Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/E734D3DE6E7F11ECB1C0E439C4F9AE02.roa
File:                     E734D3DE6E7F11ECB1C0E439C4F9AE02.roa (raw, json)
Hash identifier:          AFiKhGrkmVBF+Lxuf7SnPeEL4/ohAC6TsxVBzmwIG0M=
Subject key identifier:   4E:CA:AF:CC:5F:11:E9:65:56:45:54:3C:23:42:7D:3F:CD:40:12:BB
Certificate issuer:       /CN=A9110795/serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
Certificate serial:       17C4
Authority key identifier: 87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/E734D3DE6E7F11ECB1C0E439C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:15:02 +0000
ROA not before:           Mon 30 Jun 2025 17:07:10 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     136527
IP address blocks:        2401:1240:204::/48 maxlen: 48
                          2401:1240:205::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl
                          rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6084 (0x17c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110795, serialNumber=870AE59A4B38DAFC6A31ABE329CCF878FDF72A8C
        Validity
            Not Before: Jun 30 17:07:10 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a42dc6-f674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:2c:18:6c:bc:4e:61:05:6f:0b:b5:7e:01:41:
                    fb:0d:0d:7d:a0:04:ec:39:3b:fb:0d:c7:b3:c2:f2:
                    bb:bf:52:26:37:ec:21:4b:67:d6:ae:55:63:c6:6b:
                    b0:06:d5:92:86:ce:9c:42:00:b3:f0:ca:03:c8:59:
                    31:b5:1c:79:4a:43:b2:65:da:d7:c6:65:b3:bf:80:
                    be:9e:6b:b5:f7:c0:5d:dd:ec:db:35:21:37:3e:62:
                    a2:53:d7:7d:d7:f6:94:bb:c3:cd:b6:b7:a7:18:02:
                    20:e2:a1:bb:2d:15:1d:e1:1d:aa:d2:70:cf:d0:4f:
                    df:59:e2:bb:16:fd:05:53:6c:43:de:33:6e:27:94:
                    1c:00:86:33:94:48:e9:13:83:4f:5c:cc:da:a0:16:
                    97:7f:83:f8:40:a5:bf:6f:cd:9b:97:8a:55:16:46:
                    ba:65:47:63:e0:14:ac:79:42:40:c2:3d:34:7a:55:
                    6e:e9:2b:1e:be:6e:27:b1:1e:e5:55:22:a8:b1:ab:
                    0a:69:04:fd:34:50:53:4e:07:3a:1b:9d:19:37:91:
                    43:8a:44:d2:4b:f8:1e:15:0c:7e:4b:68:57:00:64:
                    28:46:d5:86:d9:16:0e:41:35:af:8b:04:d8:eb:e2:
                    90:0b:fa:04:d3:0c:bc:de:e2:3d:93:17:01:10:54:
                    71:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CA:AF:CC:5F:11:E9:65:56:45:54:3C:23:42:7D:3F:CD:40:12:BB
            X509v3 Authority Key Identifier:
                keyid:87:0A:E5:9A:4B:38:DA:FC:6A:31:AB:E3:29:CC:F8:78:FD:F7:2A:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/hwrlmks42vxqMavjKcz4eP33Kow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hwrlmks42vxqMavjKcz4eP33Kow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110795/992969FAE6AE11E7800A7C63C4F9AE02/E734D3DE6E7F11ECB1C0E439C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1240:204::/47

    Signature Algorithm: sha256WithRSAEncryption
         18:ac:06:0c:fa:b0:de:35:1b:6a:ff:85:de:d5:ce:f2:36:41:
         98:af:c4:ab:86:2c:7b:a3:66:41:e8:39:08:b6:7d:bd:3c:ba:
         75:06:b5:3e:14:eb:58:f0:cd:88:03:b4:b8:1f:9d:c5:41:70:
         08:cb:87:50:fd:48:d1:90:bf:b2:ab:f9:21:68:3d:e3:08:63:
         84:b4:63:61:db:5e:97:00:bd:bb:9a:06:39:63:1d:7d:ae:33:
         9e:31:0e:b4:ed:b7:a0:d0:c3:c0:f6:82:e8:e8:c5:64:13:82:
         4b:53:4f:a2:56:e2:0b:5c:cf:75:aa:7e:22:1e:6d:87:cd:a9:
         29:b5:de:a0:63:f7:5c:9c:53:d5:70:ac:f8:54:c8:e1:c3:5d:
         05:87:98:21:ad:3c:a4:92:cd:37:81:c7:19:a7:81:ad:fd:a5:
         11:83:6b:0e:a3:d6:99:ae:8e:d6:dd:31:25:72:31:97:7e:c8:
         b3:f2:32:e3:80:f8:65:7a:0f:01:68:d8:61:23:2b:0a:73:62:
         8f:d2:42:a6:f8:df:fc:c6:ae:87:4a:50:2e:7f:15:c8:a7:67:
         b6:8d:f1:c2:6f:10:70:1d:ad:13:0d:27:36:57:07:dc:6f:41:
         fb:55:c2:df:e0:3c:92:60:4d:66:69:0d:08:79:09:c6:17:d9:
         4d:fd:8b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:42:19 2026 by rpki-client