Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/D6F76118231C11EF84144357C4F9AE02.roa
File:                     D6F76118231C11EF84144357C4F9AE02.roa (raw, json)
Hash identifier:          yUneVRwb6AK5oOkcJJhtc6mqN9EGhX27fjT+u8BimTY=
Subject key identifier:   51:12:E3:6C:C9:CD:BC:32:62:82:8B:25:D0:6F:A8:84:32:3C:30:F6
Certificate issuer:       /CN=A914C475/serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8
Certificate serial:       078B
Authority key identifier: 22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/D6F76118231C11EF84144357C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:59:11 +0000
ROA not before:           Fri 28 Nov 2025 18:22:29 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134723
IP address blocks:        2403:680::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl
                          rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931 (0x78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C475, serialNumber=228507EFF81AA28E491E326FBD1DC3B3C90872B8
        Validity
            Not Before: Nov 28 18:22:29 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4624e-5ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:4e:6c:ff:71:67:45:83:87:a8:66:58:8d:a0:
                    0d:5a:e9:62:7c:d2:ce:f2:3f:46:8f:03:18:12:2a:
                    3c:5b:34:bc:3a:c1:77:c2:1f:0c:a8:19:92:f6:ac:
                    ba:bf:ef:cd:ab:34:ce:ff:d1:d6:cd:4c:44:88:f0:
                    55:ef:02:4d:a6:1c:7e:4e:b6:46:d0:b0:82:5e:23:
                    c0:22:24:e6:15:34:a8:1e:7e:83:05:1f:5d:d0:b9:
                    0a:b7:06:3a:91:00:8c:21:9d:f5:da:d0:c2:c0:71:
                    af:79:38:e7:18:7b:c8:bb:4c:b2:fe:b5:90:ff:db:
                    df:c0:44:f7:54:12:17:a4:03:8c:33:5e:e3:3f:b9:
                    6f:b7:94:d0:ad:f0:9c:78:13:5a:b5:be:30:2c:bf:
                    b6:7d:9f:98:79:8b:03:54:42:43:29:ea:34:8b:4e:
                    d7:1f:d9:c2:e9:80:68:74:48:d3:ce:ed:74:d9:e2:
                    50:c6:65:ac:33:1f:12:45:4c:c2:2f:1d:c4:df:04:
                    56:8c:d6:bb:ef:9b:f8:4a:36:13:dc:77:dc:7a:ba:
                    c8:64:a6:0d:b0:98:74:92:1d:db:08:d0:7c:b2:a4:
                    34:70:43:c9:e7:cc:2f:7c:00:1f:46:dc:0f:5d:d0:
                    4d:cc:54:ec:71:e8:f6:d6:a1:5e:53:71:7b:f7:a7:
                    7a:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:12:E3:6C:C9:CD:BC:32:62:82:8B:25:D0:6F:A8:84:32:3C:30:F6
            X509v3 Authority Key Identifier:
                keyid:22:85:07:EF:F8:1A:A2:8E:49:1E:32:6F:BD:1D:C3:B3:C9:08:72:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IoUH7_gaoo5JHjJvvR3Ds8kIcrg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C475/E022A0580E9111EAB0E87441C4F9AE02/D6F76118231C11EF84144357C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:680::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:ba:04:54:a7:21:3d:6a:97:7c:36:5e:34:2a:6c:6e:05:fc:
         e2:3d:e1:dc:77:87:7a:d1:31:da:95:b2:37:58:da:eb:6a:59:
         ce:66:b1:02:3b:ca:23:bf:c1:e9:24:de:85:0c:a2:05:f6:c4:
         d7:86:36:fa:a5:33:8f:dd:0c:30:2d:b8:a6:3e:aa:1f:a8:b1:
         41:2c:b0:59:3e:65:b2:0d:d1:67:2a:94:a2:49:f0:da:45:cd:
         8c:f7:e1:41:3c:9b:ec:8e:7f:10:a3:fc:57:d2:73:82:9d:c9:
         f8:89:4d:80:47:a8:25:35:98:f0:b4:c7:cb:e6:71:b3:fa:12:
         6d:22:20:e7:d5:c4:bc:52:bf:0c:b9:52:c2:02:72:1d:82:30:
         6b:50:d8:00:78:31:52:7d:c7:25:b6:d3:98:e3:7b:25:5a:eb:
         0a:ff:2d:41:18:0d:44:10:41:92:d6:d9:ce:f2:ac:fc:48:b7:
         93:d8:3b:84:86:b2:1d:99:67:45:ad:52:b6:b3:7e:c6:69:39:
         17:83:55:79:ac:7d:c1:a7:15:49:be:37:31:0b:e8:8f:3d:21:
         cc:89:3d:12:8e:6f:47:fd:1c:5f:b8:e2:dd:20:a8:48:83:43:
         e4:1f:7e:23:05:1f:88:b7:92:45:bd:ca:e3:75:91:77:63:8c:
         24:a6:4b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:09:46 2026 by rpki-client