Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/24DBC31AB1BA11F080D32309C4F9AE02.roa
File:                     24DBC31AB1BA11F080D32309C4F9AE02.roa (raw, json)
Hash identifier:          p4a4dVFXyGYegzF068ON2uCyZmulHS7AQpUNoGSbKfc=
Subject key identifier:   BC:0F:B6:47:A5:93:3A:95:6E:7F:ED:A6:15:F8:B9:32:16:F0:99:1B
Certificate issuer:       /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
Certificate serial:       010C
Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/24DBC31AB1BA11F080D32309C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:49:03 +0000
ROA not before:           Sat 29 Nov 2025 04:02:41 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153366
IP address blocks:        2001:df6:3fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl
                          rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 268 (0x10c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
        Validity
            Not Before: Nov 29 04:02:41 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a5954f-5cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ca:a6:71:5d:ac:4c:5c:16:2d:70:ea:c5:25:
                    7b:50:c0:41:ca:c1:1a:49:f7:59:13:4a:37:af:4d:
                    95:68:0a:c6:b3:d2:d1:58:5b:01:35:d7:2e:07:69:
                    a6:a2:96:e7:d8:57:c3:b7:97:7d:4a:46:66:8c:7b:
                    91:c1:ca:3b:c3:f8:d3:c4:1c:2c:47:01:b7:64:76:
                    d7:1c:f0:f2:e8:31:c0:ec:90:b5:62:2e:91:81:b7:
                    4c:bd:fe:3f:35:a4:bb:ea:b1:51:e7:53:94:64:aa:
                    92:16:11:73:db:6c:4d:50:08:1d:d8:b3:9d:f9:44:
                    fc:34:83:b1:59:ba:27:17:10:d4:1b:b5:86:ec:64:
                    5f:e4:47:65:68:ca:71:60:f2:3a:39:28:f4:e7:51:
                    ed:73:ec:cb:4f:a4:2f:55:ab:d7:5c:e5:84:63:18:
                    60:70:de:04:c1:28:1c:d5:bb:bc:f1:dd:4e:e6:76:
                    12:d1:6c:b0:5b:05:ac:47:7d:64:06:15:bf:22:68:
                    4c:1c:64:0a:31:ee:87:89:6c:61:d3:93:6e:5e:c6:
                    f5:fe:95:dc:2c:64:6e:39:da:f2:9c:ef:29:45:ff:
                    6e:66:78:29:cb:63:97:91:14:1e:f1:73:1e:da:10:
                    fc:89:be:8a:b9:98:d5:e7:ff:5a:9c:91:8f:51:2e:
                    01:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:0F:B6:47:A5:93:3A:95:6E:7F:ED:A6:15:F8:B9:32:16:F0:99:1B
            X509v3 Authority Key Identifier:
                keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/24DBC31AB1BA11F080D32309C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:3fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:a1:0f:e2:ac:36:01:14:0c:52:23:dc:48:f3:5a:4c:0f:4f:
         2c:75:a5:99:e8:82:8a:56:42:89:be:20:5c:79:c0:2f:ae:41:
         84:1b:87:b5:52:c4:e6:f6:b4:5d:4a:f5:88:1c:0a:9e:fd:71:
         19:09:64:4a:2a:2b:fd:06:11:08:c1:df:3b:b9:b8:2c:e4:41:
         e4:73:3e:1b:31:cd:e8:70:2d:6e:95:57:43:dd:e9:49:cd:bd:
         d9:81:ec:7e:81:80:13:17:0f:eb:48:a5:38:a1:e3:6a:f3:4e:
         f1:df:2b:4a:1d:5f:47:d5:a8:b7:9a:88:31:8a:60:cd:32:aa:
         81:fc:e3:92:21:41:5b:bc:f6:e5:da:66:fd:65:ae:af:7b:df:
         ab:58:c3:ae:d8:bf:7b:e3:8e:1f:d0:fb:4c:f0:f5:c1:0c:2d:
         c8:99:a4:03:b4:92:37:e3:4b:79:12:9d:9b:9a:d3:2f:b0:4e:
         51:48:31:13:7a:c2:94:44:65:a9:bf:f2:65:5c:e1:7e:38:e8:
         de:f1:e9:54:d6:f5:d4:3c:2e:80:d7:61:b3:7e:2a:96:c8:0d:
         70:bb:d6:b4:1c:21:0e:1b:8a:58:01:e9:ee:aa:3b:90:c7:91:
         a7:4b:04:e4:df:b5:92:ce:c5:b7:49:06:97:2a:72:78:c7:4a:
         97:8d:3a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:14:54 2026 by rpki-client