Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/B035E67615D311F09BAD2971C4F9AE02.roa
File:                     B035E67615D311F09BAD2971C4F9AE02.roa (raw, json)
Hash identifier:          FXgcqSwIcOtjJXrtuwb30InUYea2PVbqiaYnf/D8IVI=
Subject key identifier:   E1:C0:71:B7:C3:F1:FA:31:17:AB:54:0E:CF:37:E0:D6:97:4C:AF:69
Certificate issuer:       /CN=A915825D/serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
Certificate serial:       0101
Authority key identifier: B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/B035E67615D311F09BAD2971C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:13:45 +0000
ROA not before:           Sat 27 Dec 2025 05:24:47 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     136396
IP address blocks:        2001:df4:8a40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl
                          rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915825D, serialNumber=B88BD5D5B9B8646D8E43E64C127B8481A418C636
        Validity
            Not Before: Dec 27 05:24:47 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43b89-5878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c0:15:0f:e0:22:08:46:0c:80:74:55:ef:ab:
                    d8:f0:b6:4e:91:50:d6:ba:5a:cc:bb:50:31:8c:9a:
                    23:50:cb:f3:db:e3:b6:84:41:b3:59:5a:9f:f7:98:
                    6b:1f:dc:9b:5e:62:3a:d4:8b:2b:be:28:7b:b5:c4:
                    6f:cf:ca:6f:ff:a8:46:da:06:36:ff:0a:f9:91:c3:
                    d9:e1:69:12:3d:14:8d:c4:b2:e6:13:c0:16:e1:c8:
                    c9:59:ed:44:b6:ca:ad:83:f3:86:f3:91:56:2b:30:
                    f5:4f:d2:0f:34:c6:ef:89:e5:95:af:84:4d:36:a8:
                    75:24:b1:81:6a:b5:c6:65:6a:45:c1:00:64:b6:3f:
                    a7:f5:96:97:ca:48:63:16:55:0e:30:13:d6:7e:2f:
                    c4:0e:98:c8:91:07:b8:66:13:6d:6c:42:84:e1:89:
                    bd:c0:2b:60:aa:63:ee:10:4d:7e:d7:bc:0b:13:0f:
                    23:be:a4:46:a3:a4:1a:67:2f:f9:2d:7b:54:a6:1c:
                    39:7c:3f:5c:a0:18:7c:5e:dd:8e:37:7c:51:02:b6:
                    1f:1a:d6:05:7e:ba:ea:41:7f:0e:7e:ab:f6:6a:52:
                    90:2d:57:d7:98:de:4f:48:25:f9:53:ec:dc:36:e5:
                    e2:98:47:61:86:ea:91:88:c9:6f:fd:56:bf:fd:02:
                    64:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C0:71:B7:C3:F1:FA:31:17:AB:54:0E:CF:37:E0:D6:97:4C:AF:69
            X509v3 Authority Key Identifier:
                keyid:B8:8B:D5:D5:B9:B8:64:6D:8E:43:E6:4C:12:7B:84:81:A4:18:C6:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uIvV1bm4ZG2OQ-ZMEnuEgaQYxjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915825D/E58B2268A44611EF8D58A624C4F9AE02/B035E67615D311F09BAD2971C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:8a40::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:b2:ce:ef:51:95:43:5d:30:49:a5:ea:95:e5:98:eb:5d:d5:
