Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7379A9A02FB11F09EE8E723C4F9AE02.roa
File:                     B7379A9A02FB11F09EE8E723C4F9AE02.roa (raw, json)
Hash identifier:          bi+gHqRvnNozmaHSoKAlhhkNE4fvN1P9ct7uE+hcVRk=
Subject key identifier:   97:28:DF:C4:49:2F:53:63:ED:0B:94:66:62:FA:01:8A:52:0F:5C:11
Certificate issuer:       /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial:       D848
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7379A9A02FB11F09EE8E723C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 22:54:10 +0000
ROA not before:           Thu 08 May 2025 16:29:13 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     153270
IP address blocks:        2001:df5:15c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
                          rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 07:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55368 (0xd848)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
        Validity
            Not Before: May  8 16:29:13 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a4c392-2e06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:92:67:5a:7d:ea:8b:f1:ce:6a:51:d8:dd:
                    bf:51:fa:96:fe:70:e2:45:ec:24:52:3b:43:94:a1:
                    a1:6f:8c:97:13:87:77:3c:be:49:57:71:65:aa:59:
                    e2:6d:0c:7d:1a:1d:b9:6d:6f:08:c8:3b:22:47:0b:
                    f3:f1:50:9a:15:1c:36:48:ad:f0:15:8e:1c:6d:3e:
                    e6:01:4d:cc:04:25:1b:8b:b3:12:ed:e3:88:fa:5f:
                    23:20:8e:ec:b3:b7:10:6c:cb:39:00:b5:28:97:78:
                    b7:d6:3e:f3:d7:a5:94:1a:32:76:09:60:53:f7:cf:
                    c8:b5:c7:3d:fd:a3:5d:d6:11:4a:9c:9c:ef:58:38:
                    8c:3f:30:5c:38:d5:0c:d2:ee:07:79:d3:06:43:2a:
                    a4:88:12:b3:aa:3e:49:89:a9:e4:89:2d:53:4a:7a:
                    f2:af:98:1b:9b:1a:fe:73:96:97:4f:95:86:b8:4e:
                    7b:32:eb:af:45:2d:42:9c:af:14:22:e7:d9:a2:c5:
                    c4:4e:f3:0c:08:1c:98:2f:88:f6:62:ce:bb:fd:c7:
                    e1:77:e0:b4:f3:e1:c0:e2:f1:1f:90:ab:72:5b:bd:
                    55:a3:56:21:d3:22:7e:9c:38:41:4b:20:06:99:ec:
                    71:8f:82:0a:9c:eb:40:79:4f:0d:ea:fb:77:52:8a:
                    db:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:28:DF:C4:49:2F:53:63:ED:0B:94:66:62:FA:01:8A:52:0F:5C:11
            X509v3 Authority Key Identifier:
                keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/B7379A9A02FB11F09EE8E723C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:15c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:51:b2:d3:78:9f:5a:eb:30:d2:95:eb:4e:cf:5b:53:97:7e:
         8b:dd:7b:9c:56:17:58:c8:11:5a:eb:d8:34:f2:81:13:6d:7e:
         8a:19:6e:6e:11:ea:cb:67:9e:3a:fb:90:d2:12:43:8e:5c:95:
         3c:e8:28:d9:bd:18:f9:ca:0c:96:a4:0a:25:00:a1:19:f7:1f:
         28:7c:39:0e:7d:37:60:07:fd:64:a4:13:08:b7:ac:e9:1c:49:
         45:7c:83:42:3e:47:41:e7:78:f4:e8:b9:5f:09:ff:bd:62:d4:
         62:93:41:f4:fc:3b:f0:29:78:cf:7f:53:f8:46:9a:fd:37:25:
         52:b7:93:bf:60:39:61:ed:59:53:1d:fe:54:2d:2a:75:f1:70:
         05:98:96:e2:a2:9c:f0:83:eb:ea:d8:ec:dc:d3:ec:8c:32:8d:
         98:93:ab:8a:67:bb:a2:94:d7:17:53:1a:ed:8f:d5:62:ef:e6:
         9b:12:81:bd:bd:ac:49:e7:ce:9e:65:88:78:60:ff:7f:13:4c:
         b7:8b:c4:e9:5b:c7:04:b8:cc:9e:d9:33:88:2a:03:c3:e0:be:
         a2:a4:f2:dd:17:29:31:9e:a5:bc:58:e6:6c:99:c9:d0:9d:c8:
         53:59:0b:1e:76:2f:76:7f:84:e3:d6:08:3e:3f:72:1c:c2:59:
         e0:48:f5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:09:26 2026 by rpki-client