Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/C5B717905EDA11F0A5EAB579C4F9AE02.roa
File:                     C5B717905EDA11F0A5EAB579C4F9AE02.roa (raw, json)
Hash identifier:          vV//1EEbPUz/O65Gy1tJMCCtU1GCZgX+F9nxMGWvmXs=
Subject key identifier:   9E:82:C0:74:88:E7:16:AA:49:C5:70:D3:8A:8F:24:1C:9B:D7:F7:B7
Certificate issuer:       /CN=A91A25DF/serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
Certificate serial:       7A
Authority key identifier: 41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/C5B717905EDA11F0A5EAB579C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:10:29 +0000
ROA not before:           Sat 12 Jul 2025 04:43:36 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154031
IP address blocks:        2402:15e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl
                          rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:06:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 122 (0x7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A25DF, serialNumber=41B434915A4919DCEF57D6977C40480DFC31134D
        Validity
            Not Before: Jul 12 04:43:36 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3e665-9d2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:54:ef:24:a7:0d:77:12:2e:fb:38:b9:5a:
                    8d:e6:fa:19:ad:19:24:c2:a0:c4:11:64:b3:ad:fe:
                    a2:3c:75:f7:27:3a:f9:06:7f:d8:d2:4a:de:f5:4d:
                    b2:af:ac:4b:c5:6c:37:76:30:bf:ae:11:5f:f8:2e:
                    65:3d:95:11:42:09:d3:ee:95:e1:f5:c7:08:70:48:
                    63:66:ea:c6:7d:a6:d5:db:3a:c3:dd:d0:39:0a:e5:
                    f2:09:99:66:b3:ab:c6:9c:c8:5b:87:2c:69:4f:47:
                    51:2d:57:5c:dd:8f:6b:14:23:be:c9:2f:6f:3a:30:
                    94:80:f2:62:c8:dc:35:d2:06:46:04:db:31:d6:59:
                    81:9e:5e:3f:22:0c:fe:10:59:ba:69:7b:cb:53:00:
                    85:80:b4:34:d8:d2:5d:5f:39:08:d4:44:64:50:0a:
                    6d:8f:3e:3b:1f:bf:7b:9d:b5:9f:92:04:5b:c0:a5:
                    70:dc:e2:28:48:f3:2c:80:4a:51:08:38:97:99:9e:
                    d4:25:21:3c:ae:02:e6:16:9d:26:3e:35:bd:13:00:
                    92:b9:17:94:21:8b:95:b3:db:0f:e6:31:16:07:aa:
                    7c:88:de:6a:e7:81:c4:41:7a:f9:fe:69:ad:d4:4b:
                    25:01:28:39:9d:94:00:71:67:c2:e3:1e:c0:29:57:
                    06:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:82:C0:74:88:E7:16:AA:49:C5:70:D3:8A:8F:24:1C:9B:D7:F7:B7
            X509v3 Authority Key Identifier:
                keyid:41:B4:34:91:5A:49:19:DC:EF:57:D6:97:7C:40:48:0D:FC:31:13:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/QbQ0kVpJGdzvV9aXfEBIDfwxE00.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QbQ0kVpJGdzvV9aXfEBIDfwxE00.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/EF4AD4525ED511F09CF1D50CC4F9AE02/C5B717905EDA11F0A5EAB579C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:15e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:30:17:4b:2b:f9:cc:41:6b:45:bb:25:42:e5:bb:76:f6:79:
         11:44:18:ad:37:a7:7d:6c:e7:c0:d4:fa:d3:3a:78:ca:97:a2:
         63:df:38:20:5b:0e:46:f5:41:fc:71:c3:c1:aa:57:74:4d:f0:
         5b:35:c0:96:f0:f7:cf:43:44:f4:48:03:ed:40:d4:79:2f:8c:
         15:04:71:f4:f9:a5:d6:d8:0e:41:0f:c4:88:f9:5f:f6:71:e1:
         d8:90:b9:52:35:4c:d2:df:e4:af:7e:de:25:5c:41:27:2a:e8:
         00:a7:de:4a:2f:dc:b6:b0:45:41:ba:0a:5b:36:96:8c:e4:7b:
         fb:86:ab:d7:ae:62:ab:6a:1e:7a:f0:2f:49:32:0d:e6:29:c7:
         d8:c4:d0:2a:c4:21:12:b4:bf:bb:b5:d5:81:b3:a7:4f:b3:f2:
         c0:09:d0:a0:cd:14:54:8c:c3:f5:66:5e:d4:fe:be:20:ff:24:
         ee:ce:00:77:e3:48:1b:75:c6:d0:5e:99:44:ca:18:a5:bc:9d:
         ba:0d:36:b4:55:b8:68:86:98:ad:8b:23:dc:d0:fc:02:30:28:
         f6:07:eb:2b:7f:fb:78:62:64:9d:4c:c5:35:78:03:7b:ce:90:
         75:eb:c1:ab:15:ae:1d:e3:93:02:88:34:3a:3e:35:a6:cd:a0:
         72:18:6c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:02 2026 by rpki-client