Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/627CDAE66FE011EF937A9931C4F9AE02.roa
File:                     627CDAE66FE011EF937A9931C4F9AE02.roa (raw, json)
Hash identifier:          FIYhkWhliZfmaNdyiwyu/uICwO2OD8M+gfP485RLdMw=
Subject key identifier:   06:7B:1E:83:0D:FB:6A:DF:E4:22:54:7F:77:97:26:D7:67:E3:A5:7E
Certificate issuer:       /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial:       014E
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/627CDAE66FE011EF937A9931C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 05:46:19 +0000
ROA not before:           Tue 03 Mar 2026 05:46:19 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     141153
IP address blocks:        2001:df3:7540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
        Validity
            Not Before: Mar  3 05:46:19 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a675ab-e3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:af:63:b6:85:58:3a:55:c6:bc:ac:1b:96:ef:
                    20:4e:8b:30:48:ea:fb:8c:54:7c:36:5f:ce:63:e5:
                    c6:5b:38:1d:f6:d6:73:60:68:73:c7:27:a6:c9:54:
                    5a:5b:1f:37:ae:b1:83:a3:c8:77:17:92:bd:57:b5:
                    84:34:e7:a6:11:ab:46:96:1a:4c:ad:8e:c1:95:32:
                    55:b0:88:90:87:4a:f1:a6:8e:cf:71:0b:e8:fe:b2:
                    27:6c:89:0c:0a:49:82:93:f6:8b:0d:8f:e8:bf:77:
                    17:3e:2a:d7:4a:bf:8a:1b:cc:58:d6:12:5e:45:79:
                    7d:98:df:5c:2d:19:c4:4a:a6:af:60:55:af:c5:98:
                    b9:ea:a8:65:93:98:e6:33:af:df:d6:1f:38:a0:6c:
                    76:dd:44:d6:e1:37:07:9b:d0:15:35:ae:3d:c6:87:
                    92:d0:0c:ac:cb:54:aa:8d:fe:c7:e2:fb:e9:6a:13:
                    46:1c:a9:1c:bf:aa:d6:51:5c:5d:a3:9b:50:79:7e:
                    67:3b:b7:b9:d9:71:b0:39:46:f9:30:27:4b:40:0c:
                    16:a5:79:0f:ca:7e:0b:e0:6a:36:35:1d:d4:6e:c3:
                    86:dc:05:29:97:ac:73:6e:84:88:59:8b:b0:57:13:
                    ab:a5:8f:95:b5:b1:80:17:57:d3:e2:4a:e6:93:17:
                    ee:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7B:1E:83:0D:FB:6A:DF:E4:22:54:7F:77:97:26:D7:67:E3:A5:7E
            X509v3 Authority Key Identifier:
                keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/627CDAE66FE011EF937A9931C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:7540::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:22:c4:0d:fb:74:33:6e:84:83:6f:a2:a2:82:4d:40:8d:cf:
         be:07:ea:a5:dc:f3:d3:75:7a:06:ce:f1:0d:b7:53:fe:ae:b2:
         22:d5:ee:66:a0:4d:25:98:ae:96:be:a1:b9:a9:09:99:21:18:
         43:49:fa:07:6f:a2:20:a1:84:6c:63:50:58:39:0c:e9:8c:f0:
         07:84:88:2b:c7:71:cf:6f:7d:ab:22:0b:53:a9:c8:f7:c6:0f:
         99:09:08:83:2a:8c:ff:10:3e:5f:43:22:96:06:17:dd:61:c7:
         5a:f3:fb:08:9a:36:12:d4:c9:e3:09:f7:1a:d0:ae:ee:77:b6:
         7d:b2:fb:48:26:8b:8b:51:38:13:9e:e3:1d:fa:29:87:62:aa:
         ce:3a:c3:84:d6:4f:20:f4:84:4e:be:69:f4:39:4b:54:12:52:
         f6:ed:a3:58:74:9b:3d:b5:71:b1:94:13:4c:21:5c:f2:b1:0a:
         04:39:fa:74:b0:23:7a:96:d4:86:2a:76:31:c1:74:53:c6:c6:
         0c:cb:c1:38:73:85:ac:63:f4:1c:15:40:16:f2:e7:dd:f0:5a:
         c0:5d:65:82:6f:74:83:20:45:f4:ba:40:50:bd:0b:6f:c2:4b:
         24:ba:05:68:da:9d:a5:40:4f:5e:64:cf:e0:80:b2:02:d6:c5:
         b6:6e:b2:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:38:36 2026 by rpki-client