Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/3399F4B0211A11F19B671427273D8C67.roa
File: 3399F4B0211A11F19B671427273D8C67.roa (raw, json)
Hash identifier: drTQPaWCeezPYitY7pb2JR1iGGTiQsPGw9Nl/aeA0Kg=
Subject key identifier: 5C:FF:E6:29:EE:83:B3:68:A4:89:F4:1D:99:46:A6:0A:11:37:7F:11
Certificate issuer: /CN=A917BB9A/serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
Certificate serial: 01A6
Authority key identifier: A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/3399F4B0211A11F19B671427273D8C67.roa
Signing time: Thu 25 Jun 2026 06:38:21 +0000
ROA not before: Thu 25 Jun 2026 06:38:21 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 56209
IP address blocks: 150.129.172.0/23 maxlen: 23
150.129.172.0/24 maxlen: 24
150.129.173.0/24 maxlen: 24
150.129.174.0/23 maxlen: 23
150.129.174.0/24 maxlen: 24
150.129.175.0/24 maxlen: 24
202.47.112.0/24 maxlen: 24
202.47.113.0/24 maxlen: 24
202.47.114.0/24 maxlen: 24
202.47.115.0/24 maxlen: 24
202.47.116.0/24 maxlen: 24
202.47.117.0/24 maxlen: 24
202.47.118.0/24 maxlen: 24
202.47.119.0/24 maxlen: 24
202.71.0.0/23 maxlen: 23
202.71.0.0/24 maxlen: 24
202.71.1.0/24 maxlen: 24
202.71.2.0/23 maxlen: 23
202.71.2.0/24 maxlen: 24
202.71.3.0/24 maxlen: 24
202.71.24.0/23 maxlen: 23
202.71.24.0/24 maxlen: 24
202.71.25.0/24 maxlen: 24
202.71.26.0/24 maxlen: 24
202.71.27.0/24 maxlen: 24
202.71.28.0/24 maxlen: 24
202.71.29.0/24 maxlen: 24
202.71.30.0/24 maxlen: 24
202.71.31.0/24 maxlen: 24
2401:a3e0::/48 maxlen: 48
2401:a3e0:1::/48 maxlen: 48
2401:a3e0:2::/48 maxlen: 48
2401:a3e0:3::/48 maxlen: 48
2401:a3e0:4::/48 maxlen: 48
2401:a3e0:5::/48 maxlen: 48
2401:a3e0:6::/48 maxlen: 48
2401:a3e0:7::/48 maxlen: 48
2401:a3e0:8::/48 maxlen: 48
2401:a3e0:9::/48 maxlen: 48
2401:a3e0:a::/48 maxlen: 48
2401:a3e0:b::/48 maxlen: 48
2401:a3e0:c::/48 maxlen: 48
2401:a3e0:d::/48 maxlen: 48
2401:a3e0:e::/48 maxlen: 48
2401:a3e0:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl
rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 06:58:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422 (0x1a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917BB9A, serialNumber=A6172EEBE1FCD1A978CCA467E1B58A30B37951EB
Validity
Not Before: Jun 25 06:38:21 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a3cccdd-43cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:c4:bc:ae:56:ce:2e:45:c5:f2:69:f0:e1:
f4:4a:03:d9:87:13:7b:df:ca:46:45:94:d3:9f:43:
6d:d1:10:6c:37:a1:49:b7:32:f2:42:4c:cb:2f:95:
d8:7f:43:01:a6:c1:cc:04:4a:c2:2c:3a:fe:e6:b0:
00:41:14:f3:c2:d9:58:1b:45:42:57:69:0b:f5:49:
f0:bc:d9:33:41:90:8c:4f:0a:d6:97:81:bc:b7:65:
e8:b7:24:fc:2e:73:d8:f4:60:93:87:b4:c1:0f:29:
d7:20:42:8f:07:c7:5e:60:e7:e7:2a:8e:fe:fe:f0:
0c:66:53:e8:bf:71:d4:6e:0a:54:8e:ae:f8:87:60:
0c:54:c8:7b:69:c1:ae:9f:23:4f:4f:0d:0d:3d:3f:
52:0b:4a:07:c4:e8:bb:27:cb:a2:5b:5f:bf:a2:36:
eb:f0:a0:8d:d5:d0:76:c9:0e:53:81:5c:3e:d3:72:
7d:af:0e:cb:0d:66:6d:7a:8c:26:31:6d:f0:47:5a:
83:08:49:ec:53:62:01:b3:4e:a8:44:67:b8:c0:26:
66:e3:5a:4c:12:b9:bf:3b:a9:84:2d:24:01:59:73:
f7:01:4b:f7:4b:d4:4a:2a:1e:f9:79:c4:13:10:66:
7c:99:39:77:58:11:3b:0f:7e:d8:6f:67:b2:e3:c5:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:FF:E6:29:EE:83:B3:68:A4:89:F4:1D:99:46:A6:0A:11:37:7F:11
X509v3 Authority Key Identifier:
keyid:A6:17:2E:EB:E1:FC:D1:A9:78:CC:A4:67:E1:B5:8A:30:B3:79:51:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/phcu6-H80al4zKRn4bWKMLN5Ues.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/phcu6-H80al4zKRn4bWKMLN5Ues.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB9A/49CD0304CFF311EF9062E521C4F9AE02/3399F4B0211A11F19B671427273D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
150.129.172.0/22
202.47.112.0/21
202.71.0.0/22
202.71.24.0/21
IPv6:
2401:a3e0::/44
Signature Algorithm: sha256WithRSAEncryption
a6:e1:16:7b:da:d7:a2:a8:fd:03:fc:41:e9:bf:50:33:89:98:
83:60:33:53:b6:15:3b:d8:38:41:f3:b1:64:48:1d:3d:45:4e:
5d:a3:35:58:58:ba:4d:1c:68:7b:47:eb:89:42:60:39:35:f5:
be:28:7f:f6:b0:93:0a:e0:92:3b:76:fb:ff:6c:1e:43:47:52:
09:f9:d4:04:65:e0:d4:e5:2a:3c:84:b2:bc:ed:fa:34:52:5a:
70:af:55:e2:e8:3a:76:3a:0d:16:01:21:8c:88:ac:64:2c:14:
a2:32:e9:61:9f:bf:58:d9:59:cf:f8:f1:fd:0a:83:05:ce:3a:
55:55:41:4c:9e:1a:73:36:8a:53:6e:68:85:5a:89:58:d7:0a:
67:50:e9:c6:fa:0f:e7:03:1b:e2:d7:82:28:82:b7:12:7d:5f:
35:bc:80:5c:3f:51:83:1d:2c:a5:c8:d7:1c:08:9e:18:c8:2e:
d9:d8:53:1b:14:90:8d:02:93:0c:e3:74:63:24:e6:d5:8d:14:
97:d7:57:05:96:b6:fa:29:61:58:a7:7d:fc:a7:a5:c3:39:24:
71:4e:00:ea:a7:b9:26:79:04:f9:cf:a3:0e:5b:ed:a6:38:2c:
fd:e5:c8:30:5e:b3:34:4d:c1:d0:28:d0:ec:9e:19:43:af:bc:
d4:18:1a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:21:13 2026 by rpki-client