Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/9D1CBEB65D8111F0A04DD550C4F9AE02.roa
File:                     9D1CBEB65D8111F0A04DD550C4F9AE02.roa (raw, json)
Hash identifier:          N1niDKK9juZqw/xLVUFskwbSzY0LXGUhy0Jr+VO8qso=
Subject key identifier:   F6:F9:14:BE:A2:1C:BF:28:2E:A5:AF:EE:D8:DD:75:AA:E9:5B:4A:F5
Certificate issuer:       /CN=A913B510/serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE
Certificate serial:       7C
Authority key identifier: 8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/9D1CBEB65D8111F0A04DD550C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:23:03 +0000
ROA not before:           Thu 10 Jul 2025 11:32:52 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     149486
IP address blocks:        2401:b5e0:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl
                          rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:49:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 124 (0x7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B510, serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE
        Validity
            Not Before: Jul 10 11:32:52 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a58f37-6426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7c:1f:12:9d:66:45:24:37:a6:dd:70:cc:45:
                    9b:86:95:0b:ab:f5:58:d2:2a:e4:37:6a:ba:ef:25:
                    5f:dc:5c:a4:b6:df:fa:f5:05:9b:14:2d:e5:ac:ae:
                    05:e2:bb:f6:0b:d7:fe:5e:99:17:b0:26:eb:e4:84:
                    4d:9e:a4:79:e2:5a:a2:57:97:6f:24:9a:d7:e0:06:
                    b3:56:91:93:26:9c:48:17:e0:7a:33:23:96:d2:21:
                    52:9a:7d:31:e2:e6:5c:4f:00:83:19:3d:50:af:84:
                    a3:26:dc:5b:15:d5:b8:21:1d:f3:84:ba:f3:97:de:
                    91:32:c5:1d:df:e5:3a:db:a3:cb:1a:be:44:f3:60:
                    87:4c:ce:7b:7e:51:92:fe:a6:81:2e:c1:fc:9b:47:
                    55:22:45:d4:b4:c7:f5:d6:15:83:1f:a8:8b:6a:66:
                    18:16:9a:2d:bf:3a:83:c3:dc:83:2d:42:5f:33:ab:
                    94:d4:31:3d:d1:b8:45:09:38:f4:12:af:bd:f2:4d:
                    70:b9:3f:4e:a5:08:52:bc:ef:5e:24:1c:11:da:fa:
                    8f:78:c3:c4:91:eb:06:d0:8e:84:f5:eb:fd:79:82:
                    64:cb:0e:52:5a:bd:ca:57:d1:ae:6e:ac:80:5a:85:
                    f7:4d:6d:b8:5c:11:89:dd:b1:de:11:38:82:d4:93:
                    4c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F9:14:BE:A2:1C:BF:28:2E:A5:AF:EE:D8:DD:75:AA:E9:5B:4A:F5
            X509v3 Authority Key Identifier:
                keyid:8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/9D1CBEB65D8111F0A04DD550C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b5e0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         83:cd:ce:bc:12:40:7d:c2:d3:82:0c:f1:6b:dc:c2:90:83:8a:
         91:54:67:0e:2e:8d:d2:aa:87:0d:c7:60:29:d3:3b:c1:6e:80:
         dc:09:f6:fb:79:62:3b:b1:a6:50:c2:a9:13:9e:57:92:29:19:
         f5:f9:3c:6f:30:2b:87:f4:a0:e2:f1:68:7a:ab:60:b4:2e:9b:
         11:5c:20:bc:ea:46:ee:e3:0f:20:2b:2d:52:b2:22:ad:04:cf:
         80:5f:fa:ec:e5:10:48:3c:3d:52:3b:23:b1:19:7a:44:b7:fd:
         fd:82:eb:a7:69:b8:48:ea:2a:1e:1e:62:00:10:af:33:2a:a0:
         80:16:0b:8d:73:a4:02:fb:53:6d:f6:9c:31:bd:12:e5:78:7a:
         c0:62:35:7b:62:fb:be:b2:6a:85:c5:a5:35:ac:bb:23:4e:87:
         a5:82:f4:6b:16:2d:b1:f7:47:1e:d5:99:5e:c5:47:39:04:fb:
         63:9d:5c:b9:6f:12:07:d5:ef:45:6a:95:ef:4b:01:5c:e2:14:
         5c:ab:e2:a1:6d:a4:4e:4a:53:72:e9:15:4f:87:d1:97:9e:58:
         c3:18:90:e6:9c:44:bb:79:47:7a:6a:1b:b0:6c:c1:73:e6:d1:
         51:41:fb:3c:c7:04:77:3e:41:5d:74:ca:27:e7:c0:8f:fd:6c:
         f3:65:ae:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:21:06 2026 by rpki-client