Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
File: AE0A263AB00411EF95939E11C4F9AE02.roa (raw, json)
Hash identifier: JdWj2rBzJqr4zzFFv9P4DAREPACL1IZNwJGgU8YAklM=
Subject key identifier: B6:7F:5A:06:66:3B:6D:F8:42:32:49:19:28:6F:27:D9:24:1C:CC:F0
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 033F
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
Signing time: Tue 29 Sep 2026 02:13:57 +0000
ROA not before: Tue 29 Sep 2026 02:13:57 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 202662
IP address blocks: 2401:b60::/48 maxlen: 48
2401:b60:1::/48 maxlen: 48
2401:b60:2::/48 maxlen: 48
2401:b60:3::/48 maxlen: 48
2401:b60:4::/48 maxlen: 48
2401:b60:8::/48 maxlen: 48
2401:b60:9::/48 maxlen: 48
2401:b60:a::/48 maxlen: 48
2401:b60:c::/48 maxlen: 48
2401:b60:d::/48 maxlen: 48
2401:b60:10::/48 maxlen: 48
2401:b60:11::/48 maxlen: 48
2401:b60:12::/48 maxlen: 48
2401:b60:13::/48 maxlen: 48
2401:b60:14::/48 maxlen: 48
2401:b60:15::/48 maxlen: 48
2401:b60:16::/48 maxlen: 48
2401:b60:17::/48 maxlen: 48
2401:b60:18::/48 maxlen: 48
2401:b60:19::/48 maxlen: 48
2401:b60:1a::/48 maxlen: 48
2401:b60:1b::/48 maxlen: 48
2401:b60:1c::/48 maxlen: 48
2401:b60:22::/48 maxlen: 48
2401:b60:23::/48 maxlen: 48
2401:b60:24::/48 maxlen: 48
2401:b60:25::/48 maxlen: 48
2401:b60:26::/48 maxlen: 48
2401:b60:27::/48 maxlen: 48
2401:b60:28::/48 maxlen: 48
2401:b60:29::/48 maxlen: 48
2401:b60:30::/48 maxlen: 48
2401:b60:31::/48 maxlen: 48
2401:b60:32::/48 maxlen: 48
2401:b60:33::/48 maxlen: 48
2401:b60:34::/48 maxlen: 48
2401:b60:35::/48 maxlen: 48
2401:b60:36::/48 maxlen: 48
2401:b60:39::/48 maxlen: 48
2401:b60:3a::/48 maxlen: 48
2401:b60:3b::/48 maxlen: 48
2401:b60:3c::/48 maxlen: 48
2401:b60:3d::/48 maxlen: 48
2401:b60:3e::/48 maxlen: 48
2401:b60:3f::/48 maxlen: 48
2401:b60:e000::/40 maxlen: 48
2401:b60:ff00::/41 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 30 Oct 2026 02:25:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 831 (0x33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Sep 29 02:13:57 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6abb1ee5-74e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9c:12:0b:bd:80:25:ba:26:eb:78:af:2d:9b:
32:ae:2c:e1:6e:0f:33:14:d6:05:d0:23:96:30:c4:
d2:f0:33:df:b4:d5:dd:c3:a9:89:c1:8a:f1:43:39:
f9:62:85:db:64:55:f1:ce:a3:1b:7f:1d:c0:b4:b9:
0d:cb:91:b7:00:1f:f5:c9:e4:b5:aa:e1:9c:06:b7:
1d:c7:92:0c:95:4a:b1:34:53:47:90:b6:c3:59:bb:
18:13:94:29:81:f8:8f:93:ee:f8:64:f9:03:a3:12:
a2:c6:7b:65:fd:20:11:9a:58:e0:bf:da:1a:72:43:
3b:73:bb:b8:ab:1a:5f:f2:e8:46:89:1f:7b:06:97:
1e:0c:d6:08:09:89:27:3f:f8:ef:27:50:da:d5:e9:
32:47:fb:46:d2:12:40:11:e1:a1:f7:7f:99:c8:bc:
8f:e4:f6:42:de:53:e8:d2:8f:ed:6c:77:4a:69:91:
5a:ef:81:03:ca:c6:53:1c:fa:1d:cd:48:1b:ae:1f:
1d:a9:0b:bb:bc:a3:0e:60:37:3b:ee:16:38:bb:a2:
6a:4d:7f:e2:23:31:28:44:05:3f:5c:cf:12:c7:8b:
11:e1:b8:07:ed:36:3a:d4:71:60:4f:8d:ea:28:28:
