Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa
File: CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa (raw, json)
Hash identifier: S4RngeSsrDWRVEdowSh+mWQ91kYaeScRFv54RIFCUlY=
Subject key identifier: 62:C2:29:9E:81:91:9D:84:0D:5B:CB:9A:95:1A:AE:06:E5:5B:DC:FE
Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Certificate serial: 0D5C
Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa
Signing time: Mon 10 Aug 2026 18:36:27 +0000
ROA not before: Mon 10 Aug 2026 18:36:27 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 137883
IP address blocks: 2402:f840::/32 maxlen: 32
2402:f840::/48 maxlen: 48
2402:f840:1::/48 maxlen: 48
2402:f840:2::/48 maxlen: 48
2402:f840:3::/48 maxlen: 48
2402:f840:4::/48 maxlen: 48
2402:f840:5::/48 maxlen: 48
2402:f840:6::/48 maxlen: 48
2402:f840:7::/48 maxlen: 48
2402:f840:8::/48 maxlen: 48
2402:f840:9::/48 maxlen: 48
2402:f840:a::/48 maxlen: 48
2402:f840:b::/48 maxlen: 48
2402:f840:c::/48 maxlen: 48
2402:f840:d::/48 maxlen: 48
2402:f840:e::/48 maxlen: 48
2402:f840:f::/48 maxlen: 48
2402:f840:10::/48 maxlen: 48
2402:f840:11::/48 maxlen: 48
2402:f840:12::/48 maxlen: 48
2402:f840:13::/48 maxlen: 48
2402:f840:14::/48 maxlen: 48
2402:f840:15::/48 maxlen: 48
2402:f840:16::/48 maxlen: 48
2402:f840:17::/48 maxlen: 48
2402:f840:18::/48 maxlen: 48
2402:f840:19::/48 maxlen: 48
2402:f840:1a::/48 maxlen: 48
2402:f840:1b::/48 maxlen: 48
2402:f840:1c::/48 maxlen: 48
2402:f840:1d::/48 maxlen: 48
2402:f840:1e::/48 maxlen: 48
2402:f840:1f::/48 maxlen: 48
2402:f840:20::/48 maxlen: 48
2402:f840:21::/48 maxlen: 48
2402:f840:22::/48 maxlen: 48
2402:f840:23::/48 maxlen: 48
2402:f840:24::/48 maxlen: 48
2402:f840:25::/48 maxlen: 48
2402:f840:26::/48 maxlen: 48
2402:f840:27::/48 maxlen: 48
2402:f840:28::/48 maxlen: 48
2402:f840:29::/48 maxlen: 48
2402:f840:2a::/48 maxlen: 48
2402:f840:2b::/48 maxlen: 48
2402:f840:2c::/48 maxlen: 48
2402:f840:2d::/48 maxlen: 48
2402:f840:2e::/48 maxlen: 48
2402:f840:2f::/48 maxlen: 48
2402:f840:30::/48 maxlen: 48
2402:f840:31::/48 maxlen: 48
2402:f840:32::/48 maxlen: 48
2402:f840:33::/48 maxlen: 48
2402:f840:34::/48 maxlen: 48
2402:f840:35::/48 maxlen: 48
2402:f840:36::/48 maxlen: 48
2402:f840:37::/48 maxlen: 48
2402:f840:38::/48 maxlen: 48
2402:f840:39::/48 maxlen: 48
2402:f840:3a::/48 maxlen: 48
2402:f840:3b::/48 maxlen: 48
2402:f840:3c::/48 maxlen: 48
2402:f840:3d::/48 maxlen: 48
2402:f840:3e::/48 maxlen: 48
2402:f840:3f::/48 maxlen: 48
2402:f840:40::/48 maxlen: 48
2402:f840:41::/48 maxlen: 48
2402:f840:42::/48 maxlen: 48
2402:f840:43::/48 maxlen: 48
2402:f840:44::/48 maxlen: 48
2402:f840:45::/48 maxlen: 48
2402:f840:46::/48 maxlen: 48
