Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/D1C1AFB2135511F0976BA50CC4F9AE02.roa
File:                     D1C1AFB2135511F0976BA50CC4F9AE02.roa (raw, json)
Hash identifier:          cXnna13A37da56cbsTCo0fbmD5n4hI69trG/+73mamk=
Subject key identifier:   6C:D0:EC:37:8C:FA:17:E6:FC:40:D0:81:B5:AD:9E:1E:D3:06:A0:EC
Certificate issuer:       /CN=A9179672/serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
Certificate serial:       E4
Authority key identifier: 0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/D1C1AFB2135511F0976BA50CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:47:57 +0000
ROA not before:           Thu 09 Oct 2025 06:34:35 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     152657
IP address blocks:        2001:df4:df40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl
                          rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:47:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179672, serialNumber=0C6970CAB9DF8E9BD10E1C3E91891A09A7E88C20
        Validity
            Not Before: Oct  9 06:34:35 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a5a31c-a038
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5a:4f:40:39:a9:d1:70:fc:a0:10:93:6e:d0:
                    55:6f:84:f7:c2:e7:a3:15:92:b8:fa:9d:5c:5e:1f:
                    ed:1a:8e:36:22:16:29:26:09:11:84:67:96:f6:05:
                    d4:46:17:6d:49:27:21:71:6d:8b:10:f1:9c:1a:66:
                    03:79:49:0d:7c:00:1b:42:15:d7:97:dc:6a:2b:07:
                    c4:78:95:bf:08:7b:b2:8f:49:cd:e7:da:68:de:f4:
                    97:c4:56:5f:83:d4:b1:01:52:8b:c4:95:39:28:2a:
                    96:6a:72:cd:90:43:9f:f7:e5:d6:d2:14:0a:e3:e0:
                    af:ec:04:4d:e4:aa:1d:b8:c4:21:84:29:c4:1d:d5:
                    65:2a:a9:a8:c4:ed:37:e9:f1:d2:06:79:38:3d:96:
                    f4:96:45:eb:cf:bc:cb:c6:67:e5:aa:7b:62:7e:62:
                    37:91:60:a4:b7:de:7d:57:26:52:aa:ff:80:38:5f:
                    4d:4e:ba:75:11:29:f8:87:a9:03:4d:88:5e:05:7a:
                    c6:71:e3:d5:07:27:e9:aa:6f:c5:6f:9c:1b:ce:0a:
                    bb:d1:f9:21:bc:0f:2b:eb:ef:6f:c3:a2:92:2c:48:
                    0b:39:d3:36:2e:a8:b5:8b:28:60:32:54:f3:e8:cb:
                    1d:c0:ac:6a:fa:b6:8e:9b:50:07:b2:a7:cc:73:44:
                    7c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D0:EC:37:8C:FA:17:E6:FC:40:D0:81:B5:AD:9E:1E:D3:06:A0:EC
            X509v3 Authority Key Identifier:
                keyid:0C:69:70:CA:B9:DF:8E:9B:D1:0E:1C:3E:91:89:1A:09:A7:E8:8C:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/DGlwyrnfjpvRDhw-kYkaCafojCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DGlwyrnfjpvRDhw-kYkaCafojCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/88ADCA98CBEF11EF9165C246C4F9AE02/D1C1AFB2135511F0976BA50CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:df40::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:15:e3:32:9e:00:c6:15:8a:96:66:4c:c2:0b:c1:14:85:34:
         c6:89:5b:fc:a4:ed:13:8b:81:fb:ef:de:04:af:f6:1a:c1:b7:
         56:ad:8b:fc:1a:2c:90:47:6c:b3:c4:92:d9:3b:4c:d5:c9:46:
         ad:46:e4:75:af:51:32:85:51:14:a2:75:b5:4f:8f:3c:67:41:
         c2:78:ba:77:15:2f:18:31:f3:00:e2:b3:31:c0:b0:0e:fe:58:
         61:61:74:7a:55:0f:fa:3f:66:ca:ce:aa:dd:59:33:36:2f:b8:
         f0:0c:0a:c2:fa:64:79:f0:9b:23:eb:0c:38:18:bd:4d:56:e1:
         48:fa:70:8f:a5:f4:90:b1:1f:94:8f:98:9b:35:49:f2:88:b7:
         65:4d:86:be:14:2a:dd:db:69:56:30:ae:2f:41:f9:3c:1f:e9:
         dd:8d:45:be:f0:d3:09:af:37:8d:ce:35:5e:79:ae:34:9e:f8:
         bd:1b:e0:73:44:e4:d2:04:da:3d:fc:a3:f3:12:1a:98:c2:aa:
         80:97:a5:dd:d2:e6:57:1e:8d:56:46:9c:fe:7a:a5:81:94:fb:
         1a:49:21:7b:6e:2c:04:92:05:ff:ca:ef:26:3d:d4:35:d9:c5:
         8c:d2:63:ff:53:e4:31:65:86:eb:a0:58:54:29:39:f6:d3:7b:
         e3:d3:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:18:41 2026 by rpki-client