cf:33:4a:11:27:96:05:46:f2:4c:9f:93:90:c5:7a:
46:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:7F:5A:06:66:3B:6D:F8:42:32:49:19:28:6F:27:D9:24:1C:CC:F0
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b60::-2401:b60:4:ffff:ffff:ffff:ffff:ffff
2401:b60:8::-2401:b60:a:ffff:ffff:ffff:ffff:ffff
2401:b60:c::/47
2401:b60:10::-2401:b60:1c:ffff:ffff:ffff:ffff:ffff
2401:b60:22::-2401:b60:29:ffff:ffff:ffff:ffff:ffff
2401:b60:30::-2401:b60:36:ffff:ffff:ffff:ffff:ffff
2401:b60:39::-2401:b60:3f:ffff:ffff:ffff:ffff:ffff
2401:b60:e000::/40
2401:b60:ff00::/41
Signature Algorithm: sha256WithRSAEncryption
7c:71:4d:06:7a:c3:a0:ce:fb:e9:cd:de:1d:a4:74:53:34:d6:
d1:52:ef:1c:ae:1a:2b:d9:af:77:92:e0:5b:ac:18:f9:03:fb:
16:3e:f7:2b:62:05:71:ee:be:09:b8:12:c6:99:29:f2:b4:0e:
48:be:c6:ac:90:d9:33:f1:84:ba:aa:33:58:03:02:03:8a:32:
5b:8e:8d:79:ac:8b:fe:8a:dd:3f:b7:82:33:cf:05:db:df:33:
fd:e2:cd:88:29:be:5b:1a:ae:33:e5:dd:d8:c0:8d:49:08:d6:
25:06:63:26:ff:60:d6:a1:48:7a:1c:62:18:0a:75:99:11:be:
2e:60:2d:fe:e2:3c:ed:ab:d1:ee:9c:23:cb:4a:39:ba:9c:72:
68:de:c0:12:7d:9f:88:c9:d0:2f:b4:c6:32:82:fc:f5:bd:97:
7e:a2:68:aa:99:b6:77:a0:25:c2:7e:05:dd:9c:f4:73:98:87:
2c:1b:b4:e2:f9:f8:05:1a:49:29:5b:88:ce:85:9a:a3:8a:f3:
f2:03:e7:dd:e1:a3:9c:71:71:e7:c8:2b:9a:e4:16:c9:1a:33:
ad:52:2d:95:60:22:22:72:06:d3:01:3a:98:1f:cc:57:b5:6b:
e5:04:5c:35:9b:8f:e5:01:32:93:c7:92:72:b2:5c:08:8f:c6:
d0:13:39:62
-----BEGIN CERTIFICATE-----
MIIFyzCCBLOgAwIBAgICAz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0
NTIzOUNDRjQwHhcNMjYwOTI5MDIxMzU3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJiMWVlNS03NGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAp5wSC72AJbom63ivLZsyrizhbg8zFNYF0COWMMTS8DPftNXdw6mJwYrxQzn5
YoXbZFXxzqMbfx3AtLkNy5G3AB/1yeS1quGcBrcdx5IMlUqxNFNHkLbDWbsYE5Qp
gfiPk+74ZPkDoxKixntl/SARmljgv9oackM7c7u4qxpf8uhGiR97BpceDNYICYkn
P/jvJ1Da1ekyR/tG0hJAEeGh93+ZyLyP5PZC3lPo0o/tbHdKaZFa74EDysZTHPod
zUgbrh8dqQu7vKMOYDc77hY4u6JqTX/iIzEoRAU/XM8Sx4sR4bgH7TY61HFgT43q
KCjPM0oRJ5YFRvJMn5OQxXpGrwIDAQABo4IC7zCCAuswHQYDVR0OBBYEFLZ/WgZm
O234QjJJGShvJ9kkHMzwMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC
NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvQUUwQTI2M0FC
MDA0MTFFRjk1OTM5RTExQzRGOUFFMDIucm9hMIGtBggrBgEFBQcBBwEB/wSBnTCB
mjCBlwQCAAIwgZAwEAMFBSQBC2ADBwAkAQtgAAQwEgMHAyQBC2AACAMHACQBC2AA
CgMHASQBC2AADDASAwcEJAELYAAQAwcAJAELYAAcMBIDBwEkAQtgACIDBwEkAQtg
ACgwEgMHBCQBC2AAMAMHACQBC2AANjASAwcAJAELYAA5AwcGJAELYAAAAwYAJAEL
YOADBwckAQtg/wAwDQYJKoZIhvcNAQELBQADggEBAHxxTQZ6w6DO++nN3h2kdFM0
1tFS7xyuGivZr3eS4FusGPkD+xY+9ytiBXHuvgm4EsaZKfK0Dki+xqyQ2TPxhLqq
M1gDAgOKMluOjXmsi/6K3T+3gjPPBdvfM/3izYgpvlsarjPl3djAjUkI1iUGYyb/
YNahSHocYhgKdZkRvi5gLf7iPO2r0e6cI8tKObqccmjewBJ9n4jJ0C+0xjKC/PW9
l36iaKqZtnegJcJ+Bd2c9HOYhywbtOL5+AUaSSlbiM6FmqOK8/ID593ho5xxcefI
K5rkFskaM61SLZVgIiJyBtMBOpgfzFe1a+UEXDWbj+UBMpPHknKyXAiPxtATOWI=
-----END CERTIFICATE-----
Generated at Fri Oct 23 23:11:42 2026 by rpki-client