Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3D34A750A88111ED80831318C4F9AE02.roa
File:                     3D34A750A88111ED80831318C4F9AE02.roa (raw, json)
Hash identifier:          938kJULjUWq7ERdmvvEpfAsKR6ZtJFQcMkUCxB9CQdI=
Subject key identifier:   20:45:88:6E:89:88:87:62:40:66:94:81:32:EF:CB:D7:F1:55:46:8B
Certificate issuer:       /CN=A917BAC5/serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
Certificate serial:       0376
Authority key identifier: E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3D34A750A88111ED80831318C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:37:51 +0000
ROA not before:           Sat 09 Aug 2025 02:39:24 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     60445
IP address blocks:        2400:9ce0:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl
                          rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 886 (0x376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BAC5, serialNumber=E1088187F64094263DDA6749A95F73AA6C1AB063
        Validity
            Not Before: Aug  9 02:39:24 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a4796f-06dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bb:a3:29:05:ce:d4:27:d3:c3:db:92:67:39:
                    8c:01:5b:a0:5c:6b:2e:c9:0a:d1:06:1c:01:cf:45:
                    79:eb:fb:cc:b3:27:c1:d7:80:de:1a:01:62:10:f3:
                    19:69:0e:8d:ae:dc:d7:0d:b8:31:22:4d:d6:06:19:
                    9d:2c:97:c2:71:8c:f1:0d:4d:59:78:36:1e:69:51:
                    04:a2:aa:ca:c3:ed:ae:b6:ad:11:60:37:a7:b9:a6:
                    bb:5e:3b:0d:38:55:a6:d8:07:66:3f:8a:8f:ca:77:
                    9d:35:1b:86:ce:ff:ab:de:0f:66:c6:70:13:08:bd:
                    69:5a:90:fe:01:49:59:41:e8:e8:7a:d3:74:58:75:
                    16:01:d5:06:5d:f3:6e:57:7e:c7:11:fb:d7:ab:a7:
                    db:a0:8e:24:0b:da:e1:62:8b:e3:0c:00:48:7f:5c:
                    bc:49:7c:4c:4d:42:3d:cd:c9:f1:2f:1d:63:5c:17:
                    29:12:69:15:f4:7b:31:53:a0:d6:2a:7a:d0:af:ea:
                    78:1a:d8:87:2b:d5:ce:e2:7f:58:9d:39:ef:46:7a:
                    18:b0:f7:96:3f:61:40:be:b1:a1:e2:f2:5c:fd:ed:
                    c6:4f:39:22:03:7f:4f:59:4a:8d:fe:73:4c:35:cc:
                    99:90:ee:3c:bf:e3:b1:83:5f:99:d8:2d:9f:65:91:
                    9d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:45:88:6E:89:88:87:62:40:66:94:81:32:EF:CB:D7:F1:55:46:8B
            X509v3 Authority Key Identifier:
                keyid:E1:08:81:87:F6:40:94:26:3D:DA:67:49:A9:5F:73:AA:6C:1A:B0:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/4QiBh_ZAlCY92mdJqV9zqmwasGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4QiBh_ZAlCY92mdJqV9zqmwasGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BAC5/470A6204153011EDBAA3D027C4F9AE02/3D34A750A88111ED80831318C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:9ce0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6d:10:37:52:7a:90:7a:37:a2:01:14:92:d1:84:b7:2c:17:35:
         5d:5e:c9:53:f2:47:db:25:56:05:5a:3f:88:0e:2c:6a:01:1c:
         30:d6:43:b2:7a:a5:b6:47:9a:74:6a:5e:0f:4d:98:49:83:36:
         b4:d6:94:d0:e1:29:31:69:a7:31:c3:4f:c8:e1:f7:1c:56:00:
         fe:d4:5c:ae:37:bd:2e:52:2e:a7:f5:1a:82:4e:f3:c3:a0:2e:
         fc:59:9a:40:8c:ce:3e:b7:0f:62:ef:39:60:b2:00:ea:46:97:
         e7:9b:8e:4d:41:2f:e9:99:dc:6d:74:19:f7:7f:2f:bc:b7:fb:
         6f:59:f6:b0:91:e6:38:4d:80:41:ba:aa:c3:4e:65:62:a4:77:
         a3:c4:39:fc:80:c4:f7:81:73:02:06:22:f4:e7:14:44:48:24:
         f1:e0:87:6c:63:5a:79:d1:bc:3b:42:fc:65:6a:b0:83:5f:8b:
         29:3a:34:2a:74:c3:7e:1c:e7:a1:90:53:60:a4:55:3f:e6:4c:
         fb:b3:f5:72:3e:63:2f:a7:08:cc:03:a5:d6:3d:84:a0:be:5b:
         42:56:14:9e:fc:eb:fa:f6:a9:4a:dd:f7:7b:20:6a:48:47:d8:
         71:83:be:4e:1f:59:3b:ae:2e:2e:fb:e4:03:c8:f8:70:e3:b7:
         91:2f:44:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:15:08 2026 by rpki-client