Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/54EC15820FED11F18E9367ED083D8C67.roa
File:                     54EC15820FED11F18E9367ED083D8C67.roa (raw, json)
Hash identifier:          kTSpS6sGcw85T0kUTUglByhkD7FGKjkERY57VqRm12k=
Subject key identifier:   11:9E:04:14:B7:0A:3D:29:FD:49:A8:E6:81:40:63:18:59:7A:1B:25
Certificate issuer:       /CN=A91C705E/serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1
Certificate serial:       0361
Authority key identifier: 83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/54EC15820FED11F18E9367ED083D8C67.roa
Signing time:             Sun 01 Mar 2026 18:01:18 +0000
ROA not before:           Sun 22 Feb 2026 12:52:23 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149987
IP address blocks:        2001:df0:e4c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl
                          rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:52:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865 (0x361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C705E, serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1
        Validity
            Not Before: Feb 22 12:52:23 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47eee-f47a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8e:74:a4:c8:be:d6:80:9c:0d:82:d5:9e:dc:
                    82:7f:59:3a:e2:8c:0b:b5:6a:1a:50:98:1d:27:0c:
                    57:56:3d:ff:24:30:d5:62:dc:f6:f7:4a:12:d1:69:
                    27:66:06:f1:cc:dc:cb:af:7c:f7:91:b4:45:50:89:
                    78:ea:cd:7b:45:ac:6c:8f:59:a5:81:7e:d4:28:cd:
                    75:11:97:58:fc:de:d8:cb:d9:f8:c3:b2:b4:b0:8a:
                    b6:6b:77:35:0c:ea:ad:af:53:4a:b5:e9:b8:58:da:
                    b1:eb:2a:69:9c:ff:ce:4e:4d:f8:e8:76:f7:af:5b:
                    5a:db:75:20:02:1b:8a:8b:2e:9c:8e:a1:af:19:f4:
                    82:7b:53:a2:59:77:17:7b:d1:94:15:8c:57:f0:f4:
                    ac:2d:4e:25:e6:f8:6a:34:b4:5e:ac:f6:fd:b6:9c:
                    f0:43:4b:8e:29:fd:9d:81:df:94:6f:2f:a2:20:0a:
                    9d:09:e2:69:ef:4c:2f:62:c9:0e:45:fe:bd:04:e0:
                    81:22:ed:de:23:9c:f1:c3:2a:7f:22:55:b5:63:32:
                    36:cb:94:0b:08:26:2b:f5:01:2d:fd:a1:bd:b0:ed:
                    36:cf:f4:9d:e8:ae:f5:29:4e:ea:7d:d9:1f:3c:63:
                    cc:4a:f4:6a:b8:7c:df:dd:e4:fc:42:ab:20:10:10:
                    64:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9E:04:14:B7:0A:3D:29:FD:49:A8:E6:81:40:63:18:59:7A:1B:25
            X509v3 Authority Key Identifier:
                keyid:83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/54EC15820FED11F18E9367ED083D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:e4c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:9d:85:f4:3b:51:e0:c0:9b:d5:b7:5c:b5:75:39:a1:93:aa:
         e8:31:1b:dd:38:5b:a6:33:99:2b:7d:77:0a:bd:91:76:f9:55:
         e1:6d:54:18:18:23:c3:9e:60:3f:37:e3:f3:4d:f0:3c:a1:6c:
         b1:fc:d0:34:90:e4:ef:29:e3:8b:82:c0:a4:58:bf:80:0b:cc:
         89:2e:7d:1a:d1:63:83:ed:57:ea:c6:4f:78:cf:90:76:69:77:
         7c:08:07:f5:a8:35:73:ff:a1:dc:f7:6d:d5:38:f7:7f:32:28:
         ef:49:0f:c3:46:cf:48:8e:04:2d:75:c1:f3:bb:fa:b3:7f:24:
         95:4c:17:a6:d2:22:87:d5:32:2c:23:41:d1:96:ea:be:d5:70:
         8c:b4:fa:b7:1f:a5:31:d8:b5:c4:7f:df:8d:f3:96:61:a3:a8:
         9e:43:f6:f7:a6:dc:1b:a2:88:25:31:fa:76:9b:56:b6:de:45:
         fc:78:64:f3:b7:28:f7:6d:6c:6b:e4:30:9a:ee:ee:2a:16:69:
         cf:bf:34:20:fa:8c:14:04:d6:de:17:9a:b2:a4:a0:b1:f9:32:
         a9:3d:6e:26:d3:85:69:7d:81:ab:42:d2:2b:ad:06:52:7d:0a:
         e0:9d:e3:41:e7:87:93:84:8b:1f:ed:01:06:52:ef:75:fd:01:
         d0:05:89:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 23:37:15 2026 by rpki-client