Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/BACC498C9EFC11EC856FCB09C4F9AE02.roa
File:                     BACC498C9EFC11EC856FCB09C4F9AE02.roa (raw, json)
Hash identifier:          iwYxtbph75PfLUWyrRQ1ZKsYXZDAuMWGHem1wlC1TsY=
Subject key identifier:   83:F3:94:B6:62:AA:7A:FB:EB:EB:65:D1:E0:F1:2C:91:26:E0:FD:80
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0B26
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/BACC498C9EFC11EC856FCB09C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:50:35 +0000
ROA not before:           Wed 26 Mar 2025 19:59:57 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     3938
IP address blocks:        2001:218:4000:9::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2854 (0xb26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Mar 26 19:59:57 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a47c6b-1e35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8d:01:0e:1b:7b:f0:09:e5:48:ed:05:c0:be:
                    3a:7e:38:09:54:d4:2a:8a:c5:c0:2b:55:54:15:05:
                    b5:6e:5e:9d:00:63:58:c3:70:29:e1:bc:0a:6e:27:
                    5c:0e:d1:f7:88:a0:ea:54:c3:71:03:84:48:b9:a2:
                    23:46:8e:b0:64:ca:53:fa:f7:5b:ce:5f:af:3f:8f:
                    55:65:99:32:dd:12:ee:5e:d2:cc:ec:c2:dd:ae:35:
                    a3:1c:29:8c:fd:8f:5d:d1:61:22:d3:d3:d8:e2:77:
                    95:fb:6b:15:f2:e1:b4:8d:aa:7e:33:37:88:e6:bd:
                    8e:39:6e:b1:17:e6:ca:f3:7d:42:b9:22:f5:45:c2:
                    b8:91:8f:53:bb:39:07:5e:1c:5e:3a:2c:a6:64:ac:
                    52:82:90:96:b2:84:f6:98:81:49:a4:e9:ec:c3:d5:
                    46:4b:1b:7c:d6:6b:fd:d0:e6:d0:c8:06:e0:15:7f:
                    c9:79:3e:bb:d8:5f:9a:80:d7:9a:43:a5:bd:18:74:
                    0e:32:53:30:db:41:71:09:20:51:3d:51:f0:fb:fd:
                    3b:53:37:f7:11:54:4c:b8:60:99:17:1d:f6:51:91:
                    a4:ff:f3:9d:5a:c5:ca:8e:0a:37:13:93:57:9a:f5:
                    61:3f:2a:ed:87:87:9e:b9:11:b7:c2:b4:4c:a0:07:
                    62:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F3:94:B6:62:AA:7A:FB:EB:EB:65:D1:E0:F1:2C:91:26:E0:FD:80
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/BACC498C9EFC11EC856FCB09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:218:4000:9::/64

    Signature Algorithm: sha256WithRSAEncryption
         3d:eb:9e:af:8e:3b:89:ed:79:52:12:a1:ff:14:35:57:58:60:
         f6:21:df:b2:16:fe:29:05:a0:ba:f3:3c:9c:05:a3:d2:3c:b5:
         34:bb:ce:1b:43:08:74:27:03:52:0c:11:39:5a:4b:74:fc:6e:
         67:e8:5a:1d:45:66:59:90:ee:27:85:8c:85:21:bf:49:8a:9a:
         c4:d5:f4:c8:57:b0:3d:fb:df:7b:e1:dd:b2:b2:f4:56:e1:12:
         20:79:ec:09:40:be:ab:ca:19:4a:f0:86:29:40:3f:56:bb:b9:
         bc:ac:51:5e:1c:12:fb:ba:ab:49:01:20:5e:cc:c9:49:e7:4e:
         f9:7f:4a:af:11:4f:67:2f:03:7e:ea:e1:fc:67:9d:d4:e4:7e:
         25:9c:df:5c:ac:e3:c3:b6:9c:2e:64:24:f8:e1:e8:3f:69:83:
         19:86:ed:3c:de:f9:4e:e3:f6:7f:82:dc:15:b0:54:2e:ea:d9:
         6b:63:ae:61:72:40:6c:84:71:c8:9c:60:ad:b5:b5:39:37:cb:
         a3:e6:4b:ca:cf:25:0e:a4:0c:82:8e:64:02:97:25:48:4a:5a:
         ec:83:4a:83:bc:14:d7:eb:f6:d0:f7:f9:0f:60:34:de:32:4a:
         c3:db:e5:6c:f6:4e:e4:dc:93:00:e7:b1:00:da:c0:39:18:c5:
         a5:ce:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:00 2026 by rpki-client