Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/ADB02E5C5CB411F0BE8D2465C4F9AE02.roa
File:                     ADB02E5C5CB411F0BE8D2465C4F9AE02.roa (raw, json)
Hash identifier:          96qp6OlFvyt4AD3Ueh7h17elJXQzlKp/F00ZsiqHEMU=
Subject key identifier:   24:0D:6C:2D:B7:3A:90:97:55:6A:BB:60:A3:6C:4C:95:5F:5B:74:E9
Certificate issuer:       /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
Certificate serial:       01DA
Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/ADB02E5C5CB411F0BE8D2465C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:09:15 +0000
ROA not before:           Fri 21 Nov 2025 02:19:27 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     55470
IP address blocks:        2401:4260:fff1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl
                          rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:13:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B7A, serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
        Validity
            Not Before: Nov 21 02:19:27 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a4569b-02ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:1f:b5:e0:08:8a:25:a3:73:46:67:4d:b8:f4:
                    74:7a:47:ef:81:de:ec:88:45:33:12:e8:a5:7d:f7:
                    2b:66:fa:c6:c6:f4:62:b5:49:eb:3e:fd:f4:33:d3:
                    3c:3f:cf:71:e3:5c:ab:d9:ee:b8:20:02:ad:6e:82:
                    f6:74:81:9f:21:8f:c5:42:9f:fa:fa:01:15:8f:09:
                    ff:2c:f5:ca:31:5a:c6:f0:42:03:f6:5d:b7:15:f9:
                    0b:b5:88:74:67:f4:37:26:a0:b7:a5:91:1d:c8:77:
                    6d:5d:63:21:24:ab:7a:82:e3:a4:37:09:c4:1f:6b:
                    24:0d:42:96:74:f5:0f:87:ac:9d:e2:b5:31:19:32:
                    8b:2f:cc:e2:94:91:9c:fa:a8:0f:fd:b9:61:45:10:
                    da:31:a9:87:51:06:6e:f1:c4:8f:57:50:04:d3:76:
                    4b:f8:b5:00:a8:3e:5c:17:b6:aa:b0:f9:ae:06:5b:
                    8a:f7:3c:00:b8:13:7b:4b:05:9d:b0:4b:98:c8:5a:
                    5f:77:56:7c:95:44:b1:ec:e5:22:a0:2a:f8:72:e1:
                    7c:62:93:b8:7e:f0:9a:c4:06:b3:cf:ce:1f:a5:31:
                    e4:f3:ad:bd:7b:37:a5:94:9d:87:2c:1f:7d:d0:e9:
                    ed:74:67:7c:6d:5c:7c:02:ca:3b:fa:bc:59:2c:56:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0D:6C:2D:B7:3A:90:97:55:6A:BB:60:A3:6C:4C:95:5F:5B:74:E9
            X509v3 Authority Key Identifier:
                keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/ADB02E5C5CB411F0BE8D2465C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4260:fff1::/48

    Signature Algorithm: sha256WithRSAEncryption
         db:27:99:06:13:86:4c:54:72:21:5c:58:f6:dd:21:94:01:d3:
         9b:1e:01:c9:19:cc:8f:d6:0d:b0:29:f9:c5:0a:65:03:1f:28:
         0e:31:62:d3:7a:a6:ca:fd:3a:ad:e2:83:24:7b:e4:2b:31:28:
         69:f7:d4:b3:a5:cd:0b:3d:ec:8a:a5:6c:3f:26:b0:6e:4e:70:
         84:53:15:37:87:f5:b4:19:6c:64:2f:95:de:22:ab:c8:84:1d:
         67:76:94:09:ce:e2:00:a1:fc:41:ff:95:bc:0c:54:6f:30:3b:
         96:6e:e2:35:0a:46:8c:f3:25:e0:d1:52:a2:0f:8a:a9:51:19:
         a6:b0:da:a0:b6:7c:46:47:3b:a7:9d:df:c6:eb:77:bf:a0:5c:
         90:c1:db:33:53:06:ac:2a:2b:2e:b8:b9:e8:51:61:43:8d:ea:
         64:25:54:e4:71:dd:30:2a:57:25:6f:01:c9:0a:51:6d:b6:f3:
         71:12:f4:bc:80:1f:ce:04:07:fa:a0:ee:f7:e7:05:69:23:be:
         da:02:09:61:d8:6f:25:ce:8e:e4:14:e2:e7:c8:6c:73:f3:7e:
         41:2e:0f:0b:66:26:4e:69:34:49:41:28:ef:b8:0f:3f:2a:99:
         bc:6c:12:4e:ca:dc:82:72:b4:83:20:eb:13:03:ab:00:0b:c1:
         19:fd:0f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:38:26 2026 by rpki-client