Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/CE992CA0138D11F198EDAC703A3D8C67.roa
File:                     CE992CA0138D11F198EDAC703A3D8C67.roa (raw, json)
Hash identifier:          hnj4b5BrR1oDY8K6unPrq2mmpWra5ZUyWl2C0okWTrc=
Subject key identifier:   AC:B2:B7:19:B1:1E:12:56:5B:3D:8A:4B:29:2F:22:23:F9:2A:EA:0D
Certificate issuer:       /CN=A915E061/serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
Certificate serial:       02
Authority key identifier: FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/CE992CA0138D11F198EDAC703A3D8C67.roa
Signing time:             Fri 27 Feb 2026 03:38:40 +0000
ROA not before:           Fri 27 Feb 2026 03:38:40 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     154507
IP address blocks:        2001:df6:b7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl
                          rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:44:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E061, serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
        Validity
            Not Before: Feb 27 03:38:40 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a111c0-532e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:66:02:2a:69:4d:8f:7c:8e:d4:87:af:7d:
                    eb:0c:fd:2b:1c:2e:ad:0c:12:44:73:c8:b3:17:55:
                    4c:aa:61:c7:cf:20:f5:8c:ca:a9:83:63:55:94:2f:
                    b0:94:c4:50:69:b4:4a:f9:63:f7:a3:26:f3:36:3c:
                    8d:21:15:e6:04:df:b8:79:65:e8:3c:a8:72:9a:d7:
                    6c:24:21:32:4c:19:39:77:f3:97:98:51:e8:cb:b0:
                    e9:12:6a:96:ac:fa:da:6b:d6:4f:47:39:d7:ad:92:
                    ae:7e:83:18:ce:86:a9:7f:50:49:18:a0:1c:56:55:
                    7a:33:db:5e:5e:34:14:e1:44:c8:c4:54:3d:52:8b:
                    2d:f8:52:86:87:4c:f8:0b:9d:72:94:26:1c:7f:07:
                    76:df:25:4b:4f:06:5b:1a:35:03:ed:a1:4e:a4:f0:
                    b1:fc:5d:fc:d3:ee:ae:89:2f:e9:b9:9e:f5:97:39:
                    0c:44:3a:45:16:cf:85:ae:9e:ef:11:75:85:3e:c2:
                    f0:32:61:54:57:fd:d5:76:46:ee:09:6b:7d:34:8a:
                    c8:5a:73:f2:1f:72:ef:08:84:f1:80:dc:30:a5:7b:
                    6b:a0:22:04:6e:f4:3c:f8:0f:3b:a8:a2:d9:c6:9b:
                    62:ac:02:62:35:90:1c:4e:8d:f7:16:71:ed:30:a3:
                    3f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B2:B7:19:B1:1E:12:56:5B:3D:8A:4B:29:2F:22:23:F9:2A:EA:0D
            X509v3 Authority Key Identifier:
                keyid:FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/CE992CA0138D11F198EDAC703A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:b7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:10:2b:ae:3c:b3:6c:14:44:4b:a1:f1:c3:a8:84:6f:bc:45:
         ee:4b:15:c4:86:ab:a7:68:96:7a:9f:c5:d0:9b:e5:2f:5b:40:
         10:86:79:25:91:38:54:35:9a:72:7d:42:96:5b:d5:45:0a:88:
         fe:83:80:f3:31:bb:60:93:2e:bc:67:45:8d:d4:1f:59:55:c5:
         64:fa:da:7a:49:63:5d:32:a8:01:16:11:b3:58:64:c1:93:2c:
         b6:35:b8:a1:a1:af:a7:3c:ec:03:03:78:2c:70:a7:d7:9e:36:
         e1:ca:59:e5:7a:78:50:63:8f:16:b0:5c:b0:42:fa:07:64:4d:
         6c:be:dc:59:8a:57:72:84:e2:24:74:85:db:36:8d:e1:a9:06:
         09:9e:f2:87:5c:31:f2:ef:47:8e:da:f5:7b:f8:90:ba:7a:bf:
         bf:c5:5e:2d:41:81:e8:a6:20:5b:6e:3f:ec:6e:97:57:fc:0b:
         97:2b:cb:c5:f0:fb:8c:df:fe:d0:ff:0a:e5:f5:86:ce:d5:54:
         47:c7:4e:70:2d:e3:e5:92:6d:19:8a:57:a6:50:4a:9a:ae:c5:
         ed:85:a0:7d:7d:44:d0:8a:4f:f8:a3:6e:b1:f4:79:b9:4e:6e:
         e6:50:ae:c6:c4:43:79:45:d2:5f:24:8f:10:94:b9:5d:e7:36:
         57:ba:9b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:03:41 2026 by rpki-client