Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/5A15EA040D7A11EB9D346C48C4F9AE02.roa
File:                     5A15EA040D7A11EB9D346C48C4F9AE02.roa (raw, json)
Hash identifier:          WHnFAG70JawqBzlnEo6WtvfDMead1qbEaY3qu5N7lXM=
Subject key identifier:   64:09:DE:01:04:5E:0F:27:B0:36:25:57:DB:DE:9D:03:F5:23:61:6F
Certificate issuer:       /CN=A9165456/serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
Certificate serial:       0B23
Authority key identifier: 2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/5A15EA040D7A11EB9D346C48C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:30:46 +0000
ROA not before:           Wed 20 Aug 2025 20:00:00 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     139190
IP address blocks:        2404:f340:4000::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl
                          rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:46:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2851 (0xb23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165456, serialNumber=2CE11008D2E03FEB3E637AD4F7E7272EDC60D53B
        Validity
            Not Before: Aug 20 20:00:00 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a469b6-0dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2b:a1:b9:7d:b9:be:d9:94:13:b7:4b:4a:13:
                    02:02:5b:e0:36:d9:ff:8f:2c:06:3d:f9:31:83:1f:
                    0d:74:94:04:b2:eb:05:55:0b:ba:4f:8d:ec:e0:c0:
                    38:22:f2:f3:89:9a:cc:2b:0c:ae:8d:7b:25:76:8b:
                    dc:0c:8f:c8:9f:3f:31:03:80:ef:a7:90:ce:b0:fa:
                    5b:16:3d:11:4b:e9:f9:71:ea:80:69:1f:f2:93:25:
                    1d:90:d9:13:ce:72:54:22:23:cb:be:7b:87:31:fd:
                    02:92:f5:80:da:81:a9:63:c8:8f:6a:f3:7c:3b:ed:
                    73:98:87:f0:cd:2e:ea:5d:94:d9:0e:8b:da:f5:91:
                    99:be:bf:94:be:3e:fa:6f:74:d4:db:47:2d:d6:99:
                    1f:6f:9c:dc:49:7f:cb:ab:fe:4f:32:54:f3:a7:f6:
                    30:b1:34:86:6e:77:21:81:8d:ac:54:64:e0:3e:9e:
                    ce:16:4e:25:c4:1b:47:c1:e1:a9:c1:09:5f:32:2f:
                    60:11:de:c4:ce:32:21:15:8c:45:85:27:c8:44:bc:
                    62:2d:84:1e:3e:cd:a1:8d:ea:67:a1:93:8a:fc:cd:
                    13:b5:9d:b0:65:7a:f7:4e:9d:4b:09:49:73:3e:6c:
                    09:a3:77:75:ec:21:70:74:e2:be:f0:69:a0:cd:51:
                    2a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:09:DE:01:04:5E:0F:27:B0:36:25:57:DB:DE:9D:03:F5:23:61:6F
            X509v3 Authority Key Identifier:
                keyid:2C:E1:10:08:D2:E0:3F:EB:3E:63:7A:D4:F7:E7:27:2E:DC:60:D5:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LOEQCNLgP-s-Y3rU9-cnLtxg1Ts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165456/2378E0805EE511EAAA52DE47C4F9AE02/5A15EA040D7A11EB9D346C48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:f340:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1f:4e:fb:78:b6:c8:50:75:0a:04:66:56:08:a5:4f:0e:29:2c:
         09:97:58:d0:28:96:66:2f:82:74:01:bd:c4:bf:a1:b6:dc:ab:
         64:bb:5c:34:57:fe:33:b6:18:95:e2:20:ae:92:7b:10:ab:cd:
         13:cb:fd:af:53:80:74:e9:00:13:7e:a7:53:1d:7e:dc:68:30:
         80:16:9c:64:b8:34:2d:52:48:d4:ed:4d:2c:07:3f:08:1e:b9:
         0b:b0:7a:c3:b1:d8:57:68:c8:90:83:21:6a:d8:b3:8d:94:fb:
         6a:bc:ab:8b:98:21:45:81:ae:9f:85:da:1f:65:09:6d:93:7a:
         62:d1:7c:69:62:5a:7c:92:3e:cf:a7:d6:e8:fc:5f:20:c2:e3:
         94:13:6a:39:c5:55:a4:36:ea:31:6a:1b:05:f8:d1:57:06:da:
         fa:cf:be:37:21:fd:95:be:4c:53:9b:3b:2c:8d:c8:8c:4d:be:
         84:0a:67:70:9c:78:79:ed:17:4e:85:72:c9:c1:1c:9b:cb:ee:
         b8:bc:a8:7e:db:9c:78:cc:1c:3c:2b:53:4e:35:7a:d6:bf:57:
         b9:79:09:c3:83:bd:2e:6e:f7:cc:66:61:bb:bc:88:5c:50:57:
         b3:d0:54:38:58:0c:26:67:03:40:82:aa:1f:4f:b9:67:7d:75:
         15:42:1e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:28:10 2026 by rpki-client