Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/282CA82C023F11EEB716134FC4F9AE02.roa
File:                     282CA82C023F11EEB716134FC4F9AE02.roa (raw, json)
Hash identifier:          wnHWbEnfjZ63RYB0ismM9UJFoOh9ccy7t7IsH2bosjo=
Subject key identifier:   72:89:F8:DF:8A:13:A4:12:C4:FC:E3:0B:0E:7B:F5:39:72:05:36:34
Certificate issuer:       /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial:       0228
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/282CA82C023F11EEB716134FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:09:54 +0000
ROA not before:           Tue 03 Jun 2025 04:01:32 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     203472
IP address blocks:        2401:5a0:bbb0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
                          rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:18:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 552 (0x228)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
        Validity
            Not Before: Jun  3 04:01:32 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a59a32-c34f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:38:ac:39:95:8b:01:6e:7f:06:88:c7:06:18:
                    fa:c5:9c:59:34:d1:23:d5:25:1f:65:19:32:59:c9:
                    41:bf:b7:37:35:9b:86:d3:6b:5f:0f:ba:62:0e:bb:
                    00:a0:f5:c9:82:0a:a9:ba:66:6f:d5:6f:08:d1:fb:
                    d7:79:6c:97:1f:f7:a2:fb:e2:b7:76:dd:24:47:71:
                    e9:ce:4c:34:98:56:68:2e:f4:c7:4f:55:14:05:c4:
                    0d:ae:ea:41:94:89:02:84:f2:fe:18:25:4e:2a:0a:
                    b7:1b:17:b7:47:39:88:76:f0:9f:c1:46:55:2d:c4:
                    f1:be:83:b8:2b:b8:56:57:79:f7:9c:b3:5a:22:17:
                    d0:25:2f:b4:73:a6:db:14:71:48:de:c2:81:03:e8:
                    b9:d1:2a:9f:6b:50:e4:d9:f6:dc:6c:87:03:b9:bc:
                    b7:f2:a3:26:b6:41:4d:ed:7f:ec:8c:67:80:45:44:
                    86:ab:58:f2:e8:a2:b0:c7:d2:cb:3a:bc:9a:5d:30:
                    1d:f5:87:d8:81:74:61:d9:4a:0d:15:cb:f7:1e:d2:
                    50:30:8b:f1:d1:3d:19:b5:ff:e2:b6:0b:1c:e0:31:
                    98:df:cb:1e:fb:7f:66:74:f6:f8:84:c7:d3:de:88:
                    2e:49:31:5d:eb:44:35:e4:0c:47:3a:50:e1:6a:c4:
                    b3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:89:F8:DF:8A:13:A4:12:C4:FC:E3:0B:0E:7B:F5:39:72:05:36:34
            X509v3 Authority Key Identifier:
                keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/282CA82C023F11EEB716134FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5a0:bbb0::/44

    Signature Algorithm: sha256WithRSAEncryption
         ce:d3:7f:fb:98:28:f7:02:00:15:8d:91:07:03:82:3a:0a:0b:
         97:cc:dd:96:51:72:ed:7a:da:54:0e:7a:ca:14:82:f1:95:fa:
         89:7b:31:c8:1a:8c:0b:70:16:22:65:31:47:8c:c3:f8:e0:05:
         e7:3f:21:d2:9e:da:03:5e:9a:b9:55:be:4e:d4:e6:c5:ae:97:
         ae:a2:91:8d:16:c7:c9:ac:43:56:32:8f:37:c7:ee:15:f5:70:
         e4:75:00:78:d7:7a:9a:49:a9:86:13:69:3a:73:b9:4f:0d:b2:
         4c:92:96:d7:7d:37:15:86:67:af:c7:68:5b:09:33:5f:c5:dc:
         11:c8:2e:c2:8e:9b:01:44:9a:21:8b:ba:87:0c:3b:0a:c1:b4:
         f8:90:5c:11:32:0d:ee:b5:d2:8b:0a:c8:09:ab:25:3d:c9:5b:
         4e:a4:aa:e7:89:7d:8f:f7:e2:13:40:ca:7f:a2:03:92:21:21:
         a1:46:fb:7b:68:a2:fe:ae:68:4e:5c:2a:0e:89:66:d4:3b:87:
         39:4e:d8:02:e7:4e:cc:a2:a8:67:82:21:39:2c:ef:3e:bb:a8:
         65:2a:d7:58:8b:ab:21:1e:8f:70:f8:e8:60:bb:32:82:9e:ea:
         da:6a:e5:e9:f0:f4:d4:07:16:bc:d8:16:85:11:eb:f2:09:6a:
         15:08:52:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:23 2026 by rpki-client