Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/71A92448186E11F083760527C4F9AE02.roa
File:                     71A92448186E11F083760527C4F9AE02.roa (raw, json)
Hash identifier:          b7QaG+Nx/PTzoPZCl0t+vIuGgyWjiuhcViAVTwKgxf4=
Subject key identifier:   6E:62:4F:51:50:98:E5:8D:41:D3:AA:25:62:87:9C:27:99:81:A4:24
Certificate issuer:       /CN=A915BC98/serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
Certificate serial:       012A
Authority key identifier: FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/71A92448186E11F083760527C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:53:59 +0000
ROA not before:           Sun 13 Apr 2025 14:24:57 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     139888
IP address blocks:        2401:f860:6000::/40 maxlen: 40
                          2401:f860:6000::/44 maxlen: 44
                          2401:f860:6010::/44 maxlen: 44
                          2401:f860:6020::/44 maxlen: 44
                          2401:f860:6030::/44 maxlen: 44
                          2401:f860:6040::/44 maxlen: 44
                          2401:f860:6050::/44 maxlen: 44
                          2401:f860:6060::/44 maxlen: 44
                          2401:f860:6070::/44 maxlen: 44
                          2401:f860:6080::/44 maxlen: 44
                          2401:f860:6090::/44 maxlen: 44
                          2401:f860:60a0::/44 maxlen: 44
                          2401:f860:60b0::/44 maxlen: 44
                          2401:f860:60c0::/44 maxlen: 44
                          2401:f860:60d0::/44 maxlen: 44
                          2401:f860:60e0::/44 maxlen: 44
                          2401:f860:60f0::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl
                          rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:10:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC98, serialNumber=FF8CCBE618755A1F5199BD0C82760E8EDB8F85BA
        Validity
            Not Before: Apr 13 14:24:57 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a59677-0c3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:b3:96:18:15:9c:22:a8:80:c1:0f:81:41:
                    f9:5b:41:b3:b2:6a:2d:d1:4e:ff:1a:e6:ea:d6:d6:
                    66:7f:a0:96:7f:a0:71:fb:c3:60:bf:9a:ee:a8:34:
                    95:b6:b9:da:d7:7e:ae:b6:ba:2a:e4:a8:50:a9:30:
                    a5:4e:85:f1:88:38:0f:fb:65:8d:0e:0f:6f:e4:48:
                    26:3b:e3:11:43:3c:d6:9f:85:2b:fe:ac:2a:25:00:
                    35:57:4c:23:c5:f2:d7:25:f4:e4:16:88:5b:2f:fb:
                    73:72:8c:73:9f:cf:75:a4:92:a1:55:63:42:70:62:
                    0b:ab:b2:be:fb:3b:3d:15:ad:f6:ed:bb:81:a9:98:
                    88:19:fd:ee:6a:61:e7:d9:ec:4a:34:38:e0:3e:8a:
                    81:2b:73:c3:99:66:28:b0:bc:5e:77:4e:e2:20:47:
                    76:0a:7c:5b:dd:ca:9f:a5:67:a6:57:94:32:03:96:
                    9c:2f:2b:05:51:c6:96:f4:17:85:00:61:ae:47:4f:
                    78:08:df:d0:b3:49:d1:f3:24:40:3b:3e:52:4a:ee:
                    e7:18:44:92:2d:9c:48:e5:02:4e:3e:b0:f9:d2:df:
                    d7:5a:4d:09:67:0f:12:d0:fa:a5:58:12:80:c3:71:
                    4d:00:28:f8:f9:d6:d5:b9:83:48:6e:58:3e:95:bb:
                    32:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:62:4F:51:50:98:E5:8D:41:D3:AA:25:62:87:9C:27:99:81:A4:24
            X509v3 Authority Key Identifier:
                keyid:FF:8C:CB:E6:18:75:5A:1F:51:99:BD:0C:82:76:0E:8E:DB:8F:85:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_4zL5hh1Wh9Rmb0MgnYOjtuPhbo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC98/ABAFF5EA061211F08E9AE529C4F9AE02/71A92448186E11F083760527C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f860:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         01:14:d7:74:f6:fd:5d:66:3d:65:35:c0:04:20:8e:2e:f4:7a:
         ba:0d:c3:3d:77:0d:8d:aa:0f:45:21:44:aa:c0:16:91:1f:d7:
         1c:79:ff:7c:fc:ac:0b:35:be:fb:38:e8:ff:ea:bf:da:be:14:
         6f:69:52:2c:e5:01:bf:f7:33:ca:ef:a0:28:38:ac:cc:36:16:
         dc:ed:90:a2:dd:cc:81:cb:00:41:27:1a:6a:b9:dd:b7:a3:c3:
         47:51:a2:34:9d:20:f7:0e:73:6c:43:2a:97:66:1e:03:59:8a:
         51:b7:cc:7a:34:91:04:44:ed:54:4a:61:39:0f:21:e3:11:82:
         88:54:d3:74:85:fe:5d:96:dd:cd:e7:e1:b1:c4:cf:07:68:ce:
         eb:97:a6:f6:d9:d1:51:a4:4b:f3:32:17:c9:5a:b8:8a:5f:63:
         1f:dd:30:dc:c0:73:3e:2d:b6:90:12:31:ef:36:6d:41:19:71:
         8f:a4:a1:6b:6e:14:06:ad:14:bd:22:d6:23:7b:3a:1d:0f:5a:
         bd:29:87:7a:cb:a1:78:56:39:6e:10:d5:c2:c2:f2:79:d3:1e:
         dd:e2:01:43:9f:35:9f:a9:ac:6c:e3:5e:dc:18:ac:27:a5:41:
         22:01:51:78:71:a4:07:85:49:09:59:fe:71:ec:0a:13:64:4f:
         8c:a1:0a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:05:45 2026 by rpki-client