         f3:9d:9b:47:99:1b:d6:5a:a0:3c:f4:32:ac:41:b4:94:ce:58:
         fc:cd:f8:da:11:f5:80:35:43:00:b2:63:41:de:b1:70:1c:32:
         3f:3b:35:de:fc:37:7c:0b:f7:29:a3:57:22:b1:2d:25:bd:92:
         97:e1:22:e3:32:3e:25:e9:86:7f:d0:4a:31:27:1d:e8:86:b9:
         c8:83:d7:a8:25:62:d9:e6:ce:59:3b:4a:d0:dd:5b:5e:d2:41:
         68:53:8d:76:84:aa:f2:db:b8:4c:50:ef:98:c8:b1:02:3f:2d:
         1f:b3:41:a3:2a:f2:ea:e0:64:55:f5:08:c2:56:6c:6e:57:76:
         b8:f2:9b:13:d4:f7:fb:b6:8e:84:33:5e:6d:84:f6:a4:8d:fc:
         bb:0d:7b:58:9d:de:f7:30:4d:5f:08:34:1d:7f:ef:9e:41:b0:
         1e:e5:4f:64:0d:45:ed:7b:20:5e:5f:03:a9:69:94:fa:4e:6c:
         93:2c:39:ff:99:f5:77:61:90:83:a5:5d:7d:de:31:6a:d3:b5:
         11:43:5c:5d:eb:c8:14:22:6c:39:3e:75:8c:66:a1:2a:ab:8a:
         36:aa:05:e9:6d:68:80:d7:24:7b:75:56:b8:c2:4c:03:dc:98:
         08:a7:b3:65
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTgyNUQxMTAvBgNVBAUTKEI4OEJENUQ1QjlCODY0NkQ4RTQzRTY0QzEyN0I4NDgx
QTQxOEM2MzYwHhcNMjUxMjI3MDUyNDQ3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0M2I4OS01ODc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAusAVD+AiCEYMgHRV76vY8LZOkVDWulrMu1AxjJojUMvz2+O2hEGzWVqf95hr
H9ybXmI61Isrvih7tcRvz8pv/6hG2gY2/wr5kcPZ4WkSPRSNxLLmE8AW4cjJWe1E
tsqtg/OG85FWKzD1T9IPNMbvieWVr4RNNqh1JLGBarXGZWpFwQBktj+n9ZaXykhj
FlUOMBPWfi/EDpjIkQe4ZhNtbEKE4Ym9wCtgqmPuEE1+17wLEw8jvqRGo6QaZy/5
LXtUphw5fD9coBh8Xt2ON3xRArYfGtYFfrrqQX8Ofqv2alKQLVfXmN5PSCX5U+zc
NuXimEdhhuqRiMlv/Va//QJkjQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFOHAcbfD
8foxF6tUDs834NaXTK9pMB8GA1UdIwQYMBaAFLiL1dW5uGRtjkPmTBJ7hIGkGMY2
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODI1RC9FNThCMjI2OEE0
NDYxMUVGOEQ1OEE2MjRDNEY5QUUwMi91SXZWMWJtNFpHMk9RLVpNRW51RWdhUVl4
alkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3VJdlYxYm00WkcyT1EtWk1FbnVFZ2FRWXhqWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NTgyNUQvRTU4QjIyNjhBNDQ2MTFFRjhENThBNjI0QzRGOUFFMDIvQjAzNUU2NzYx
NUQzMTFGMDlCQUQyOTcxQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9IpAMA0GCSqGSIb3DQEBCwUAA4IBAQBpss7vUZVDXTBJpeqV
5ZjrXdXznZtHmRvWWqA89DKsQbSUzlj8zfjaEfWANUMAsmNB3rFwHDI/OzXe/Dd8
C/cpo1cisS0lvZKX4SLjMj4l6YZ/0EoxJx3ohrnIg9eoJWLZ5s5ZO0rQ3Vte0kFo
U412hKry27hMUO+YyLECPy0fs0GjKvLq4GRV9QjCVmxuV3a48psT1Pf7to6EM15t
hPakjfy7DXtYnd73ME1fCDQdf++eQbAe5U9kDUXteyBeXwOpaZT6TmyTLDn/mfV3
YZCDpV193jFq07URQ1xd68gUImw5PnWMZqEqq4o2qgXpbWiA1yR7dVa4wkwD3JgI
p7Nl
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:18:33 2026 by rpki-client