Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1F740B32EEC611F0B6553517716F56BC.roa
File:                     1F740B32EEC611F0B6553517716F56BC.roa (raw, json)
Hash identifier:          gopwfSKGN1mCCHSx58qmeTC4uj/Dhy9G5y6duhNO4mg=
Subject key identifier:   7C:22:12:36:CF:10:B4:50:62:88:A6:1E:4B:C4:C8:C4:A3:F5:CD:5F
Certificate issuer:       /CN=A911695A/serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
Certificate serial:       3C
Authority key identifier: 94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1F740B32EEC611F0B6553517716F56BC.roa
Signing time:             Mon 02 Mar 2026 11:27:42 +0000
ROA not before:           Sun 11 Jan 2026 08:18:35 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     20473
IP address blocks:        2001:df6:3e40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl
                          rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:37:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911695A, serialNumber=9411163A7357EFD8A12D69B6C947654F45DE6E2A
        Validity
            Not Before: Jan 11 08:18:35 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a5742e-05bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:68:5b:24:31:c6:5e:c1:09:58:36:24:db:1d:
                    53:d0:93:7b:67:e3:bf:f6:31:2b:43:4e:92:bf:e0:
                    06:3d:b9:2b:f5:c4:72:76:04:61:09:7a:55:00:34:
                    12:1a:07:32:e0:e9:db:9b:14:2c:58:23:27:08:a7:
                    47:5f:1b:db:04:3a:cf:e5:03:92:dc:bf:60:05:a7:
                    f7:2c:47:94:d0:5e:ba:52:b0:05:3b:78:ba:ef:0f:
                    5f:6d:06:20:43:89:24:0c:d2:2b:d3:30:4e:3a:26:
                    30:13:70:eb:20:7a:98:64:2b:04:f1:81:a4:49:c1:
                    43:a4:6e:53:ac:0e:26:1a:b0:3b:11:59:16:c4:9a:
                    89:20:ee:a1:72:a5:e1:e4:9c:73:af:68:6e:e6:64:
                    9d:12:d3:fb:73:27:ea:0c:12:6c:d7:4a:c1:1d:95:
                    4e:ef:ca:7a:78:64:db:f1:73:91:f5:58:8b:38:31:
                    ba:b9:10:93:24:f4:0e:ac:13:64:55:f1:70:93:33:
                    05:04:07:9e:19:58:73:a7:43:50:70:9f:c9:0d:2e:
                    6f:b7:ae:df:3e:89:c0:c5:0e:7b:80:23:75:82:d8:
                    17:c5:ec:df:9c:36:1e:0a:95:d9:24:15:52:71:bd:
                    8a:9d:63:b8:96:ee:e1:60:f7:42:e8:89:01:fb:22:
                    68:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:22:12:36:CF:10:B4:50:62:88:A6:1E:4B:C4:C8:C4:A3:F5:CD:5F
            X509v3 Authority Key Identifier:
                keyid:94:11:16:3A:73:57:EF:D8:A1:2D:69:B6:C9:47:65:4F:45:DE:6E:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/lBEWOnNX79ihLWm2yUdlT0Xebio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lBEWOnNX79ihLWm2yUdlT0Xebio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911695A/63530CFEC8F111F08F993776C4F9AE02/1F740B32EEC611F0B6553517716F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:3e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:0b:75:27:d2:76:0f:48:20:dc:1b:36:d0:e0:a8:ae:84:9a:
         c3:06:6f:03:c1:00:3d:d4:bf:bb:a9:0d:52:b7:c0:2d:53:94:
         b4:e3:86:13:f6:8b:f2:25:68:86:e3:83:c4:94:09:74:e4:d5:
         9c:ba:ba:16:74:a1:a7:6a:b8:30:69:ce:d6:cf:6f:76:aa:a7:
         b0:f6:06:51:c3:44:b3:b6:d1:ce:47:d2:01:8b:ba:2a:56:2f:
         bf:a2:38:42:b4:90:3a:c8:2c:db:9e:08:6e:19:3d:0b:1d:8e:
         ce:79:8d:05:41:64:1e:e8:ca:61:8b:78:c9:98:ba:10:cb:3d:
         bd:ff:cb:84:57:5b:4b:2e:51:04:cd:86:cb:fe:66:e4:c7:6a:
         1d:83:ed:af:ac:7e:7c:07:7a:68:13:3b:60:ae:fa:b9:ff:5e:
         03:21:ad:7e:16:e3:6f:18:de:16:e0:9b:d9:e9:db:9b:09:a1:
         3f:e3:16:69:2a:46:98:ee:bd:ed:4c:1c:a9:33:38:37:1b:a8:
         37:12:69:93:ef:63:6d:c1:0b:8f:ea:68:ae:ac:87:15:f7:3f:
         81:21:1c:c0:d5:11:29:b7:3e:31:d7:d6:21:34:57:8f:3e:f7:
         0c:54:94:f7:2b:3a:4d:10:fc:3d:ac:c2:de:65:4b:d9:c6:b7:
         f2:0c:a5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:14:41 2026 by rpki-client