Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/1E17F340724911E88CAE8E84C4F9AE02.roa
File:                     1E17F340724911E88CAE8E84C4F9AE02.roa (raw, json)
Hash identifier:          ar4CjDKEwiv8hNV8LHXTUs+z+lADBs8QY5ug8DjXXe4=
Subject key identifier:   52:FD:DC:6A:D9:55:FF:93:3F:AD:6C:78:61:4B:0A:40:A7:B8:E5:E7
Certificate issuer:       /CN=A919F6A8/serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
Certificate serial:       1B32
Authority key identifier: F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/1E17F340724911E88CAE8E84C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:34:06 +0000
ROA not before:           Fri 04 Apr 2025 16:45:08 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     20473
IP address blocks:        2401:3740:374::/48 maxlen: 48
                          2401:3740:375::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl
                          rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6962 (0x1b32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F6A8, serialNumber=F7D74C7FB8B0BAEFC3635CD4E35048AF88E39EEF
        Validity
            Not Before: Apr  4 16:45:08 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a44e5d-a160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0d:a0:bd:23:82:1a:68:3a:af:87:6e:cd:04:
                    2a:5e:1a:60:05:67:99:a6:98:02:87:b4:48:50:9e:
                    79:a8:53:73:be:85:ce:0e:4b:da:13:91:55:21:68:
                    f9:cb:9d:45:e8:ae:f9:40:42:ac:6d:a2:b7:00:92:
                    4c:52:9d:a8:26:ee:ee:c3:50:05:fe:70:36:52:bc:
                    19:d3:45:aa:ff:8c:20:10:90:e6:65:57:e6:93:c1:
                    b6:09:50:eb:39:de:87:4a:93:d3:81:ba:87:69:f5:
                    95:b0:dd:c5:9d:13:ec:91:cb:58:ea:a5:06:b6:4c:
                    c7:2d:1b:cb:83:7b:6d:8f:5c:9a:6e:93:e2:da:91:
                    8c:4c:ad:e9:0b:c1:8a:1f:e7:12:9c:c2:97:7b:86:
                    b9:1e:fa:69:ed:53:25:39:29:9c:3d:18:18:f0:18:
                    4e:1a:58:81:99:06:f4:d8:5f:53:33:13:d1:7c:ec:
                    a1:ba:0b:99:dc:36:cb:ad:90:48:ba:83:8b:2a:12:
                    a0:c7:a0:8b:d3:3d:e4:5c:50:72:4f:23:17:82:20:
                    ca:e7:35:61:db:de:99:55:af:4f:e3:16:db:a5:a4:
                    53:d6:c7:fe:70:49:dd:73:9c:c3:0b:54:7f:f5:d0:
                    34:61:df:20:62:2a:64:d9:b9:20:68:de:5e:c1:61:
                    75:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:FD:DC:6A:D9:55:FF:93:3F:AD:6C:78:61:4B:0A:40:A7:B8:E5:E7
            X509v3 Authority Key Identifier:
                keyid:F7:D7:4C:7F:B8:B0:BA:EF:C3:63:5C:D4:E3:50:48:AF:88:E3:9E:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/99dMf7iwuu_DY1zU41BIr4jjnu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99dMf7iwuu_DY1zU41BIr4jjnu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F6A8/F3BD4C3649CB11E7A4A87C7BC4F9AE02/1E17F340724911E88CAE8E84C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3740:374::/47

    Signature Algorithm: sha256WithRSAEncryption
         0f:e3:1a:c2:9f:46:19:53:eb:75:94:99:4d:e4:40:c9:9f:de:
         4c:b3:dc:49:aa:92:b7:53:e1:a0:f8:7c:81:2f:e7:92:ea:6f:
         e7:41:d1:6d:28:17:9b:f6:74:3f:90:68:fe:6f:00:be:2e:0f:
         5c:de:10:16:23:c3:2a:74:35:7d:86:8d:cc:de:d6:a4:45:c1:
         b3:be:7d:7b:0b:b9:45:dc:8f:c8:d8:41:0a:6f:61:0e:06:3b:
         9b:d7:29:eb:3b:07:f2:2d:ee:a4:56:59:de:2c:36:1f:c4:7b:
         f9:e9:c4:b7:89:8e:67:22:36:2e:2c:7c:37:83:8a:e9:f2:a6:
         24:15:5c:da:45:db:eb:93:1a:69:99:96:79:cc:dc:e0:41:28:
         9c:68:de:88:2b:ae:b5:8b:70:92:6b:43:bd:42:7d:9a:f2:7b:
         18:90:1c:5b:c6:ee:7a:f2:8b:2a:73:70:32:18:9e:5a:5b:70:
         32:63:6f:33:fb:f5:3d:2d:02:d8:24:90:73:f7:33:20:00:d6:
         11:d9:8a:10:c9:7d:c5:09:92:b2:8d:32:24:4a:03:dd:14:02:
         07:b0:48:d3:cb:57:51:1e:b3:76:f8:ac:72:27:92:b4:bf:2f:
         fb:40:dc:92:ad:00:eb:cc:3b:c5:0e:42:5f:52:b1:c6:b3:ef:
         6f:3a:78:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:26:58 2026 by rpki-client