Route Origin Authorization
$ rpki-client -vvvf rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/5BEDAC5EB29C11F1844EAF604011F970.roa
File: 5BEDAC5EB29C11F1844EAF604011F970.roa (raw, json)
Hash identifier: 6qkTtVypHQojTU1bjcFOcIWXA5vO5zsqcVN/pLhyQO8=
Subject key identifier: 3B:BD:76:67:EC:5B:AD:DD:74:8C:BD:8B:38:3E:53:06:07:DF:89:10
Certificate issuer: /CN=A916C61B/serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Certificate serial: 0582
Authority key identifier: F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/5BEDAC5EB29C11F1844EAF604011F970.roa
Signing time: Sun 20 Sep 2026 10:28:26 +0000
ROA not before: Sun 20 Sep 2026 10:28:26 +0000
ROA not after: Sat 01 May 2027 00:00:00 +0000
asID: 153038
IP address blocks: 116.204.140.0/22 maxlen: 22
116.204.140.0/23 maxlen: 23
116.204.140.0/24 maxlen: 24
116.204.141.0/24 maxlen: 24
116.204.142.0/23 maxlen: 23
116.204.142.0/24 maxlen: 24
116.204.143.0/24 maxlen: 24
2400:c7c0::/32 maxlen: 32
2400:c7c0::/48 maxlen: 48
2400:c7c0:20::/43 maxlen: 43
2400:c7c0:20::/48 maxlen: 48
2400:c7c0:21::/48 maxlen: 48
2400:c7c0:22::/48 maxlen: 48
2400:c7c0:23::/48 maxlen: 48
2400:c7c0:24::/48 maxlen: 48
2400:c7c0:25::/48 maxlen: 48
2400:c7c0:26::/48 maxlen: 48
2400:c7c0:27::/48 maxlen: 48
2400:c7c0:28::/48 maxlen: 48
2400:c7c0:29::/48 maxlen: 48
2400:c7c0:2a::/48 maxlen: 48
2400:c7c0:2b::/48 maxlen: 48
2400:c7c0:2c::/48 maxlen: 48
2400:c7c0:2d::/48 maxlen: 48
2400:c7c0:2e::/48 maxlen: 48
2400:c7c0:2f::/48 maxlen: 48
2400:c7c0:30::/48 maxlen: 48
2400:c7c0:31::/48 maxlen: 48
2400:c7c0:32::/48 maxlen: 48
2400:c7c0:33::/48 maxlen: 48
2400:c7c0:34::/48 maxlen: 48
2400:c7c0:35::/48 maxlen: 48
2400:c7c0:36::/48 maxlen: 48
2400:c7c0:37::/48 maxlen: 48
2400:c7c0:38::/48 maxlen: 48
2400:c7c0:39::/48 maxlen: 48
2400:c7c0:3a::/48 maxlen: 48
2400:c7c0:3b::/48 maxlen: 48
2400:c7c0:3c::/48 maxlen: 48
2400:c7c0:3d::/48 maxlen: 48
2400:c7c0:3e::/48 maxlen: 48
2400:c7c0:3f::/48 maxlen: 48
2400:c7c0:43c0::/43 maxlen: 43
2400:c7c0:43c0::/48 maxlen: 48
2400:c7c0:43e0::/43 maxlen: 43
2400:c7c0:43e0::/48 maxlen: 48
2400:c7c0:43e1::/48 maxlen: 48
2400:c7c0:43e2::/48 maxlen: 48
2400:c7c0:43e3::/48 maxlen: 48
2400:c7c0:43e4::/48 maxlen: 48
2400:c7c0:43e5::/48 maxlen: 48
2400:c7c0:43e6::/48 maxlen: 48
2400:c7c0:43e7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 23:35:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1410 (0x582)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A916C61B, serialNumber=F539291919CDE144B034EF288B0A634783E82C7F
