Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/1E17F340724911E88CAE8E84C4F9AE02.roa
File:                     1E17F340724911E88CAE8E84C4F9AE02.roa (raw, json)
Hash identifier:          q4/0Kgx7jHqES39jz0njEzgoL1GFNzNz9y+SCnN4xmc=
Subject key identifier:   5C:AD:FA:EF:1A:78:11:A9:67:06:05:C9:FD:4F:DE:53:68:96:31:A2
Certificate issuer:       /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial:       1B4B
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/1E17F340724911E88CAE8E84C4F9AE02.roa
Signing time:             Thu 02 Apr 2026 16:20:06 +0000
ROA not before:           Thu 02 Apr 2026 16:20:06 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        2401:3740:374::/48 maxlen: 48
                          2401:3740:375::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
                          rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:15:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6987 (0x1b4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
        Validity
            Not Before: Apr  2 16:20:06 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ce9736-3fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ac:1b:1c:ab:8d:ac:40:8b:23:2b:ed:03:6e:
                    4a:85:0f:54:b5:29:c9:6f:2d:1d:cd:64:6b:50:c2:
                    1f:d5:1f:61:36:e8:60:17:78:20:1d:a7:c3:e9:67:
                    4d:ef:0e:e7:42:c0:d5:d6:98:4e:ba:0f:b5:07:e7:
                    27:43:a2:5a:f0:70:8c:91:03:98:10:17:30:07:d0:
                    4a:e2:45:e4:e8:27:4d:ec:d5:43:48:8f:54:d5:b6:
                    69:e7:56:8d:f8:5e:5e:f7:a2:a5:86:40:5a:d2:84:
                    32:06:7a:fd:34:e1:40:a5:81:0f:23:8e:f3:34:45:
                    15:d9:b3:b3:39:d2:bc:5b:49:9d:9e:70:1c:dd:b6:
                    a7:df:f3:74:a7:38:e6:88:4f:81:d3:8f:59:18:ef:
                    8c:4f:d3:4c:c9:8a:28:c6:82:ba:f4:d0:01:90:b3:
                    c4:74:98:ad:38:0e:f8:6b:02:d1:4c:18:ae:a0:b8:
                    bc:8b:c7:6a:1a:bf:da:24:7d:b4:1a:1f:50:d6:c0:
                    cc:62:07:27:28:63:49:02:52:3c:4b:bc:48:01:d6:
                    a1:83:ea:c9:29:a6:6c:56:4e:1b:ff:f3:02:e9:87:
                    b6:c5:a7:e9:61:d1:8f:39:25:7e:56:4c:a0:0c:cf:
                    3d:60:60:3b:6f:2e:50:0b:2d:e6:ba:ab:a0:1e:e6:
                    90:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AD:FA:EF:1A:78:11:A9:67:06:05:C9:FD:4F:DE:53:68:96:31:A2
            X509v3 Authority Key Identifier:
                keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/1E17F340724911E88CAE8E84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3740:374::/47

    Signature Algorithm: sha256WithRSAEncryption
         61:57:8f:c0:1a:a9:de:81:20:18:d9:52:18:ce:be:61:6f:45:
         c1:79:f9:36:58:d8:23:de:a9:c3:81:2e:99:8b:90:34:58:4a:
         93:20:d7:54:36:9f:c0:a3:96:08:87:d7:e3:d4:f3:43:33:16:
         c1:40:b0:d7:14:c3:79:c2:48:38:64:84:be:1b:fe:85:2a:76:
         4b:9e:dc:69:49:56:98:6f:22:22:71:c8:30:11:8b:98:d7:4f:
         0d:20:bd:2d:7e:25:ea:1d:6e:bf:38:9f:5f:1b:d6:02:ed:cf:
         e1:c9:6e:7d:76:b2:d1:7b:ba:c9:a1:35:ff:8e:46:fc:bb:20:
         9a:27:9f:b1:3b:ee:ff:2d:ad:8a:db:00:d6:2d:04:b7:3d:1b:
         06:9e:08:ef:eb:7e:6d:ba:83:67:bf:26:69:23:ed:80:ea:4f:
         4a:74:0d:ad:c0:24:f9:04:82:65:e7:1a:57:eb:dc:b1:02:1b:
         87:0d:80:e4:14:b4:74:17:05:7a:99:1b:57:79:08:79:e2:84:
         3d:df:d0:2f:73:61:c1:9c:4d:a9:78:0f:43:67:d1:55:6c:0f:
         0b:10:b2:a9:d0:6a:17:3d:cf:3a:02:3b:3c:bc:45:2d:09:ec:
         28:a7:26:40:48:f7:c7:73:03:34:9e:0c:6e:20:70:15:8c:8b:
         6d:11:b5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:07 2026 by rpki-client