Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/6BD285BA971D11EE9333CE70C4F9AE02.roa
File:                     6BD285BA971D11EE9333CE70C4F9AE02.roa (raw, json)
Hash identifier:          c0Y/zD1hDO0xX5inm2RCPbrtRvJJksa8YDfXyiTRUBY=
Subject key identifier:   55:FA:25:7A:73:09:F1:2B:C4:45:E5:96:14:E6:37:1D:53:19:92:D6
Certificate issuer:       /CN=A917E42D/serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
Certificate serial:       01B7
Authority key identifier: 5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/6BD285BA971D11EE9333CE70C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:06:17 +0000
ROA not before:           Wed 01 Oct 2025 05:01:55 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     151374
IP address blocks:        121.50.48.0/21 maxlen: 24
                          2400:ac00::/32 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl
                          rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 439 (0x1b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917E42D, serialNumber=5A7C384B296CFC7F24260F05108D67D60C6EADCE
        Validity
            Not Before: Oct  1 05:01:55 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a439c9-f913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:22:dc:d9:22:20:8b:ab:bd:1e:13:65:1d:fd:
                    42:ae:3a:40:dd:09:bb:09:ee:10:ce:96:84:24:fb:
                    f1:7f:f8:0b:82:68:57:16:de:cc:58:6a:0e:e6:f5:
                    97:c5:58:5e:89:3f:a3:02:8f:75:4b:7c:fa:f6:73:
                    90:6a:c1:cc:2b:7f:33:08:e1:4b:c5:ea:81:13:ef:
                    b6:58:11:3f:d2:8a:65:a6:98:fb:0f:67:d1:42:cc:
                    c8:11:e3:f5:76:9e:f3:b2:7f:d4:13:7e:4d:5a:62:
                    5a:3d:c5:01:59:27:5d:36:0e:52:78:f3:0c:11:b9:
                    9d:ac:99:06:3f:6d:4f:42:fd:91:4e:c7:fa:a4:36:
                    b3:1b:af:02:ff:c3:c4:ad:f3:02:08:66:68:e0:4f:
                    1b:59:c1:68:a9:7c:70:ac:56:7b:0d:02:c0:99:78:
                    b8:bd:97:46:0f:78:58:92:d0:c8:69:cd:bd:96:91:
                    64:a4:34:d9:78:36:0f:f4:5c:2e:6c:ab:3c:df:c9:
                    fa:c6:61:14:e1:62:8f:75:ab:54:2c:71:5e:de:ec:
                    b5:a3:7a:e6:0b:4f:65:88:db:72:32:b2:53:cd:e4:
                    71:0a:02:2c:76:ce:de:be:83:06:a2:70:e6:27:35:
                    c4:fc:6a:3d:92:a3:2f:2c:f6:30:ba:c4:05:52:83:
                    03:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:FA:25:7A:73:09:F1:2B:C4:45:E5:96:14:E6:37:1D:53:19:92:D6
            X509v3 Authority Key Identifier:
                keyid:5A:7C:38:4B:29:6C:FC:7F:24:26:0F:05:10:8D:67:D6:0C:6E:AD:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/Wnw4Syls_H8kJg8FEI1n1gxurc4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Wnw4Syls_H8kJg8FEI1n1gxurc4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E42D/66315CC0963311EEA3AAC418C4F9AE02/6BD285BA971D11EE9333CE70C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.50.48.0/21
                IPv6:
                  2400:ac00::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:aa:af:53:f9:73:46:2f:be:16:27:ef:6f:ca:ed:ba:8a:ab:
         08:ab:a4:ac:58:70:f6:70:f2:30:e4:88:a2:68:44:3c:19:a8:
         38:9b:ba:7e:39:66:40:e3:70:0f:44:71:22:3f:3f:dc:c7:a9:
         a2:2c:ce:e5:67:bb:ca:15:89:ed:ab:74:14:57:2d:db:65:e2:
         5e:a3:b0:0e:56:9c:98:2b:e1:c0:d1:6f:1b:99:8c:cd:c4:c0:
         bc:d7:1d:cb:2c:87:e9:15:57:ad:f4:88:f1:2c:05:e6:b9:39:
         ca:c4:fe:b3:25:33:2b:5e:24:08:5a:85:65:f8:2e:71:06:c4:
         b3:8d:c6:01:e8:45:95:08:bf:a6:5c:86:bc:ec:68:c4:8b:02:
         c6:6d:39:f5:3c:97:a4:f1:59:d2:8d:0c:16:65:f8:2b:d6:30:
         d0:f8:b8:e5:32:ef:30:82:de:e5:ff:81:3d:b7:f8:30:b5:c6:
         bc:42:bf:10:01:27:96:a8:e7:b6:6d:46:a4:ab:c8:a2:50:ea:
         79:12:22:0c:db:ae:4f:0f:11:78:f3:f9:ad:58:23:db:d9:9b:
         3f:88:0a:c9:be:4e:85:4f:79:ad:38:6d:4e:75:b5:67:9b:35:
         5b:d6:68:7e:16:e9:21:a8:32:dc:9d:f2:6e:21:8f:5b:6b:d6:
         57:cf:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:32 2026 by rpki-client