Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
File: AE0A263AB00411EF95939E11C4F9AE02.roa (raw, json)
Hash identifier: 8TgidTWCD46pM3MBDeEQO24WX8WtEAaCQuUE2ZinLOI=
Subject key identifier: CC:CA:85:DB:7C:7A:69:81:84:61:2E:DD:44:09:DE:F3:75:53:E5:D0
Certificate issuer: /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial: 0212
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
Signing time: Thu 31 Jul 2025 04:10:44 +0000
ROA not before: Thu 31 Jul 2025 04:10:44 +0000
ROA not after: Wed 30 Sep 2026 00:00:00 +0000
asID: 202662
IP address blocks: 2401:b60::/48 maxlen: 48
2401:b60:1::/48 maxlen: 48
2401:b60:2::/48 maxlen: 48
2401:b60:3::/48 maxlen: 48
2401:b60:4::/48 maxlen: 48
2401:b60:8::/48 maxlen: 48
2401:b60:9::/48 maxlen: 48
2401:b60:10::/48 maxlen: 48
2401:b60:11::/48 maxlen: 48
2401:b60:12::/48 maxlen: 48
2401:b60:13::/48 maxlen: 48
2401:b60:14::/48 maxlen: 48
2401:b60:15::/48 maxlen: 48
2401:b60:16::/48 maxlen: 48
2401:b60:17::/48 maxlen: 48
2401:b60:18::/48 maxlen: 48
2401:b60:19::/48 maxlen: 48
2401:b60:22::/48 maxlen: 48
2401:b60:23::/48 maxlen: 48
2401:b60:24::/48 maxlen: 48
2401:b60:25::/48 maxlen: 48
2401:b60:26::/48 maxlen: 48
2401:b60:27::/48 maxlen: 48
2401:b60:28::/48 maxlen: 48
2401:b60:29::/48 maxlen: 48
2401:b60:30::/48 maxlen: 48
2401:b60:31::/48 maxlen: 48
2401:b60:32::/48 maxlen: 48
2401:b60:33::/48 maxlen: 48
2401:b60:34::/48 maxlen: 48
2401:b60:35::/48 maxlen: 48
2401:b60:36::/48 maxlen: 48
2401:b60:39::/48 maxlen: 48
2401:b60:3a::/48 maxlen: 48
2401:b60:3b::/48 maxlen: 48
2401:b60:3c::/48 maxlen: 48
2401:b60:3d::/48 maxlen: 48
2401:b60:3e::/48 maxlen: 48
2401:b60:3f::/48 maxlen: 48
2401:b60:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 Aug 2025 05:57:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 530 (0x212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Validity
Not Before: Jul 31 04:10:44 2025 GMT
Not After : Sep 30 00:00:00 2026 GMT
Subject: CN=688aecc4-f477
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:eb:e6:63:4e:63:2a:3a:63:dd:a3:4b:59:
dd:06:26:40:cb:2c:1a:e2:cc:b8:51:27:80:93:68:
21:b9:90:39:7e:0d:13:e1:30:b7:e2:94:93:2a:bc:
a3:2d:a5:c7:b4:86:99:9e:a5:06:a0:e6:f1:58:0c:
cd:e5:b7:c3:62:b5:2c:11:ec:7c:92:ce:59:5d:9c:
06:ea:2c:5c:d2:e3:ad:f0:86:90:2c:b3:ed:98:92:
d3:f9:9a:0e:4b:a0:43:20:86:24:f1:c2:44:08:c4:
63:69:7a:85:62:5e:51:53:9c:ff:af:1a:9b:15:a4:
57:d1:e0:a3:38:28:ae:02:cc:f2:b9:39:43:b8:7d:
20:b8:e9:15:4b:37:d9:99:c3:1c:98:7e:5f:4f:a7:
c6:36:4e:e9:4d:9e:04:0f:45:14:ce:2f:77:58:80:
47:6b:c8:8c:45:0b:09:8a:98:5e:37:be:26:f5:cd:
9f:f2:5c:81:9c:db:45:69:58:72:4a:31:71:b6:c6:
9a:eb:bf:d7:58:4a:9d:ce:31:05:5d:64:20:26:ff:
ca:03:64:e3:12:65:8d:58:f6:7e:69:f2:52:0e:00:
ba:25:04:96:3c:4f:06:55:5a:8f:29:9d:78:21:75:
70:f1:2a:5b:dc:7b:c3:d8:ab:cf:50:20:6e:ca:75:
17:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CA:85:DB:7C:7A:69:81:84:61:2E:DD:44:09:DE:F3:75:53:E5:D0
X509v3 Authority Key Identifier:
keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/AE0A263AB00411EF95939E11C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2401:b60::-2401:b60:4:ffff:ffff:ffff:ffff:ffff
2401:b60:8::/47
2401:b60:10::-2401:b60:19:ffff:ffff:ffff:ffff:ffff
2401:b60:22::-2401:b60:29:ffff:ffff:ffff:ffff:ffff
2401:b60:30::-2401:b60:36:ffff:ffff:ffff:ffff:ffff
2401:b60:39::-2401:b60:3f:ffff:ffff:ffff:ffff:ffff
2401:b60:e000::/40
Signature Algorithm: sha256WithRSAEncryption
2a:0d:5b:c4:4c:27:9e:2a:c1:94:46:56:59:d3:35:41:cf:54:
1a:bd:3a:80:06:f7:3f:f1:83:52:74:73:79:2c:ff:c7:3f:8c:
a7:f9:1a:0d:41:a1:25:4d:75:23:99:ac:7d:5c:ce:5e:e3:bf:
18:5a:da:72:06:1c:23:9d:48:5d:7d:b7:fc:0a:05:d7:c1:c0:
fa:9c:70:55:c3:30:64:58:1d:4c:10:46:8c:ed:ad:fe:4a:10:
b8:2e:d4:7b:70:4d:11:17:06:28:fd:12:2d:f5:f0:cf:31:ed:
a1:4a:a2:51:4c:3b:40:78:ca:c9:9d:ef:d0:4c:0e:6b:83:95:
1b:d7:9d:88:20:72:8b:5d:00:06:0a:3b:01:63:a5:26:20:5f:
a0:0f:42:a3:f8:5a:38:03:a1:38:30:f6:8b:da:90:30:52:4d:
e6:aa:e4:28:b9:97:14:9b:ff:2b:59:1b:5e:89:de:ff:da:ab:
62:2b:d9:05:5e:af:b9:20:7d:24:17:4e:4f:a3:a0:d1:22:54:
3b:c9:b9:f0:7a:a3:a0:17:66:63:c5:e4:71:56:5c:44:da:4e:
a6:85:ff:87:f1:af:76:a8:b2:c9:c5:66:1f:57:fc:2a:47:3e:
88:bc:6a:9e:5d:f4:15:39:75:6a:85:13:f4:8f:4c:f1:a3:ee:
75:46:3b:42
-----BEGIN CERTIFICATE-----
MIIF3zCCBMegAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUUwM0IxMTAvBgNVBAUTKEI5RTYwQ0YxNzlGNEVBQ0JEQjk0OTJCQTVGN0NBQ0Y0
NTIzOUNDRjQwHhcNMjUwNzMxMDQxMDQ0WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODhhZWNjNC1mNDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArbvr5mNOYyo6Y92jS1ndBiZAyywa4sy4USeAk2ghuZA5fg0T4TC34pSTKryj
LaXHtIaZnqUGoObxWAzN5bfDYrUsEex8ks5ZXZwG6ixc0uOt8IaQLLPtmJLT+ZoO
S6BDIIYk8cJECMRjaXqFYl5RU5z/rxqbFaRX0eCjOCiuAszyuTlDuH0guOkVSzfZ
mcMcmH5fT6fGNk7pTZ4ED0UUzi93WIBHa8iMRQsJipheN74m9c2f8lyBnNtFaVhy
SjFxtsaa67/XWEqdzjEFXWQgJv/KA2TjEmWNWPZ+afJSDgC6JQSWPE8GVVqPKZ14
IXVw8Spb3HvD2KvPUCBuynUXgwIDAQABo4IDAzCCAv8wHQYDVR0OBBYEFMzKhdt8
emmBhGEu3UQJ3vN1U+XQMB8GA1UdIwQYMBaAFLnmDPF59OrL25SSul98rPRSOcz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRTAzQi9BRjk2NzE2NjBC
NkUxMUVFQjI5QkIxNzBDNEY5QUUwMi91ZVlNOFhuMDZzdmJsSks2WDN5czlGSTV6
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VlWU04WG4wNnN2YmxKSzZYM3lzOUZJNXpQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RUUwM0IvQUY5NjcxNjYwQjZFMTFFRUIyOUJCMTcwQzRGOUFFMDIvQUUwQTI2M0FC
MDA0MTFFRjk1OTM5RTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYwGCCsGAQUFBwEHAQH/
BH0wezB5BAIAAjBzMBADBQUkAQtgAwcAJAELYAAEAwcBJAELYAAIMBIDBwQkAQtg
ABADBwEkAQtgABgwEgMHASQBC2AAIgMHASQBC2AAKDASAwcEJAELYAAwAwcAJAEL
YAA2MBIDBwAkAQtgADkDBwYkAQtgAAADBgAkAQtg4DANBgkqhkiG9w0BAQsFAAOC
AQEAKg1bxEwnnirBlEZWWdM1Qc9UGr06gAb3P/GDUnRzeSz/xz+Mp/kaDUGhJU11
I5msfVzOXuO/GFracgYcI51IXX23/AoF18HA+pxwVcMwZFgdTBBGjO2t/koQuC7U
e3BNERcGKP0SLfXwzzHtoUqiUUw7QHjKyZ3v0EwOa4OVG9ediCByi10ABgo7AWOl
JiBfoA9Co/haOAOhODD2i9qQMFJN5qrkKLmXFJv/K1kbXone/9qrYivZBV6vuSB9
JBdOT6Og0SJUO8m58HqjoBdmY8XkcVZcRNpOpoX/h/GvdqiyycVmH1f8Kkc+iLxq
nl30FTl1aoUT9I9M8aPudUY7Qg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:46:46 2025 by rpki-client