Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/81D3CB186B7D11F0A482004CC4F9AE02.roa
File:                     81D3CB186B7D11F0A482004CC4F9AE02.roa (raw, json)
Hash identifier:          WJIyz/cRqbc3/QMwliSVH70tDNBX6svUIefvj+Dz1lY=
Subject key identifier:   51:5B:9A:7E:43:EA:6B:50:D0:D9:62:4C:D3:8D:0F:74:27:ED:6E:3E
Certificate issuer:       /CN=A9132B7A/serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
Certificate serial:       01D8
Authority key identifier: 87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/81D3CB186B7D11F0A482004CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:09:13 +0000
ROA not before:           Fri 21 Nov 2025 02:19:24 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     147261
IP address blocks:        2401:4260:fff2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl
                          rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132B7A, serialNumber=87BFEEC8FF9FB2688020DB59A622C13A15E5AF20
        Validity
            Not Before: Nov 21 02:19:24 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45699-3e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b0:02:57:97:fc:2e:8e:96:8a:ca:b3:7f:98:
                    67:ab:b9:21:11:e9:1e:65:76:0e:52:cf:c7:64:5d:
                    1e:9f:02:85:71:c3:32:7d:b5:ba:8a:e4:d8:23:f1:
                    b8:d7:ea:98:c3:79:97:07:a3:4f:d3:7f:ba:14:f3:
                    dd:f2:fd:cc:6a:7f:cd:aa:97:e1:40:0e:4d:17:43:
                    c8:e3:48:7a:7d:de:03:a6:d5:14:ff:98:bd:df:48:
                    42:3c:90:c5:a1:8f:5a:19:5c:49:fe:9d:06:70:f8:
                    28:89:c0:ee:7d:fa:b1:ea:56:1e:c0:67:e4:fc:28:
                    60:9a:46:21:77:e1:eb:22:01:46:91:ac:34:b8:f5:
                    a3:1d:af:1e:e9:e7:5c:9d:36:2c:95:de:d2:4f:a5:
                    0a:d9:f7:91:82:35:a6:7a:6c:fe:49:d8:8a:72:f0:
                    82:cb:32:f8:5e:69:41:14:a5:99:66:2e:7e:83:f8:
                    63:08:a5:9e:05:2e:63:9f:c5:fd:b6:b4:1d:db:67:
                    b2:d8:4c:7e:13:b6:58:4a:07:1d:0e:51:b9:00:45:
                    51:a4:d8:87:99:b9:a7:bb:be:84:f2:c2:3f:86:72:
                    45:3a:54:20:05:4d:3e:18:d2:66:03:8b:28:fb:4a:
                    75:72:26:c0:73:22:18:8b:3c:47:cb:99:05:25:b9:
                    9c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5B:9A:7E:43:EA:6B:50:D0:D9:62:4C:D3:8D:0F:74:27:ED:6E:3E
            X509v3 Authority Key Identifier:
                keyid:87:BF:EE:C8:FF:9F:B2:68:80:20:DB:59:A6:22:C1:3A:15:E5:AF:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/h7_uyP-fsmiAINtZpiLBOhXlryA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7_uyP-fsmiAINtZpiLBOhXlryA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132B7A/06A19602644D11EE84D4034FC4F9AE02/81D3CB186B7D11F0A482004CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:4260:fff2::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:68:94:67:db:82:39:96:d5:0d:72:07:4c:1e:3c:05:9a:18:
         6d:06:6f:6e:fa:f2:be:41:9e:d1:ba:da:9b:d3:d4:71:43:a4:
         84:c4:ef:5c:79:64:39:d6:21:56:e5:cd:65:e5:4e:33:68:3e:
         e4:c0:e3:d4:7e:e4:39:d0:53:ce:ab:14:a2:f2:a6:47:2f:ba:
         46:72:37:93:f0:26:bf:4f:af:7b:ac:2b:12:1b:58:64:02:f9:
         37:47:e5:22:35:e5:81:c7:78:b7:18:3d:75:9b:d9:f8:ec:dd:
         02:07:22:d7:a4:d3:e9:f6:2c:90:3b:44:62:6d:84:0d:e5:0a:
         0b:b1:63:c2:0b:22:d3:bb:9b:b8:d9:d0:35:ad:f8:98:b8:14:
         d0:ea:d5:18:ed:69:46:d5:4b:43:44:97:d2:37:3f:56:15:4d:
         e9:38:b1:53:04:f3:7b:fe:d5:db:58:29:34:22:46:00:04:bb:
         ae:45:09:2c:09:79:04:66:70:a7:8b:1e:a7:59:62:08:ce:5c:
         04:67:cf:6e:2f:f8:cf:38:d9:9d:5a:a6:81:11:9d:3e:0d:f2:
         2f:53:49:a6:a7:8d:ce:9b:2a:c4:6b:4a:42:1e:63:0f:82:48:
         27:a5:44:40:45:92:fb:0c:d4:5c:c4:ef:25:93:17:28:d3:2d:
         ee:b7:e7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:38:30 2026 by rpki-client