Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/14AD087E635711F1A8C1BFBC9B47A888.roa
File: 14AD087E635711F1A8C1BFBC9B47A888.roa (raw, json)
Hash identifier: GuKhdUk0QOKZ+c+n8FsIgBWyRs9/Jk+Wnwz1GAszubk=
Subject key identifier: DD:D8:4F:68:3A:C4:93:31:07:BB:D8:55:F2:A5:C4:C5:9B:DE:96:6F
Certificate issuer: /CN=A911D75C/serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Certificate serial: 0E19
Authority key identifier: 1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/14AD087E635711F1A8C1BFBC9B47A888.roa
Signing time: Sun 23 Aug 2026 13:33:07 +0000
ROA not before: Sun 23 Aug 2026 13:33:06 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 141030
IP address blocks: 2400:3dc0:41::/48 maxlen: 48
2400:3dc0:42::/48 maxlen: 48
2400:3dc0:44::/48 maxlen: 48
2400:3dc0:47::/48 maxlen: 48
2400:3dc0:48::/48 maxlen: 48
2400:3dc0:4a::/48 maxlen: 48
2400:3dc0:4b::/48 maxlen: 48
2400:3dc0:4d::/48 maxlen: 48
2400:3dc0:4e::/48 maxlen: 48
2400:3dc0:4f::/48 maxlen: 48
2400:3dc0:50::/48 maxlen: 48
2400:3dc0:51::/48 maxlen: 48
2400:3dc0:52::/48 maxlen: 48
2400:3dc0:53::/48 maxlen: 48
2400:3dc0:54::/48 maxlen: 48
2400:3dc0:55::/48 maxlen: 48
2400:3dc0:56::/48 maxlen: 48
2400:3dc0:59::/48 maxlen: 48
2400:3dc0:5c::/48 maxlen: 48
2400:3dc0:5d::/48 maxlen: 48
2400:3dc0:5e::/48 maxlen: 48
2400:3dc0:5f::/48 maxlen: 48
2400:3dc0:62::/48 maxlen: 48
2400:3dc0:63::/48 maxlen: 48
2400:3dc0:64::/48 maxlen: 48
2400:3dc0:65::/48 maxlen: 48
2400:3dc0:66::/48 maxlen: 48
2400:3dc0:67::/48 maxlen: 48
2400:3dc0:6b::/48 maxlen: 48
2400:3dc0:6d::/48 maxlen: 48
2400:3dc0:6e::/48 maxlen: 48
2400:3dc0:72::/48 maxlen: 48
2400:3dc0:73::/48 maxlen: 48
2400:3dc0:74::/48 maxlen: 48
2400:3dc0:75::/48 maxlen: 48
2400:3dc0:76::/48 maxlen: 48
2400:3dc0:77::/48 maxlen: 48
2400:3dc0:79::/48 maxlen: 48
2400:3dc0:7a::/48 maxlen: 48
2400:3dc0:7c::/48 maxlen: 48
2400:3dc0:7d::/48 maxlen: 48
2400:3dc0:7e::/48 maxlen: 48
2400:3dc0:7f::/48 maxlen: 48
2400:3dc0:81::/48 maxlen: 48
2400:3dc0:82::/48 maxlen: 48
2400:3dc0:90::/48 maxlen: 48
2400:3dc0:91::/48 maxlen: 48
2400:3dc0:92::/48 maxlen: 48
2400:3dc0:93::/48 maxlen: 48
2400:3dc0:94::/48 maxlen: 48
2400:3dc0:95::/48 maxlen: 48
2400:3dc0:96::/48 maxlen: 48
2400:3dc0:97::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 02 Sep 2026 18:09:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3609 (0xe19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911D75C, serialNumber=1A1A40AD93A4A4307ED7264D47D252CAF62DEFFD
Validity
Not Before: Aug 23 13:33:06 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a8af692-2654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:1e:54:5e:3b:c2:20:48:7e:03:c8:5a:58:
7b:ff:55:79:55:c2:ed:90:c8:3b:8b:bd:2b:74:04:
