Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/9A1D26E8DA2C11EFAC53882EC4F9AE02.roa
File:                     9A1D26E8DA2C11EFAC53882EC4F9AE02.roa (raw, json)
Hash identifier:          3nJqGrjMdf5D7MugjfLyV3mlrWn6RF9SKC0CMqH5eTc=
Subject key identifier:   B3:B9:A8:B2:10:E5:E3:7A:0E:78:DD:CA:B5:5F:87:FF:6E:AE:6F:91
Certificate issuer:       /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Certificate serial:       E3
Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/9A1D26E8DA2C11EFAC53882EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:16:18 +0000
ROA not before:           Wed 18 Feb 2026 04:49:31 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        2401:c2e0::/40 maxlen: 48
                          2401:c2e0:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
                          rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
        Validity
            Not Before: Feb 18 04:49:31 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47462-cfaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c0:61:a8:3f:4e:4a:04:c8:10:14:bd:62:8b:
                    c6:f4:0e:06:57:be:3a:8d:cd:02:69:f5:ca:18:dc:
                    49:1e:24:d0:e7:ca:96:5c:cf:b8:42:33:ed:e2:99:
                    13:cc:ba:e1:15:7c:ef:3c:ac:50:88:74:6e:99:45:
                    00:a5:84:05:f3:51:ba:73:e1:37:78:14:4d:8d:7d:
                    c8:74:af:8a:54:96:3f:de:c8:dc:1d:8c:80:d9:cf:
                    4c:23:fc:85:a4:8b:be:89:4a:e6:a8:78:b1:69:a7:
                    60:fe:dc:64:86:5f:26:be:5e:3d:80:8a:a0:cb:b7:
                    80:3d:96:23:01:60:07:fa:e2:08:b0:6f:86:d3:1c:
                    21:1d:56:19:6a:8b:dc:3c:eb:7f:5b:1c:84:b0:c5:
                    fd:7e:0c:87:29:33:18:ab:8d:c4:0b:e7:b3:00:cc:
                    93:17:9d:8f:a3:1b:d0:df:d3:2e:a1:82:91:ed:ad:
                    0d:fa:6b:10:b8:de:ce:9e:99:44:24:07:98:b8:21:
                    b1:68:37:ac:27:d7:1c:2b:6a:97:b5:9a:d4:54:2e:
                    3e:7c:e5:0f:a6:5e:2c:70:01:ea:d2:8e:cc:5f:04:
                    06:9c:ac:2b:46:8e:4c:af:6c:cf:62:c4:cc:8b:bd:
                    12:bb:42:c9:26:2c:ea:5a:c7:6b:7d:7f:f3:09:6e:
                    e6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:B9:A8:B2:10:E5:E3:7A:0E:78:DD:CA:B5:5F:87:FF:6E:AE:6F:91
            X509v3 Authority Key Identifier:
                keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/9A1D26E8DA2C11EFAC53882EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c2e0::/40
                  2401:c2e0:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         62:32:a8:f4:cf:cd:b0:5c:3e:20:c6:ab:6a:59:b9:4a:ed:4e:
         9e:22:37:25:b4:57:8a:17:89:fc:47:84:b1:d0:5a:bc:6f:a7:
         fe:34:4a:f3:8a:49:ac:a5:55:99:80:bf:34:41:b1:d6:67:22:
         4d:2a:1a:f4:f1:f6:49:47:6a:54:c4:6a:ef:cb:8e:80:25:7a:
         72:a8:13:04:e3:d5:1d:72:65:03:04:f1:f1:ba:8d:a7:c4:e9:
         75:38:b5:56:13:e1:ed:18:98:25:78:b0:49:8a:da:6f:d4:21:
         bd:50:23:dd:a8:b9:3f:a5:5a:ae:e5:a2:f4:75:7f:7a:8e:7e:
         5a:31:d4:14:29:75:bd:4a:da:d0:ce:ec:14:ed:90:03:1f:7e:
         9c:0e:57:cf:c2:59:29:99:ff:20:bb:c5:24:b5:eb:f0:e9:7e:
         39:dc:55:b0:88:0b:8e:58:e3:53:f4:19:9c:ed:70:58:28:77:
         bc:d2:9b:ae:26:a4:cd:84:60:2c:73:e7:35:cb:e1:ae:b3:5f:
         dd:88:97:b2:34:7d:75:95:03:b4:6b:bf:53:12:37:2b:40:2a:
         e2:3e:78:52:4a:c0:17:25:33:a3:ff:1a:02:52:0c:a5:95:26:
         b2:40:a3:0e:93:a7:36:3f:a8:4e:32:be:e0:18:6a:01:95:bd:
         42:08:fe:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:57:11 2026 by rpki-client