Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FEE4F664FC3511EC95130A10C4F9AE02.roa
File: FEE4F664FC3511EC95130A10C4F9AE02.roa (raw, json)
Hash identifier: 6UWosbmKc0SE3PyK+aEPu24PovGdtZmDf1Wy7wgKcbE=
Subject key identifier: 04:EC:F0:7A:9F:91:E9:6B:C8:81:64:85:E5:D4:AC:6E:3D:6A:9A:82
Certificate issuer: /CN=A911BD54/serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Certificate serial: 2BED
Authority key identifier: BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FEE4F664FC3511EC95130A10C4F9AE02.roa
Signing time: Sun 01 Mar 2026 19:23:43 +0000
ROA not before: Fri 09 Jan 2026 07:24:39 +0000
ROA not after: Tue 02 Mar 2027 00:00:00 +0000
asID: 45430
IP address blocks: 49.0.64.0/18 maxlen: 18
49.229.0.0/16 maxlen: 16
49.229.0.0/20 maxlen: 20
49.229.8.0/24 maxlen: 24
49.229.31.0/24 maxlen: 24
49.229.33.0/24 maxlen: 24
49.229.68.0/24 maxlen: 24
49.229.94.0/24 maxlen: 24
49.229.95.0/24 maxlen: 24
49.229.112.0/21 maxlen: 21
49.229.128.0/17 maxlen: 17
49.229.160.0/19 maxlen: 19
49.229.192.0/19 maxlen: 19
49.229.224.0/19 maxlen: 19
49.230.0.0/16 maxlen: 16
49.230.40.0/24 maxlen: 24
49.230.41.0/24 maxlen: 24
49.230.42.0/24 maxlen: 24
49.230.43.0/24 maxlen: 24
49.231.0.0/16 maxlen: 16
49.231.32.0/21 maxlen: 21
49.231.44.0/22 maxlen: 24
49.231.48.0/20 maxlen: 24
49.231.64.0/21 maxlen: 21
49.231.70.0/24 maxlen: 24
49.231.71.0/24 maxlen: 24
49.231.80.0/20 maxlen: 20
49.231.87.0/24 maxlen: 24
49.231.96.0/19 maxlen: 24
58.64.0.0/17 maxlen: 17
58.64.64.0/18 maxlen: 18
58.136.0.0/16 maxlen: 16
103.3.64.0/22 maxlen: 22
103.3.64.0/24 maxlen: 24
110.49.113.0/24 maxlen: 24
115.178.56.0/22 maxlen: 22
115.178.57.0/24 maxlen: 24
115.178.59.0/24 maxlen: 24
119.31.0.0/17 maxlen: 17
182.232.0.0/16 maxlen: 16
202.80.224.0/19 maxlen: 19
2001:df2:400::/48 maxlen: 48
2001:44c8::/32 maxlen: 32
2405:9800::/32 maxlen: 32
2405:9800:8::/48 maxlen: 48
2405:9800:c::/48 maxlen: 48
2405:9800:d::/48 maxlen: 48
2405:9800:10::/48 maxlen: 48
2405:9800:12::/48 maxlen: 48
2405:9800:13::/48 maxlen: 48
2405:9800:14::/48 maxlen: 48
2405:9800:16::/48 maxlen: 48
2405:9800:20::/48 maxlen: 48
2405:9800:21::/48 maxlen: 48
2405:9800:30::/44 maxlen: 48
2405:9800:40::/48 maxlen: 48
2405:9800:41::/48 maxlen: 48
2405:9800:42::/48 maxlen: 48
2405:9800:60::/44 maxlen: 44
2405:9800:9800::/48 maxlen: 48
2405:9800:9805::/48 maxlen: 48
2405:9800:9813::/48 maxlen: 48
2405:9800:b000::/36 maxlen: 36
2405:9800:c820::/44 maxlen: 44
2405:9800:c925::/48 maxlen: 48
2405:9800:c92e::/48 maxlen: 48
2405:9800:f00f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 08 Mar 2026 23:40:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11245 (0x2bed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911BD54, serialNumber=BCFAF8D33F18A8D3602029EBCEDE1E36AF20715C
