Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/AA2A006C340411E9A22CD05CC4F9AE02.roa
File:                     AA2A006C340411E9A22CD05CC4F9AE02.roa (raw, json)
Hash identifier:          d2KcEJoKGoHbLyeqM22p8xGAN7ehyctRiL8Waj0Hz9E=
Subject key identifier:   66:D2:ED:95:F4:77:17:11:4B:04:18:1F:CE:9D:83:1E:38:9E:1B:68
Certificate issuer:       /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial:       362D
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/AA2A006C340411E9A22CD05CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:59:45 +0000
ROA not before:           Sat 14 Jun 2025 14:50:52 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     55746
IP address blocks:        2404:138:1304::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13869 (0x362d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
        Validity
            Not Before: Jun 14 14:50:52 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47e91-54ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:26:29:fb:69:2f:b4:60:e5:f2:9a:df:2f:3f:
                    2d:df:99:c4:b0:f5:f3:6b:13:b6:8d:e2:1a:ae:7b:
                    67:03:fe:28:9a:28:6a:c5:4b:16:0b:30:b8:c8:12:
                    b6:f3:ac:ab:8e:b8:77:56:0c:e5:56:2a:bc:78:38:
                    1d:f3:8b:c0:6d:fe:18:48:76:3e:eb:de:4b:5e:0c:
                    b7:e8:c4:33:9b:b1:e0:67:7f:96:4a:0b:5e:79:bc:
                    78:b0:d4:6f:e7:ad:87:c6:9c:52:44:b1:66:6e:02:
                    2b:c1:58:3a:c3:76:53:11:be:2b:cf:88:61:33:8e:
                    4f:e4:aa:39:a9:09:9a:d7:ce:fb:c3:00:fc:f7:c8:
                    b5:f4:60:ca:a5:50:27:03:04:d8:8d:81:1a:2e:9b:
                    95:03:02:61:51:53:1d:43:22:87:91:5f:96:da:ca:
                    b3:15:62:53:51:7b:22:f0:1c:28:2b:82:d8:25:ed:
                    5a:a7:61:40:27:e0:7c:34:04:e2:d6:a2:2a:74:6a:
                    7c:d3:27:1a:90:f8:7b:2b:a1:04:90:65:0e:78:0f:
                    68:c8:5c:ec:49:ab:05:d8:14:93:e5:c9:0d:bb:28:
                    13:62:d5:12:90:78:f6:b5:c3:39:27:83:12:8c:27:
                    87:ff:a4:ec:9b:ed:1c:4e:2d:4e:22:23:ef:8e:32:
                    0d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D2:ED:95:F4:77:17:11:4B:04:18:1F:CE:9D:83:1E:38:9E:1B:68
            X509v3 Authority Key Identifier:
                keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/AA2A006C340411E9A22CD05CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:138:1304::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:20:00:3b:7c:d7:5e:31:86:f0:67:14:a7:30:32:b0:a2:
         49:4b:e2:ff:ac:56:9f:fe:3b:32:a4:1e:05:c5:6a:e3:16:c9:
         0c:c3:e6:ff:91:7b:2c:f7:d5:5f:ff:d6:dd:24:9e:dd:d6:97:
         d4:92:db:6f:00:83:48:f6:48:d9:96:29:e1:e1:f9:93:62:02:
         31:51:3c:51:b8:52:b2:cd:a9:24:af:d3:1e:b1:ba:c0:6b:ef:
         28:d2:37:74:a0:36:16:8f:b6:bc:c6:c3:d8:c9:0f:9f:56:35:
         29:9d:df:12:e4:d0:7a:a5:39:5e:1c:98:38:2f:5d:95:a5:f7:
         1b:ed:03:a1:d6:b4:22:50:89:e3:05:d1:c1:fd:18:fe:d3:1e:
         48:7d:96:53:bf:1e:ab:18:40:68:89:6b:e4:14:85:5b:ae:09:
         8f:ba:ea:8d:b1:fd:50:30:7a:7d:45:83:23:70:23:26:66:88:
         bc:ff:dd:a2:38:ee:d7:1c:e4:38:e2:af:fb:fd:67:75:a4:04:
         da:16:b9:92:3d:e7:f3:6a:14:fd:33:73:6f:df:b8:58:ff:3c:
         e9:bc:c8:4e:97:5e:2a:11:7d:f6:46:69:14:c4:0c:a3:ec:98:
         6f:c2:63:69:f4:1b:c2:ee:8b:90:f1:b0:cc:92:98:4e:9d:0a:
         e3:22:da:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:59:11 2026 by rpki-client