Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
File:                     21D692500C1E11EFBA32F937C4F9AE02.roa (raw, json)
Hash identifier:          90OvFdOZMeTg/GmohoPUyUWJ6agCScsf/VAla6eJEX4=
Subject key identifier:   CD:B7:E3:1A:7C:9E:7D:CB:87:03:11:25:D2:49:22:B0:83:F7:39:FD
Certificate issuer:       /CN=A91846F6/serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
Certificate serial:       01A1
Authority key identifier: 8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:39:17 +0000
ROA not before:           Fri 21 Nov 2025 03:20:48 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     17990
IP address blocks:        2001:df0:a300::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl
                          rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 417 (0x1a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91846F6, serialNumber=8DE82EFF6234D79B7A65FA60A053007DA8281FCC
        Validity
            Not Before: Nov 21 03:20:48 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a59305-820a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:91:4f:87:9a:08:c3:7e:ff:6c:92:c6:a9:f7:
                    88:f4:6e:e5:0b:1b:a0:17:0c:fc:e2:f6:54:6d:1c:
                    3e:98:84:74:e6:e5:e2:4f:31:8f:b7:f9:7c:23:c4:
                    3d:40:56:f1:a2:a1:29:d8:43:62:ec:ed:82:8f:a5:
                    55:9e:28:d9:1b:c0:40:36:25:d6:f6:c4:ae:37:66:
                    30:b9:ea:7a:17:6c:47:11:7e:c1:7b:2d:0b:c7:a5:
                    9b:0f:9e:e1:c0:17:ab:16:fe:76:4e:9e:86:12:e1:
                    bb:3a:86:69:a4:07:45:26:85:16:27:1a:19:f1:12:
                    f7:f1:a3:d9:e0:ce:59:55:e7:53:21:f0:bb:0f:da:
                    ea:7e:a6:d5:b4:fe:25:45:5e:9f:43:79:5e:a5:12:
                    fe:81:ac:e8:b3:3c:bc:bf:15:aa:26:66:12:4c:fe:
                    7f:aa:54:6c:74:35:ee:eb:62:9e:0d:16:e1:f5:eb:
                    76:17:01:ca:86:93:c4:cf:47:8a:8c:7f:f7:16:f1:
                    af:68:c4:40:0e:24:41:eb:65:4e:f0:b4:54:ae:f4:
                    90:de:73:f2:cc:b9:bc:4f:6a:8a:3d:c1:0c:62:a1:
                    a2:73:5c:ef:b2:ed:d8:22:7a:16:c4:5f:26:10:a5:
                    53:08:8a:05:21:9b:fa:5e:a2:ce:8c:64:f1:59:9f:
                    18:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B7:E3:1A:7C:9E:7D:CB:87:03:11:25:D2:49:22:B0:83:F7:39:FD
            X509v3 Authority Key Identifier:
                keyid:8D:E8:2E:FF:62:34:D7:9B:7A:65:FA:60:A0:53:00:7D:A8:28:1F:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/jegu_2I015t6ZfpgoFMAfagoH8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jegu_2I015t6ZfpgoFMAfagoH8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91846F6/F4A1B2D80C1811EF9FF70141C4F9AE02/21D692500C1E11EFBA32F937C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:a300::/48

    Signature Algorithm: sha256WithRSAEncryption
         52:24:5e:ac:67:79:d4:b4:9e:79:ae:d5:95:8b:39:2d:85:96:
         bd:00:c4:5f:2a:bc:ea:c3:be:5b:89:e1:0e:48:a7:62:7b:9f:
         bc:4c:a7:42:0f:57:e8:e1:f5:c9:83:ae:30:12:a9:c4:87:e8:
         d9:8f:19:f4:23:41:3e:cf:6c:a4:b1:68:00:3b:83:64:c2:d8:
         e5:fe:1e:05:36:77:18:60:14:b0:66:16:d2:9b:70:2b:46:fd:
         f0:d0:5e:2e:0c:14:14:b3:98:30:33:0b:7a:e5:99:c6:51:05:
         f8:cb:70:4d:c6:ed:48:72:38:e6:29:47:6e:1a:3c:d1:03:9d:
         9f:16:33:09:63:0e:f9:be:42:e6:ae:da:f1:db:19:f1:36:04:
         65:68:5a:4f:04:33:7b:86:79:88:1e:c6:36:85:3a:5b:38:36:
         61:d8:df:46:fe:86:c1:6a:d3:5d:d5:2e:c8:16:f2:c2:f6:94:
         59:d4:4b:77:d3:dd:81:46:4b:ba:0b:d4:2d:33:65:9b:61:ae:
         5b:0b:0a:f1:d0:65:71:74:f8:7e:dd:00:90:db:ef:d0:43:70:
         54:fb:8e:b6:35:1a:04:e8:43:3d:78:6f:8d:2d:3e:41:01:6f:
         52:03:03:9d:b4:b4:2e:05:4a:ca:f4:cb:4f:ca:f6:1e:c9:0c:
         b5:66:92:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:33:58 2026 by rpki-client