Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/B0069018292511F198604A079E833773.roa
File:                     B0069018292511F198604A079E833773.roa (raw, json)
Hash identifier:          kawalWq5XI6cfeCxsnT2HyX5rJIkbilhJhx9UIeYzQs=
Subject key identifier:   9C:61:4F:8C:5A:3B:24:94:A6:0E:7F:B6:69:29:10:07:75:76:F1:49
Certificate issuer:       /CN=A918AA78/serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
Certificate serial:       1CE2
Authority key identifier: 09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/B0069018292511F198604A079E833773.roa
Signing time:             Thu 16 Jul 2026 14:56:09 +0000
ROA not before:           Thu 16 Jul 2026 14:56:09 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     30060
IP address blocks:        2402:79c0:f00a::/48 maxlen: 48
                          2402:79c0:f0f9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl
                          rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:16:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7394 (0x1ce2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA78, serialNumber=09CFFE467F3B09C3D06F24919CFAC7E003E4BB75
        Validity
            Not Before: Jul 16 14:56:09 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a58f109-d0c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:ac:b3:68:df:dd:cc:a4:a0:36:2f:8e:48:
                    8d:23:9f:5a:83:8d:0d:42:b5:7a:63:f1:98:f6:92:
                    ef:b4:62:d2:b5:46:65:cf:7f:2b:af:6b:32:2f:0d:
                    82:c2:1b:00:f7:7b:70:18:2e:62:9a:34:26:b6:16:
                    97:8e:e7:2d:2b:88:51:4c:1b:c5:40:34:2a:df:95:
                    bd:8b:17:37:ef:d3:b4:91:e5:12:45:78:21:20:38:
                    1c:54:a3:bc:a9:60:71:c4:62:43:46:f2:1f:84:d2:
                    37:ee:54:8d:b7:47:9f:f2:7f:33:d0:be:45:37:3d:
                    37:c3:1f:21:d6:39:dd:ab:aa:7f:dc:92:18:9b:54:
                    96:98:e5:27:3b:02:37:3f:4d:65:75:86:fb:76:24:
                    da:9d:a9:07:09:c0:57:d5:91:55:f6:a5:52:06:59:
                    f9:a2:23:fe:df:b4:56:57:8f:51:5c:5e:7b:18:ab:
                    ea:4a:2e:74:7c:6c:be:b9:9b:b4:2d:58:06:c5:0b:
                    c0:83:ed:d0:97:d6:ed:a8:da:e0:07:e9:7b:76:9c:
                    f0:d3:0f:25:f5:00:94:b7:71:e6:3b:3e:03:7a:fd:
                    98:87:0d:b8:c8:10:61:a8:46:2a:f7:f0:20:43:f1:
                    32:07:3b:a0:12:4e:90:a3:2a:23:21:0e:29:89:5d:
                    85:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:61:4F:8C:5A:3B:24:94:A6:0E:7F:B6:69:29:10:07:75:76:F1:49
            X509v3 Authority Key Identifier:
                keyid:09:CF:FE:46:7F:3B:09:C3:D0:6F:24:91:9C:FA:C7:E0:03:E4:BB:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/Cc_-Rn87CcPQbySRnPrH4APku3U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cc_-Rn87CcPQbySRnPrH4APku3U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA78/68D33490FD6411E6A1095483C4F9AE02/B0069018292511F198604A079E833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:79c0:f00a::/48
                  2402:79c0:f0f9::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:97:c8:1f:ca:c8:15:0a:20:64:4e:2c:c1:02:be:12:0e:26:
         90:a4:4f:28:f8:7c:e1:45:dd:b8:c6:b1:f1:61:25:db:fd:5a:
         82:f7:d5:6e:44:c5:30:ae:49:4d:d0:96:83:8b:98:01:f9:fa:
         34:76:53:a4:a9:f7:86:45:43:15:51:33:28:73:4b:f5:b1:c7:
         cb:de:b1:09:87:7e:d4:87:54:a5:8d:91:9b:96:eb:56:62:eb:
         d8:be:6f:3f:4e:d2:92:10:04:a0:0b:f9:fe:fb:4c:13:31:05:
         c6:c0:39:af:33:a5:73:b5:94:1e:a7:a1:cd:df:1c:97:0e:79:
         57:34:6e:83:4c:4f:a4:76:7d:ff:70:24:27:23:bb:73:9e:9f:
         b1:04:46:36:ed:e4:3f:97:1c:61:c3:ca:40:04:cc:70:74:4f:
         72:94:e4:a6:81:31:f1:c2:94:4b:2e:26:74:4d:7c:59:26:31:
         96:84:c2:ed:a6:1f:0e:3e:f7:67:94:23:c2:92:fc:2e:43:32:
         3b:76:f4:a9:cd:1b:db:5a:60:1e:ca:b3:bf:15:74:f4:d2:1a:
         19:85:f6:85:38:81:67:d3:5c:be:b0:ef:29:9b:ba:e3:e5:60:
         d4:92:6f:fa:a6:dd:9f:6d:23:de:85:0b:27:b1:a3:6e:45:87:
         7c:b8:92:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:08:07 2026 by rpki-client