Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/75BC4B2A5D7611F1B2098786C1833773.roa
File:                     75BC4B2A5D7611F1B2098786C1833773.roa (raw, json)
Hash identifier:          ta8dEmU7Z8Oi4RN7K77WKBa90qpszc7XzNZIpq6JXPw=
Subject key identifier:   4A:6A:B1:78:53:4E:E2:64:38:C1:14:0F:3F:56:A3:BA:6D:83:2A:35
Certificate issuer:       /CN=A91174DD/serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
Certificate serial:       4D
Authority key identifier: AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/75BC4B2A5D7611F1B2098786C1833773.roa
Signing time:             Mon 01 Jun 2026 04:57:59 +0000
ROA not before:           Mon 01 Jun 2026 04:57:59 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142177
IP address blocks:        2402:45a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl
                          rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:23:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91174DD, serialNumber=AF02EB413C5C053175C6FCBC19C6936063E76811
        Validity
            Not Before: Jun  1 04:57:59 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a1d1157-3801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:44:a6:48:80:b8:d8:8f:29:b9:5c:43:78:
                    ab:3b:80:bf:84:f4:d2:12:33:78:8f:a6:d6:d1:ac:
                    05:0e:0c:ec:d2:00:6d:ea:e4:b0:76:dc:28:89:43:
                    19:6c:3e:83:b0:d2:9b:c6:f3:fa:72:f6:7c:e6:ef:
                    52:42:75:28:68:e9:10:31:a1:66:64:09:36:28:db:
                    6d:2c:88:89:f2:af:39:34:d5:48:97:56:a0:75:04:
                    0a:97:4b:60:a0:50:b3:e1:d2:d5:47:26:58:f3:35:
                    25:bf:6e:b7:6c:c7:14:24:9c:18:2f:d9:b1:2d:b0:
                    5c:38:8b:fc:7e:36:e6:e0:82:33:af:ae:4c:7a:86:
                    8d:96:90:a2:bd:d9:30:8c:66:df:cf:1c:cc:39:78:
                    a9:28:29:42:bf:fb:c4:8a:41:20:1f:ac:0e:8a:71:
                    b4:67:53:6b:db:a2:65:14:f8:4f:27:24:52:50:6c:
                    9c:75:ce:f5:12:7d:6b:a7:92:24:42:b2:7e:86:be:
                    44:64:b3:ad:6f:4a:7a:f3:e1:3f:45:21:18:9c:3a:
                    6a:35:11:38:ed:9d:e3:af:58:ca:0a:7e:01:d6:93:
                    f8:66:5e:d3:a7:9d:59:29:bb:74:ea:64:21:21:20:
                    74:d1:41:94:75:8c:1a:25:ca:89:71:02:84:f5:cc:
                    1d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:6A:B1:78:53:4E:E2:64:38:C1:14:0F:3F:56:A3:BA:6D:83:2A:35
            X509v3 Authority Key Identifier:
                keyid:AF:02:EB:41:3C:5C:05:31:75:C6:FC:BC:19:C6:93:60:63:E7:68:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/rwLrQTxcBTF1xvy8GcaTYGPnaBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rwLrQTxcBTF1xvy8GcaTYGPnaBE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/E2E99FBCF5D011F0A06517D2476F56BC/75BC4B2A5D7611F1B2098786C1833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:45a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c4:90:fe:39:9e:25:8a:18:a9:c3:2b:5b:a1:f1:e2:00:8d:09:
         4b:14:11:3d:05:4e:86:4d:76:d1:38:d7:d4:82:a6:c5:12:81:
         06:27:66:81:4a:41:95:09:37:da:e7:49:a2:10:5d:43:5a:36:
         6f:56:e4:8a:6a:bd:a6:5c:42:35:ce:38:0a:fa:6d:b6:2d:92:
         33:d8:27:56:0c:59:c0:20:f1:da:a1:a4:87:4d:b3:5b:01:27:
         5b:6c:41:07:a8:80:de:d1:27:79:83:62:85:ae:be:97:aa:6d:
         de:ee:e2:fe:1d:1e:ae:5c:51:b0:d3:14:aa:e3:43:83:a1:ba:
         81:cf:5e:0d:0d:61:6f:42:5d:e9:9f:b6:8a:b4:5a:b8:d1:15:
         83:11:d0:ba:bc:d9:b3:0f:67:88:10:4f:be:c2:be:9e:e0:8e:
         59:fd:85:69:0c:5e:14:43:cc:a1:e6:2e:1c:88:2f:c0:eb:eb:
         98:75:71:c8:9c:b0:a6:15:09:9a:da:f8:05:63:74:1f:36:0c:
         ea:d6:05:04:4e:9e:18:e4:f0:b8:c2:d2:1f:bb:70:7d:65:26:
         63:9c:8c:88:ab:43:47:c2:3a:9e:b0:a5:05:01:e1:3c:d1:a6:
         71:ba:7d:62:25:fe:e1:fc:e6:84:48:02:41:64:5e:28:8f:57:
         80:e0:00:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:05:12 2026 by rpki-client