Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/D6CF9ED61D5611F1A0EA4997233D8C67.roa
File:                     D6CF9ED61D5611F1A0EA4997233D8C67.roa (raw, json)
Hash identifier:          SsE4AcFHHC4+KSYsRKUgPuWZ9aW/dPOP3ZBl/cGum9g=
Subject key identifier:   3C:0B:F5:5D:82:0B:3D:E3:9E:20:2A:9B:E2:CF:C0:46:44:0F:79:E8
Certificate issuer:       /CN=A9146039/serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
Certificate serial:       02
Authority key identifier: 48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/D6CF9ED61D5611F1A0EA4997233D8C67.roa
Signing time:             Wed 11 Mar 2026 14:30:23 +0000
ROA not before:           Wed 11 Mar 2026 14:30:23 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     152741
IP address blocks:        138.252.60.0/24 maxlen: 24
                          138.252.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl
                          rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146039, serialNumber=48990E57159582E64DBE0CF61C499829DC2DF467
        Validity
            Not Before: Mar 11 14:30:23 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69b17c7f-f9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:b3:46:07:be:9d:80:f6:cf:23:0a:58:23:
                    a6:b7:6d:1a:ba:c9:38:0e:ea:34:22:47:c1:27:75:
                    30:c4:66:a0:55:e2:44:3b:b5:b2:31:77:af:50:bd:
                    5c:c1:7f:49:7b:25:3f:de:36:bd:59:04:4d:7f:56:
                    2a:6d:ef:b4:17:6e:f6:45:8b:cd:3d:a7:74:c1:38:
                    15:fa:40:e8:f9:36:42:9f:b8:d6:c2:50:be:86:05:
                    08:38:83:53:7b:73:b8:17:3d:d2:77:fb:b8:0e:04:
                    8b:4c:15:48:5b:ee:de:06:8b:0a:19:89:08:99:ab:
                    4f:62:3a:52:75:d8:3c:0b:8d:03:1d:28:c6:b3:0e:
                    1b:1e:18:19:e9:cc:6a:27:26:a2:b7:3b:ad:e6:d6:
                    63:a2:98:33:06:35:4f:6b:74:46:69:07:e6:1a:3c:
                    53:b6:78:73:c6:73:08:98:d4:bf:a0:89:b1:b4:bf:
                    ca:3f:5d:7a:0e:6a:62:09:96:5a:81:4e:4b:6e:99:
                    84:ee:04:5a:9f:3e:25:02:77:9c:64:51:c4:0a:f8:
                    6d:eb:77:06:e0:d0:03:8b:4b:ee:b6:d9:66:6e:a9:
                    74:77:c5:81:01:5e:fa:5c:dc:fe:fc:72:75:70:76:
                    04:f7:2c:4b:81:d1:a5:6f:df:9c:a5:ad:c1:c4:54:
                    3f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0B:F5:5D:82:0B:3D:E3:9E:20:2A:9B:E2:CF:C0:46:44:0F:79:E8
            X509v3 Authority Key Identifier:
                keyid:48:99:0E:57:15:95:82:E6:4D:BE:0C:F6:1C:49:98:29:DC:2D:F4:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/SJkOVxWVguZNvgz2HEmYKdwt9Gc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/SJkOVxWVguZNvgz2HEmYKdwt9Gc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146039/7B36FD581D5611F19653F658233D8C67/D6CF9ED61D5611F1A0EA4997233D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:90:3d:55:a6:b2:00:4d:58:2f:73:33:8e:19:5e:5e:6c:2a:
         43:ee:b5:ce:95:63:99:12:2e:c3:48:fe:b3:49:05:99:e2:2d:
         6c:88:46:5c:80:0e:c1:47:fb:da:9b:dd:bd:c6:d2:74:6f:7c:
         ef:56:39:98:5f:a3:d5:60:36:b2:06:6f:45:04:cf:20:6b:d9:
         91:25:32:8d:43:d2:10:ab:ce:8d:df:15:6f:25:dc:7d:33:ca:
         8a:84:c3:8b:51:00:82:03:6e:6d:cd:a5:48:84:f8:3a:f3:db:
         6d:67:2b:31:5f:b6:14:ad:ab:93:82:14:a4:6e:d1:7b:e7:f4:
         fe:b0:a1:5e:0c:1d:7a:57:a2:6e:e8:9d:a0:ea:48:56:61:3f:
         ec:c2:07:9d:dd:23:41:9b:96:46:42:bb:34:03:8f:ec:bf:77:
         96:8d:7e:8a:07:7c:33:b9:74:00:cc:9b:65:15:07:6b:36:fb:
         06:8f:53:fc:8f:fe:2d:b8:bb:d7:0f:e2:2e:a6:0b:ae:d2:c8:
         64:6c:11:9a:0f:2d:eb:d9:ae:a8:83:2d:4c:31:ca:69:26:0a:
         cf:fc:52:bb:66:de:1f:79:d6:ad:a2:80:3f:f4:08:d1:3a:af:
         17:8c:8a:9a:d6:c9:6f:0b:5c:c2:9b:e5:68:ea:24:dc:80:1b:
         bc:23:51:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 20:08:59 2026 by rpki-client