Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/723720464ABE11EFA87EE85BC4F9AE02.roa
File:                     723720464ABE11EFA87EE85BC4F9AE02.roa (raw, json)
Hash identifier:          /neZtyP8CB+i0xa/1UQQQx4y8u+LD3tIdTWWjj7eFPE=
Subject key identifier:   03:2E:D7:C8:E3:03:3A:10:53:8A:DD:87:63:B9:CA:76:76:10:CE:69
Certificate issuer:       /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Certificate serial:       0137
Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/723720464ABE11EFA87EE85BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:07:31 +0000
ROA not before:           Tue 05 Aug 2025 06:44:17 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153169
IP address blocks:        2001:df4:13c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
                          rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
        Validity
            Not Before: Aug  5 06:44:17 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a41df3-1bdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:71:ab:29:1e:29:00:b4:40:c5:7d:57:33:44:
                    46:48:56:81:c0:5b:a1:86:85:2c:61:65:00:6c:5c:
                    e5:e9:fa:f2:3d:4b:0b:90:00:77:c6:40:24:44:c3:
                    29:8f:ad:0c:20:ee:ea:5f:04:d8:c2:2c:7f:8d:91:
                    95:f9:7f:fc:e9:57:94:13:56:1c:3e:23:bf:bd:ee:
                    2b:79:93:98:fa:1a:07:8a:df:ba:30:20:20:bb:06:
                    43:87:63:df:b8:98:ca:87:17:99:6e:6b:b6:29:e7:
                    43:96:62:10:a4:65:84:71:0a:61:35:e8:a0:85:ed:
                    c5:0f:5d:a0:dd:b8:be:a9:2c:c6:7f:21:16:c9:98:
                    35:a2:30:33:5a:f5:bc:85:9e:27:a8:eb:31:ba:57:
                    93:03:86:a6:3a:bc:77:d8:06:62:01:15:3c:77:03:
                    de:85:27:1d:6b:78:41:b5:2a:d9:de:0c:d3:da:c6:
                    54:08:ff:ab:63:dc:e5:bb:0a:22:da:af:39:0a:72:
                    e1:e2:0b:e8:26:54:73:da:cc:47:fc:cb:e7:ea:8c:
                    3c:28:39:15:61:20:04:60:70:ae:15:a4:82:37:61:
                    47:a3:95:9d:e7:72:5f:50:00:c9:70:bf:bd:38:dd:
                    1c:12:b4:cb:e8:2a:81:b0:bb:40:82:b9:3e:13:ba:
                    ab:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:2E:D7:C8:E3:03:3A:10:53:8A:DD:87:63:B9:CA:76:76:10:CE:69
            X509v3 Authority Key Identifier:
                keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/723720464ABE11EFA87EE85BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:13c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:8f:42:20:4e:71:c9:6b:d2:71:c9:58:6f:c8:7b:ef:64:dc:
         b6:55:8b:c1:e6:67:a0:cb:4a:46:38:89:e8:e8:7f:1e:6d:2f:
         d6:59:de:1f:1e:2f:57:84:d3:07:5f:79:c3:cb:89:bf:f7:ac:
         32:6a:f1:4b:09:28:8f:70:7c:26:74:1c:3d:a7:c1:00:97:2e:
         15:3e:b3:42:0b:13:f8:e9:62:04:da:46:7d:e9:d5:df:57:b2:
         f9:1a:05:17:cc:30:58:f5:c6:6b:cc:d7:30:22:49:31:46:81:
         6d:73:5b:c2:cc:18:c1:ca:97:9e:64:57:d6:59:33:26:4d:cb:
         f0:9d:54:e4:13:d0:62:f5:69:3e:ee:3d:11:65:8a:3a:74:4a:
         61:a3:52:4b:01:34:34:25:e6:20:05:30:2a:e4:01:ba:d8:8b:
         64:92:62:84:87:3c:82:5f:6f:0b:65:f2:ed:e8:bc:7d:7b:1b:
         05:fb:58:cd:7b:87:ba:8f:65:90:0c:6b:b5:8a:98:6d:7e:2b:
         88:db:af:9d:14:01:34:d1:66:25:28:4f:62:78:51:42:fd:25:
         3f:87:b3:cf:a4:85:ed:1d:5f:ca:80:6e:dd:69:1e:47:45:13:
         7d:05:48:9f:d3:29:05:7b:e2:8e:f0:a0:bd:d5:a7:94:e0:2a:
         c0:2b:e9:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:32:32 2026 by rpki-client