Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/18DC6A2602A311F188F4114D3A3D8C67.roa
File:                     18DC6A2602A311F188F4114D3A3D8C67.roa (raw, json)
Hash identifier:          t3GNpUerhP0cJPbY48i/kbcLRCBSWRa0pQ+pR8/EBR0=
Subject key identifier:   C1:77:FD:D9:CF:78:10:02:02:1F:20:B5:3A:85:29:1D:86:06:4D:C4
Certificate issuer:       /CN=A9147CA8/serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD
Certificate serial:       75
Authority key identifier: DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/18DC6A2602A311F188F4114D3A3D8C67.roa
Signing time:             Mon 02 Mar 2026 13:27:58 +0000
ROA not before:           Thu 05 Feb 2026 14:58:14 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     154049
IP address blocks:        2402:39a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl
                          rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:58:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147CA8, serialNumber=DD280828FF0996A8CBEF29BF0D914DF252DF1CBD
        Validity
            Not Before: Feb  5 14:58:14 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a5905e-c19f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:56:69:fd:bb:9c:d3:7c:a8:19:d1:2e:3b:
                    b4:e6:e2:24:2c:cb:22:3c:4b:ab:97:12:0b:4d:6d:
                    a3:4c:fb:c2:b1:1c:31:28:ca:2b:66:37:fd:54:35:
                    60:0a:27:a7:fb:03:08:ac:5f:cb:6a:4d:ff:71:ac:
                    77:47:bc:e2:21:bb:72:2a:c1:77:4f:bb:14:71:fd:
                    39:f4:97:95:e9:0b:61:5a:34:fc:1f:cf:18:87:41:
                    66:17:4c:59:97:99:b2:7a:05:b6:23:57:db:2a:e2:
                    35:91:35:92:99:d2:6e:a8:70:38:60:3a:82:cf:93:
                    13:12:a0:66:d5:cf:56:30:11:38:dd:1e:14:fd:3d:
                    b7:2f:9e:68:a7:80:26:3b:f9:bf:68:8e:57:45:1a:
                    ad:37:a1:c7:0d:3d:f6:fa:4b:37:9b:5e:10:b7:47:
                    d1:70:28:c4:e3:24:30:19:4b:3e:57:37:14:9e:65:
                    e3:be:14:fa:6e:2b:5a:7d:31:b9:1f:24:20:e8:d7:
                    6e:01:87:88:44:ad:5f:d2:1d:dd:dd:f9:16:23:9a:
                    a8:52:11:5c:be:0c:2f:da:09:96:34:66:41:dd:61:
                    1e:9c:77:ca:3d:63:53:98:d7:f4:03:01:42:b7:93:
                    36:60:4c:a7:2f:41:ad:08:eb:de:45:26:0b:26:07:
                    38:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:77:FD:D9:CF:78:10:02:02:1F:20:B5:3A:85:29:1D:86:06:4D:C4
            X509v3 Authority Key Identifier:
