Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/455D199EE38B11EE84566164C4F9AE02.roa
File:                     455D199EE38B11EE84566164C4F9AE02.roa (raw, json)
Hash identifier:          gOV5rPqQrYO4YVfNAWomUe0MtcUzLHbDhM46sP91PRA=
Subject key identifier:   58:A0:92:C7:98:1A:88:1C:5F:C7:B9:B5:CD:CC:A8:A0:15:27:55:70
Certificate issuer:       /CN=A9190CC7/serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
Certificate serial:       02A3
Authority key identifier: E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/455D199EE38B11EE84566164C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:52:02 +0000
ROA not before:           Tue 13 Jan 2026 01:21:13 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     152639
IP address blocks:        2001:df2:3dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl
                          rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:33:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 675 (0x2a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190CC7, serialNumber=E7CE19A1785522815DAB63FF66DB6F8903FCF9FA
        Validity
            Not Before: Jan 13 01:21:13 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a46eb2-6fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:4c:ae:2f:35:1f:d5:05:e6:5f:86:50:3d:9e:
                    d7:68:7c:f4:b8:12:16:47:d4:3c:f8:79:fe:10:85:
                    6a:11:01:49:2a:c7:95:28:f9:8f:2d:58:93:64:9d:
                    5f:c1:51:05:b7:e9:d9:ba:8b:76:b6:f2:9b:9b:b1:
                    f9:c8:d4:e6:ae:03:65:39:96:6b:16:90:c1:4c:29:
                    14:ef:c9:89:03:de:d3:d9:a1:c7:50:bc:ba:14:54:
                    9c:2a:53:c4:60:28:13:33:66:82:df:88:eb:4b:41:
                    50:09:37:fb:bb:44:b4:14:9a:05:44:d3:1e:d7:80:
                    a7:6a:f2:bf:b5:1b:14:ea:fb:82:d0:4a:87:6d:51:
                    5d:eb:f8:ed:dd:9b:71:aa:f2:5e:db:51:b1:0f:64:
                    58:50:f3:68:e8:a9:f6:4a:39:02:06:8c:f8:86:1d:
                    3d:e0:66:ff:53:1f:eb:78:ff:d9:cd:8b:5d:b7:3f:
                    70:ad:6d:01:5f:ef:59:86:e8:b2:ca:ab:5c:e5:d8:
                    1a:c1:3a:ac:71:fa:6b:9c:92:f6:aa:98:4a:ab:66:
                    5d:b2:ff:12:61:d1:23:e4:1e:84:f9:ae:43:31:e8:
                    68:78:5d:a6:30:b1:d6:81:27:91:97:50:dc:ba:da:
                    83:ca:e7:08:7a:b2:fd:6b:2c:1d:6f:cf:ae:c8:22:
                    9e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A0:92:C7:98:1A:88:1C:5F:C7:B9:B5:CD:CC:A8:A0:15:27:55:70
            X509v3 Authority Key Identifier:
                keyid:E7:CE:19:A1:78:55:22:81:5D:AB:63:FF:66:DB:6F:89:03:FC:F9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/584ZoXhVIoFdq2P_ZttviQP8-fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/584ZoXhVIoFdq2P_ZttviQP8-fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190CC7/034FC61A641511ED98F2E554C4F9AE02/455D199EE38B11EE84566164C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:3dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:01:e3:3f:fa:82:af:c0:78:53:b5:b8:d6:7f:de:54:31:95:
         70:c4:1f:90:f1:bc:37:16:fa:f1:53:3c:0c:20:ff:49:a4:83:
         71:73:1d:38:70:a0:b4:da:cb:56:eb:66:3f:be:7b:b8:10:9e:
         ac:4c:07:12:02:29:6c:0b:31:66:6c:60:b2:b9:d1:2e:ce:58:
         c9:56:7d:db:bd:71:5c:21:15:70:54:74:46:4c:fd:98:07:8c:
         53:39:c3:3c:68:99:b6:5d:9c:0b:50:83:53:4a:0d:6b:66:43:
         8a:d0:d1:a8:02:d9:93:ce:b4:9b:c2:f3:d8:3d:af:14:56:5e:
         95:1c:0b:d5:6b:bb:6b:65:ae:4d:eb:be:f0:f0:d6:62:1e:ad:
         17:d7:e1:ca:66:ac:93:9f:80:dc:70:97:b9:ee:7b:22:1d:f8:
         ff:1e:c9:dd:ee:70:ea:3c:fc:75:45:e0:77:fe:ce:bf:cd:79:
         7d:e9:59:7d:e9:24:10:99:32:e3:1c:ca:76:90:af:50:29:a8:
         83:32:a6:a3:c3:82:cc:c3:88:44:15:e9:1a:dc:46:64:25:98:
         54:69:37:0a:05:56:4c:a7:00:ee:f2:32:64:e5:cf:4d:48:e4:
         44:df:b7:78:e1:ba:39:9b:68:c8:41:69:d5:7e:d0:6d:9e:09:
         d8:89:25:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:09:00 2026 by rpki-client