2402:f840:47::/48 maxlen: 48
2402:f840:48::/48 maxlen: 48
2402:f840:49::/48 maxlen: 48
2402:f840:4a::/48 maxlen: 48
2402:f840:4b::/48 maxlen: 48
2402:f840:4c::/48 maxlen: 48
2402:f840:4d::/48 maxlen: 48
2402:f840:4e::/48 maxlen: 48
2402:f840:4f::/48 maxlen: 48
2402:f840:50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 25 Aug 2026 18:36:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3420 (0xd5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918DB4E, serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC
Validity
Not Before: Aug 10 18:36:27 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a7a1a2b-03b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:7c:87:e2:c2:21:43:0a:52:26:6c:ef:d2:
6a:c8:9b:14:8e:d4:14:c2:54:a1:c1:a8:84:e9:d0:
d3:df:86:95:d8:35:2d:e6:04:b0:96:c1:73:11:16:
78:c7:fb:b7:01:dc:33:d9:20:f0:f8:b9:92:ef:b6:
07:b5:6e:81:04:80:43:9a:aa:4d:b7:a2:cb:b5:5b:
b7:03:a8:f6:97:2c:e4:b4:fc:88:6f:6d:e6:fb:f4:
98:5b:7f:e0:54:27:74:06:81:74:e6:5f:41:b0:4d:
23:29:70:5f:ce:9a:60:d0:f9:6a:1b:1e:db:84:6f:
42:fa:e2:87:8c:b1:34:7f:03:b6:96:8e:2a:53:87:
21:a2:76:16:4e:82:10:38:23:88:dc:02:95:de:b5:
80:36:d4:78:6e:b7:c6:6b:ea:1f:99:0e:77:87:71:
4c:81:97:05:8b:5f:bc:86:c3:43:7c:b2:26:35:dd:
e8:79:68:d7:fd:a3:18:f5:73:17:0f:0f:a2:c0:07:
e6:85:10:a3:20:2c:1e:d7:53:03:e2:73:f1:50:bd:
15:bd:83:5f:e8:97:06:8b:da:7f:fb:33:1c:dc:5f:
7f:08:3f:f2:ce:16:33:d2:65:47:1d:ce:61:2f:f2:
85:63:4f:d7:28:5b:a9:42:f7:61:e6:06:7e:5a:28:
9a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C2:29:9E:81:91:9D:84:0D:5B:CB:9A:95:1A:AE:06:E5:5B:DC:FE
X509v3 Authority Key Identifier:
keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/CF3CF4A2DECD11EFA34A7C66C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:f840::/32
Signature Algorithm: sha256WithRSAEncryption
27:37:a2:19:21:7a:63:e4:40:05:e3:60:85:24:1e:9b:7f:89:
7a:ce:bf:c5:13:4b:24:cb:17:54:35:ef:5a:35:08:0a:f8:b5:
b1:47:58:1b:5f:8c:b6:3c:d8:19:78:8a:0f:49:5e:a3:67:a5:
e5:04:f9:9a:33:e6:06:e8:52:87:44:4b:c0:06:18:e9:8f:90:
e7:f2:c0:31:3f:d9:75:f7:29:36:3d:32:da:26:45:8a:50:60:
ea:78:47:36:d2:5f:a1:69:d2:0d:bb:b3:d4:4a:15:f6:2e:5e:
fe:ed:61:f8:29:c7:04:a3:ab:a0:4b:a6:cf:73:c7:00:40:18:
15:97:fd:46:6e:14:3b:05:95:98:92:5e:5e:b5:5c:d3:7a:87:
4f:51:5a:9d:7d:ab:b7:52:97:14:f1:96:9e:bb:64:7c:12:6a:
ae:31:b0:41:9b:d1:f3:87:f3:8c:1f:a7:1f:1e:f8:aa:76:74:
50:6c:64:4d:6a:e6:94:d2:54:86:6f:77:9e:2e:b9:fd:aa:4d:
56:5d:f0:d3:3b:ca:da:d5:7d:12:f4:e9:b3:d8:bb:1d:44:78:
5b:d3:a6:cd:f7:14:4c:a6:d5:c2:10:b3:a9:44:8f:cc:e4:28:
6e:73:f5:46:cb:b3:d3:e5:d5:66:af:d3:11:83:f9:f0:d4:71:
3c:10:0f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:14:06 2026 by rpki-client