Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/095A440652B311F0B25AA911C4F9AE02.roa
File: 095A440652B311F0B25AA911C4F9AE02.roa (raw, json)
Hash identifier: 3Cs5Pm8PURk2/zkpsdMlEIL10nKpWGYJxO2gBf9Ee5Y=
Subject key identifier: 78:D6:D1:53:4A:77:B5:F1:8E:16:12:11:B5:72:28:95:19:E3:A2:1E
Certificate issuer: /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial: 03FF
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/095A440652B311F0B25AA911C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:58:29 +0000
ROA not before: Sat 08 Nov 2025 23:45:47 +0000
ROA not after: Wed 30 Dec 2026 00:00:00 +0000
asID: 31898
IP address blocks: 2407:30c0:200::/48 maxlen: 48
2407:30c0:201::/48 maxlen: 48
2407:30c0:202::/48 maxlen: 48
2407:30c0:203::/48 maxlen: 48
2407:30c0:204::/48 maxlen: 48
2407:30c0:205::/48 maxlen: 48
2407:30c0:206::/48 maxlen: 48
2407:30c0:207::/48 maxlen: 48
2407:30c0:208::/48 maxlen: 48
2407:30c0:20a::/48 maxlen: 48
2407:30c0:20b::/48 maxlen: 48
2407:30c0:20c::/48 maxlen: 48
2407:30c0:20d::/48 maxlen: 48
2407:30c0:20e::/48 maxlen: 48
2407:30c0:20f::/48 maxlen: 48
2407:30c0:211::/48 maxlen: 48
2407:30c0:212::/48 maxlen: 48
2407:30c0:213::/48 maxlen: 48
2407:30c0:214::/48 maxlen: 48
2407:30c0:215::/48 maxlen: 48
2407:30c0:216::/48 maxlen: 48
2407:30c0:217::/48 maxlen: 48
2407:30c0:218::/48 maxlen: 48
2407:30c0:219::/48 maxlen: 48
2407:30c0:21a::/48 maxlen: 48
2407:30c0:21b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 12 Mar 2026 00:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1023 (0x3ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Validity
Not Before: Nov 8 23:45:47 2025 GMT
Not After : Dec 30 00:00:00 2026 GMT
Subject: CN=69a47e45-9bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:ea:ad:1b:79:a8:a9:35:75:bd:2e:b7:0a:
7e:f4:fb:36:89:a8:2a:a4:c6:cb:8b:fb:0a:03:70:
f2:c6:02:d3:77:c1:5c:a8:3e:a0:70:54:14:4e:cd:
8f:a0:d1:3f:25:b6:7c:4e:2e:6e:01:cb:a6:8b:b9:
af:5a:a8:56:c8:44:ee:cd:e9:16:1f:e4:1e:35:c2:
b9:e7:12:68:86:23:83:40:c0:c1:70:f3:e9:4c:8d:
ae:dc:31:4e:ce:7c:8d:15:89:bf:9a:b7:d9:18:76:
81:c5:c7:58:7e:7d:47:23:14:f0:c7:4a:92:da:90:
c0:ce:7e:4f:0d:dc:93:80:34:a4:df:ce:cc:85:c3:
d4:af:0c:51:1b:a5:1b:fe:5f:85:35:d7:8b:2a:a6:
ad:5b:92:75:87:73:93:b4:41:17:95:0f:29:5f:9d:
4c:08:a1:f4:b9:50:ad:73:6f:4a:95:1a:b1:b7:42:
38:85:05:7f:c8:56:50:14:2c:60:09:a1:31:0f:f6:
99:f5:2b:88:d1:41:33:a8:ea:5d:29:0b:a3:ea:67:
01:c2:a6:db:70:3d:77:db:bb:ba:fc:59:b1:33:35:
39:07:2f:3d:f5:97:6e:69:d6:2a:27:62:06:f0:a2:
6f:78:9d:50:e2:ae:4e:3c:6b:73:41:b1:e6:f6:35:
af:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:D6:D1:53:4A:77:B5:F1:8E:16:12:11:B5:72:28:95:19:E3:A2:1E
X509v3 Authority Key Identifier:
keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/095A440652B311F0B25AA911C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2407:30c0:200::-2407:30c0:208:ffff:ffff:ffff:ffff:ffff
2407:30c0:20a::-2407:30c0:20f:ffff:ffff:ffff:ffff:ffff
2407:30c0:211::-2407:30c0:21b:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6a:20:97:a0:65:6c:45:b7:59:58:83:cf:17:3e:6d:1e:1b:1e:
67:81:7b:da:b6:04:51:cd:ab:38:c2:75:82:dc:7c:e9:f8:c1:
30:e7:af:7c:ca:83:93:34:58:84:90:9e:d1:51:2c:73:60:21:
cc:75:2b:18:f0:53:40:24:f0:33:d5:df:25:34:ad:a6:b3:98:
80:cf:aa:d2:40:fd:67:20:f6:09:5c:65:8b:70:30:06:4f:3f:
f8:6f:6b:d9:07:c3:87:67:16:1b:0f:63:de:4a:57:51:bb:aa:
f2:1a:52:4d:72:1a:f9:00:1b:c8:27:d6:67:07:eb:74:77:1c:
d1:eb:64:e7:7e:50:87:e5:63:c9:06:14:28:f5:ba:9f:94:33:
4a:99:c1:7d:4d:1c:b9:e5:30:f4:e5:ad:09:7f:e6:dc:4c:10:
25:b2:04:84:8d:96:8e:cb:d0:99:cc:a7:99:68:b6:60:86:ea:
91:d1:8c:da:70:63:f8:57:3f:9f:15:7b:dd:b4:49:ab:52:cd:
d9:54:c0:95:41:57:f4:df:6f:73:79:ef:55:13:ac:73:49:50:
f8:8e:9f:f6:7c:4d:f1:76:3b:20:38:f5:15:6c:fe:65:72:65:
a2:44:24:2b:c2:f6:2f:48:42:83:47:68:60:28:92:0f:3c:cb:
04:d8:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 18:16:53 2026 by rpki-client