Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/5ABA49EA40A611F1BD23BD8A94833773.roa
File:                     5ABA49EA40A611F1BD23BD8A94833773.roa (raw, json)
Hash identifier:          NVzcrGSt+ddrTM0Iko1VtvfoHHrjPUpF32Wu/tFHIdI=
Subject key identifier:   85:B2:35:4A:7A:A8:08:36:DA:E9:BA:63:55:35:07:E1:56:0B:47:1F
Certificate issuer:       /CN=A915B202/serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
Certificate serial:       02B7
Authority key identifier: 8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/5ABA49EA40A611F1BD23BD8A94833773.roa
Signing time:             Sat 25 Apr 2026 12:57:46 +0000
ROA not before:           Sat 25 Apr 2026 12:57:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     150338
IP address blocks:        2001:df1:5740::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl
                          rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:34:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B202, serialNumber=8CBE9DD59934C9AD205FCE6AF8EF4DB801F1D3EB
        Validity
            Not Before: Apr 25 12:57:46 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69ecba49-b8d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:48:24:2c:6f:f2:32:b9:37:ff:4b:92:a7:ec:
                    4c:48:d7:bc:45:32:c2:03:7a:8f:e8:09:43:c4:fe:
                    c6:cc:05:c6:3f:81:90:cc:92:c6:42:7a:0d:c3:b4:
                    3e:dc:5a:72:4c:c2:3d:d5:56:7b:ff:29:6b:7b:ae:
                    32:b1:a6:b9:24:53:b8:b4:e5:7c:d9:a9:5a:7d:68:
                    7a:55:15:79:27:45:ed:e1:96:8f:82:8e:be:2c:2a:
                    fa:04:25:a5:21:c8:7c:b9:26:26:4d:3e:36:f8:e8:
                    08:11:1e:1e:cd:81:5d:d3:51:df:e6:45:ac:3e:fe:
                    99:b2:94:48:c0:a3:66:8f:b5:8e:f6:6a:f2:2f:ed:
                    b9:ab:1e:6f:28:4b:0e:d4:90:03:a7:8c:36:17:0c:
                    2e:45:d3:13:94:2a:a1:a7:03:da:30:41:76:32:6b:
                    a4:c3:ff:7c:24:d1:ed:3c:77:a6:1a:15:78:c9:a2:
                    69:f9:c2:86:1a:ea:47:83:5b:52:61:6c:59:eb:c6:
                    2c:ad:f4:aa:83:b3:21:d8:a7:ab:15:7b:8c:cc:15:
                    8c:6c:c1:b8:d7:cf:41:5a:6d:7c:c2:dc:99:e1:7e:
                    de:bf:06:b3:8a:4a:52:35:74:cc:7b:d5:ab:63:40:
                    f9:af:02:1f:a0:36:e8:aa:0a:81:5e:fd:c4:f4:fe:
                    39:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:B2:35:4A:7A:A8:08:36:DA:E9:BA:63:55:35:07:E1:56:0B:47:1F
            X509v3 Authority Key Identifier:
                keyid:8C:BE:9D:D5:99:34:C9:AD:20:5F:CE:6A:F8:EF:4D:B8:01:F1:D3:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/jL6d1Zk0ya0gX85q-O9NuAHx0-s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jL6d1Zk0ya0gX85q-O9NuAHx0-s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B202/4D41CF92409E11EDB352EE5EC4F9AE02/5ABA49EA40A611F1BD23BD8A94833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:5740::/64

    Signature Algorithm: sha256WithRSAEncryption
         4d:80:3b:23:e8:ae:1c:d6:dc:09:e4:f5:87:61:7d:2b:b3:45:
         8f:82:45:1d:93:a6:be:0f:17:53:30:8d:88:62:40:49:c3:d3:
         0a:7b:30:ae:a5:0e:95:11:26:e1:04:0d:df:a6:b5:57:e2:bd:
         d3:27:a5:bd:4a:e9:30:b1:f8:fe:2b:23:e5:bc:18:bb:17:c8:
         93:8d:ac:51:ca:d6:ff:17:fd:c9:b4:17:47:8a:38:87:24:7d:
         fd:f0:4c:ab:f9:c4:e5:bb:81:cf:00:bd:d5:1b:04:99:c0:ca:
         48:b2:09:17:39:d4:ad:c2:87:a2:8a:9f:16:60:b6:02:95:73:
         a5:3b:11:82:d9:4b:19:ba:00:70:f9:16:4c:03:48:fa:95:3c:
         9f:70:72:71:3d:77:a7:57:f5:e6:9d:da:81:e1:eb:ac:9f:0d:
         57:3c:4d:ea:41:2e:c6:c5:fb:b8:f7:ac:cd:5b:34:ac:c6:2a:
         3b:51:dd:82:fb:0c:a6:82:37:ef:39:3a:26:6d:6f:26:55:2d:
         b5:e4:cd:ce:d9:a8:9a:24:4b:82:2e:aa:7c:84:c9:ae:75:d4:
         1f:a2:b5:28:60:31:47:52:4c:7c:74:29:2b:2a:98:05:4a:63:
         12:8f:a8:cd:e9:de:de:6a:36:4f:41:fd:75:cf:3f:58:17:4c:
         d9:90:3a:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:26 2026 by rpki-client