Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/3A8C7518B72111EFA9A92F26C4F9AE02.roa
File: 3A8C7518B72111EFA9A92F26C4F9AE02.roa (raw, json)
Hash identifier: X6YAYsczE/+jmZgDW2VDDKtWtCB2xcDLkZqRt9MnRaE=
Subject key identifier: B5:C4:D4:3F:2F:8C:59:66:26:EF:BF:38:7A:D2:2F:B7:44:9C:AE:F6
Certificate issuer: /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial: 86
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/3A8C7518B72111EFA9A92F26C4F9AE02.roa
Signing time: Wed 09 Jul 2025 08:13:53 +0000
ROA not before: Wed 09 Jul 2025 08:13:53 +0000
ROA not after: Mon 31 Aug 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2402:2500:10a0::/44 maxlen: 44
2402:2500:10a0::/48 maxlen: 48
2402:2500:10a1::/48 maxlen: 48
2402:2500:10a2::/48 maxlen: 48
2402:2500:10a3::/48 maxlen: 48
2402:2500:10a4::/48 maxlen: 48
2402:2500:10a5::/48 maxlen: 48
2402:2500:10a6::/48 maxlen: 48
2402:2500:10a7::/48 maxlen: 48
2402:2500:10a8::/48 maxlen: 48
2402:2500:10a9::/48 maxlen: 48
2402:2500:10aa::/48 maxlen: 48
2402:2500:10ab::/48 maxlen: 48
2402:2500:10ac::/48 maxlen: 48
2402:2500:10ad::/48 maxlen: 48
2402:2500:10ae::/48 maxlen: 48
2402:2500:10af::/48 maxlen: 48
2402:2500:20a0::/44 maxlen: 44
2402:2500:20a0::/48 maxlen: 48
2402:2500:20a1::/48 maxlen: 48
2402:2500:20a2::/48 maxlen: 48
2402:2500:20a3::/48 maxlen: 48
2402:2500:20a4::/48 maxlen: 48
2402:2500:20a5::/48 maxlen: 48
2402:2500:20a6::/48 maxlen: 48
2402:2500:20a7::/48 maxlen: 48
2402:2500:20a8::/48 maxlen: 48
2402:2500:20a9::/48 maxlen: 48
2402:2500:20aa::/48 maxlen: 48
2402:2500:20ab::/48 maxlen: 48
2402:2500:20ac::/48 maxlen: 48
2402:2500:20ad::/48 maxlen: 48
2402:2500:20ae::/48 maxlen: 48
2402:2500:20af::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 28 Jul 2025 07:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134 (0x86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Validity
Not Before: Jul 9 08:13:53 2025 GMT
Not After : Aug 31 00:00:00 2026 GMT
Subject: CN=686e24c1-c010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:71:19:df:76:96:ae:96:0a:ab:cb:99:48:00:
fc:75:96:30:01:e8:90:33:45:f7:2d:ee:2d:42:42:
f4:00:47:e8:f2:57:95:c9:8d:19:15:e0:52:e2:6f:
38:c2:59:0e:db:ac:2a:e0:49:75:7c:2e:67:17:d4:
30:92:e2:c6:4c:83:8d:4a:31:8f:e9:9d:ba:f6:08:
5f:97:82:3d:6f:9d:f8:8a:bc:b6:3e:83:81:52:5b:
15:0b:13:1d:f4:e4:0d:2a:4e:59:f9:e0:01:76:72:
fc:58:36:79:b3:97:80:9a:69:b6:a7:49:df:cb:91:
9c:20:1a:71:b0:41:48:24:67:a8:80:cc:71:74:57:
f3:ab:bd:be:b7:2d:7e:28:9e:ea:75:e0:52:8d:5f:
a6:09:d2:1a:7f:e4:1e:e6:65:02:15:93:35:e6:a6:
0e:2f:15:29:1f:07:30:67:52:85:09:36:f8:29:c9:
5f:51:98:a6:45:f8:79:31:63:c9:f8:90:09:65:b2:
18:63:fe:23:4d:20:f7:7f:4c:31:b9:59:cf:18:1f:
71:e5:b6:2b:99:67:9d:ac:3c:07:ca:1b:d5:06:80:
0c:38:f9:28:80:f4:86:9b:7b:d4:12:14:7d:74:9c:
a7:28:80:f7:37:13:49:e0:40:28:2e:60:f3:b3:47:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:C4:D4:3F:2F:8C:59:66:26:EF:BF:38:7A:D2:2F:B7:44:9C:AE:F6
X509v3 Authority Key Identifier:
keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/3A8C7518B72111EFA9A92F26C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:2500:10a0::/44
2402:2500:20a0::/44
Signature Algorithm: sha256WithRSAEncryption
23:05:f8:bc:62:63:dd:88:f4:56:c0:95:17:64:8a:75:67:e8:
4a:a5:c3:8e:f5:ad:71:ef:2c:7a:8f:e1:ce:0b:e9:f6:74:b6:
2a:1a:9b:05:e5:b1:35:7b:fc:73:cb:b9:bf:1d:43:e1:c2:29:
6c:b7:5d:12:63:0d:5d:d3:90:36:0d:72:5e:52:52:9a:2b:2e:
4f:d0:8e:13:27:24:d7:90:75:4c:98:14:68:1b:de:10:12:84:
1f:b8:a8:de:26:51:28:ed:61:2c:2a:d4:13:28:47:a0:fa:3b:
b4:9e:15:75:3c:48:db:25:70:fd:4d:0a:f1:57:24:27:4b:f3:
46:74:3c:f9:9c:d8:0e:e8:8d:3d:72:e0:3f:b6:ca:74:75:9b:
75:30:91:4e:62:7f:bc:59:3f:d4:71:ea:8b:b5:77:c3:65:c1:
72:6f:f8:9c:b7:66:f4:60:6f:57:65:db:68:e9:af:73:f6:08:
65:57:cd:c8:9b:a8:0a:66:8e:95:f4:46:ba:3f:34:ba:83:be:
81:d5:ed:df:e0:c1:db:62:52:96:9a:6d:be:4f:ad:d8:4d:cd:
5e:81:e3:0b:ab:91:35:15:13:ae:5a:14:f1:25:ab:6c:9f:00:
2a:bc:50:3f:fc:ab:2c:e9:7b:22:36:04:19:fb:a2:fe:80:e3:
42:b2:9e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 12:41:42 2025 by rpki-client