Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/6FACCFD03DE511F19BE7396A9C833773.roa
File:                     6FACCFD03DE511F19BE7396A9C833773.roa (raw, json)
Hash identifier:          hx73FbUhhYSn4YdY28vMT/48260o2dLNY4f4/5t+UtU=
Subject key identifier:   29:EB:A1:AC:D0:32:5E:D1:91:CB:CF:CC:CF:07:65:64:6D:85:4C:83
Certificate issuer:       /CN=A913C35A/serialNumber=26E59BEBDE4340AB66714FE2D9EDFF6CCC81A1F9
Certificate serial:       02
Authority key identifier: 26:E5:9B:EB:DE:43:40:AB:66:71:4F:E2:D9:ED:FF:6C:CC:81:A1:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JuWb695DQKtmcU_i2e3_bMyBofk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/6FACCFD03DE511F19BE7396A9C833773.roa
Signing time:             Wed 22 Apr 2026 00:51:46 +0000
ROA not before:           Wed 22 Apr 2026 00:51:45 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     154643
IP address blocks:        2001:df6:f640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.crl
                          rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JuWb695DQKtmcU_i2e3_bMyBofk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 09:13:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C35A, serialNumber=26E59BEBDE4340AB66714FE2D9EDFF6CCC81A1F9
        Validity
            Not Before: Apr 22 00:51:45 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=69e81ba1-91fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:2e:29:76:a5:62:11:d8:2a:62:f8:8e:99:47:
                    1b:19:dc:9f:32:44:c8:dc:21:77:57:6f:5c:0b:af:
                    9f:21:a5:79:ea:b1:82:bb:b6:b0:85:d5:e2:e3:f3:
                    08:04:df:a1:22:f5:7e:87:0f:21:c5:23:8e:98:83:
                    ec:f6:9c:31:12:45:f0:4a:46:44:89:6c:1a:9f:8b:
                    e5:00:84:05:7f:40:fa:c5:d4:4f:30:24:98:27:c0:
                    e4:ab:a3:b5:45:eb:be:19:c7:4e:25:c8:95:36:fd:
                    80:e3:bf:5d:79:cc:b0:8f:4f:16:7a:8a:0e:f7:ab:
                    ec:19:9e:76:d6:28:80:ac:49:69:de:3c:32:ce:9e:
                    f1:c4:de:d6:34:cf:6c:79:38:7e:13:1a:25:5a:e2:
                    a8:dd:d9:67:6f:39:59:9a:c1:c0:5a:42:38:3f:06:
                    f6:75:82:41:3c:26:69:3d:c8:29:74:dc:65:3a:c3:
                    72:09:f6:99:17:08:b5:2b:9e:b1:22:bd:12:c7:68:
                    fc:9f:53:74:54:41:21:89:70:25:7c:25:cf:db:10:
                    e8:33:d8:50:98:0c:a7:df:0d:49:ea:c9:cb:31:ef:
                    c2:11:7d:3a:ca:19:63:95:a1:74:25:74:2f:78:8a:
                    e5:ab:6b:0e:2c:75:59:8c:75:14:b4:f7:8f:b1:12:
                    d4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EB:A1:AC:D0:32:5E:D1:91:CB:CF:CC:CF:07:65:64:6D:85:4C:83
            X509v3 Authority Key Identifier:
                keyid:26:E5:9B:EB:DE:43:40:AB:66:71:4F:E2:D9:ED:FF:6C:CC:81:A1:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/JuWb695DQKtmcU_i2e3_bMyBofk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JuWb695DQKtmcU_i2e3_bMyBofk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C35A/1F2A72383DE511F1AD5235459C833773/6FACCFD03DE511F19BE7396A9C833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:f640::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:2a:28:a5:7a:08:ff:5a:0e:d7:67:86:c8:8c:27:67:a7:34:
         40:f9:7d:cf:af:f6:56:32:d3:33:87:de:0a:67:95:57:3c:17:
         3a:5e:31:4e:80:6d:0e:69:c0:cf:c7:f5:2a:1a:8b:8e:94:65:
         20:0b:5b:a3:9c:4e:d7:23:fc:37:b7:6e:d8:dc:ff:3c:42:10:
         4e:9b:6c:19:87:59:64:13:6d:cd:ec:15:f9:b7:0f:8e:d1:f3:
         37:69:6b:9d:73:a3:33:62:bd:9d:20:a3:16:0e:28:df:13:55:
         2b:c1:b4:75:42:bb:88:47:74:38:ce:8c:8b:d1:bf:1d:e9:a6:
         aa:e9:d2:17:e9:24:40:de:ac:ac:a1:fc:91:28:20:01:57:96:
         2e:2f:1a:20:2c:cb:21:b6:cc:b4:b2:16:64:55:12:dc:c8:7c:
         32:d9:fe:e2:f4:90:f5:c3:a8:94:19:b8:be:62:de:69:2d:5a:
         c9:a6:03:cf:7a:29:8d:8c:97:21:2a:c1:f9:bc:d4:7e:0e:44:
         95:74:4c:72:9b:0d:cf:d9:ab:60:dc:80:db:49:93:36:83:b0:
         2a:f0:64:01:0b:5d:4c:b5:b7:53:28:fb:52:2a:2c:a1:98:ec:
         a7:d1:7c:d1:53:44:33:39:f2:82:8e:3e:2a:dd:ed:f5:5e:ff:
         bb:a2:49:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:17:58 2026 by rpki-client