Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/58273588C2BD11EBA13EC07AC4F9AE02.roa
File: 58273588C2BD11EBA13EC07AC4F9AE02.roa (raw, json)
Hash identifier: /ZcPMVw8bWVz/s13IxgyN1M54yl3P16y416rb4tcIPI=
Subject key identifier: 90:B9:49:C7:95:62:0D:47:AB:D9:F2:D6:B6:DE:01:AF:FE:3A:D6:D3
Certificate issuer: /CN=A919F0DA/serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
Certificate serial: 08D3
Authority key identifier: 94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/58273588C2BD11EBA13EC07AC4F9AE02.roa
Signing time: Sat 08 Aug 2026 15:10:13 +0000
ROA not before: Sat 08 Aug 2026 15:10:13 +0000
ROA not after: Tue 31 Aug 2027 00:00:00 +0000
asID: 4758
IP address blocks: 2001:4408::/32 maxlen: 32
2001:4408:4::/48 maxlen: 48
2001:4408:a::/48 maxlen: 48
2001:4408:b::/48 maxlen: 48
2001:4408:100::/48 maxlen: 48
2001:4408:200::/48 maxlen: 48
2001:4408:1080::/44 maxlen: 44
2001:4408:1100::/48 maxlen: 48
2001:4408:4000::/40 maxlen: 40
2001:4408:4400::/40 maxlen: 40
2001:4408:4800::/40 maxlen: 48
2001:4408:4a00::/40 maxlen: 40
2001:4408:4b00::/40 maxlen: 40
2001:4408:4c00::/40 maxlen: 40
2001:4408:5200::/48 maxlen: 48
2001:4408:5202::/48 maxlen: 48
2001:4408:5205::/48 maxlen: 48
2001:4408:5206::/48 maxlen: 48
2001:4408:520a::/48 maxlen: 48
2001:4408:520b::/48 maxlen: 48
2001:4408:5220::/48 maxlen: 48
2001:4408:5222::/48 maxlen: 48
2001:4408:5223::/48 maxlen: 48
2001:4408:5224::/48 maxlen: 48
2001:4408:5226::/48 maxlen: 48
2001:4408:5240::/48 maxlen: 48
2001:4408:5250::/48 maxlen: 48
2001:4408:5600::/48 maxlen: 48
2001:4408:5800::/40 maxlen: 40
2001:4408:5a00::/40 maxlen: 40
2001:4408:5c00::/40 maxlen: 40
2001:4408:5e00::/40 maxlen: 48
2001:4408:6000::/40 maxlen: 40
2001:4408:6200::/40 maxlen: 40
2001:4408:6600::/40 maxlen: 40
2001:4408:6a00::/40 maxlen: 40
2001:4408:6b00::/40 maxlen: 45
2001:4408:6c00::/40 maxlen: 40
2001:4408:6e00::/40 maxlen: 40
2001:4408:7000::/48 maxlen: 48
2001:4408:7200::/40 maxlen: 40
2001:4408:7600::/40 maxlen: 40
2001:4408:7800::/40 maxlen: 40
2001:4408:7a00::/40 maxlen: 40
2001:4408:7c00::/40 maxlen: 48
2001:4408:7e00::/40 maxlen: 40
2001:4408:7f00::/45 maxlen: 45
2001:4408:7f08::/45 maxlen: 45
2001:4408:8000::/40 maxlen: 40
2001:4408:8100::/48 maxlen: 48
2001:4408:8200::/40 maxlen: 40
2001:4408:8308::/45 maxlen: 45
2001:4408:8400::/40 maxlen: 40
2001:4408:8608::/48 maxlen: 48
2001:4408:c000::/48 maxlen: 48
2001:4408:c002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl
rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 11 Sep 2026 14:15:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2259 (0x8d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A919F0DA, serialNumber=94D587B6E75BF108AF5B424922C4A8BAAB3EE946
Validity
Not Before: Aug 8 15:10:13 2026 GMT
Not After : Aug 31 00:00:00 2027 GMT
Subject: CN=6a7746d5-674e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:85:c9:ab:b7:65:43:16:41:ea:a7:b4:c8:83:
93:77:56:eb:a0:f9:5f:c5:fa:78:56:7e:27:f3:94:
c2:d9:1e:65:7f:73:11:95:dd:f0:04:1a:95:db:30:
64:36:19:45:6c:1b:ab:f5:ed:16:a4:eb:f2:10:51:
0f:22:90:d2:a2:75:01:17:81:71:4d:fa:66:64:02:
94:bd:3e:8d:dd:3d:64:2b:f5:14:41:02:2f:8d:c9:
22:ef:1c:8d:56:8b:e3:2c:10:f2:23:d4:cc:59:f6:
69:ab:93:50:00:01:7f:29:0f:25:ac:73:b5:6a:96:
2e:f9:93:9f:5f:66:68:94:ce:f6:47:e5:de:84:83:
80:f3:c1:a5:f6:96:cd:1b:41:5a:89:fe:17:70:17:
ed:b9:b7:02:12:3d:c6:08:ec:7e:e7:a0:3e:c8:2b:
00:4e:0d:97:e8:3a:52:f5:72:d0:b7:72:46:5a:c3:
76:b5:a3:23:70:48:ae:b3:94:04:5b:fd:b7:33:20:
ca:38:8c:8f:1a:b2:46:17:c4:74:be:c5:3c:dc:d3:
d1:57:2e:f0:b7:78:e2:10:22:a5:3c:d1:5d:dc:fa:
16:52:d6:c7:e9:4c:19:d5:f7:30:60:e8:c9:8c:1d:
62:3f:e9:87:3a:ba:a4:66:5f:4e:0b:ba:18:76:9c:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B9:49:C7:95:62:0D:47:AB:D9:F2:D6:B6:DE:01:AF:FE:3A:D6:D3
X509v3 Authority Key Identifier:
keyid:94:D5:87:B6:E7:5B:F1:08:AF:5B:42:49:22:C4:A8:BA:AB:3E:E9:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/lNWHtudb8QivW0JJIsSouqs-6UY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lNWHtudb8QivW0JJIsSouqs-6UY.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/58273588C2BD11EBA13EC07AC4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2001:4408::/32
Signature Algorithm: sha256WithRSAEncryption
7d:14:01:b8:13:c0:4a:db:9e:7e:05:b5:84:6d:c0:c5:ac:6e:
9e:f7:07:9b:ec:ad:63:d3:03:a0:31:c0:c5:3b:1e:bc:be:c4:
f1:46:5e:5e:a1:ab:e9:a7:7e:6f:3c:4d:f6:26:c6:a9:b5:fa:
00:70:57:72:83:a4:ba:40:5d:9c:af:fd:2f:6a:9e:d5:f2:ac:
b9:1b:ef:af:b9:b9:54:43:71:6d:ae:34:b8:aa:e6:ad:af:4b:
16:a8:42:94:9c:43:e6:56:75:27:1f:cd:76:53:3c:b5:f5:87:
1d:45:36:a1:1a:4f:a7:3a:9a:ba:9d:3a:b8:2e:8d:13:bf:6f:
ad:0a:e8:f0:3a:cc:3a:56:7c:1e:0f:65:77:c8:77:fb:f1:c1:
f3:38:2c:fe:7d:22:62:67:9d:ad:70:79:10:32:57:14:06:ce:
ae:7b:83:0a:e8:5b:f6:aa:94:aa:20:81:a6:0e:8e:27:2b:6d:
a4:d7:0b:bc:dc:3d:80:5c:79:57:3d:25:cd:ca:41:2c:db:66:
09:29:6d:2e:af:68:aa:4a:5a:88:03:a0:9d:c7:d3:2e:6c:ca:
c8:7b:8e:6f:a9:6a:b5:bb:0a:20:48:dc:0b:e6:dc:6b:f4:ef:
fc:f9:d6:c8:5b:ca:27:22:45:1d:29:fb:00:c9:33:95:31:2c:
d4:a8:c3:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:46:52 2026 by rpki-client