Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/1855E96CABBD11EA9A38D358C4F9AE02.roa
File: 1855E96CABBD11EA9A38D358C4F9AE02.roa (raw, json)
Hash identifier: C4qtiieLbHSavnjWGc8HqMNc0o5hdHd+rkM4wQ92qNE=
Subject key identifier: A4:A5:C5:A3:F7:D3:58:D6:29:19:57:4C:96:96:EA:A7:7A:41:25:E1
Certificate issuer: /CN=A917576D/serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Certificate serial: 0B15
Authority key identifier: B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/1855E96CABBD11EA9A38D358C4F9AE02.roa
Signing time: Sun 01 Mar 2026 17:57:16 +0000
ROA not before: Thu 20 Nov 2025 19:10:14 +0000
ROA not after: Sun 31 Jan 2027 00:00:00 +0000
asID: 136167
IP address blocks: 2400:9380:80c0::/44 maxlen: 44
2400:9380:81c0::/44 maxlen: 44
2400:9380:82c0::/44 maxlen: 44
2400:9380:83c0::/44 maxlen: 44
2400:9380:84c0::/44 maxlen: 44
2400:9380:85c0::/44 maxlen: 44
2400:9380:86c0::/44 maxlen: 44
2400:9380:87c0::/44 maxlen: 44
2400:9380:88c0::/44 maxlen: 44
2400:9380:89c0::/44 maxlen: 44
2400:9380:8ac0::/44 maxlen: 44
2400:9380:8bc0::/44 maxlen: 44
2400:9380:8cc0::/44 maxlen: 44
2400:9380:8dc0::/44 maxlen: 44
2400:9380:8ec0::/44 maxlen: 44
2400:9380:8fc0::/44 maxlen: 44
2400:9380:90c0::/44 maxlen: 44
2400:9380:91c0::/44 maxlen: 44
2400:9380:92c0::/44 maxlen: 44
2400:9380:93c0::/44 maxlen: 44
2400:9380:94c0::/44 maxlen: 44
2400:9380:95c0::/44 maxlen: 44
2400:9380:96c0::/44 maxlen: 44
2400:9380:97c0::/44 maxlen: 44
2400:9380:98c0::/44 maxlen: 44
2400:9380:99c0::/44 maxlen: 44
2400:9380:9ac0::/44 maxlen: 44
2400:9380:9bc0::/44 maxlen: 44
2400:9380:9cc0::/44 maxlen: 44
2400:9380:9dc0::/44 maxlen: 44
2400:9380:9ec0::/44 maxlen: 44
2400:9380:9fc0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 00:23:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2837 (0xb15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B1E84FACFACBC0B7838561EF21E28F2FACF5DFEC
Validity
Not Before: Nov 20 19:10:14 2025 GMT
Not After : Jan 31 00:00:00 2027 GMT
Subject: CN=69a47dfc-e1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:51:84:0b:dd:6b:d3:fa:04:13:11:ad:21:
f3:62:8d:8b:20:b0:1b:ae:50:49:e7:6f:66:fd:52:
59:a0:cb:a6:ec:c2:12:15:91:c4:f4:0f:05:93:d1:
8d:92:d2:35:68:4c:eb:36:86:64:bd:9b:05:6a:43:
ca:42:d2:35:bc:ce:9c:e4:6b:78:50:41:6a:c1:a6:
c2:56:9b:aa:93:2f:e7:96:5e:07:85:6b:69:54:16:
56:03:c4:26:e9:a9:e2:f2:f2:5f:fa:3c:73:4d:b2:
37:de:1a:57:0b:0d:3e:f0:ec:b5:9a:39:b7:dc:06:
6d:c1:5f:45:67:24:44:36:7a:ac:f7:62:dc:cf:43:
