Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/13279E2C124011ED9E430A4CC4F9AE02.roa
File:                     13279E2C124011ED9E430A4CC4F9AE02.roa (raw, json)
Hash identifier:          Uv/v0jJRP1b/GKNvDesBCtfjzY1O3IX5XgFxcHY7TZA=
Subject key identifier:   FA:30:F7:92:BD:AC:D9:67:BF:38:7F:81:6F:2D:96:30:D4:97:DA:76
Certificate issuer:       /CN=A91DA10A/serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
Certificate serial:       08EB
Authority key identifier: 49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/13279E2C124011ED9E430A4CC4F9AE02.roa
Signing time:             Fri 12 Jun 2026 21:24:06 +0000
ROA not before:           Fri 12 Jun 2026 21:24:06 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     18013
IP address blocks:        144.48.6.0/24 maxlen: 24
                          144.48.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl
                          rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:24:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2283 (0x8eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA10A, serialNumber=49B5A46463E3A2B70A33446014EBF40E5C9EFE74
        Validity
            Not Before: Jun 12 21:24:06 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2c78f6-5bfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c4:c4:9f:6c:45:09:ef:3f:c4:83:0b:6a:79:
                    69:4d:ae:3d:9b:80:a9:36:7b:73:99:a7:54:51:d4:
                    4a:81:1a:24:3c:0e:a9:37:c6:ad:d7:b7:8d:a0:ee:
                    a7:41:f1:1e:52:37:ae:e1:3f:8b:46:58:90:e1:9b:
                    9f:83:65:3a:5d:07:d1:cf:c5:e6:e6:9d:6a:c6:58:
                    57:eb:fb:05:a5:40:53:77:18:2a:25:e5:16:12:61:
                    53:96:97:9b:ca:41:4e:95:9b:9c:46:d4:08:f8:8e:
                    be:05:2d:62:ec:00:89:1e:b9:db:2c:0e:98:9d:67:
                    8b:92:00:14:19:49:45:10:de:28:4b:b3:b9:5f:c0:
                    e9:6e:8d:54:60:aa:bb:1d:af:a6:c5:e8:88:8e:28:
                    4e:76:dc:cf:30:96:1d:26:b3:87:c8:93:5a:ad:9f:
                    40:7e:b1:d6:d9:9a:86:69:bc:e9:91:41:8d:57:52:
                    03:87:bb:0b:ae:83:09:ed:72:2e:a1:54:a2:ae:99:
                    b8:56:e4:b5:ea:38:c8:15:ea:01:05:12:12:c9:be:
                    d3:79:f5:5b:9a:47:12:8c:93:10:2e:cf:b0:71:33:
                    de:52:dd:12:16:69:02:89:9f:9c:43:d2:f5:e4:8f:
                    f4:ae:85:bf:7f:c9:44:d1:13:0d:0c:33:38:ad:8e:
                    ea:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:30:F7:92:BD:AC:D9:67:BF:38:7F:81:6F:2D:96:30:D4:97:DA:76
            X509v3 Authority Key Identifier:
                keyid:49:B5:A4:64:63:E3:A2:B7:0A:33:44:60:14:EB:F4:0E:5C:9E:FE:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/SbWkZGPjorcKM0RgFOv0Dlye_nQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SbWkZGPjorcKM0RgFOv0Dlye_nQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA10A/E340204CF18711EAB9734B1CC4F9AE02/13279E2C124011ED9E430A4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:78:e1:10:06:bf:5f:a6:d4:3f:37:cf:78:e0:5b:a5:b7:a5:
         c7:03:18:dc:ad:38:fe:7f:19:7a:a3:91:3b:55:eb:78:15:62:
         fc:a9:9a:fe:66:ed:13:e5:1f:8d:c0:d7:38:6a:e4:31:ab:8f:
         64:6e:51:1e:1c:11:cf:e4:f6:5e:8b:62:7c:d8:5a:a0:53:b1:
         c4:66:e4:ef:58:c3:a0:33:71:06:87:3a:3b:f5:70:48:7a:ec:
         b6:fd:6c:27:c0:ca:e1:15:45:62:58:cd:ad:72:aa:2e:c6:74:
         a2:a5:e9:21:03:75:d3:1f:80:57:b4:de:5d:5a:ac:f3:3f:29:
         d9:51:d7:1b:34:2f:b8:20:d1:bd:05:ea:6e:9e:ca:1a:f3:5c:
         0b:b1:36:a2:95:cd:60:d2:3f:af:08:12:d9:c0:d5:7d:01:2f:
         b3:d3:ed:b0:a1:55:ec:6c:77:b2:83:88:53:55:63:b1:f8:1e:
         0f:68:75:70:68:ca:18:49:53:f2:b6:46:65:2e:71:b9:27:23:
         46:7c:29:80:c6:df:e3:d7:34:dd:c7:50:ab:56:68:12:c1:0a:
         ac:b4:7e:6f:ff:23:6c:06:5e:d7:69:0a:e9:9e:69:2b:92:76:
         9e:99:a8:33:62:20:b9:fe:d2:54:2f:a7:ad:a7:ed:82:9f:e2:
         1f:a7:e9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:03:26 2026 by rpki-client