Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FEE4F664FC3511EC95130A10C4F9AE02.roa
File: FEE4F664FC3511EC95130A10C4F9AE02.roa (raw, json)
Hash identifier: 0Yp1qzmS+PF8OGuh6iU0AKjCaos3zN1f49aPJrrpQtE=
Subject key identifier: 4F:8B:DA:C8:5F:7C:EF:6B:24:56:F0:04:80:CD:62:BA:75:A6:7E:FA
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2C34
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FEE4F664FC3511EC95130A10C4F9AE02.roa
Signing time: Fri 22 May 2026 03:39:59 +0000
ROA not before: Fri 22 May 2026 03:39:59 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45430
IP address blocks: 49.0.64.0/18 maxlen: 18
49.229.0.0/16 maxlen: 16
49.229.0.0/20 maxlen: 20
49.229.8.0/24 maxlen: 24
49.229.31.0/24 maxlen: 24
49.229.33.0/24 maxlen: 24
49.229.68.0/24 maxlen: 24
49.229.94.0/24 maxlen: 24
49.229.95.0/24 maxlen: 24
49.229.112.0/21 maxlen: 21
49.229.128.0/17 maxlen: 17
49.229.160.0/19 maxlen: 19
49.229.192.0/19 maxlen: 19
49.229.224.0/19 maxlen: 19
49.230.0.0/16 maxlen: 16
49.230.40.0/24 maxlen: 24
49.230.41.0/24 maxlen: 24
49.230.42.0/24 maxlen: 24
49.230.43.0/24 maxlen: 24
49.231.0.0/16 maxlen: 16
49.231.32.0/21 maxlen: 21
49.231.44.0/22 maxlen: 24
49.231.48.0/20 maxlen: 24
49.231.64.0/21 maxlen: 21
49.231.70.0/24 maxlen: 24
49.231.71.0/24 maxlen: 24
49.231.80.0/20 maxlen: 20
49.231.87.0/24 maxlen: 24
49.231.96.0/19 maxlen: 24
58.64.0.0/17 maxlen: 17
58.64.64.0/18 maxlen: 18
58.136.0.0/16 maxlen: 16
103.3.64.0/22 maxlen: 22
103.3.64.0/24 maxlen: 24
110.49.113.0/24 maxlen: 24
115.178.56.0/22 maxlen: 22
115.178.57.0/24 maxlen: 24
115.178.59.0/24 maxlen: 24
119.31.0.0/17 maxlen: 17
182.232.0.0/16 maxlen: 16
202.80.224.0/19 maxlen: 19
2001:df2:400::/48 maxlen: 48
2001:44c8::/32 maxlen: 32
2405:9800::/32 maxlen: 32
2405:9800:8::/48 maxlen: 48
2405:9800:8::/49 maxlen: 64
2405:9800:8:8000::/49 maxlen: 64
2405:9800:c::/48 maxlen: 48
2405:9800:d::/48 maxlen: 48
2405:9800:10::/48 maxlen: 48
2405:9800:10::/49 maxlen: 64
2405:9800:10:8000::/49 maxlen: 64
2405:9800:12::/48 maxlen: 48
2405:9800:13::/48 maxlen: 48
2405:9800:14::/48 maxlen: 48
2405:9800:16::/48 maxlen: 48
2405:9800:20::/48 maxlen: 48
2405:9800:20::/49 maxlen: 64
2405:9800:20:8000::/49 maxlen: 64
2405:9800:21::/48 maxlen: 48
2405:9800:21::/49 maxlen: 64
2405:9800:21:8000::/49 maxlen: 64
2405:9800:30::/44 maxlen: 48
2405:9800:30::/49 maxlen: 64
2405:9800:30:8000::/49 maxlen: 64
2405:9800:31::/49 maxlen: 64
2405:9800:31:8000::/49 maxlen: 64
2405:9800:40::/48 maxlen: 48
2405:9800:40::/49 maxlen: 64
2405:9800:40:8000::/49 maxlen: 64
2405:9800:41::/48 maxlen: 48
2405:9800:42::/48 maxlen: 48
2405:9800:42::/49 maxlen: 64
2405:9800:42:8000::/49 maxlen: 64
2405:9800:60::/44 maxlen: 44