Validity
Not Before: Sep 20 10:28:26 2026 GMT
Not After : May 1 00:00:00 2027 GMT
Subject: CN=6aafb549-51c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:98:fa:c3:e8:5b:5b:a1:cf:11:a2:35:6a:0e:
2c:08:97:f5:a0:5c:19:82:b5:c8:0a:f8:d5:37:26:
98:84:1e:41:96:d4:96:a7:b6:03:17:85:1b:50:35:
f8:bc:1a:5f:ef:84:0b:70:5c:bd:12:c1:b1:0c:1a:
cb:2a:ea:73:95:b6:b0:44:f2:3e:0a:94:49:18:03:
c0:9b:3f:a4:71:95:2e:7b:5b:41:1d:51:74:df:3a:
17:15:ae:a2:57:dd:92:b7:e3:56:f7:ce:5d:5f:a5:
13:a7:dd:88:f8:fb:f3:30:2d:b8:04:9b:62:9f:7c:
f5:66:99:6e:1f:a7:29:c9:98:a1:37:0f:18:3d:90:
78:26:c6:46:49:19:eb:99:e6:c1:57:b0:5b:70:fa:
cd:99:f8:d1:65:94:dd:8d:7a:4e:04:49:e1:d8:5e:
92:69:a8:2c:e5:6e:8c:fe:b3:39:c6:5f:6b:66:9d:
d5:ca:c4:ca:fe:38:2b:c2:f2:a5:ce:b3:8e:70:8e:
7a:5b:e4:cb:81:4d:f2:8f:a6:d3:5f:7b:ec:05:e0:
15:0a:d2:20:40:af:a9:dd:a9:f7:6e:15:11:1b:61:
57:2c:f1:1f:1c:a6:6d:df:71:74:35:e3:aa:65:10:
a4:93:f2:cd:37:f7:cf:43:1b:23:6a:d8:66:04:1e:
0f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BD:76:67:EC:5B:AD:DD:74:8C:BD:8B:38:3E:53:06:07:DF:89:10
X509v3 Authority Key Identifier:
keyid:F5:39:29:19:19:CD:E1:44:B0:34:EF:28:8B:0A:63:47:83:E8:2C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/9TkpGRnN4USwNO8oiwpjR4PoLH8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TkpGRnN4USwNO8oiwpjR4PoLH8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916C61B/51EFFA30826911ECAD2E9524C4F9AE02/5BEDAC5EB29C11F1844EAF604011F970.roa
sbgp-ipAddrBlock: critical
IPv4:
116.204.140.0/22
IPv6:
2400:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:fb:78:62:7d:2b:43:a3:eb:73:5e:73:b2:1e:3e:e3:9e:f7:
4e:21:b8:f5:9d:ea:ac:83:3c:ec:6f:42:f1:8a:9d:83:ca:d7:
03:64:ad:a2:2c:c3:20:4e:05:a9:5a:f8:a5:8b:d5:46:66:75:
ee:66:fc:ee:ba:dc:2f:e6:3b:7e:39:ae:ea:c8:a3:7e:49:8d:
a6:a7:9d:30:d6:92:be:69:d4:09:16:65:37:dc:61:a0:98:61:
99:bf:11:b2:89:2c:a1:26:cc:e8:9f:1a:4c:91:0f:4f:6a:a1:
64:22:a8:87:be:51:af:83:59:1f:e7:46:79:15:3b:9d:fc:a6:
1b:46:7c:69:98:9e:cc:27:0b:8d:f6:06:58:b6:1c:89:ad:48:
e0:73:43:eb:48:d9:43:41:be:09:11:bc:38:f9:8e:34:23:78:
76:ec:c0:11:72:6a:30:9b:4b:80:ee:0f:aa:ba:72:3f:94:ef:
66:46:c0:de:23:de:e9:4d:32:ef:82:b7:5b:9a:6d:68:6c:1d:
9e:c8:27:dd:a3:5a:48:68:c1:54:12:7b:de:ea:77:5f:50:ee:
03:55:a3:f7:3f:d2:e1:eb:85:a8:f7:30:68:63:77:38:66:24:
e1:98:b2:09:ff:7a:ff:b9:c7:3a:78:fe:95:30:97:2f:2b:9e:
c4:f0:e1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:27:30 2026 by rpki-client