Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/18611004B42A11EC9BD3DE42C4F9AE02.roa
File:                     18611004B42A11EC9BD3DE42C4F9AE02.roa (raw, json)
Hash identifier:          F7zelpLk1UD+fObDTKpqTOpRawAblSrVeJkuuPP4a6c=
Subject key identifier:   58:71:88:52:D0:5E:9D:99:B8:FD:BC:6D:24:0D:E3:75:F6:BA:05:45
Certificate issuer:       /CN=A9170E11/serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
Certificate serial:       0510
Authority key identifier: 3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/18611004B42A11EC9BD3DE42C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:24:32 +0000
ROA not before:           Sat 31 Jan 2026 00:19:31 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     206434
IP address blocks:        2400:3e20:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl
                          rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:40:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1296 (0x510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170E11, serialNumber=3D6447D7297483294ECECB853A5E500935D1B8D7
        Validity
            Not Before: Jan 31 00:19:31 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47650-d9f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cd:5c:e6:75:3f:82:9f:b3:9e:a8:9f:c8:0b:
                    27:2b:8a:97:e1:0b:92:49:52:13:e0:66:07:83:19:
                    65:9c:e0:18:7e:13:bb:13:dd:3c:d5:cc:3f:b1:d5:
                    0a:93:d4:d0:a1:b9:bb:1f:37:02:7f:57:fa:66:69:
                    20:5e:a3:18:d3:13:a3:05:f0:5e:30:32:71:9c:b9:
                    ed:09:8a:dd:65:51:08:12:eb:64:72:1b:9d:d7:c2:
                    7b:fd:51:92:6f:84:bc:6f:00:25:c9:b7:2c:a8:dc:
                    ec:e8:f0:bc:82:6f:ae:f3:8f:2e:e5:fe:14:25:00:
                    ac:58:75:dd:c3:d8:bc:38:c6:45:09:5a:b8:b4:fb:
                    fb:8d:65:74:48:76:1e:a7:2b:5f:52:18:3c:68:7f:
                    e4:8c:91:1d:e8:da:0f:45:7b:d5:f1:93:cb:55:97:
                    d4:11:1f:e7:6a:fe:11:a6:9d:cb:99:35:cb:ff:78:
                    49:20:8a:47:7c:53:68:58:e3:84:a2:67:45:b6:74:
                    3b:9a:38:c2:3f:16:09:b6:46:b4:74:2a:f8:dc:c5:
                    b2:27:6f:6a:de:1a:31:c4:1a:8f:31:74:12:84:f6:
                    b6:18:e7:43:d7:3e:ad:0a:57:9d:78:b5:72:ff:22:
                    46:0c:ab:4e:bf:bf:50:ca:eb:be:c8:8b:8e:10:c4:
                    e8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:71:88:52:D0:5E:9D:99:B8:FD:BC:6D:24:0D:E3:75:F6:BA:05:45
            X509v3 Authority Key Identifier:
                keyid:3D:64:47:D7:29:74:83:29:4E:CE:CB:85:3A:5E:50:09:35:D1:B8:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/PWRH1yl0gylOzsuFOl5QCTXRuNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PWRH1yl0gylOzsuFOl5QCTXRuNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170E11/D060C9B25BD611ECAD833651C4F9AE02/18611004B42A11EC9BD3DE42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:3e20:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         96:44:a8:9a:df:cc:20:6e:ec:5d:69:22:6c:2e:31:69:08:e3:
         0a:83:ee:52:5c:3f:f2:ed:9e:d8:b2:0d:8a:34:65:9d:fa:2f:
         6b:f3:cd:3e:06:71:45:c0:72:58:de:53:97:d1:f4:13:e5:8e:
         4f:38:90:a1:90:75:ff:3c:5b:88:b1:31:44:48:33:4b:d6:b6:
         0d:6a:9b:82:cc:1f:af:82:18:ba:43:9a:b4:6c:a6:ee:eb:66:
         71:ea:98:66:84:e3:ac:9a:c7:a8:41:71:8f:53:49:c8:6f:af:
         04:57:70:5a:fa:e9:83:bb:61:0c:4d:39:e4:37:c1:31:1e:fc:
         4c:13:41:15:15:c7:d0:a3:10:85:55:bc:6d:8a:d4:0f:05:38:
         15:7c:95:f6:5a:5e:df:5c:7f:f0:b5:c3:df:82:59:40:8b:74:
         7c:ee:1f:fa:9b:19:fa:dd:a9:20:0c:ec:ba:8f:38:d0:9e:77:
         b7:b5:12:78:f0:25:10:f6:d6:49:fc:03:e5:07:cf:6d:17:58:
         9f:8e:7b:32:02:a3:23:c6:0c:30:5c:b8:20:3f:a8:a8:b6:66:
         e9:28:03:40:02:f1:8e:57:67:e0:74:18:07:5d:82:ad:ac:b4:
         7c:b6:a1:91:76:3a:ce:9a:dc:a9:57:c1:b4:7c:c7:12:e0:e2:
         e8:fc:d5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:18:48 2026 by rpki-client