2405:9800:9800::/48 maxlen: 48
2405:9800:9805::/48 maxlen: 48
2405:9800:9813::/48 maxlen: 48
2405:9800:b000::/36 maxlen: 36
2405:9800:c820::/44 maxlen: 44
2405:9800:c925::/48 maxlen: 48
2405:9800:c92e::/48 maxlen: 48
2405:9800:f00f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 11 Jun 2026 15:41:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11316 (0x2c34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: May 22 03:39:59 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a0fd00f-99da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ef:16:32:63:c9:bd:e5:2d:5a:bd:05:54:f1:
70:2a:2b:5d:e4:f5:ae:fb:3e:51:9d:74:a7:c2:13:
07:67:ff:ac:80:f6:d9:5f:df:50:09:fb:c8:49:f5:
b8:79:44:61:0f:b4:6d:42:b8:68:b7:29:05:74:af:
4e:a2:00:3c:5d:1c:30:95:67:dc:a0:d0:fc:51:71:
d9:49:27:77:e5:12:b5:43:d8:22:b8:08:35:dc:c8:
e9:be:58:fa:3d:b7:1f:db:6b:4e:9d:00:d4:ff:bb:
da:65:0d:ed:15:ea:9f:9a:87:02:8c:56:bf:cd:ca:
1b:74:b3:4d:e2:3e:03:0c:e0:c2:ab:a5:56:d9:ea:
eb:15:2e:aa:47:12:db:f6:92:5c:b3:1c:b9:f1:18:
ef:db:bf:08:ae:1d:a0:90:e7:17:7d:0e:ad:59:19:
09:ab:7f:be:44:ba:c6:e9:82:15:56:d1:60:62:06:
ca:81:93:8d:a3:22:5c:7b:e8:3e:a0:5e:f4:df:8a:
fd:9a:79:3c:30:54:ea:2b:17:2a:ff:cd:16:20:aa:
42:97:72:42:69:5e:99:5e:69:97:d5:29:eb:62:c5:
65:5f:1b:12:57:6e:75:d6:12:9e:5f:06:ff:50:b3:
58:2b:d5:1b:6f:ac:e5:e6:b6:98:ef:4d:a3:0f:bd:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8B:DA:C8:5F:7C:EF:6B:24:56:F0:04:80:CD:62:BA:75:A6:7E:FA
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FEE4F664FC3511EC95130A10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.0.64.0/18
49.229.0.0-49.231.255.255
58.64.0.0/17
58.136.0.0/16
103.3.64.0/22
110.49.113.0/24
115.178.56.0/22
119.31.0.0/17
182.232.0.0/16
202.80.224.0/19
IPv6:
2001:df2:400::/48
2001:44c8::/32
2405:9800::/32
Signature Algorithm: sha256WithRSAEncryption
a7:4f:f4:b3:0d:a5:44:db:84:c0:5e:09:3a:17:78:83:01:b8:
5d:09:44:bc:24:d5:75:28:88:46:95:30:6e:1a:47:a9:ce:c2:
b3:cc:f6:06:24:85:e3:4d:18:02:c0:a1:c8:b5:74:f1:eb:14:
87:4e:5e:6b:5c:ba:29:7a:48:3b:28:25:f7:86:d6:15:f1:7e:
65:0e:56:d4:2d:4e:aa:73:2d:4f:ae:16:92:e0:4f:f5:5b:66:
2f:f0:83:d9:3d:b3:12:ab:84:a9:cd:db:77:a5:8a:51:53:04:
cb:59:f3:00:d7:a5:e1:f1:34:63:c4:b0:be:43:cd:20:66:a0:
bc:1f:21:19:85:3b:0d:b5:c9:18:60:7f:ff:82:9c:36:69:c0:
04:1f:6c:22:29:ca:67:e8:d9:91:8d:22:e4:7d:5b:f5:64:e6:
d2:e9:ab:98:2b:60:d1:b1:3d:02:9c:64:17:3e:12:3e:f9:16:
de:7f:00:86:cd:32:b9:43:97:0e:ff:3f:96:32:6d:fc:cd:99:
15:48:fe:c1:e4:08:19:e7:b1:bb:da:e6:d0:3c:53:65:47:89:
a4:20:7a:ad:dc:73:38:64:db:a7:bc:d7:41:92:66:5a:63:e0:
6b:f1:c5:0f:e2:00:fb:bb:8e:d4:a7:2c:d8:69:d5:e8:ea:f5:
80:a8:16:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 08:22:15 2026 by rpki-client