Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/A2369FBA595F11EF8C3B3D31C4F9AE02.roa
File:                     A2369FBA595F11EF8C3B3D31C4F9AE02.roa (raw, json)
Hash identifier:          /Wf9VOD/h7uLy8JdaHzkcRxgJZN0cMoOva7RxEI3K2s=
Subject key identifier:   91:4D:7A:EB:87:B3:E9:45:1E:AF:4B:AD:84:6E:33:7D:52:00:48:80
Certificate issuer:       /CN=A912698E/serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
Certificate serial:       0F45
Authority key identifier: C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/A2369FBA595F11EF8C3B3D31C4F9AE02.roa
Signing time:             Thu 30 Apr 2026 18:22:05 +0000
ROA not before:           Thu 30 Apr 2026 18:22:05 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     18254
IP address blocks:        2404:8ac0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl
                          rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:37:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3909 (0xf45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912698E, serialNumber=C0B9C11B1B160F321B8AEC4CFCDDDAD895FC47DE
        Validity
            Not Before: Apr 30 18:22:05 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69f39dcd-89e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:c7:a9:ec:34:b9:ee:eb:c3:9a:7e:fe:8e:
                    6e:94:6c:2f:0a:90:08:3d:03:36:02:f1:ca:61:b6:
                    29:fe:7f:94:1f:d3:9a:14:d7:a6:61:a8:a8:28:6f:
                    62:81:05:39:30:ad:ff:67:6d:c8:97:4d:b0:ca:fa:
                    a8:42:53:6e:00:46:b8:44:3a:a2:22:dc:fd:8a:87:
                    34:21:b6:0e:f5:8a:b4:67:84:97:a7:be:8d:17:10:
                    3e:fa:e2:ab:73:4d:cb:46:38:0c:0f:df:1e:28:db:
                    be:59:96:3a:18:4e:78:b5:f1:35:81:e1:a8:12:92:
                    65:b5:b0:71:6a:50:e7:55:6f:97:8d:21:df:6b:b9:
                    7c:77:ad:d4:88:a4:0a:53:3b:b4:58:0c:04:3e:71:
                    05:a2:6a:b0:35:2c:80:a0:0a:b6:56:46:a4:ba:88:
                    42:fd:d2:7e:85:59:76:52:ca:58:ba:bb:58:31:4a:
                    e1:c7:f4:db:9c:8e:dc:4a:73:c3:3d:52:c2:86:b2:
                    67:cd:57:b9:28:2b:63:58:aa:09:32:78:aa:33:7a:
                    dd:12:8d:36:ce:7f:42:55:a5:d5:5f:cb:ff:65:dc:
                    b5:15:1c:4d:b8:a1:59:51:2b:af:81:a7:82:26:4d:
                    e6:b5:3e:24:06:4a:a4:43:83:ce:7a:b5:49:9d:e5:
                    e3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:4D:7A:EB:87:B3:E9:45:1E:AF:4B:AD:84:6E:33:7D:52:00:48:80
            X509v3 Authority Key Identifier:
                keyid:C0:B9:C1:1B:1B:16:0F:32:1B:8A:EC:4C:FC:DD:DA:D8:95:FC:47:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/wLnBGxsWDzIbiuxM_N3a2JX8R94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wLnBGxsWDzIbiuxM_N3a2JX8R94.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912698E/F19A7C949C1C11E992FAFB1BC4F9AE02/A2369FBA595F11EF8C3B3D31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8ac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:f7:8e:75:ef:0e:e9:dc:55:d9:a5:98:85:21:a0:02:33:14:
         a7:78:82:6e:c9:e9:94:17:bc:55:fa:c4:84:40:34:df:3c:43:
         b7:7e:4b:68:c9:75:b5:a1:14:57:52:ba:0c:14:29:2f:fc:b4:
         48:e6:b0:fc:f0:2c:04:fe:e8:f6:1c:a2:04:98:ee:d4:4e:71:
         0d:97:4d:1d:63:bc:26:cb:72:29:51:4a:93:5e:3c:d2:be:26:
         dd:6f:ee:ae:cb:68:c6:30:32:90:1d:58:3b:3e:59:3c:83:3b:
         82:91:74:54:3a:d0:bb:b8:a0:f0:8f:ef:b3:89:22:87:25:2d:
         e7:02:7b:22:6e:ca:6e:6a:18:60:1d:ee:77:c2:7e:4e:a6:21:
         88:e6:2e:26:69:03:03:f6:42:39:5a:dd:2c:4d:cd:c3:51:42:
         76:cb:9b:d3:d5:6b:6e:cf:fd:60:20:98:1f:4e:2d:35:70:1d:
         f8:c1:a6:08:8c:d6:b6:2a:bc:79:88:7d:4e:5e:52:66:7a:9c:
         7b:20:a5:e7:4e:31:e0:bf:e8:d5:dc:0a:a3:6e:4e:f3:f3:40:
         99:29:d0:fd:8a:0d:b7:75:be:f2:09:88:2d:80:42:4f:32:14:
         57:8d:32:2c:7d:12:e1:66:9d:df:ef:20:49:b3:fa:eb:f9:ea:
         26:af:1c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:55:56 2026 by rpki-client