Validity
Not Before: Jan 9 07:24:39 2026 GMT
Not After : Mar 2 00:00:00 2027 GMT
Subject: CN=69a4923f-a7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3b:45:90:df:48:b5:e2:1d:37:b0:6f:77:43:
26:5c:be:95:97:03:14:75:8a:22:8d:10:42:5e:87:
bf:80:38:06:75:f7:f8:54:d1:69:d3:44:20:ab:eb:
8f:98:fc:b4:73:d2:8f:57:4a:81:e7:aa:e5:eb:f0:
b9:9c:5d:09:ca:85:cd:fd:eb:df:6a:b2:7f:ef:cf:
3a:2b:3d:1b:9b:63:78:cc:78:d0:df:20:5f:27:ee:
ae:34:8e:94:d2:a3:51:85:7e:d7:1a:ed:8b:8f:ee:
be:6d:36:2a:8f:61:07:f1:27:23:32:7e:23:61:01:
64:cf:30:1f:10:e8:2e:aa:3f:a2:6f:51:3a:56:f4:
ac:69:d5:8d:4f:4f:61:cf:4a:20:4b:05:f6:a7:1f:
2e:7a:94:26:cf:58:5d:23:33:ad:68:fa:05:3c:e2:
9d:43:5b:84:24:e1:56:16:8c:e7:5c:4d:20:82:c2:
1e:ba:33:8a:3b:22:58:b9:e4:18:bf:f7:4f:e0:a3:
95:33:84:fc:f7:60:1c:9d:2c:57:f1:42:5d:09:1f:
90:23:ee:19:2e:27:ca:bb:f8:f4:33:c6:35:b1:18:
2d:4c:66:1e:79:a7:8c:82:16:eb:00:7a:a4:79:96:
b1:49:c1:52:96:3d:8f:14:78:0b:3c:24:c1:9e:30:
db:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:F0:7A:9F:91:E9:6B:C8:81:64:85:E5:D4:AC:6E:3D:6A:9A:82
X509v3 Authority Key Identifier:
keyid:BC:FA:F8:D3:3F:18:A8:D3:60:20:29:EB:CE:DE:1E:36:AF:20:71:5C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/vPr40z8YqNNgICnrzt4eNq8gcVw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vPr40z8YqNNgICnrzt4eNq8gcVw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD54/3E281C98004911E5B4B64F63C4F9AE02/FEE4F664FC3511EC95130A10C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv4:
49.0.64.0/18
49.229.0.0-49.231.255.255
58.64.0.0/17
58.136.0.0/16
103.3.64.0/22
110.49.113.0/24
115.178.56.0/22
119.31.0.0/17
182.232.0.0/16
202.80.224.0/19
IPv6:
2001:df2:400::/48
2001:44c8::/32
2405:9800::/32
Signature Algorithm: sha256WithRSAEncryption
84:dd:fc:14:45:ef:bd:22:3d:2a:cf:56:e2:69:44:9f:6a:fd:
57:07:d8:31:c2:6c:13:b8:ea:bb:69:0d:93:05:75:9d:ed:5d:
e6:6b:32:40:e5:31:8f:2b:c6:2c:69:e4:f4:13:87:d9:3b:f5:
87:33:eb:79:77:a5:aa:65:6b:31:7d:4b:95:36:c6:15:2c:ec:
a7:72:b7:f6:c1:41:18:99:3a:1e:2f:d5:4d:fc:d6:9d:25:53:
e6:cb:86:be:b3:e4:c5:ee:81:50:46:3c:0b:00:27:9b:a9:7c:
78:aa:79:3a:cd:a7:a4:a3:2b:6b:d5:fb:78:62:19:e8:3e:7c:
c1:6e:4e:37:e5:1a:b4:10:60:0e:d2:9c:50:3c:9c:75:c0:60:
33:d6:51:2f:21:e2:b1:99:28:d6:28:0d:d8:6c:a1:e3:22:16:
8b:62:d2:64:17:1b:08:5a:83:90:6d:dc:28:72:dc:15:b4:fe:
5f:03:bd:99:f9:94:19:cb:a0:6a:03:f8:6a:14:3c:c4:f8:40:
47:83:6d:2a:e0:d7:bf:b9:5d:da:f8:dc:f2:e0:ed:1c:8d:d8:
24:34:24:a5:bf:26:2b:07:af:15:08:df:e1:ed:a5:f9:02:d9:
82:60:73:12:34:11:a2:2c:35:9c:42:88:37:bf:15:a8:9f:5a:
a7:f0:ff:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:28:23 2026 by rpki-client