Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
File: AE0A263AB00411EF95939E11C4F9AE02.roa (raw, json)
Hash identifier: l533e6dd63F3D/XqWjVd0JONkBCLz6aesZJx8Kds160=
Subject key identifier: A9:EC:B4:9D:8D:30:05:13:04:CD:D8:4D:27:1A:F3:EB:BD:23:55:83
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 0337
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
Signing time: Wed 16 Sep 2026 16:08:07 +0000
ROA not before: Wed 16 Sep 2026 16:08:07 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 202662
IP address blocks: 2401:b60::/48 maxlen: 48
2401:b60:1::/48 maxlen: 48
2401:b60:2::/48 maxlen: 48
2401:b60:3::/48 maxlen: 48
2401:b60:4::/48 maxlen: 48
2401:b60:8::/48 maxlen: 48
2401:b60:9::/48 maxlen: 48
2401:b60:a::/48 maxlen: 48
2401:b60:10::/48 maxlen: 48
2401:b60:11::/48 maxlen: 48
2401:b60:12::/48 maxlen: 48
2401:b60:13::/48 maxlen: 48
2401:b60:14::/48 maxlen: 48
2401:b60:15::/48 maxlen: 48
2401:b60:16::/48 maxlen: 48
2401:b60:17::/48 maxlen: 48
2401:b60:18::/48 maxlen: 48
2401:b60:19::/48 maxlen: 48
2401:b60:1a::/48 maxlen: 48
2401:b60:1b::/48 maxlen: 48
2401:b60:22::/48 maxlen: 48
2401:b60:23::/48 maxlen: 48
2401:b60:24::/48 maxlen: 48
2401:b60:25::/48 maxlen: 48
2401:b60:26::/48 maxlen: 48
2401:b60:27::/48 maxlen: 48
2401:b60:28::/48 maxlen: 48
2401:b60:29::/48 maxlen: 48
2401:b60:30::/48 maxlen: 48
2401:b60:31::/48 maxlen: 48
2401:b60:32::/48 maxlen: 48
2401:b60:33::/48 maxlen: 48
2401:b60:34::/48 maxlen: 48
2401:b60:35::/48 maxlen: 48
2401:b60:36::/48 maxlen: 48
2401:b60:39::/48 maxlen: 48
2401:b60:3a::/48 maxlen: 48
2401:b60:3b::/48 maxlen: 48
2401:b60:3c::/48 maxlen: 48
2401:b60:3d::/48 maxlen: 48
2401:b60:3e::/48 maxlen: 48
2401:b60:3f::/48 maxlen: 48
2401:b60:e000::/40 maxlen: 48
2401:b60:ff00::/41 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 02 Oct 2026 02:10:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823 (0x337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Sep 16 16:08:07 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6aaabee7-e65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c5:53:13:30:59:ac:2e:ba:dc:2b:df:4c:fe:
d9:2d:8b:b6:09:e2:4d:cf:31:6b:76:ca:76:87:ae:
07:87:69:49:a7:07:ee:44:b1:1e:4c:1c:67:f9:3a:
9d:44:5e:86:58:9a:f7:1f:b9:d3:05:6c:2d:87:4f:
e7:b9:cf:77:cf:0d:83:4f:0e:75:61:ea:8d:07:be:
57:c6:91:ea:44:19:d7:50:99:74:82:49:46:b1:b8:
0c:f2:f5:f0:9c:12:fc:42:e5:d3:6c:e2:31:bc:cd:
00:58:73:59:1c:3d:5c:fd:f5:e1:e5:0a:ba:1e:f0:
81:53:32:b7:fe:19:7e:67:fc:0a:3d:f5:fa:b6:e2:
04:90:10:c2:fc:d7:a1:70:fd:68:f3:87:3e:e2:63:
fc:cd:17:61:c2:65:3e:96:d4:d4:98:22:e4:79:84:
51:3f:8c:8e:c3:97:33:f5:1d:2d:f2:c1:fe:33:a2:
36:55:1f:0c:ef:d0:aa:fd:95:a3:7a:dd:14:88:8f:
5d:8b:13:43:bd:90:83:77:4c:c9:98:64:a5:3b:53:
05:48:f8:be:a4:7b:37:49:7a:d6:93:70:61:2a:d9:
d8:3c:92:cb:49:de:b9:3a:0f:35:b6:2a:37:e8:3d:
