Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/13B46272139511F0BAC02735C4F9AE02.roa
File:                     13B46272139511F0BAC02735C4F9AE02.roa (raw, json)
Hash identifier:          mtm2pGsiJTAaeB0Xp8pic60xQU0wEGWZuLRIZY26FJE=
Subject key identifier:   47:C2:1E:20:B0:BD:26:FE:A5:F3:BC:BB:AA:09:AA:23:79:A8:C9:DA
Certificate issuer:       /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial:       014C
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/13B46272139511F0BAC02735C4F9AE02.roa
Signing time:             Thu 23 Apr 2026 06:44:36 +0000
ROA not before:           Thu 23 Apr 2026 06:44:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     209650
IP address blocks:        2401:f860:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
                          rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:48:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
        Validity
            Not Before: Apr 23 06:44:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69e9bfd4-1c3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e1:d5:1c:40:00:12:ec:ad:06:64:64:26:3d:
                    08:f8:50:50:55:d4:cb:89:2b:85:a9:e0:51:8c:e9:
                    68:49:55:cd:db:0b:29:49:7b:2d:61:2b:6f:9b:09:
                    5e:ff:6a:26:9c:5d:1f:94:5f:6d:ff:3c:4f:2e:96:
                    60:8f:6c:02:71:ab:fc:6a:b0:55:12:f9:43:fc:d8:
                    e1:1b:8a:ec:5b:98:07:79:bc:ae:d7:ac:93:8f:cd:
                    34:d2:04:92:b9:fc:dc:40:72:1e:45:08:d6:18:8e:
                    3f:b4:ce:3d:b3:35:bd:ed:3a:f9:43:df:d7:cc:02:
                    2c:8e:c4:14:46:4c:86:d2:12:8f:10:b6:c8:62:de:
                    70:33:40:96:32:22:ec:95:05:bf:04:6e:09:ad:1f:
                    4c:ba:5c:e2:13:e4:9e:67:92:53:f1:a8:3e:59:a8:
                    6a:82:99:9f:2e:f3:f0:fb:f5:71:a4:9c:7e:af:66:
                    87:e2:32:23:9a:d7:d6:39:da:0c:c2:73:3a:98:06:
                    5f:fd:26:87:cf:1e:5b:3a:31:98:f4:bf:24:d2:91:
                    69:38:9b:27:3f:d9:d5:bd:bc:ca:43:3e:43:4c:a4:
                    a1:fc:6e:7d:9e:7a:93:c8:45:30:f7:90:89:f4:ec:
                    18:c5:61:41:04:21:2c:73:3b:d4:14:42:62:c2:de:
                    63:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C2:1E:20:B0:BD:26:FE:A5:F3:BC:BB:AA:09:AA:23:79:A8:C9:DA
            X509v3 Authority Key Identifier:
                keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/13B46272139511F0BAC02735C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f860:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         ea:61:97:08:e7:62:bf:66:5e:24:aa:91:d7:cf:ac:36:20:5c:
         ab:24:d1:ad:e4:23:cf:f8:be:06:03:48:06:7d:87:35:8d:2b:
         cb:81:64:eb:8f:1e:76:61:5f:7e:85:55:89:ec:62:06:7f:75:
         bb:6f:95:1c:54:e2:e3:97:67:52:02:a5:e9:07:e4:05:ac:e5:
         9b:a2:f3:25:02:7a:c9:ae:6c:f4:8f:59:a3:41:b0:98:fd:26:
         f3:ef:9d:39:8f:17:24:d9:fa:ee:38:c3:0e:ec:fc:15:26:4f:
         d8:9b:dd:4b:f9:14:13:78:6f:26:7a:7d:f1:75:1b:35:6c:4b:
         34:28:cb:4c:eb:d8:eb:93:98:d4:30:fd:98:ab:de:83:e6:b1:
         4a:15:1d:dc:29:c6:7e:c0:6d:d2:30:0b:74:55:9b:24:1b:e7:
         3c:63:50:7b:9c:4f:e8:a5:0e:04:66:50:08:00:14:4b:de:67:
         22:2b:69:72:0d:ac:1f:12:b1:a1:49:f4:c7:71:86:da:39:62:
         4e:f0:79:89:e1:57:00:4c:79:47:22:b8:a4:0a:fe:b9:92:7a:
         a4:88:9e:ee:de:13:0f:af:87:4c:4c:3c:38:1d:0e:63:2a:89:
         6a:8b:42:cc:37:6d:ed:c6:a2:c2:a4:bb:ee:d0:17:d4:a8:8f:
         14:9d:00:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:05:49 2026 by rpki-client