Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
File: AE0A263AB00411EF95939E11C4F9AE02.roa (raw, json)
Hash identifier: rmrWyleOjE+5COwAdj+9H3I7bGtmBe4nWIioL6lELTk=
Subject key identifier: 05:77:82:07:FE:7D:7C:23:80:5F:8F:EF:B9:19:B4:C3:50:AB:36:2A
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 02A6
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
Signing time: Sun 01 Mar 2026 18:30:48 +0000
ROA not before: Thu 31 Jul 2025 04:10:44 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 202662
IP address blocks: 2401:b60::/48 maxlen: 48
2401:b60:1::/48 maxlen: 48
2401:b60:2::/48 maxlen: 48
2401:b60:3::/48 maxlen: 48
2401:b60:4::/48 maxlen: 48
2401:b60:8::/48 maxlen: 48
2401:b60:9::/48 maxlen: 48
2401:b60:10::/48 maxlen: 48
2401:b60:11::/48 maxlen: 48
2401:b60:12::/48 maxlen: 48
2401:b60:13::/48 maxlen: 48
2401:b60:14::/48 maxlen: 48
2401:b60:15::/48 maxlen: 48
2401:b60:16::/48 maxlen: 48
2401:b60:17::/48 maxlen: 48
2401:b60:18::/48 maxlen: 48
2401:b60:19::/48 maxlen: 48
2401:b60:22::/48 maxlen: 48
2401:b60:23::/48 maxlen: 48
2401:b60:24::/48 maxlen: 48
2401:b60:25::/48 maxlen: 48
2401:b60:26::/48 maxlen: 48
2401:b60:27::/48 maxlen: 48
2401:b60:28::/48 maxlen: 48
2401:b60:29::/48 maxlen: 48
2401:b60:30::/48 maxlen: 48
2401:b60:31::/48 maxlen: 48
2401:b60:32::/48 maxlen: 48
2401:b60:33::/48 maxlen: 48
2401:b60:34::/48 maxlen: 48
2401:b60:35::/48 maxlen: 48
2401:b60:36::/48 maxlen: 48
2401:b60:39::/48 maxlen: 48
2401:b60:3a::/48 maxlen: 48
2401:b60:3b::/48 maxlen: 48
2401:b60:3c::/48 maxlen: 48
2401:b60:3d::/48 maxlen: 48
2401:b60:3e::/48 maxlen: 48
2401:b60:3f::/48 maxlen: 48
2401:b60:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 14 Mar 2026 02:28:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 678 (0x2a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Jul 31 04:10:44 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=69a485d8-1006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c3:0d:6c:ec:b4:e0:94:cd:67:93:d6:5a:46:
e6:06:bb:0e:04:d6:54:c6:bd:14:65:3c:5c:c3:d9:
e0:bd:89:fe:b4:31:d9:6e:51:97:a2:45:05:ad:55:
c5:90:ea:cb:20:2a:1a:89:5b:ff:54:72:f5:d0:c8:
4b:10:39:9b:4d:3e:b9:35:b0:82:c7:d8:40:fd:ee:
5e:41:b6:86:1a:12:b3:c9:50:5a:e3:99:7e:3b:19:
69:be:93:01:72:33:a6:48:0c:62:a8:3e:a6:15:fe:
11:98:e4:e3:23:69:f5:ec:72:d1:be:5a:05:4f:4f:
94:9f:b6:61:ba:6f:a9:f5:0a:85:0d:a9:26:df:e3:
fa:35:1d:bd:d5:4d:80:38:f3:39:20:3c:e4:5c:70:
4a:0f:80:f9:32:eb:fc:8b:c7:2b:b2:4a:e4:62:c4:
70:d3:ff:f2:cc:b5:ef:cf:6c:75:01:b0:37:2f:54:
72:93:75:1c:3b:4a:05:9d:52:ae:16:45:91:04:3d:
30:e5:bc:f4:d7:2a:b7:4d:cf:80:e2:b5:95:56:1f:
b6:86:8a:af:ab:0e:b4:0a:fc:95:90:14:64:e1:fb:
15:c6:29:10:10:35:0a:32:4f:16:ff:41:27:b0:17:
0e:ef:07:ba:7b:51:8e:57:07:7d:fa:e3:5a:b0:a1:
6d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:77:82:07:FE:7D:7C:23:80:5F:8F:EF:B9:19:B4:C3:50:AB:36:2A
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2401:b60::-2401:b60:4:ffff:ffff:ffff:ffff:ffff
2401:b60:8::/47
2401:b60:10::-2401:b60:19:ffff:ffff:ffff:ffff:ffff
2401:b60:22::-2401:b60:29:ffff:ffff:ffff:ffff:ffff
2401:b60:30::-2401:b60:36:ffff:ffff:ffff:ffff:ffff
2401:b60:39::-2401:b60:3f:ffff:ffff:ffff:ffff:ffff
2401:b60:e000::/40
Signature Algorithm: sha256WithRSAEncryption
5c:d8:21:43:e8:73:aa:37:32:8c:37:01:f7:f3:14:62:9c:d0:
6b:4d:04:66:9e:2b:2e:f0:eb:51:f7:d0:bf:04:54:54:6c:3b:
2c:a6:d7:5d:bc:42:41:86:31:66:f4:1d:13:fe:6f:17:12:10:
6f:14:1a:bd:d8:9a:52:a9:82:56:ef:25:30:b5:ae:e4:aa:4b:
b7:56:f4:74:ad:c9:3e:93:da:42:88:52:0e:ce:f8:26:bd:27:
57:e1:f6:0c:7e:12:9d:c1:e7:00:73:b6:9e:66:10:9c:26:6c:
ee:cb:7e:4d:78:65:a3:7d:b3:62:b0:66:05:1b:d6:a0:ea:2c:
1b:24:0c:7d:58:8b:12:14:21:1f:4c:ed:25:e8:d4:40:1b:1f:
57:c3:7b:98:98:f0:21:e6:61:46:bc:0c:e4:51:88:13:e6:bf:
13:d7:84:a9:d3:61:2a:65:3b:b9:ec:49:22:50:78:40:c4:38:
7a:e7:bc:7e:bb:80:52:5e:61:e9:be:b5:db:90:c1:3e:ae:0e:
64:48:2b:e3:ae:b0:3e:3f:0d:08:24:b1:ab:d8:cd:93:d5:c8:
75:a6:7e:35:54:2a:6b:a3:27:f1:32:83:e3:32:c6:76:72:d0:
08:eb:4a:4c:1b:d2:8d:87:41:31:90:cf:14:a8:46:2d:e2:c1:
09:6d:17:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 08:02:42 2026 by rpki-client