Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/D16A1B5C225711EF975F6747C4F9AE02.roa
File:                     D16A1B5C225711EF975F6747C4F9AE02.roa (raw, json)
Hash identifier:          Cs2Nng8ExkKcdkzE5LqEYG6YI921OCl1yRvK1flrw98=
Subject key identifier:   94:E8:F9:10:01:52:FF:0F:61:D3:62:64:13:9D:EC:95:89:3D:62:9D
Certificate issuer:       /CN=A9167CB5/serialNumber=FA811F52E5195A429D706D19C003237C3209AA37
Certificate serial:       014B
Authority key identifier: FA:81:1F:52:E5:19:5A:42:9D:70:6D:19:C0:03:23:7C:32:09:AA:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/D16A1B5C225711EF975F6747C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:15:52 +0000
ROA not before:           Tue 01 Jul 2025 06:44:01 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152898
IP address blocks:        2001:df3:e1c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.crl
                          rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:18:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167CB5, serialNumber=FA811F52E5195A429D706D19C003237C3209AA37
        Validity
            Not Before: Jul  1 06:44:01 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5a9a8-4c32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:83:33:b0:69:48:8d:f2:88:c6:8a:9f:d8:65:
                    dd:89:be:69:51:e4:f8:2e:2e:07:7a:11:79:77:44:
                    0e:b9:09:9d:a8:ba:50:64:ac:03:0b:65:4b:09:15:
                    f6:47:f4:dd:1a:b7:86:79:e2:b3:a4:04:c6:3d:27:
                    d7:f8:83:25:b8:80:27:06:1a:c1:0c:15:36:77:58:
                    de:15:97:1e:73:77:f6:14:22:5d:50:3e:39:66:c2:
                    5b:d6:9b:a6:c5:1f:c8:05:42:7f:61:7d:91:ff:7c:
                    f7:da:92:d8:cb:63:0b:04:49:97:15:e9:0b:e2:99:
                    83:f8:ce:1c:56:8e:59:a8:d7:b1:db:8e:bd:d7:54:
                    f2:6c:fe:ec:d2:82:d9:73:fe:6f:22:c7:c0:15:84:
                    5e:27:b6:e7:30:1a:3a:f7:0a:bc:41:cd:91:80:28:
                    99:28:c4:c5:68:57:3c:47:5c:2e:fd:eb:4d:b2:2e:
                    bc:45:6c:e9:cf:da:5a:9a:74:86:b3:07:0f:ce:d2:
                    28:7c:61:7d:bd:2c:d7:c1:2d:70:39:80:10:77:7c:
                    e3:f6:40:99:69:08:cf:9e:ec:89:de:60:51:2e:6a:
                    c0:11:fe:af:9e:1f:23:12:26:aa:1b:d5:45:d9:36:
                    ab:87:6b:8c:c3:7d:ff:a8:f8:8b:76:b9:fc:6e:cd:
                    21:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E8:F9:10:01:52:FF:0F:61:D3:62:64:13:9D:EC:95:89:3D:62:9D
            X509v3 Authority Key Identifier:
                keyid:FA:81:1F:52:E5:19:5A:42:9D:70:6D:19:C0:03:23:7C:32:09:AA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-oEfUuUZWkKdcG0ZwAMjfDIJqjc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167CB5/FA37C63E225611EFB7561F46C4F9AE02/D16A1B5C225711EF975F6747C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:e1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:56:32:4e:f1:2b:70:89:e6:f5:63:5a:cd:de:45:48:58:9a:
         fe:b6:37:50:3f:e6:63:77:e3:78:56:fb:03:37:54:74:85:6f:
         81:7c:3a:f8:80:8f:b8:fc:cd:75:ad:0a:32:80:6c:5c:23:9c:
         9f:44:29:e1:af:72:10:58:d5:db:03:00:77:9e:e5:12:f4:f5:
         a6:a9:67:c9:0c:c6:f8:86:af:f4:d0:bc:25:dd:a0:0b:c2:06:
         ff:7e:94:32:41:5e:12:d0:8d:5f:6f:ca:46:48:fb:14:ea:4f:
         3e:84:62:c0:59:14:1e:31:16:0a:a8:4b:76:df:c2:06:b4:87:
         20:d0:93:d9:a0:a4:11:84:48:86:b9:2c:98:9a:80:e8:45:33:
         92:57:e8:48:64:54:36:3c:f1:a7:66:32:ee:d9:cb:2a:91:0e:
         ac:ac:90:1f:02:fb:64:6d:6b:99:a9:c0:cb:e5:6c:cd:cb:16:
         60:89:1d:e2:c7:7b:7c:ad:37:1f:ea:e9:b7:d4:81:18:60:7b:
         7f:e4:2a:e3:e1:18:35:7d:ae:aa:4b:a7:c5:f6:2a:d2:88:7f:
         3c:de:cd:5e:c6:87:30:2c:25:e1:84:50:12:ad:79:79:b6:7d:
         e3:18:05:b5:30:dc:c9:7d:c0:5d:d2:1f:36:66:c8:52:c6:70:
         8d:12:0a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:13:49 2026 by rpki-client