Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/027532E6385F11EAA879692AC4F9AE02.roa
File:                     027532E6385F11EAA879692AC4F9AE02.roa (raw, json)
Hash identifier:          zmQ9A/lcBUnjJnBlCqaFgeAg9dsA076fd2DTYjhD0KY=
Subject key identifier:   BD:60:83:02:A2:C0:1F:0C:06:57:F5:81:5E:31:20:54:72:5E:ED:A3
Certificate issuer:       /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial:       252E
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/027532E6385F11EAA879692AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:53:29 +0000
ROA not before:           Fri 02 May 2025 16:23:21 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     24047
IP address blocks:        2001:200:1ba::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
                          rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9518 (0x252e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
        Validity
            Not Before: May  2 16:23:21 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a460f9-40ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a8:04:4e:98:b0:b4:0e:1c:fa:b3:c4:1d:07:
                    50:40:e6:93:56:1a:c4:1a:af:aa:8e:d2:bc:bc:a1:
                    f5:9b:84:f1:92:25:9f:55:29:77:eb:5e:f5:7c:cf:
                    2c:70:83:f0:82:6f:cc:b9:b2:a0:3f:a0:ee:ac:ca:
                    37:98:43:3f:52:bf:18:f2:e1:75:04:23:d7:01:ee:
                    f1:10:8e:61:eb:be:0e:13:e3:58:fe:04:c8:5c:31:
                    b8:80:b8:7e:2b:78:53:5a:7a:0b:82:86:6b:de:11:
                    8e:0d:f5:eb:81:6b:23:c7:b4:3d:1f:50:3d:a4:8b:
                    8b:ac:c9:09:53:e5:14:fe:e1:b0:43:47:89:e2:a1:
                    77:2f:41:1d:f6:a1:aa:d4:01:77:ff:d4:61:d4:cc:
                    ec:d5:c3:e0:07:9d:03:3c:06:fe:d8:e6:6b:9e:92:
                    8b:8a:d5:db:b4:bf:13:27:aa:63:a6:9b:fa:76:31:
                    47:f6:1a:62:5f:7c:26:52:f8:01:ea:38:d9:d4:c3:
                    09:af:aa:ec:09:00:41:37:73:9e:10:5b:c3:71:62:
                    0a:06:c9:14:d5:25:79:fa:08:4b:ea:f4:97:6b:43:
                    93:7a:3f:58:37:96:2a:3c:29:08:48:de:0d:74:73:
                    ba:e8:45:77:6e:c4:43:9d:51:22:b4:e6:bf:8c:c3:
                    59:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:60:83:02:A2:C0:1F:0C:06:57:F5:81:5E:31:20:54:72:5E:ED:A3
            X509v3 Authority Key Identifier:
                keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/027532E6385F11EAA879692AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:200:1ba::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:63:fd:fe:10:59:9d:ba:cd:4f:9e:3f:83:f9:04:2f:a2:5f:
         22:13:ab:13:f2:5f:74:2e:20:3e:24:b1:c3:32:f4:80:f7:89:
         34:5d:ed:c4:b9:ad:9f:2a:e6:51:1c:6c:fe:e6:6f:d4:82:cc:
         14:d5:98:5d:17:f1:08:2b:5c:3f:ae:76:29:09:b9:66:40:48:
         17:40:08:96:6d:36:9b:fc:13:6d:4f:90:f3:a7:ca:f2:95:98:
         14:3c:44:d0:2f:1a:57:7c:40:08:96:bf:1d:a7:c9:ee:51:88:
         e6:ab:5f:57:be:1c:1f:42:a6:a6:bf:2d:c4:4a:b6:e4:64:49:
         e5:1f:f7:79:1c:1b:59:4f:2f:ec:07:d8:de:3f:82:3c:87:ef:
         51:6f:ad:0c:83:23:bb:60:11:5e:d1:7d:ef:a5:d8:b3:01:87:
         9d:0c:44:d9:9a:68:04:24:53:8a:4d:33:17:14:63:1e:73:60:
         fc:4a:9a:c2:2e:c9:9f:b0:b0:ef:37:8f:f3:bf:11:81:3c:1c:
         ed:1c:37:df:63:56:c5:80:e9:f0:7a:51:e1:a0:bd:5b:82:b1:
         4a:83:92:f2:75:22:ec:73:09:24:03:d6:d6:a6:3a:d1:06:9c:
         2a:a8:26:b6:aa:c8:af:fa:fc:ca:6e:0c:51:f0:d6:02:84:ed:
         7d:97:6a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:52:11 2026 by rpki-client