Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/E51087D6F1A011EF8BCCFE7BC4F9AE02.roa
File: E51087D6F1A011EF8BCCFE7BC4F9AE02.roa (raw, json)
Hash identifier: 7O2PrQheW46lC8i2767T1RnQNz234tPKPZiJ5lIuUvc=
Subject key identifier: A5:9C:92:96:29:1B:31:0F:50:D2:96:70:FD:87:99:B4:30:73:38:47
Certificate issuer: /CN=A9134B4A/serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
Certificate serial: 0169
Authority key identifier: AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/E51087D6F1A011EF8BCCFE7BC4F9AE02.roa
Signing time: Mon 02 Mar 2026 13:42:47 +0000
ROA not before: Tue 01 Jul 2025 06:44:31 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 63150
IP address blocks: 2401:a660:200::/40 maxlen: 48
2401:a660:901::/48 maxlen: 48
2401:a660:902::/48 maxlen: 48
2401:a660:903::/48 maxlen: 48
2401:a660:904::/48 maxlen: 48
2401:a660:905::/48 maxlen: 48
2401:a660:906::/48 maxlen: 48
2401:a660:907::/48 maxlen: 48
2401:a660:908::/48 maxlen: 48
2401:a660:909::/48 maxlen: 48
2401:a660:1000::/48 maxlen: 48
2401:a660:1001::/48 maxlen: 48
2401:a660:1002::/48 maxlen: 48
2401:a660:1003::/48 maxlen: 48
2401:a660:1004::/48 maxlen: 48
2401:a660:1005::/48 maxlen: 48
2401:a660:1006::/48 maxlen: 48
2401:a660:1007::/48 maxlen: 48
2401:a660:1008::/48 maxlen: 48
2401:a660:1009::/48 maxlen: 48
2401:a660:1100::/40 maxlen: 40
2401:a660:1101::/48 maxlen: 48
2401:a660:1102::/48 maxlen: 48
2401:a660:1103::/48 maxlen: 48
2401:a660:1104::/48 maxlen: 48
2401:a660:1105::/48 maxlen: 48
2401:a660:1106::/48 maxlen: 48
2401:a660:1107::/48 maxlen: 48
2401:a660:1108::/48 maxlen: 48
2401:a660:1109::/48 maxlen: 48
2401:a660:110a::/48 maxlen: 48
2401:a660:110b::/48 maxlen: 48
2401:a660:1200::/40 maxlen: 40
2401:a660:1200::/48 maxlen: 48
2401:a660:1201::/48 maxlen: 48
2401:a660:1202::/48 maxlen: 48
2401:a660:1203::/48 maxlen: 48
2401:a660:1204::/48 maxlen: 48
2401:a660:1205::/48 maxlen: 48
2401:a660:1206::/48 maxlen: 48
2401:a660:1207::/48 maxlen: 48
2401:a660:1208::/48 maxlen: 48
2401:a660:1209::/48 maxlen: 48
2401:a660:120a::/48 maxlen: 48
2401:a660:120b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl
rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 04:11:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 361 (0x169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9134B4A, serialNumber=ACCBF26A19D9E14C31F5F37E1B966D86A504B46B
Validity
Not Before: Jul 1 06:44:31 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a593d7-1861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:43:ee:fe:0c:4c:fd:b5:f9:c8:af:b7:2f:
c6:2d:9b:6f:dd:4d:18:7b:43:69:1a:9b:e0:0c:a5:
5e:67:32:30:48:8c:25:50:2b:c8:e0:ed:07:31:1c:
7f:ba:25:3f:55:a1:f6:c3:22:0c:fd:eb:04:7f:2e:
3b:aa:73:d8:05:43:47:3d:e8:7d:54:bf:44:a0:54:
4e:71:3b:54:33:90:f7:fc:cd:a7:70:5b:07:4a:9c:
9a:60:2e:ba:f0:02:1f:dd:f1:e6:f9:17:84:33:2f:
68:d0:17:9e:e6:41:fa:35:05:5d:a2:1a:54:34:f9:
d8:c7:6b:73:47:99:43:59:07:99:8f:51:39:c1:8a:
47:64:7a:b9:7e:7e:d4:b9:18:60:d1:b3:ad:be:56:
58:75:bd:de:fd:31:f8:71:20:7e:f8:f2:ae:8a:38:
16:fc:4f:e3:42:3d:9e:40:0b:d0:07:48:8d:b3:1b:
00:54:9c:08:25:2c:d3:16:27:0a:73:aa:6d:70:48:
eb:76:a4:ea:5c:53:b6:8b:5c:89:3f:5e:f6:0b:c9:
e6:64:ca:71:20:44:bb:39:4e:ff:81:ab:1c:e0:f2:
3c:39:07:c7:3d:83:7f:6c:e2:57:c3:17:c5:71:b4:
de:e3:da:cf:cf:ea:97:01:34:ad:4b:77:6c:51:cc:
7a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9C:92:96:29:1B:31:0F:50:D2:96:70:FD:87:99:B4:30:73:38:47
X509v3 Authority Key Identifier:
keyid:AC:CB:F2:6A:19:D9:E1:4C:31:F5:F3:7E:1B:96:6D:86:A5:04:B4:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rMvyahnZ4Uwx9fN-G5ZthqUEtGs.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/EB393D4E2F8911EFA3D04A6BC4F9AE02/E51087D6F1A011EF8BCCFE7BC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:a660:200::/40
2401:a660:901::-2401:a660:909:ffff:ffff:ffff:ffff:ffff
2401:a660:1000::-2401:a660:1009:ffff:ffff:ffff:ffff:ffff
2401:a660:1100::-2401:a660:12ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8b:7c:49:bf:b6:15:15:d9:f9:dd:de:42:00:31:da:15:f9:d6:
03:2c:01:20:a1:e7:72:f6:74:13:89:08:87:f2:d4:6c:09:f2:
48:e9:ce:10:96:a0:e6:62:c4:b2:64:43:1e:df:5a:7a:15:38:
47:90:88:b7:b0:eb:d5:cc:3e:9d:20:91:c8:cf:55:8a:0a:60:
98:9f:b7:e0:fd:7c:9f:5e:5c:6d:ad:9a:3e:cf:75:4c:57:a0:
63:d1:0c:9f:33:96:05:90:23:4a:b0:75:63:e8:95:4d:bd:93:
4c:ab:a1:08:e5:81:4c:33:a0:ce:7f:7d:57:06:da:44:3a:16:
5c:a3:94:b8:a9:35:37:1b:8e:27:84:f7:85:f0:cd:ec:a2:2f:
3b:ea:6d:b6:c5:f2:79:d5:87:e3:29:a6:e5:8b:67:e0:ce:50:
be:00:36:f3:ef:af:cc:d2:a9:ee:68:59:bd:15:7e:1b:33:8a:
d2:20:08:2d:7e:c3:c7:4e:cb:b1:e5:e4:95:fa:ac:29:f0:2d:
16:cd:62:83:b2:c3:32:8f:c9:be:14:c6:28:a6:a7:16:66:2c:
9f:e0:c6:72:75:c8:2c:8a:17:9b:6c:1a:62:91:a3:5c:c7:c2:
b7:d2:20:8e:91:5e:f2:ed:92:76:e6:6b:a0:87:8d:d0:cf:af:
c1:18:34:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 09:55:03 2026 by rpki-client