Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/095A440652B311F0B25AA911C4F9AE02.roa
File: 095A440652B311F0B25AA911C4F9AE02.roa (raw, json)
Hash identifier: mGZzsisLf+s/yTQGVxWB9KQjagfwckfG72mjXpZQix0=
Subject key identifier: DA:53:F6:E4:B8:50:46:50:F1:46:14:56:9D:34:02:FD:3E:ED:B2:E4
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 047C
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/095A440652B311F0B25AA911C4F9AE02.roa
Signing time: Sat 03 Oct 2026 00:49:05 +0000
ROA not before: Sat 03 Oct 2026 00:49:05 +0000
ROA not after: Thu 30 Dec 2027 00:00:00 +0000
asID: 31898
IP address blocks: 2407:30c0:200::/48 maxlen: 48
2407:30c0:201::/48 maxlen: 48
2407:30c0:202::/48 maxlen: 48
2407:30c0:203::/48 maxlen: 48
2407:30c0:204::/48 maxlen: 48
2407:30c0:205::/48 maxlen: 48
2407:30c0:206::/48 maxlen: 48
2407:30c0:207::/48 maxlen: 48
2407:30c0:208::/48 maxlen: 48
2407:30c0:20a::/48 maxlen: 48
2407:30c0:20b::/48 maxlen: 48
2407:30c0:20c::/48 maxlen: 48
2407:30c0:20d::/48 maxlen: 48
2407:30c0:20e::/48 maxlen: 48
2407:30c0:20f::/48 maxlen: 48
2407:30c0:211::/48 maxlen: 48
2407:30c0:212::/48 maxlen: 48
2407:30c0:213::/48 maxlen: 48
2407:30c0:214::/48 maxlen: 48
2407:30c0:215::/48 maxlen: 48
2407:30c0:216::/48 maxlen: 48
2407:30c0:217::/48 maxlen: 48
2407:30c0:218::/48 maxlen: 48
2407:30c0:219::/48 maxlen: 48
2407:30c0:21a::/48 maxlen: 48
2407:30c0:21b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:31:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1148 (0x47c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Oct 3 00:49:05 2026 GMT
Not After : Dec 30 00:00:00 2027 GMT
Subject: CN=6ac05101-bf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:86:04:d6:1f:98:b9:a6:11:41:3e:88:2b:e3:
e3:05:45:03:2f:9f:68:b2:cf:80:32:61:ae:92:b1:
37:35:07:f6:a7:2f:3f:44:d5:b7:67:ff:99:bd:32:
c8:3b:e1:1a:06:f1:d4:a5:41:91:4c:3c:50:7f:a8:
e1:fe:18:20:b7:2a:c3:4c:40:29:37:29:bc:24:a2:
2a:f2:ef:85:81:b4:f7:45:b5:1f:84:f4:03:ce:a8:
69:6e:23:83:dc:a0:8e:44:47:5d:63:f3:a1:1d:8f:
40:01:0f:d7:0f:98:78:f8:7b:f0:49:1b:54:7f:b5:
ef:bd:35:e7:47:dc:b3:bb:43:ac:91:c4:29:63:e0:
ea:fb:25:9b:74:43:bd:b5:22:7d:86:b4:24:32:48:
bf:d5:b3:10:c7:1e:6f:d9:f5:d8:c7:16:ed:da:dd:
c6:58:84:30:61:ce:5f:6d:1a:1f:7b:5c:1c:3d:83:
af:2c:d5:69:f0:b0:fe:86:c8:5a:4b:3b:dd:40:46:
96:2d:23:2f:02:ed:f1:f1:19:ab:95:90:82:f4:ff:
1c:71:b4:fb:e3:4a:e8:47:b7:09:16:a4:59:c5:0b:
78:e9:8e:51:5f:57:6f:6c:d4:de:ce:03:62:6c:ea:
7e:c4:76:31:6f:34:4d:ef:b7:19:18:91:a5:55:a4:
6a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:53:F6:E4:B8:50:46:50:F1:46:14:56:9D:34:02:FD:3E:ED:B2:E4
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/095A440652B311F0B25AA911C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:30c0:200::-2407:30c0:208:ffff:ffff:ffff:ffff:ffff
2407:30c0:20a::-2407:30c0:20f:ffff:ffff:ffff:ffff:ffff
2407:30c0:211::-2407:30c0:21b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1b:c3:ac:74:65:93:d8:a2:e9:9a:17:62:3d:fd:8d:03:a5:59:
53:76:b7:d6:a9:6c:61:16:50:67:47:a5:af:db:ff:07:a4:da:
c9:77:6e:76:35:e5:aa:ff:e0:25:2d:2b:10:63:89:89:0c:2a:
b9:9d:96:96:51:94:3f:16:3f:0e:e8:ab:19:b3:93:e7:d0:b3:
fd:65:fb:14:b7:01:f6:28:a5:91:ab:72:82:99:ec:73:bd:12:
2d:53:4d:2a:66:4c:c8:cd:4f:2d:6f:e8:7d:20:53:5c:c3:b1:
3d:a8:a9:7e:40:be:1f:c0:c7:42:57:ff:b9:08:56:52:74:f3:
69:5e:a0:31:e8:73:b8:12:08:ab:ff:89:8a:c2:e5:2d:08:6d:
b4:b2:75:af:a9:94:db:1f:43:5c:eb:33:a0:b6:2a:76:76:93:
8c:94:e1:f3:da:21:e6:7a:a3:e7:01:56:9f:fb:25:f5:0f:5f:
f4:ad:a5:0c:5e:7e:94:40:d3:52:90:7b:cc:66:7a:f2:3a:06:
4f:33:fe:b0:02:1b:02:18:22:19:c2:9e:e5:1c:d6:e3:1d:3d:
8d:6d:6c:b4:8f:99:15:0f:f0:8f:c6:3f:a4:19:ed:6f:50:2b:
6a:16:8d:98:52:cd:98:5b:30:f6:36:f2:66:d6:12:3f:ed:c8:
ad:39:6e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:10:39 2026 by rpki-client