Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/7404496836E411F0A95FB239C4F9AE02.roa
File:                     7404496836E411F0A95FB239C4F9AE02.roa (raw, json)
Hash identifier:          qJ7524YAscm+xf2ckiU9VWuAvVs5iHMseuM90BOMC/0=
Subject key identifier:   7D:D2:35:FD:E4:46:6B:F0:95:F7:E1:AD:9F:E4:7D:FD:05:9E:52:F6
Certificate issuer:       /CN=A9187BAC/serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
Certificate serial:       E8
Authority key identifier: A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/7404496836E411F0A95FB239C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:18:55 +0000
ROA not before:           Sat 07 Feb 2026 06:24:44 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     139358
IP address blocks:        2001:df4:e141::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl
                          rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:39:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 232 (0xe8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187BAC, serialNumber=A29B1B6809CEC1A92470C59C6C36BFA5CF387186
        Validity
            Not Before: Feb  7 06:24:44 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a466ef-ca57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:88:31:05:a0:90:96:57:eb:49:64:df:c4:
                    15:7e:43:f4:56:e9:4b:1c:eb:07:c5:df:9b:48:e0:
                    04:5f:69:c7:e3:a9:4a:14:97:8f:49:bf:b7:27:a5:
                    6b:85:5c:54:01:e7:ad:0b:99:cc:9d:72:67:cb:29:
                    d9:b1:0a:70:93:f1:c6:e8:da:49:ba:a9:0e:16:2c:
                    02:8d:22:9e:fc:71:95:6e:0a:6d:ec:11:72:3d:ba:
                    f4:d3:92:56:5f:08:dc:f2:87:67:9c:87:a9:eb:7d:
                    c5:8a:61:a1:5d:88:8b:7c:66:f1:5a:8b:75:5b:f9:
                    a0:2c:48:cf:70:e0:ed:dd:b4:04:64:3d:d4:f0:03:
                    87:bb:b4:dc:a7:c0:d6:58:b4:d7:3c:90:03:df:1c:
                    c7:b4:23:b5:54:c7:25:94:dc:3d:ce:7e:7b:c7:b3:
                    cf:7b:75:cc:f5:21:0f:f6:9a:bf:de:bd:55:89:89:
                    0a:c4:28:29:69:55:65:55:e4:e0:a9:76:1c:1c:3b:
                    50:88:4e:98:0f:9c:74:eb:c2:e4:71:eb:cb:99:2b:
                    fd:02:7d:2e:4a:21:e5:88:3b:32:05:b0:21:3c:79:
                    62:32:43:4c:c1:40:96:ae:60:33:67:fd:48:97:f4:
                    d7:2c:3e:fe:8c:16:aa:7b:e6:eb:52:ae:d4:c2:43:
                    0d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D2:35:FD:E4:46:6B:F0:95:F7:E1:AD:9F:E4:7D:FD:05:9E:52:F6
            X509v3 Authority Key Identifier:
                keyid:A2:9B:1B:68:09:CE:C1:A9:24:70:C5:9C:6C:36:BF:A5:CF:38:71:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/opsbaAnOwakkcMWcbDa_pc84cYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/opsbaAnOwakkcMWcbDa_pc84cYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187BAC/C6AD3E0AD02C11EFB5584915C4F9AE02/7404496836E411F0A95FB239C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:e141::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:48:36:00:ba:34:2e:25:20:72:c3:ec:4d:4c:a7:03:7a:dc:
         c1:54:af:ea:09:1e:15:7d:ef:72:0a:f0:f7:ca:95:3a:bb:fc:
         be:9f:25:a5:23:81:c1:a8:b6:4a:ea:83:00:f7:2f:d3:45:9f:
         17:18:b3:26:9f:39:b5:6e:8d:9d:61:f1:7d:64:d0:d5:b3:d5:
         b2:f9:15:d5:d4:74:91:da:a9:27:75:d2:a2:e4:a0:ad:25:71:
         2c:32:bd:ff:1e:c6:14:53:92:29:cf:46:3f:c4:b9:68:56:33:
         2a:fe:14:b9:da:22:f8:3f:77:91:4f:11:67:be:4e:71:3a:78:
         ad:0a:4e:23:67:7b:0b:e2:d3:6d:ef:7d:43:6d:d7:2a:d9:20:
         b5:b0:e3:2e:c5:08:6e:5a:f0:13:c9:e2:cb:96:b8:48:03:6d:
         c9:24:eb:75:c5:a0:14:b5:b6:50:c5:f0:36:dd:e7:41:a0:e8:
         04:8b:6c:06:60:6f:30:d9:60:cb:aa:34:6a:e7:90:16:1b:b9:
         d1:af:97:95:bf:6e:77:77:db:b0:fb:7d:85:35:2f:e0:f2:bc:
         27:35:02:20:d5:47:49:7c:34:6d:15:f8:22:8a:2c:a3:40:be:
         5c:ca:da:39:3f:22:18:a1:e2:98:ef:1e:86:f5:52:3e:e0:6a:
         20:26:84:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:48:54 2026 by rpki-client