Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/068272B8EB1411F088D77099366F56BC.roa
File:                     068272B8EB1411F088D77099366F56BC.roa (raw, json)
Hash identifier:          BzioGtQex10DUW3Ewz2viC/+ENRqNsiDR9OZl6xdYg8=
Subject key identifier:   43:3A:59:A7:22:CE:F2:AC:A4:95:99:F4:34:F2:7D:3A:B6:0F:81:FF
Certificate issuer:       /CN=A9139FBB/serialNumber=B5ACD266BA968295C8CDC075737413DD771B19FF
Certificate serial:       25
Authority key identifier: B5:AC:D2:66:BA:96:82:95:C8:CD:C0:75:73:74:13:DD:77:1B:19:FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tazSZrqWgpXIzcB1c3QT3XcbGf8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/068272B8EB1411F088D77099366F56BC.roa
Signing time:             Sun 01 Mar 2026 05:49:20 +0000
ROA not before:           Tue 06 Jan 2026 15:26:09 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154461
IP address blocks:        2001:df6:7fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.crl
                          rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tazSZrqWgpXIzcB1c3QT3XcbGf8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:17:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139FBB, serialNumber=B5ACD266BA968295C8CDC075737413DD771B19FF
        Validity
            Not Before: Jan  6 15:26:09 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d360-e7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:56:c3:0f:70:23:92:4d:bd:b7:85:67:cc:79:
                    18:6a:38:b0:6c:1e:71:e6:e9:e9:94:fa:eb:c2:e9:
                    79:a8:59:8c:d7:ad:30:9b:5b:7a:61:01:95:b3:80:
                    a9:93:9d:ce:16:69:43:ad:60:bc:cb:af:38:6d:11:
                    79:18:fe:13:48:c5:a6:7a:09:6e:38:ce:ba:ff:65:
                    4a:af:b4:da:24:09:ff:f8:00:da:1e:a4:47:bf:db:
                    32:4a:c2:da:39:42:ec:6f:c6:90:c8:65:02:82:b8:
                    62:fa:a1:35:42:01:68:8c:20:ae:bd:ce:ef:18:ad:
                    e7:af:7a:a2:a5:9d:d8:80:10:ad:3a:b6:6b:06:f5:
                    14:4b:a6:fe:b9:12:c6:fa:7c:90:e4:41:e5:66:f1:
                    21:b2:fb:98:dd:49:88:52:e9:79:b3:21:a8:df:48:
                    b4:a4:49:23:f7:d7:7b:ad:56:34:3d:33:e9:ed:62:
                    7e:5e:04:e3:86:a8:77:76:38:32:78:5f:63:6e:0b:
                    0a:6d:a4:87:b2:e5:02:61:3f:de:5d:fd:bf:0e:7b:
                    56:f1:06:43:5f:7f:ab:f3:1e:d7:4d:7a:51:fa:9b:
                    3d:96:33:b0:e2:1b:8a:a7:6c:ed:8c:7b:7b:50:15:
                    7c:52:2f:66:5c:bb:5c:df:fb:24:ce:b8:12:17:7b:
                    7c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:3A:59:A7:22:CE:F2:AC:A4:95:99:F4:34:F2:7D:3A:B6:0F:81:FF
            X509v3 Authority Key Identifier:
                keyid:B5:AC:D2:66:BA:96:82:95:C8:CD:C0:75:73:74:13:DD:77:1B:19:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/tazSZrqWgpXIzcB1c3QT3XcbGf8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tazSZrqWgpXIzcB1c3QT3XcbGf8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/C5198020E40411F0A6619C60616F56BC/068272B8EB1411F088D77099366F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:7fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:01:ac:54:a1:4f:9e:66:82:06:31:d1:fc:00:d3:59:fa:9f:
         28:6f:71:31:d3:6b:22:74:b7:04:6d:4a:93:88:2a:d9:fd:91:
         2a:cd:e4:27:4c:d3:37:70:a6:11:2d:a6:92:f3:69:28:f5:be:
         b1:54:3d:99:22:de:cf:e6:d0:21:1b:e8:23:cd:c4:0f:fb:45:
         97:8c:8e:d0:c6:76:c4:b1:9a:5b:02:7f:7e:c8:9e:73:4e:2c:
         97:2b:46:0b:3d:fa:49:e1:74:e5:35:88:7e:ce:eb:78:fe:d8:
         70:e0:03:4e:db:2e:4b:2a:71:5f:10:4f:b1:76:4e:1f:8e:39:
         a5:a1:e3:ce:e7:ee:bd:ee:33:71:a4:03:c2:9b:a2:b8:4e:df:
         6d:f3:68:4b:7f:07:a1:e9:9c:b7:42:69:a8:40:69:da:c7:2e:
         d7:e6:50:94:49:d4:5a:09:f5:f1:82:3a:c7:51:83:20:31:8f:
         60:6f:01:6a:09:1c:61:aa:9c:10:ed:d7:9c:bd:ee:4f:be:4f:
         0e:1d:dc:f1:13:22:38:10:26:22:e0:52:98:9a:ba:28:8a:1d:
         56:01:00:a1:d3:0f:d9:9c:71:e1:23:e5:80:3e:9a:8e:5f:ca:
         e9:a8:33:6b:48:cb:eb:e9:f8:08:fb:d7:4c:d7:6b:14:27:cc:
         7b:ed:0f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:37:41 2026 by rpki-client