Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/E70F43AC210A11F193291E4B223D8C67.roa
File:                     E70F43AC210A11F193291E4B223D8C67.roa (raw, json)
Hash identifier:          vr+JPX0UbJ2zqOkFh2Kw5N7O16gJbbIuMOaMrF1nIsE=
Subject key identifier:   E1:72:FF:5B:41:DB:79:1A:86:D5:B4:E6:B2:CC:C6:C5:02:BD:F9:73
Certificate issuer:       /CN=A917877E/serialNumber=C3978B6B679BFAD722F5F879CC146C0BADFACB37
Certificate serial:       83
Authority key identifier: C3:97:8B:6B:67:9B:FA:D7:22:F5:F8:79:CC:14:6C:0B:AD:FA:CB:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/E70F43AC210A11F193291E4B223D8C67.roa
Signing time:             Mon 16 Mar 2026 07:36:54 +0000
ROA not before:           Mon 16 Mar 2026 07:36:54 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154038
IP address blocks:        2402:16a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.crl
                          rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:49:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917877E, serialNumber=C3978B6B679BFAD722F5F879CC146C0BADFACB37
        Validity
            Not Before: Mar 16 07:36:54 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69b7b315-bb40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:e8:87:55:9e:ca:16:55:5c:40:5b:89:d9:6f:
                    69:b4:df:c2:1c:95:71:65:5d:2b:2e:ea:30:02:64:
                    b8:8b:ef:44:91:fd:ed:8d:b6:d1:8a:1d:47:40:d4:
                    ef:24:02:12:b1:6d:a0:8d:d6:2d:58:d8:03:19:1c:
                    ec:88:a6:bb:e4:90:38:46:c0:54:bd:87:fd:40:25:
                    cd:43:3e:3e:b3:7e:e8:77:8a:14:96:68:18:96:e0:
                    00:22:1b:c0:1b:24:17:c6:d6:a4:fe:bd:97:c6:fb:
                    fa:6d:bd:e0:0d:82:0c:ef:a2:59:5d:9c:19:67:a1:
                    60:69:ce:9e:cd:78:ec:d8:04:42:79:57:fa:d5:62:
                    c6:93:3c:e8:40:9b:9a:fb:3b:5d:f2:10:c4:1f:11:
                    77:b6:21:9c:a5:b7:79:09:0d:12:ac:55:f5:26:b3:
                    0d:1d:29:5b:4b:47:9d:83:09:bf:9e:e6:65:e9:30:
                    fc:85:72:33:40:b3:62:c0:a8:d6:ef:0d:58:cb:3b:
                    06:43:55:ca:b6:29:f4:e3:81:c8:93:67:6f:22:02:
                    71:cf:d5:57:22:ce:69:76:bc:49:d4:53:39:4c:86:
                    2b:23:05:ef:04:b7:fb:21:3a:67:11:a2:79:f1:f1:
                    b5:eb:58:ca:64:bf:bc:d3:0f:f3:3d:d2:b0:6a:8a:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:72:FF:5B:41:DB:79:1A:86:D5:B4:E6:B2:CC:C6:C5:02:BD:F9:73
            X509v3 Authority Key Identifier:
                keyid:C3:97:8B:6B:67:9B:FA:D7:22:F5:F8:79:CC:14:6C:0B:AD:FA:CB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/w5eLa2eb-tci9fh5zBRsC636yzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w5eLa2eb-tci9fh5zBRsC636yzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917877E/41D53EEE5D5D11F0B49A7847C4F9AE02/E70F43AC210A11F193291E4B223D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:16a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         0f:bb:08:75:e4:28:1e:f1:a4:cd:81:f2:8b:38:3a:60:f1:5e:
         cc:5a:db:23:2e:6c:ef:5f:40:b8:45:2a:68:b2:f2:03:dd:00:
         ed:5f:97:ec:f9:b9:b8:4f:4d:4d:29:6c:0f:34:e2:42:10:9c:
         3a:df:22:34:42:5e:79:11:5c:10:d1:26:a5:4b:dd:84:ad:b6:
         22:af:bb:cc:b9:75:c5:f2:26:79:dd:40:78:5c:97:9f:57:3c:
         a9:56:96:a7:62:c8:f5:47:b9:f9:3e:3e:b7:ad:51:a9:21:5f:
         61:dd:ef:e2:97:de:86:5f:eb:12:b3:12:58:aa:71:b1:7c:5b:
         a7:44:75:8d:86:e3:a3:b9:36:6e:e2:56:1d:7e:e2:20:50:cf:
         f5:5c:82:19:61:96:77:70:52:01:f8:68:34:ce:47:cf:c3:e4:
         a6:ff:f6:f1:3f:71:de:fa:d3:dc:69:d4:fa:3b:9f:7b:76:38:
         32:8f:26:9f:76:98:1f:66:eb:4e:ca:9a:19:7a:37:8c:ce:29:
         bb:e1:6b:86:e1:71:54:6d:76:2d:9a:8c:33:75:13:3e:67:64:
         52:d8:7b:2f:b4:83:de:db:f9:c8:29:92:16:51:8a:a7:73:4e:
         dd:21:17:2c:07:7e:cf:10:ff:e7:42:40:25:96:b9:28:3e:7b:
         78:51:60:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:59:04 2026 by rpki-client