ba:ed:1f:14:e6:68:d5:ca:a3:55:97:7f:0b:56:bd:
0d:5d:17:05:7c:50:59:b9:a9:01:03:c5:37:fa:43:
29:c9:3a:7d:95:d7:58:bc:87:74:e5:24:e3:a8:41:
eb:ae:8e:9b:28:a1:af:3f:b5:7b:29:00:3f:6e:8d:
cf:4c:96:45:d9:bd:00:bb:1e:47:aa:4e:3c:d7:9d:
26:c2:1a:d6:a3:b6:90:76:37:99:7f:48:89:5c:81:
62:a4:58:96:b1:a1:34:66:5d:f3:d1:c7:9c:21:23:
43:64:1b:57:c4:c5:87:1f:59:ce:99:32:b2:f2:c1:
85:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A5:C5:A3:F7:D3:58:D6:29:19:57:4C:96:96:EA:A7:7A:41:25:E1
X509v3 Authority Key Identifier:
keyid:B1:E8:4F:AC:FA:CB:C0:B7:83:85:61:EF:21:E2:8F:2F:AC:F5:DF:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/sehPrPrLwLeDhWHvIeKPL6z13-w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sehPrPrLwLeDhWHvIeKPL6z13-w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/36872A5E82CD11EA895C7B5CC4F9AE02/1855E96CABBD11EA9A38D358C4F9AE02.roa
sbgp-ipAddrBlock: critical
IPv6:
2400:9380:80c0::/44
2400:9380:81c0::/44
2400:9380:82c0::/44
2400:9380:83c0::/44
2400:9380:84c0::/44
2400:9380:85c0::/44
2400:9380:86c0::/44
2400:9380:87c0::/44
2400:9380:88c0::/44
2400:9380:89c0::/44
2400:9380:8ac0::/44
2400:9380:8bc0::/44
2400:9380:8cc0::/44
2400:9380:8dc0::/44
2400:9380:8ec0::/44
2400:9380:8fc0::/44
2400:9380:90c0::/44
2400:9380:91c0::/44
2400:9380:92c0::/44
2400:9380:93c0::/44
2400:9380:94c0::/44
2400:9380:95c0::/44
2400:9380:96c0::/44
2400:9380:97c0::/44
2400:9380:98c0::/44
2400:9380:99c0::/44
2400:9380:9ac0::/44
2400:9380:9bc0::/44
2400:9380:9cc0::/44
2400:9380:9dc0::/44
2400:9380:9ec0::/44
2400:9380:9fc0::/44
Signature Algorithm: sha256WithRSAEncryption
72:0a:de:17:de:76:31:2a:57:b3:03:22:ed:48:1b:ca:19:53:
d2:56:f1:0b:fe:1b:53:c4:dc:52:93:9b:d3:2f:d5:8e:e5:26:
a8:89:49:b4:3b:d7:40:5c:25:4c:a9:95:92:b0:9a:52:fd:6c:
d9:6d:24:7e:bf:16:12:67:43:b1:55:a9:af:88:43:a9:73:ac:
32:9c:c8:39:a6:b3:3d:2b:a8:b9:34:49:b5:40:76:5e:08:cf:
5f:4c:11:0f:7f:39:7b:04:fc:0b:30:04:db:d2:41:9c:23:2e:
62:ee:d5:77:ec:03:34:6d:02:09:d2:74:68:e9:50:dd:a4:4d:
fd:7d:fc:29:97:15:ec:48:70:ec:20:ce:14:56:76:38:d2:9d:
f3:26:a4:a2:b4:54:50:66:14:aa:bf:af:b3:6a:d9:5f:fa:bb:
99:50:68:48:2e:a3:4b:08:07:3d:52:78:27:9a:ec:ce:57:74:
2d:e6:a8:28:9b:a8:09:e9:45:21:7e:92:e9:76:45:6c:09:03:
ea:49:f4:ef:48:eb:92:63:44:d1:d0:17:e7:c2:12:36:aa:fd:
0d:15:4c:aa:d1:cf:cc:fb:b1:aa:cf:6f:eb:50:73:89:38:b1:
3a:e0:fa:ce:30:eb:35:3a:6e:24:20:27:7c:bc:c2:43:01:ad:
82:2b:bb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:11:56 2026 by rpki-client