Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/65009C2C081D11F19944049E323D8C67.roa
File:                     65009C2C081D11F19944049E323D8C67.roa (raw, json)
Hash identifier:          tE0/hZPJ/MXUNdrjbUTRpqb4i6ft44xl0fQQy9zLFzM=
Subject key identifier:   CF:BC:C4:AA:FB:42:8E:64:44:D1:DE:BF:4F:B1:77:4B:76:AF:4F:60
Certificate issuer:       /CN=A91126E7/serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
Certificate serial:       6E
Authority key identifier: 8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/65009C2C081D11F19944049E323D8C67.roa
Signing time:             Sun 01 Mar 2026 17:44:44 +0000
ROA not before:           Thu 12 Feb 2026 14:23:26 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     19905
IP address blocks:        2403:c580:fff3::/48 maxlen: 48
                          2403:c580:fffd::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl
                          rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:17:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91126E7, serialNumber=8C5BC3DBEFD7D7E8642A8F8979EFB673F0E1F317
        Validity
            Not Before: Feb 12 14:23:26 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a47b0c-be94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:db:f4:1f:c6:cd:e9:6c:1d:4c:dc:d3:3e:96:
                    8b:bb:d7:93:c4:78:57:1c:97:8c:e0:fa:27:58:7d:
                    b4:9f:27:f5:70:88:a2:ee:6a:f9:79:7e:f2:69:1e:
                    66:a2:90:90:ab:3c:44:cd:7f:41:2b:f4:8a:ce:9c:
                    cd:0f:c5:4f:72:76:36:78:45:2b:c2:21:4e:a4:95:
                    b3:5f:41:ff:0b:1f:d1:e9:53:dd:b3:89:7b:70:7f:
                    39:77:b7:e9:de:81:47:ab:35:d2:fb:76:db:5e:28:
                    46:96:9b:f3:5d:5e:10:3c:61:18:f1:a9:81:9f:6d:
                    df:c7:ce:cf:b1:15:0f:20:a0:1f:ce:72:67:c6:e6:
                    f0:4c:c1:e1:20:de:2f:cb:1d:db:b7:f6:da:a3:d1:
                    5a:fb:7c:d4:23:21:1a:79:ba:36:1e:b6:ad:04:4a:
                    44:14:b2:f4:28:72:64:37:54:6e:7c:c8:05:3e:7b:
                    96:ed:f2:d4:6e:15:a1:98:bf:57:f8:da:5a:40:88:
                    64:95:47:f8:07:95:14:94:8c:72:43:9e:76:24:be:
                    c8:66:94:49:97:18:12:71:d0:63:0c:16:64:4a:52:
                    86:1c:03:72:03:4c:29:8f:06:32:ce:73:87:fc:da:
                    34:2d:1b:5c:c4:6c:ad:a6:9c:7b:c9:2c:18:89:d2:
                    8c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:BC:C4:AA:FB:42:8E:64:44:D1:DE:BF:4F:B1:77:4B:76:AF:4F:60
            X509v3 Authority Key Identifier:
                keyid:8C:5B:C3:DB:EF:D7:D7:E8:64:2A:8F:89:79:EF:B6:73:F0:E1:F3:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jFvD2-_X1-hkKo-Jee-2c_Dh8xc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91126E7/ACB5F7469DD411F0A69FC63FC4F9AE02/65009C2C081D11F19944049E323D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:c580:fff3::/48
                  2403:c580:fffd::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:4c:8d:b6:15:80:cb:c4:b8:1e:83:8f:ac:11:e9:07:91:98:
         4d:84:7b:8f:b0:c0:d6:7b:37:f3:74:57:a3:8d:f7:a0:17:41:
         f8:be:b9:00:ce:db:fd:39:7d:6c:10:c7:f8:94:1c:b2:ed:49:
         d1:b9:7d:53:20:20:f7:24:80:9b:48:81:dd:d8:71:cb:5b:de:
         1e:e8:ee:c3:a0:40:ad:61:41:79:fb:3b:89:db:38:2e:99:69:
         58:b1:a0:4f:0e:be:ad:a8:52:35:8c:58:57:50:8c:a0:95:cf:
         ec:53:17:72:18:c3:09:94:a9:00:dc:90:48:18:d0:4b:57:a5:
         49:3e:15:bc:ec:2f:e2:c4:a4:49:5e:9d:a3:95:94:25:24:2d:
         3a:4a:9c:5f:b3:f5:df:ba:7f:1f:51:27:98:1f:74:fb:5b:6a:
         be:71:55:b5:e1:f7:71:6b:ac:55:5d:f0:fe:ae:8c:fd:8b:cc:
         ae:c9:d6:03:dd:df:bc:81:b0:48:7c:07:64:02:b2:80:6b:72:
         f2:7a:f8:a5:0b:2c:52:3d:4c:d9:c0:8a:1f:c8:6e:bf:d0:c4:
         10:98:5a:fc:b5:88:23:cc:f2:05:f4:af:82:e8:22:45:d9:db:
         ba:7d:9a:29:a0:27:af:01:e5:79:ff:92:05:d8:6f:dd:b3:ca:
         21:bc:d1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:03:15 2026 by rpki-client