Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/9AE3D69A31ED11EFA537871BC4F9AE02.roa
File:                     9AE3D69A31ED11EFA537871BC4F9AE02.roa (raw, json)
Hash identifier:          0kI9xgTVy0Q8AQiYnQllAIH+FuKivWg9E5qZ+kjunPA=
Subject key identifier:   4F:F1:B6:FB:D3:16:F0:57:D6:92:66:4A:DA:39:0C:07:BD:DD:B6:C2
Certificate issuer:       /CN=A911678C/serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
Certificate serial:       01F7
Authority key identifier: 93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/9AE3D69A31ED11EFA537871BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:53:07 +0000
ROA not before:           Thu 23 Oct 2025 05:18:45 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     140042
IP address blocks:        2401:3620:2100::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl
                          rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:09:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 503 (0x1f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911678C, serialNumber=93879B00E4B7FBC01260707B76D5D120F45B535B
        Validity
            Not Before: Oct 23 05:18:45 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a46ef3-e514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2b:bf:08:3d:fb:46:40:14:1e:cf:d7:c9:07:
                    84:74:31:1d:f7:d0:6e:5b:6b:af:1e:7c:fb:03:26:
                    bf:6b:0f:7c:ab:ef:34:83:af:aa:aa:53:8d:da:0d:
                    b0:2a:20:02:24:e5:70:77:99:78:6d:1e:86:fc:71:
                    23:c2:91:5d:a9:b7:55:ef:e6:8d:d9:37:50:47:b5:
                    57:e5:4b:a2:30:41:83:1a:d9:ea:8b:fe:07:cd:a5:
                    af:0c:7e:62:19:2c:ed:f8:24:53:37:33:4c:92:c0:
                    98:ce:cb:79:2b:27:c3:6d:7c:bd:07:ec:38:8f:77:
                    df:9e:9c:e8:b5:d7:20:52:62:c4:6d:f4:e5:9f:57:
                    60:05:f5:e3:c0:fe:bb:66:ec:d2:d5:e1:93:ab:df:
                    55:a2:21:b7:7a:71:e9:c6:b9:e6:b3:bc:5a:eb:59:
                    0c:86:15:8b:43:d4:9d:5c:97:bd:79:79:ad:f4:15:
                    f8:1e:b6:d8:89:27:cf:28:22:65:9b:c9:e5:38:cf:
                    98:1f:7b:32:ee:17:fd:81:14:21:7b:69:37:32:5d:
                    dd:5a:7f:43:36:16:26:b6:01:a2:2b:dc:0a:67:34:
                    03:11:f1:bb:13:6b:e6:e6:ac:fc:b4:fe:f0:e3:79:
                    5c:a8:fa:fa:11:aa:66:e8:e5:21:cf:d1:4e:d8:90:
                    74:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F1:B6:FB:D3:16:F0:57:D6:92:66:4A:DA:39:0C:07:BD:DD:B6:C2
            X509v3 Authority Key Identifier:
                keyid:93:87:9B:00:E4:B7:FB:C0:12:60:70:7B:76:D5:D1:20:F4:5B:53:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/k4ebAOS3-8ASYHB7dtXRIPRbU1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k4ebAOS3-8ASYHB7dtXRIPRbU1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911678C/282315D0520011EEAA866B69C4F9AE02/9AE3D69A31ED11EFA537871BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3620:2100::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:b1:98:6d:1a:96:79:1e:d5:c0:bb:71:61:d5:46:c4:8f:da:
         8f:c7:67:e1:8f:71:d9:84:4e:cb:6d:0c:d7:97:11:8e:eb:9b:
         7d:8e:76:f6:2b:6c:49:14:ca:93:fb:6a:20:17:4d:56:3a:d8:
         80:38:49:d7:f0:94:95:90:f8:c5:b2:2d:f9:a7:39:bc:90:1a:
         ce:03:86:7c:48:e8:79:cf:7a:60:eb:d0:2d:4a:3a:63:02:5b:
         6c:49:c9:67:a9:a1:75:8e:e2:0b:09:e9:c2:7c:65:9a:71:19:
         81:40:29:be:83:96:42:7a:49:62:0a:16:77:67:c5:4e:12:41:
         e3:11:86:f2:ad:4b:b8:17:81:24:69:88:30:5a:df:12:6e:41:
         0a:5a:8a:e2:94:ec:d1:c3:c1:cf:13:8f:b2:11:a8:3c:d8:f0:
         ea:cd:44:9a:9d:5e:a2:a6:7f:02:69:69:54:2e:fc:19:b8:e3:
         61:9f:30:e9:78:e5:90:49:0a:90:b9:70:7a:fb:48:a5:5b:54:
         c7:da:89:60:bd:ae:8c:f2:12:f2:ea:aa:eb:5d:08:d7:7b:76:
         fa:e9:49:91:f3:c4:b8:e2:70:c7:91:f7:d9:f6:7f:44:8e:d3:
         ca:13:14:ee:e5:a5:48:f9:09:dd:02:3b:a2:2f:35:3c:49:4d:
         36:8e:0a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:49 2026 by rpki-client