                keyid:DD:28:08:28:FF:09:96:A8:CB:EF:29:BF:0D:91:4D:F2:52:DF:1C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/3SgIKP8JlqjL7ym_DZFN8lLfHL0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3SgIKP8JlqjL7ym_DZFN8lLfHL0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/6A9E915C6EE911F0B301F667C4F9AE02/18DC6A2602A311F188F4114D3A3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:39a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         50:ca:be:d7:10:95:6d:24:1f:2d:b4:c3:fe:7f:30:da:88:04:
         36:c0:de:5f:ea:3a:bc:f2:8b:b2:2d:c9:60:e6:20:6a:9b:79:
         3a:33:d7:84:7a:49:e6:8d:03:46:4b:6d:53:9a:08:ea:93:a2:
         f6:26:10:90:85:44:b5:3c:ad:f6:98:dc:8b:33:40:91:29:29:
         fe:8c:67:a0:a0:42:f6:30:3d:f9:ed:a0:00:ac:fe:dd:39:a7:
         95:6f:87:0d:2b:cb:2c:da:6b:1f:39:a9:cc:d1:35:4b:14:75:
         6f:a5:f3:78:de:7c:d8:a3:11:22:17:c3:9b:74:3e:eb:63:d7:
         4f:05:04:cc:26:ff:2e:49:1c:0c:2f:77:6e:da:0b:66:ea:33:
         25:f3:da:ee:bd:b7:e8:42:21:20:0d:1b:6d:1b:c0:c7:6c:a2:
         06:45:3d:53:cc:58:d5:d1:aa:b2:a2:3a:5f:10:a5:96:28:75:
         3b:d6:27:0a:90:14:6f:47:91:0f:2a:0f:0b:de:7a:29:20:8f:
         79:76:b0:a5:ff:39:c0:49:4b:32:c4:63:57:1c:9b:fc:19:c4:
         6a:bd:01:7c:a8:48:e4:55:18:e2:29:a7:f7:52:4b:38:41:92:
         88:20:31:c7:15:13:58:5e:95:22:93:9d:f1:56:34:a0:5d:b1:
         bb:85:ea:1c
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
N0NBODExMC8GA1UEBRMoREQyODA4MjhGRjA5OTZBOENCRUYyOUJGMEQ5MTRERjI1
MkRGMUNCRDAeFw0yNjAyMDUxNDU4MTRaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTU5MDVlLWMxOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUh1Zp/buc03yoGdEuO7Tm4iQsyyI8S6uXEgtNbaNM+8KxHDEoyitmN/1UNWAK
J6f7AwisX8tqTf9xrHdHvOIhu3IqwXdPuxRx/Tn0l5XpC2FaNPwfzxiHQWYXTFmX
mbJ6BbYjV9sq4jWRNZKZ0m6ocDhgOoLPkxMSoGbVz1YwETjdHhT9PbcvnmingCY7
+b9ojldFGq03occNPfb6SzebXhC3R9FwKMTjJDAZSz5XNxSeZeO+FPpuK1p9Mbkf
JCDo124Bh4hErV/SHd3d+RYjmqhSEVy+DC/aCZY0ZkHdYR6cd8o9Y1OY1/QDAUK3
kzZgTKcvQa0I695FJgsmBzjrAgMBAAGjggJhMIICXTAdBgNVHQ4EFgQUwXf92c94
EAICHyC1OoUpHYYGTcQwHwYDVR0jBBgwFoAU3SgIKP8JlqjL7ym/DZFN8lLfHL0w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3Q0E4LzZBOUU5MTVDNkVF
OTExRjBCMzAxRjY2N0M0RjlBRTAyLzNTZ0lLUDhKbHFqTDd5bV9EWkZOOGxMZkhM
MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvM1NnSUtQOEpscWpMN3ltX0RaRk44bExmSEwwLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
N0NBOC82QTlFOTE1QzZFRTkxMUYwQjMwMUY2NjdDNEY5QUUwMi8xOERDNkEyNjAy
QTMxMUYxODhGNDExNEQzQTNEOEM2Ny5yb2EwIAYIKwYBBQUHAQcBAf8EETAPMA0E
AgACMAcDBQAkAjmgMA0GCSqGSIb3DQEBCwUAA4IBAQBQyr7XEJVtJB8ttMP+fzDa
iAQ2wN5f6jq88ouyLclg5iBqm3k6M9eEeknmjQNGS21Tmgjqk6L2JhCQhUS1PK32
mNyLM0CRKSn+jGegoEL2MD357aAArP7dOaeVb4cNK8ss2msfOanM0TVLFHVvpfN4
3nzYoxEiF8ObdD7rY9dPBQTMJv8uSRwML3du2gtm6jMl89ruvbfoQiEgDRttG8DH
bKIGRT1TzFjV0aqyojpfEKWWKHU71icKkBRvR5EPKg8L3nopII95drCl/znASUsy
xGNXHJv8GcRqvQF8qEjkVRjiKaf3Uks4QZKIIDHHFRNYXpUik53xVjSgXbG7heoc
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:39 2026 by rpki-client