Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/9D490526003B11ED8D290A30C4F9AE02.roa
File:                     9D490526003B11ED8D290A30C4F9AE02.roa (raw, json)
Hash identifier:          5+R/9d2yzogH6uciDvC9gt42p6vVcexr6a4GH5KdqjI=
Subject key identifier:   49:E5:9B:70:AF:0F:22:B0:61:BA:B4:C7:54:C2:0C:5B:9A:2D:59:B0
Certificate issuer:       /CN=A91262CA/serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
Certificate serial:       0A13
Authority key identifier: 77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/9D490526003B11ED8D290A30C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:53:28 +0000
ROA not before:           Wed 27 Aug 2025 01:05:39 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     135586
IP address blocks:        2404:b0:1005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 05:36:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2579 (0xa13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=77A201C58EB3B4208C91BA7ECED936E595E61A19
        Validity
            Not Before: Aug 27 01:05:39 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58848-cac3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:1a:b0:27:85:55:17:1e:00:32:54:31:be:04:
                    15:7d:e2:f0:26:e1:2f:c6:01:87:0f:97:a5:fe:70:
                    0a:5b:e1:db:07:9b:15:3c:2c:40:a4:9f:fc:54:f9:
                    5d:d9:7f:ed:e9:fd:6f:28:15:83:62:66:f0:d0:f0:
                    cf:a4:e5:21:d3:a8:1c:1a:b6:e4:d4:9a:53:5d:c6:
                    a4:e4:a9:f9:83:d7:6e:e7:a0:a9:ab:3e:f9:09:d6:
                    00:f5:0d:ab:b8:89:c0:a7:12:db:94:c6:61:2f:8f:
                    f8:c1:ca:8a:01:ee:bf:3d:ec:11:5c:df:69:3b:e6:
                    9d:82:39:4f:11:64:f4:de:e6:9c:c3:b5:0f:0b:f2:
                    33:09:6e:a6:91:79:ab:97:d3:9f:cb:ff:fd:bc:ad:
                    46:2f:41:6e:b9:1a:c3:80:03:a2:82:59:82:b5:b1:
                    d6:38:47:17:49:4c:2b:eb:68:c7:8a:92:4f:8e:bd:
                    3f:93:f5:b8:32:ff:ae:38:f2:3a:1b:20:16:bf:ea:
                    8d:16:32:60:1d:36:35:89:42:96:96:93:4e:94:ae:
                    c6:a8:73:b0:75:4f:da:0d:18:26:d9:b7:2f:b4:4a:
                    6e:ce:64:c9:93:f0:24:75:a4:3e:e6:fe:3b:28:f1:
                    77:97:33:a4:24:76:56:3a:1f:93:8a:d3:29:1c:d4:
                    4b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:E5:9B:70:AF:0F:22:B0:61:BA:B4:C7:54:C2:0C:5B:9A:2D:59:B0
            X509v3 Authority Key Identifier:
                keyid:77:A2:01:C5:8E:B3:B4:20:8C:91:BA:7E:CE:D9:36:E5:95:E6:1A:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/d6IBxY6ztCCMkbp-ztk25ZXmGhk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6IBxY6ztCCMkbp-ztk25ZXmGhk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/F5EDC7FC8A5711EC96EBC014C4F9AE02/9D490526003B11ED8D290A30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:b0:1005::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:76:f3:00:c6:f8:58:f4:05:87:9b:3c:c3:25:58:1a:d7:d4:
         bd:ab:ee:62:ca:93:06:84:a6:49:5b:19:f3:38:33:9f:98:14:
         1d:93:24:89:7a:74:ae:0a:aa:d8:13:97:32:cd:6d:be:98:2e:
         2e:16:18:b9:02:6a:9c:9a:37:05:9c:45:00:d4:04:0c:82:a4:
         f8:39:e2:73:4a:c6:3e:59:d8:56:7a:60:8b:51:75:fe:da:92:
         92:df:08:4b:2d:4b:24:e8:5c:54:db:c5:ec:31:60:f6:ff:94:
         d5:dc:ef:67:a2:30:63:0c:6d:cf:07:99:29:7a:89:93:53:ff:
         98:30:4e:50:2c:9f:9e:fe:5a:27:88:bb:5e:11:3c:f3:5b:20:
         49:b2:f5:53:5c:8c:af:17:d1:f1:c0:ef:dd:f0:21:d1:6d:b1:
         a1:dc:d2:9d:12:3a:c2:f9:61:5e:d7:e1:16:bd:d4:34:d5:4f:
         cf:f9:b8:67:d9:67:12:12:32:2f:fa:21:e0:71:ce:1d:a4:4a:
         d2:a3:ef:68:93:2e:0a:48:bc:89:fc:81:00:9d:68:d2:04:63:
         92:40:2b:ba:9d:2c:5b:93:1c:fc:f5:71:73:51:e6:82:da:73:
         07:bf:cb:17:b3:bc:4d:87:05:16:ff:cf:d6:92:98:a7:d9:11:
         4f:84:f5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:56:43 2026 by rpki-client