88:88:e7:05:01:00:16:9c:d8:35:17:b5:33:2e:cc:
95:0d:22:84:f9:ff:7c:a8:45:03:2b:bd:12:9f:cc:
79:fc:40:59:2f:60:20:e1:f9:ca:7b:49:7b:55:36:
39:44:42:98:95:a7:bc:55:85:06:d7:a0:f5:41:ae:
7b:c3:bf:db:9b:3a:e3:82:b3:11:9a:63:de:21:52:
60:6c:47:ce:60:a6:5b:d5:f3:86:bf:1e:7c:67:95:
13:84:1b:ec:b9:40:d2:b7:8b:30:23:53:d0:0e:09:
4f:c2:69:4a:c2:04:74:ad:50:83:8d:f5:2e:0d:57:
3b:74:4e:d7:66:e9:5d:fc:b9:7c:8d:92:27:01:a5:
b0:a0:85:68:1f:1b:b3:5a:6b:ef:33:03:9d:83:e7:
a0:57:16:a9:fd:1a:24:72:c0:17:bb:3a:3d:95:3e:
30:eb:cd:a1:84:9b:5d:31:16:17:dc:65:a0:36:24:
e1:ff:fa:71:05:73:a8:53:2d:3a:95:9a:0c:2c:8a:
ff:dc:93:45:02:a4:55:eb:a5:12:77:13:ad:cd:4b:
8b:5c:eb:2d:66:4c:99:a8:db:3d:e4:0a:69:07:d4:
f3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:D8:4F:68:3A:C4:93:31:07:BB:D8:55:F2:A5:C4:C5:9B:DE:96:6F
X509v3 Authority Key Identifier:
keyid:1A:1A:40:AD:93:A4:A4:30:7E:D7:26:4D:47:D2:52:CA:F6:2D:EF:FD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/GhpArZOkpDB-1yZNR9JSyvYt7_0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GhpArZOkpDB-1yZNR9JSyvYt7_0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D75C/2BC5FD4006C011EABC43B709C4F9AE02/14AD087E635711F1A8C1BFBC9B47A888.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:3dc0:41::-2400:3dc0:42:ffff:ffff:ffff:ffff:ffff
2400:3dc0:44::/48
2400:3dc0:47::-2400:3dc0:48:ffff:ffff:ffff:ffff:ffff
2400:3dc0:4a::/47
2400:3dc0:4d::-2400:3dc0:56:ffff:ffff:ffff:ffff:ffff
2400:3dc0:59::/48
2400:3dc0:5c::/46
2400:3dc0:62::-2400:3dc0:67:ffff:ffff:ffff:ffff:ffff
2400:3dc0:6b::/48
2400:3dc0:6d::-2400:3dc0:6e:ffff:ffff:ffff:ffff:ffff
2400:3dc0:72::-2400:3dc0:77:ffff:ffff:ffff:ffff:ffff
2400:3dc0:79::-2400:3dc0:7a:ffff:ffff:ffff:ffff:ffff
2400:3dc0:7c::/46
2400:3dc0:81::-2400:3dc0:82:ffff:ffff:ffff:ffff:ffff
2400:3dc0:90::/45
Signature Algorithm: sha256WithRSAEncryption
e2:16:a6:13:5e:5b:21:3c:d9:f3:a7:20:d3:62:d2:86:15:0f:
74:66:9a:b1:f0:f7:72:41:a6:e4:17:64:5c:58:49:d5:dd:27:
24:85:2c:bf:d8:84:8b:0c:0e:05:36:06:7a:9f:08:da:44:f1:
5c:a8:d1:89:27:f7:45:09:09:98:7f:ca:57:d5:56:0a:0b:af:
f2:e6:0e:cd:6a:8f:ec:ed:68:88:9b:4f:28:e3:bf:1e:5d:05:
da:72:e7:40:e2:0d:53:91:e5:83:24:88:e2:56:81:b9:ae:8a:
7b:35:53:83:cc:4f:5e:e0:ee:20:a7:08:48:5d:fd:aa:b1:66:
e5:25:b5:74:c7:5d:e0:3f:41:af:e0:3c:5e:10:17:08:13:a1:
40:5c:28:d9:a1:bd:a6:d1:02:2b:f9:d6:96:9c:07:14:b7:73:
dd:e8:41:d2:78:59:56:5c:bc:66:c6:21:c1:02:97:39:ce:9a:
37:f2:9e:ee:74:f0:7f:13:8b:bf:1b:52:c3:ec:cd:7d:98:cd:
c8:04:4c:68:7f:e6:69:85:e9:7b:df:a4:e6:2a:44:63:42:7e:
a5:32:23:63:bf:20:19:89:94:bf:86:a9:dc:b9:9b:11:36:e4:
bb:71:bb:6a:5f:b8:8a:24:ff:46:fa:37:29:75:8f:f6:d1:5f:
ad:d4:10:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 07:07:15 2026 by rpki-client