Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
File: AE0A263AB00411EF95939E11C4F9AE02.roa (raw, json)
Hash identifier: 7+Wttubsgh6M8s9RLpNNpWEMKB3NAUyej26Yviq2ycs=
Subject key identifier: F0:1B:AC:0C:3C:37:93:8F:62:E5:15:53:6F:D5:DF:D6:D9:0E:F7:86
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 0314
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
Signing time: Fri 07 Aug 2026 02:52:16 +0000
ROA not before: Fri 07 Aug 2026 02:52:16 +0000
ROA not after: Thu 30 Sep 2027 00:00:00 +0000
asID: 202662
IP address blocks: 2401:b60::/48 maxlen: 48
2401:b60:1::/48 maxlen: 48
2401:b60:2::/48 maxlen: 48
2401:b60:3::/48 maxlen: 48
2401:b60:4::/48 maxlen: 48
2401:b60:8::/48 maxlen: 48
2401:b60:9::/48 maxlen: 48
2401:b60:a::/48 maxlen: 48
2401:b60:10::/48 maxlen: 48
2401:b60:11::/48 maxlen: 48
2401:b60:12::/48 maxlen: 48
2401:b60:13::/48 maxlen: 48
2401:b60:14::/48 maxlen: 48
2401:b60:15::/48 maxlen: 48
2401:b60:16::/48 maxlen: 48
2401:b60:17::/48 maxlen: 48
2401:b60:18::/48 maxlen: 48
2401:b60:19::/48 maxlen: 48
2401:b60:1a::/48 maxlen: 48
2401:b60:1b::/48 maxlen: 48
2401:b60:22::/48 maxlen: 48
2401:b60:23::/48 maxlen: 48
2401:b60:24::/48 maxlen: 48
2401:b60:25::/48 maxlen: 48
2401:b60:26::/48 maxlen: 48
2401:b60:27::/48 maxlen: 48
2401:b60:28::/48 maxlen: 48
2401:b60:29::/48 maxlen: 48
2401:b60:30::/48 maxlen: 48
2401:b60:31::/48 maxlen: 48
2401:b60:32::/48 maxlen: 48
2401:b60:33::/48 maxlen: 48
2401:b60:34::/48 maxlen: 48
2401:b60:35::/48 maxlen: 48
2401:b60:36::/48 maxlen: 48
2401:b60:39::/48 maxlen: 48
2401:b60:3a::/48 maxlen: 48
2401:b60:3b::/48 maxlen: 48
2401:b60:3c::/48 maxlen: 48
2401:b60:3d::/48 maxlen: 48
2401:b60:3e::/48 maxlen: 48
2401:b60:3f::/48 maxlen: 48
2401:b60:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 10 Sep 2026 02:23:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 788 (0x314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Aug 7 02:52:16 2026 GMT
Not After : Sep 30 00:00:00 2027 GMT
Subject: CN=6a75485f-e40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:62:5e:64:b7:36:6b:e4:03:b6:19:69:d9:27:
7a:1e:4c:5d:4e:50:4e:b3:82:d4:b2:71:b9:9d:2b:
27:71:11:95:a8:01:2d:84:54:3c:d7:af:12:0d:a7:
92:e7:af:c0:43:19:0a:5e:7b:ca:84:00:b9:c4:64:
32:f6:9b:83:38:38:3c:56:0d:5e:e8:c1:65:70:a2:
5c:a2:31:2f:37:2b:f4:97:79:85:4d:5b:32:50:43:
7d:6e:94:50:5f:95:ca:27:c5:7f:b1:01:e5:20:98:
89:c4:29:a6:e3:a3:66:44:1f:be:a5:66:a1:f3:9c:
e6:68:b9:60:63:18:03:b7:a9:2e:f2:4d:0f:22:5f:
c5:9e:f4:51:7e:86:8f:af:e0:74:9f:b2:40:ca:5e:
ff:8e:fc:6a:c0:1f:d5:ec:58:0d:5c:6b:02:57:75:
67:ad:48:8b:bd:89:d4:fb:a3:9b:7b:9e:3c:74:87:
bf:b8:d9:fd:ec:7a:1b:fb:ef:0d:76:e5:20:67:1a:
ab:37:86:ca:55:96:04:64:d8:88:2f:6b:db:57:42:
88:54:9f:53:94:3a:e6:d1:e5:21:45:a7:72:17:bd:
e6:66:ab:99:53:35:fe:61:25:83:9a:08:79:74:c7:
0f:79:d1:e7:d2:f9:90:e1:8b:dd:18:c5:6b:28:4c:
1a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1B:AC:0C:3C:37:93:8F:62:E5:15:53:6F:D5:DF:D6:D9:0E:F7:86
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b60::-2401:b60:4:ffff:ffff:ffff:ffff:ffff
2401:b60:8::-2401:b60:a:ffff:ffff:ffff:ffff:ffff
2401:b60:10::-2401:b60:1b:ffff:ffff:ffff:ffff:ffff
2401:b60:22::-2401:b60:29:ffff:ffff:ffff:ffff:ffff
2401:b60:30::-2401:b60:36:ffff:ffff:ffff:ffff:ffff
2401:b60:39::-2401:b60:3f:ffff:ffff:ffff:ffff:ffff
2401:b60:e000::/40
Signature Algorithm: sha256WithRSAEncryption
03:ff:db:df:bf:48:5c:f7:75:73:ef:ae:c9:30:60:c2:7c:ac:
76:dd:de:51:8f:48:e3:b8:e5:66:06:4c:80:6c:f6:d7:02:bd:
8a:3f:2c:e7:d6:d8:6c:79:81:58:52:af:51:e9:cf:f5:e8:53:
0f:42:e7:e9:a3:c6:3e:39:c4:25:7c:45:eb:6f:4b:49:24:54:
71:fd:e6:0b:4b:bb:97:e2:d8:4a:4c:de:b3:02:83:83:27:96:
75:a0:47:88:56:5b:e8:ef:ea:ed:ec:79:e5:87:19:6b:c9:94:
cd:54:02:86:b9:b8:1e:83:3e:3f:97:89:72:cc:1d:c7:33:dc:
de:77:da:82:f8:46:52:d6:a3:73:04:56:17:19:ef:62:22:6d:
81:2d:23:3f:c3:e3:ef:11:4a:33:36:66:c4:4f:4d:d9:6e:94:
aa:19:e4:16:ec:99:a3:61:95:03:ca:9a:4e:33:d9:cb:70:25:
a5:3c:b2:fd:cd:dd:a1:7c:43:da:8a:df:87:f1:5f:0c:6b:cb:
05:2f:96:21:08:8c:41:0f:5e:cd:4b:0e:c3:20:64:f7:eb:73:
c5:2f:15:33:c4:ba:27:0a:33:6f:ac:91:31:20:53:fc:e6:b5:
b8:47:84:ca:a1:96:34:df:d7:1b:54:d9:bd:a9:ea:db:a8:02:
c9:ce:7c:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:07:41 2026 by rpki-client