Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/501941C093F211EEA029A113C4F9AE02.roa
File:                     501941C093F211EEA029A113C4F9AE02.roa (raw, json)
Hash identifier:          v1jk6rruixfhBRtAc/yiJjYi/r2A011KiMAemeWbZ4c=
Subject key identifier:   BC:0D:8C:FF:E4:0D:4A:40:34:7A:60:0B:B0:42:C5:8B:27:74:8F:82
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       09FB
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/501941C093F211EEA029A113C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:35:21 +0000
ROA not before:           Sat 02 Aug 2025 21:01:51 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     150325
IP address blocks:        2406:7ec0:1000::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
                          rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2555 (0x9fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
        Validity
            Not Before: Aug  2 21:01:51 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a478d9-0fea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:25:07:fd:c5:23:a8:f9:f4:97:5a:ef:a1:
                    bb:8f:7a:a0:73:23:64:ff:06:5e:f5:c2:55:b3:05:
                    97:45:31:34:d1:53:4a:ee:b4:be:22:f1:12:09:db:
                    f1:f4:52:4d:18:43:90:66:b6:12:eb:ae:c6:c9:5d:
                    3c:55:94:b0:cb:fd:c3:f5:95:5b:a0:23:fd:f6:b2:
                    17:fd:ac:f3:85:19:02:03:ea:de:e8:aa:0a:1d:7b:
                    67:ac:83:e2:e7:c8:f8:a6:4c:3d:24:b5:cc:21:6d:
                    4d:ab:c4:7e:e8:b2:40:54:c1:23:57:0c:f9:d0:56:
                    02:da:3f:c4:2d:de:b5:7b:d6:90:76:a7:72:d3:e4:
                    96:72:0f:a6:ca:be:e2:7f:0a:47:61:d9:ab:b9:26:
                    ea:db:9c:43:b2:fb:91:f4:c9:e9:12:ba:49:31:73:
                    41:11:8e:1b:8e:68:c5:6d:a8:29:b0:90:67:b5:c9:
                    64:f9:33:65:f5:d1:50:42:a6:b5:c0:aa:43:73:b9:
                    75:30:bf:b5:cb:08:a0:a5:d1:ec:a8:e5:a3:87:99:
                    c1:01:2b:78:fc:a3:bb:ab:29:45:18:2a:c5:b1:8d:
                    64:25:ac:0c:f5:8d:0b:55:e7:54:0b:8b:59:fc:c8:
                    05:91:c8:51:0e:51:50:e0:03:36:ab:90:f4:a5:c8:
                    e3:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0D:8C:FF:E4:0D:4A:40:34:7A:60:0B:B0:42:C5:8B:27:74:8F:82
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/501941C093F211EEA029A113C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:7ec0:1000::/46

    Signature Algorithm: sha256WithRSAEncryption
         31:19:a6:bf:8e:93:14:2e:5a:97:43:08:37:d8:50:e2:e7:cf:
         ab:57:7f:55:fd:94:c0:8b:72:ec:1f:5a:d0:a8:f9:65:3b:1c:
         5f:1e:30:e6:28:f1:ef:b9:b0:3a:e3:59:d3:ae:6c:f3:52:46:
         f6:6e:c9:91:e8:80:aa:b3:a5:1d:58:d1:ea:6f:39:d4:a9:15:
         25:14:a5:6d:fd:33:5b:fb:e4:69:7d:7e:47:a7:99:e3:c5:5b:
         4e:a1:5c:65:ff:48:d0:7d:91:92:3e:67:39:aa:1f:0b:7e:51:
         43:44:a4:4a:88:5f:e3:73:ea:ad:67:75:cf:9e:76:9d:47:89:
         d6:f9:1c:78:00:f2:2b:4c:32:71:7e:e2:38:34:ac:bf:c6:08:
         ae:e8:07:97:38:ca:dd:75:6c:a1:4b:cf:f8:0b:eb:29:4d:fa:
         4c:0c:e4:5e:53:a1:70:47:d9:39:43:d9:13:f2:eb:f7:6e:35:
         3d:49:78:0d:8c:bb:65:37:0f:7d:dc:c5:a1:9e:e9:a4:d0:94:
         7e:06:4d:2a:71:8b:69:11:71:f1:8d:b5:4e:69:4e:99:5d:0d:
         44:b1:f2:9d:9b:7a:bc:98:2c:a7:be:c6:0d:f0:2d:62:b8:d4:
         2a:01:d1:42:52:ec:f5:fe:f0:a4:92:0d:8b:25:f0:0b:8b:c6:
         98:10:9b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:13 2026 by rpki-client