Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/22E2E3C24E2911EF8BEE8E10C4F9AE02.roa
File:                     22E2E3C24E2911EF8BEE8E10C4F9AE02.roa (raw, json)
Hash identifier:          GIOvMbMD5vyLLmNcLyolZjNKiuNk0ohZ2lFl3desGOE=
Subject key identifier:   C4:78:9E:FE:F8:46:52:0B:D0:CB:E2:42:31:0A:FE:EE:CE:63:7B:F4
Certificate issuer:       /CN=A91752F4/serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
Certificate serial:       3105
Authority key identifier: 67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/22E2E3C24E2911EF8BEE8E10C4F9AE02.roa
Signing time:             Thu 04 Jun 2026 16:17:35 +0000
ROA not before:           Thu 04 Jun 2026 16:17:35 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     4851
IP address blocks:        2402:e400::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl
                          rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12549 (0x3105)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91752F4, serialNumber=67ED556A3C5C4BFC27CA158A5977564C3207CECA
        Validity
            Not Before: Jun  4 16:17:35 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a21a51f-1c85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e4:b1:db:df:00:bf:ad:4b:b0:de:8a:00:89:
                    01:c0:53:e0:ea:6f:02:ee:07:24:c5:3f:7e:da:73:
                    61:33:01:16:58:99:42:e6:29:49:0f:67:b3:a1:0d:
                    c0:d9:4c:16:6f:9d:a1:4f:5c:74:30:e6:db:f0:76:
                    b1:3f:d3:2e:e2:df:82:a9:62:3d:1d:f4:e8:c5:f0:
                    ba:0a:fe:53:87:d3:92:dc:d2:54:40:97:a1:38:79:
                    eb:91:2d:44:b9:18:81:be:e0:f6:e1:9c:e9:cf:3c:
                    64:80:fb:86:2c:c8:03:a7:33:c3:52:62:82:52:74:
                    be:65:16:f4:6a:38:8b:fe:1e:82:05:57:0e:5a:36:
                    dd:ed:b7:8a:aa:af:ca:f1:3d:0c:01:ea:18:98:4d:
                    3b:ff:20:b3:76:cb:93:fd:ee:fc:88:43:77:95:ee:
                    a3:cd:c1:56:5c:f4:1c:b4:21:17:52:3b:57:54:ed:
                    08:1c:20:b9:b9:6f:19:51:30:fb:3d:4f:8e:43:88:
                    7d:ed:f9:fe:e9:b1:6e:e0:48:36:4a:c9:d6:39:9f:
                    51:93:8c:43:35:95:74:a8:2a:51:71:bd:04:e7:31:
                    11:19:e3:7d:0e:e1:49:29:11:62:62:4b:d0:27:ff:
                    5b:be:8e:9d:3f:2e:da:e5:db:80:23:4d:38:61:40:
                    32:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:78:9E:FE:F8:46:52:0B:D0:CB:E2:42:31:0A:FE:EE:CE:63:7B:F4
            X509v3 Authority Key Identifier:
                keyid:67:ED:55:6A:3C:5C:4B:FC:27:CA:15:8A:59:77:56:4C:32:07:CE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/Z-1VajxcS_wnyhWKWXdWTDIHzso.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z-1VajxcS_wnyhWKWXdWTDIHzso.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91752F4/80164F4EF8BC11E2AD91813B5911EA32/22E2E3C24E2911EF8BEE8E10C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e400::/32

    Signature Algorithm: sha256WithRSAEncryption
         20:b4:9f:32:e8:7c:a9:a7:1c:74:62:85:b9:0e:c7:6f:ff:49:
         9c:c4:2b:c2:06:86:91:3a:34:66:bd:22:ef:15:8b:05:db:67:
         1e:a7:cc:b4:95:c7:50:eb:2e:35:bd:cb:48:ef:89:fb:1a:7a:
         aa:46:06:30:0c:38:04:1d:43:73:78:24:e2:59:57:38:b6:c2:
         8e:4a:b7:72:6a:0b:53:57:86:a5:b9:9e:b3:37:5a:1c:39:44:
         d0:43:0d:90:9a:44:e3:08:51:af:40:66:c7:10:7c:d6:c8:0b:
         f0:44:4b:a2:8d:46:b0:29:fe:25:6e:d2:54:a9:34:8c:9d:25:
         13:c1:ea:09:08:b4:93:73:e1:46:e2:43:08:07:bb:f7:78:df:
         11:70:bf:30:34:50:e2:3d:48:ac:12:f3:31:98:ea:d1:a3:5e:
         7a:91:a9:cb:3a:bc:b0:3e:18:c0:ad:da:db:b9:5b:50:9e:07:
         8a:e8:7d:7a:cf:ec:b1:71:4a:35:b9:f1:db:75:55:03:10:53:
         0e:22:06:10:8e:3f:c9:82:43:19:52:23:13:c2:4f:92:73:7e:
         5f:0b:33:8e:76:86:00:b6:48:7e:c6:1c:67:aa:f8:8b:59:9b:
         d8:82:73:19:ee:7e:99:e2:80:4f:9f:31:1a:5e:3b:d6:0b:12:
         ad:1d:b0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:49:23 2026 by rpki-client