Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/49897D0A6E3511F1B6ACEAD77AA30FBC.roa
File: 49897D0A6E3511F1B6ACEAD77AA30FBC.roa (raw, json)
Hash identifier: JkXwVVHd7lwJJQ/NTtKotISrkpcWB+71sqmfcxbph+8=
Subject key identifier: E0:80:DE:F9:6A:8C:AC:B5:70:5A:6D:7A:EE:7B:C6:BA:12:96:B2:2B
Certificate issuer: /CN=A919AFBE/serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Certificate serial: 83
Authority key identifier: 3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/49897D0A6E3511F1B6ACEAD77AA30FBC.roa
Signing time: Mon 22 Jun 2026 19:33:54 +0000
ROA not before: Mon 22 Jun 2026 19:33:54 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 140849
IP address blocks: 2402:37a0::/32 maxlen: 32
2402:37a0:b::/48 maxlen: 48
2402:37a0:c::/48 maxlen: 48
2402:37a0:d::/48 maxlen: 48
2402:37a0:e::/48 maxlen: 48
2402:37a0:f::/48 maxlen: 48
2402:37a0:10::/48 maxlen: 48
2402:37a0:11::/48 maxlen: 48
2402:37a0:12::/48 maxlen: 48
2402:37a0:13::/48 maxlen: 48
2402:37a0:14::/48 maxlen: 48
2402:37a0:15::/48 maxlen: 48
2402:37a0:16::/48 maxlen: 48
2402:37a0:17::/48 maxlen: 48
2402:37a0:18::/48 maxlen: 48
2402:37a0:19::/48 maxlen: 48
2402:37a0:1a::/48 maxlen: 48
2402:37a0:1b::/48 maxlen: 48
2402:37a0:1c::/48 maxlen: 48
2402:37a0:1d::/48 maxlen: 48
2402:37a0:1e::/48 maxlen: 48
2402:37a0:1f::/48 maxlen: 48
2402:37a0:20::/48 maxlen: 48
2402:37a0:21::/48 maxlen: 48
2402:37a0:22::/48 maxlen: 48
2402:37a0:23::/48 maxlen: 48
2402:37a0:24::/48 maxlen: 48
2402:37a0:25::/48 maxlen: 48
2402:37a0:26::/48 maxlen: 48
2402:37a0:27::/48 maxlen: 48
2402:37a0:28::/48 maxlen: 48
2402:37a0:29::/48 maxlen: 48
2402:37a0:2a::/48 maxlen: 48
2402:37a0:2b::/48 maxlen: 48
2402:37a0:2c::/48 maxlen: 48
2402:37a0:2d::/48 maxlen: 48
2402:37a0:2e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 08:49:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131 (0x83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919AFBE, serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Validity
Not Before: Jun 22 19:33:54 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=6a398e22-d11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f7:7c:7f:8c:e6:a6:af:a3:f5:22:41:e7:86:
d1:40:49:9d:d4:9f:fe:67:17:c3:fb:20:c2:de:a9:
39:2d:e8:05:1f:20:eb:f0:ea:06:91:b5:0c:df:51:
94:e9:9d:45:a1:a4:e0:8c:d0:83:be:4c:b5:27:ac:
0f:b2:bd:f1:9b:0a:eb:cd:04:26:10:24:fc:46:ee:
50:77:60:63:26:53:ae:b3:fa:7d:0a:45:da:9a:52:
9d:04:e3:e6:60:9e:82:ef:bf:65:20:eb:39:1b:c9:
5a:12:ad:24:fa:52:f5:f4:bc:a2:f1:3e:65:3b:a3:
39:71:07:cf:43:55:fe:6e:0f:10:39:df:89:79:62:
4d:c8:fe:89:a0:69:9e:71:4d:a4:24:79:18:9d:8a:
cd:ca:9f:26:ff:b6:47:42:24:09:43:6e:a2:fc:7b:
4f:55:e2:9e:37:e7:62:49:42:53:88:33:e2:f9:fe:
e5:13:53:e5:31:f6:dd:98:7f:50:90:b3:91:bb:d9:
24:d5:04:83:73:df:ca:8e:a4:87:ae:a7:81:28:33:
39:fe:ae:35:90:90:df:c3:1c:2c:ac:c5:e6:f1:24:
25:22:d6:11:e5:8e:09:06:51:ac:bf:6b:fa:55:b8:
82:9e:cd:1e:c8:6a:c2:d6:73:9d:6d:9d:3e:8c:6a:
ff:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:80:DE:F9:6A:8C:AC:B5:70:5A:6D:7A:EE:7B:C6:BA:12:96:B2:2B
X509v3 Authority Key Identifier:
keyid:3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/49897D0A6E3511F1B6ACEAD77AA30FBC.roa
sbgp-ipAddrBlock: critical
IPv6:
2402:37a0::/32
Signature Algorithm: sha256WithRSAEncryption
b2:f0:49:73:a2:8f:98:6e:21:10:2d:ae:ec:fd:b6:39:d3:e3:
ef:c0:fc:ea:1e:2a:7d:88:62:3a:1e:af:56:f4:e1:16:c6:60:
62:0b:81:7e:d8:09:4f:fc:b5:a9:96:d8:3f:c2:d7:87:74:dd:
46:72:e5:ce:35:9d:8a:1a:12:a2:18:32:08:cc:1e:19:6e:cd:
d9:ba:54:ec:1a:91:bb:b8:37:41:10:09:8d:17:5f:7b:b5:b2:
ce:bc:cb:88:8f:e3:0c:85:8e:a0:1d:14:b4:d4:2f:0a:d0:bc:
4d:fa:00:2c:df:f0:4e:89:ff:a8:27:e6:6d:3b:c9:e1:c9:c0:
67:46:46:b2:a1:66:48:67:a7:56:06:45:bf:62:88:73:90:86:
fa:e7:a9:99:67:47:a4:75:e7:2e:0a:4f:70:78:5f:a7:f7:74:
0d:5b:6f:eb:fd:e5:a7:0b:e1:ae:db:9c:05:70:71:04:a1:27:
87:e6:ab:77:59:91:96:84:ef:74:5a:2d:9e:09:0b:d5:9f:41:
ed:6a:2e:be:97:5f:ea:61:11:17:f5:03:ee:e4:4d:60:f7:15:
43:61:8a:ba:8f:92:74:a2:aa:f7:fa:60:bb:06:6f:de:32:70:
4d:11:09:af:0c:64:7d:84:37:41:94:f6:be:f9:b0:63:9a:44:
11:e9:17:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:09:15 2026 by rpki-client