4d:17:7c:2c:62:fb:f4:59:86:c8:59:1c:67:16:73:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EC:B4:9D:8D:30:05:13:04:CD:D8:4D:27:1A:F3:EB:BD:23:55:83
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b60::-2401:b60:4:ffff:ffff:ffff:ffff:ffff
2401:b60:8::-2401:b60:a:ffff:ffff:ffff:ffff:ffff
2401:b60:10::-2401:b60:1b:ffff:ffff:ffff:ffff:ffff
2401:b60:22::-2401:b60:29:ffff:ffff:ffff:ffff:ffff
2401:b60:30::-2401:b60:36:ffff:ffff:ffff:ffff:ffff
2401:b60:39::-2401:b60:3f:ffff:ffff:ffff:ffff:ffff
2401:b60:e000::/40
2401:b60:ff00::/41
Signature Algorithm: sha256WithRSAEncryption
14:88:12:20:5a:6a:87:f2:49:d4:7e:73:f7:8f:a7:fc:ce:b4:
8e:c9:8d:ea:76:11:82:16:98:95:30:5e:66:92:3c:e9:12:78:
68:c6:7c:e1:2a:9e:77:45:19:83:69:28:4e:2b:a7:bf:d5:57:
ea:39:81:2a:d0:21:68:b8:df:49:25:e3:c7:d5:1b:ac:c1:d2:
84:0d:14:26:29:40:06:9f:a7:e4:01:e1:e8:7a:d0:01:1f:5b:
49:53:2f:3b:18:ac:64:a8:35:51:b2:dd:6d:a3:61:27:6e:07:
d5:ca:f9:53:fc:db:64:5d:dc:44:68:20:43:5d:c2:62:cb:a9:
01:a0:f1:8a:f4:b8:7d:d3:bd:a7:68:ca:d0:ee:bb:16:2d:9c:
ab:4e:74:36:1b:b6:dc:61:c3:6f:3e:0b:3f:23:7c:35:64:6c:
3a:9c:cc:b4:19:fa:01:b7:6c:a4:be:d3:83:f0:e5:d3:27:c1:
1b:6e:e4:cc:8f:69:03:26:fe:55:32:e7:43:8c:c9:94:3c:36:
71:70:ff:f1:2a:01:6f:33:61:81:92:be:f5:e3:d2:27:e2:a5:
93:0c:00:7b:99:80:57:7c:21:63:cf:5c:75:76:5a:1d:8c:bf:
4c:46:2d:86:80:c9:07:b9:0d:20:c2:b0:78:6c:61:90:63:61:
07:a5:3e:88
-----BEGIN CERTIFICATE-----
MIIFwjCCBKqgAwIBAgICAzcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0
NTIzOUNDRjQwHhcNMjYwOTE2MTYwODA3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWFhYmVlNy1lNjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzMVTEzBZrC663CvfTP7ZLYu2CeJNzzFrdsp2h64Hh2lJpwfuRLEeTBxn+Tqd
RF6GWJr3H7nTBWwth0/nuc93zw2DTw51YeqNB75XxpHqRBnXUJl0gklGsbgM8vXw
nBL8QuXTbOIxvM0AWHNZHD1c/fXh5Qq6HvCBUzK3/hl+Z/wKPfX6tuIEkBDC/Neh
cP1o84c+4mP8zRdhwmU+ltTUmCLkeYRRP4yOw5cz9R0t8sH+M6I2VR8M79Cq/ZWj
et0UiI9dixNDvZCDd0zJmGSlO1MFSPi+pHs3SXrWk3BhKtnYPJLLSd65Og81tio3
6D1NF3wsYvv0WYbIWRxnFnODOQIDAQABo4IC5jCCAuIwHQYDVR0OBBYEFKnstJ2N
MAUTBM3YTSca8+u9I1WDMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC
NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvQUUwQTI2M0FC
MDA0MTFFRjk1OTM5RTExQzRGOUFFMDIucm9hMIGkBggrBgEFBQcBBwEB/wSBlDCB
kTCBjgQCAAIwgYcwEAMFBSQBC2ADBwAkAQtgAAQwEgMHAyQBC2AACAMHACQBC2AA
CjASAwcEJAELYAAQAwcCJAELYAAYMBIDBwEkAQtgACIDBwEkAQtgACgwEgMHBCQB
C2AAMAMHACQBC2AANjASAwcAJAELYAA5AwcGJAELYAAAAwYAJAELYOADBwckAQtg
/wAwDQYJKoZIhvcNAQELBQADggEBABSIEiBaaofySdR+c/ePp/zOtI7Jjep2EYIW
mJUwXmaSPOkSeGjGfOEqnndFGYNpKE4rp7/VV+o5gSrQIWi430kl48fVG6zB0oQN
FCYpQAafp+QB4eh60AEfW0lTLzsYrGSoNVGy3W2jYSduB9XK+VP822Rd3ERoIENd
wmLLqQGg8Yr0uH3TvadoytDuuxYtnKtOdDYbttxhw28+Cz8jfDVkbDqczLQZ+gG3
bKS+04Pw5dMnwRtu5MyPaQMm/lUy50OMyZQ8NnFw//EqAW8zYYGSvvXj0ifipZMM
AHuZgFd8IWPPXHV2Wh2Mv0xGLYaAyQe5DSDCsHhsYZBjYQelPog=
-----END CERTIFICATE-----
Generated at Sat Sep 26 18:42:16 2026 by rpki-client