Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/96A61404AAA911EBA223275EC4F9AE02.roa
File:                     96A61404AAA911EBA223275EC4F9AE02.roa (raw, json)
Hash identifier:          DdjZ6jJIRlM0zFTD4fhExwYeqEzrIafQSwbZlhASnAw=
Subject key identifier:   85:D3:D9:5C:E0:A7:09:01:52:20:2F:02:37:13:6C:CF:54:FB:D1:E2
Certificate issuer:       /CN=A914845D/serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
Certificate serial:       06C4
Authority key identifier: AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/96A61404AAA911EBA223275EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:45:58 +0000
ROA not before:           Wed 19 Feb 2025 00:31:57 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141704
IP address blocks:        2001:df5:ee80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl
                          rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1732 (0x6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914845D, serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
        Validity
            Not Before: Feb 19 00:31:57 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a3fcc6-6719
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2b:cd:22:ab:da:f2:31:08:2f:fc:ac:a6:47:
                    01:2a:df:35:22:b7:d0:34:cb:a1:c9:a5:45:2d:77:
                    e7:ba:d6:61:41:db:9f:d1:ff:63:a1:30:1b:7f:3d:
                    91:91:58:3a:a5:0f:7d:93:2c:1d:b9:3e:70:cc:af:
                    46:ef:fc:93:fb:10:28:c3:ff:7e:ba:c8:4f:c8:bc:
                    01:00:e2:35:5f:a6:e5:c7:b8:eb:5c:e2:5e:0a:fe:
                    bc:ee:39:b3:26:87:17:e5:de:7f:29:a7:4a:74:84:
                    2c:2b:58:2e:49:94:f9:24:6d:91:88:76:5e:a2:70:
                    b0:6e:de:7f:3b:d0:45:a4:b8:bd:a2:5d:f3:53:c2:
                    2f:db:0e:dd:f4:7d:8e:cc:f0:78:6d:63:06:03:59:
                    4e:d7:88:52:6c:a0:16:66:1c:d9:6e:2d:a6:57:43:
                    07:64:c1:16:d2:f9:21:b3:38:cd:8a:6d:e2:4c:33:
                    91:52:77:2a:10:29:53:6f:96:ad:5a:68:4d:ce:ac:
                    3d:b4:70:8b:c7:10:a5:55:c3:52:e4:e4:17:80:33:
                    c2:7d:24:55:06:de:06:8f:d3:bc:5c:16:d0:be:41:
                    57:bf:66:bc:0c:6d:3d:33:16:00:43:0b:57:33:b8:
                    b6:de:f7:5f:f2:dc:b5:95:ac:e4:45:2e:c0:a9:f0:
                    6a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D3:D9:5C:E0:A7:09:01:52:20:2F:02:37:13:6C:CF:54:FB:D1:E2
            X509v3 Authority Key Identifier:
                keyid:AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/96A61404AAA911EBA223275EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:ee80::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:14:61:3a:58:7b:5f:c9:f3:00:f0:91:d7:71:57:ab:dd:32:
         cf:b2:65:d1:9d:3c:e9:11:eb:74:4a:5f:6d:e1:25:48:4a:f9:
         3b:10:ac:e8:af:65:e9:a4:d1:79:5b:b5:d9:bb:f2:d5:ee:48:
         71:f8:ea:e5:31:e8:42:ec:d0:c7:29:c9:7c:96:59:68:18:21:
         3d:85:ac:41:64:71:47:17:c7:e6:1d:c2:6d:24:f8:7a:b9:1c:
         2c:53:0a:8e:87:b0:c0:7b:e8:02:ea:0c:e5:67:88:af:b1:31:
         ca:88:49:a2:ba:34:6e:b5:c6:3e:fe:63:c4:fe:e8:3b:6b:ee:
         b3:3d:4d:8a:2b:b1:b2:77:4f:cf:50:fc:88:20:6c:29:4d:04:
         94:c4:6f:73:4c:91:81:91:83:7f:c9:80:37:23:20:de:b0:f0:
         3c:d3:ba:9c:85:6a:66:2c:04:07:8c:cd:e3:66:34:04:99:5f:
         fa:2e:88:72:98:28:e6:b5:74:d4:07:da:f6:cb:5f:5c:96:0b:
         bc:d4:ad:40:e8:50:da:49:da:2c:71:8d:c1:19:2a:ea:89:29:
         78:2f:e8:99:be:a9:57:f9:95:b1:f2:53:2b:df:6e:8e:bd:e6:
         59:0f:e4:69:f6:87:30:7d:c2:52:51:fa:41:b2:61:6b:7a:5b:
         2e:f4:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:24:21 2026 by rpki-client