Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/7350B2AE2BB011EEBF8C0962C4F9AE02.roa
File:                     7350B2AE2BB011EEBF8C0962C4F9AE02.roa (raw, json)
Hash identifier:          d4lTODvUkouxXVPPc6ygUkOl8NqMMqWXrGfdqtm829Y=
Subject key identifier:   C5:26:BB:40:C4:FA:4C:FC:9A:29:29:0C:C1:B3:64:C5:7B:84:3A:AC
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       3601
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/7350B2AE2BB011EEBF8C0962C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:26:00 +0000
ROA not before:           Thu 30 Oct 2025 15:31:22 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     148002
IP address blocks:        240a:eff4::/32 maxlen: 32
                          240a:eff5::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13825 (0x3601)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Oct 30 15:31:22 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a484b8-62ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5e:65:5a:9e:b7:34:3f:49:dd:5c:59:aa:61:
                    3f:f5:83:cf:ce:24:38:6b:c2:b5:7a:1e:10:17:a1:
                    a4:a2:5c:dc:fc:3e:08:3e:cc:27:e8:30:48:51:e1:
                    69:04:e9:5e:9a:25:c7:e3:43:5d:9c:44:88:ff:e7:
                    4b:ec:34:6a:63:34:26:4e:de:a4:01:45:ac:49:09:
                    d0:a3:6c:7a:1d:86:4c:03:3a:95:30:22:98:df:49:
                    dd:2c:59:57:5c:f0:00:0c:16:77:c8:ab:51:ad:ac:
                    e9:5f:a4:db:d6:8f:c1:ae:cc:89:cd:99:68:01:8a:
                    2d:f3:1d:76:03:ba:f3:2d:1e:b6:64:7b:b9:99:de:
                    11:68:38:6e:58:80:5a:f1:09:30:d9:f2:a6:11:84:
                    93:be:9c:62:a9:eb:6d:d7:fc:63:77:c4:de:8b:a8:
                    0e:da:74:d8:bf:32:1a:cc:ac:1f:d8:01:b2:84:a7:
                    e1:77:50:ff:aa:39:56:25:e5:8c:fd:83:e5:c4:45:
                    94:4d:74:4a:c6:05:35:69:a4:01:27:28:20:13:87:
                    c5:f3:2c:b4:06:c7:d8:36:d7:5e:f6:17:66:44:c6:
                    11:00:0d:0b:49:09:3a:ae:f2:07:c1:27:8e:3a:15:
                    4a:a0:fa:0a:f5:51:8c:61:c5:79:a4:18:fb:d2:87:
                    69:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:26:BB:40:C4:FA:4C:FC:9A:29:29:0C:C1:B3:64:C5:7B:84:3A:AC
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/7350B2AE2BB011EEBF8C0962C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240a:eff4::/31

    Signature Algorithm: sha256WithRSAEncryption
         68:e1:e6:c3:d6:ee:8b:d4:11:8b:1f:c8:e5:76:e4:14:e9:e6:
         dd:7c:9a:ea:0f:e9:58:19:6f:27:a1:58:b1:97:d4:00:a8:6c:
         6e:4b:30:5d:35:cc:01:43:d5:ff:9d:79:03:96:cc:31:ea:71:
         e3:1e:3f:7f:fd:56:98:65:93:2a:82:e4:7b:ae:b4:21:d4:ba:
         37:c5:8d:83:5b:23:4a:7e:6c:fa:e4:37:9e:b6:33:3e:63:32:
         1a:61:87:79:c7:19:c7:8d:19:91:eb:22:a4:15:ad:10:25:2b:
         78:b1:4c:93:37:99:43:7a:01:7b:88:ac:a5:cb:04:b6:d4:a1:
         fe:51:bd:3d:42:fc:18:59:fb:19:67:a9:73:40:0d:1e:c2:4e:
         98:22:1e:eb:b4:35:36:c4:11:a5:f6:31:9e:c7:e6:9a:d9:98:
         30:54:14:4e:58:fe:65:33:05:c1:69:de:30:11:7c:e8:dd:f7:
         a8:3c:7c:f5:72:45:22:00:c1:87:9d:c1:ab:41:95:40:22:5a:
         93:23:16:74:84:bc:c4:22:b6:7b:cd:6d:58:77:23:9a:1c:09:
         13:c4:4d:ba:d2:a2:2c:06:60:52:60:67:18:12:da:d6:02:d1:
         bb:30:60:13:25:bb:d4:54:6b:15:e1:e7:06:50:9f:9f:e9:08:
         b3:df:7b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:12:22 2026 by rpki-client