b60:34::/48 maxlen: 48
2401:b60:35::/48 maxlen: 48
2401:b60:36::/48 maxlen: 48
2401:b60:39::/48 maxlen: 48
2401:b60:3a::/48 maxlen: 48
2401:b60:3b::/48 maxlen: 48
2401:b60:3c::/48 maxlen: 48
2401:b60:3d::/48 maxlen: 48
2401:b60:3e::/48 maxlen: 48
2401:b60:3f::/48 maxlen: 48
2401:b60:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 20 May 2026 02:50:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 728 (0x2d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: May 6 10:10:49 2026 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69fb13a9-8ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:ed:18:51:a8:be:39:02:2f:4b:dc:9c:41:
3d:72:5a:cb:b5:2d:e6:47:db:2a:6b:b1:d9:17:c6:
8a:20:19:90:c5:ef:15:ea:9c:27:11:15:9d:fa:e7:
95:1b:1b:f6:1a:8a:02:76:68:30:85:37:75:37:d4:
36:c6:72:89:89:28:68:a1:63:88:bd:a5:07:ba:78:
b4:36:ba:87:ce:92:95:cb:19:95:cc:03:57:3c:47:
a6:83:69:d1:9d:f8:88:7c:d8:a2:7c:ca:95:66:d6:
18:a4:62:0e:e2:f9:fe:75:26:ab:de:6f:e1:a1:c9:
f8:43:3e:a2:2d:fa:9e:ab:8c:91:58:21:5b:d8:b9:
57:fc:5b:79:5f:1f:c8:a1:29:37:95:60:0a:9c:70:
19:5f:b5:23:06:fc:4f:5e:0a:6a:14:cb:82:23:31:
11:2f:f0:ff:d7:30:d7:67:11:b5:3c:51:0d:64:b6:
b6:dc:e3:c7:da:1a:42:32:44:26:b1:83:6c:de:ac:
db:e3:ad:96:ee:54:c2:32:b6:6c:0b:a9:85:f3:de:
dc:b1:6f:02:db:eb:e8:66:02:93:04:83:40:32:ff:
77:24:94:be:3e:b0:bd:f3:c6:3a:07:47:2a:a0:52:
10:1d:d0:71:8d:4c:1e:3e:2e:3c:70:3d:76:53:37:
c1:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4D:CD:40:01:72:DF:D7:9F:D0:A5:74:5D:2C:E4:9F:42:54:E6:C5
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b60::-2401:b60:4:ffff:ffff:ffff:ffff:ffff
2401:b60:8::-2401:b60:a:ffff:ffff:ffff:ffff:ffff
2401:b60:10::-2401:b60:1b:ffff:ffff:ffff:ffff:ffff
2401:b60:22::-2401:b60:29:ffff:ffff:ffff:ffff:ffff
2401:b60:30::-2401:b60:36:ffff:ffff:ffff:ffff:ffff
2401:b60:39::-2401:b60:3f:ffff:ffff:ffff:ffff:ffff
2401:b60:e000::/40
Signature Algorithm: sha256WithRSAEncryption
25:d3:1f:6d:52:5c:b7:77:1e:4b:fa:c1:18:fc:21:6f:6f:78:
b3:d0:fd:b6:e5:15:b8:d2:a7:6f:2f:1e:4e:91:5c:04:ce:72:
e9:33:11:26:a9:b4:03:da:0a:a8:e1:55:6d:cd:8d:af:83:ca:
03:f5:47:85:c9:67:34:9b:8a:42:cc:22:2a:a4:a7:73:6d:3b:
8d:55:2f:52:9c:17:fa:06:62:50:8f:a0:aa:8e:56:6a:0b:96:
4c:61:35:99:bf:c5:79:6b:e4:80:11:fd:f2:b7:23:33:1d:ae:
c2:bd:95:a6:e9:88:5a:44:4a:3c:63:be:7e:aa:88:d4:1d:ae:
a7:61:e0:91:e8:dd:75:01:de:32:a3:ec:57:fd:a3:0d:81:7a:
ac:e1:6a:79:84:3b:6f:7b:4e:b0:65:77:bb:3f:93:cb:d0:c4:
8c:47:46:9f:b8:47:99:b7:e6:d4:68:66:46:ea:75:d1:ec:bb:
64:1e:00:93:d7:92:a6:93:6c:89:fb:6a:e0:51:fa:7a:5b:05:
37:a5:b3:ef:c2:bd:5a:62:6e:e5:93:1b:54:21:78:64:46:f3:
c5:76:f3:8f:31:1b:28:bf:59:99:b3:fd:a9:a1:16:dd:77:2b:
f9:1d:09:b4:29:7d:32:51:80:1a:8e:83:db:0a:35:09:0c:be:
24:e7:e0:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:03:00 2026 by rpki-client