Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/56C91968C5C011EFA167B30AC4F9AE02.roa
File:                     56C91968C5C011EFA167B30AC4F9AE02.roa (raw, json)
Hash identifier:          7uqSmdsk1Rl7Rdb/UzyvxcM2T2Fjn2z0ozIbKhyZ14w=
Subject key identifier:   E8:41:DB:47:8C:B7:4D:81:E3:CA:A2:0B:12:6D:DD:F8:3E:E2:30:03
Certificate issuer:       /CN=A918CC02/serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D
Certificate serial:       FB
Authority key identifier: 57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/56C91968C5C011EFA167B30AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:05:53 +0000
ROA not before:           Fri 19 Dec 2025 05:25:29 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     153385
IP address blocks:        2401:d260::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl
                          rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 251 (0xfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918CC02, serialNumber=572FBF1AC4D2F849E2F5BB807674F01BEBF1729D
        Validity
            Not Before: Dec 19 05:25:29 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a5a751-cbdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:00:5f:eb:2b:df:c8:33:6e:d0:23:5d:71:36:
                    fa:a7:0a:e3:62:84:9d:ed:aa:60:e9:73:ba:55:9e:
                    14:6f:f7:b0:64:f4:67:1b:60:16:6a:0a:94:45:17:
                    78:6b:03:81:5c:2d:3a:bc:5d:16:76:a3:20:65:6f:
                    e0:f4:fc:07:57:16:b6:ba:ad:29:d2:4e:3b:e6:34:
                    2e:19:27:b5:79:ba:8c:7a:7c:da:48:5d:ee:7f:55:
                    5e:26:1d:1e:78:60:74:09:9e:82:f0:7e:51:dd:8f:
                    1f:63:32:8c:31:05:2c:32:85:35:bc:69:9f:50:49:
                    53:ec:e0:49:5a:0f:b4:b5:a8:82:2b:dd:1c:50:b9:
                    47:51:bc:52:ff:1e:60:00:e4:ed:e1:27:82:8f:d7:
                    4d:04:73:95:da:6e:dc:12:61:72:da:6f:2e:6e:49:
                    e4:20:c4:c1:d7:0b:06:ee:60:e6:16:0e:31:cb:37:
                    0a:c0:42:25:da:5b:d0:91:0c:f7:25:5c:77:e1:41:
                    34:8a:a2:ee:03:15:6e:9d:20:ac:51:bc:ff:1c:4b:
                    34:f2:7f:fb:e5:d2:0a:99:13:cc:e3:06:a6:c0:fd:
                    93:5d:28:1d:c0:62:ce:2c:c7:16:e0:69:eb:50:74:
                    c6:74:b9:9f:49:35:e1:c1:b0:4c:80:9c:a8:a3:b0:
                    50:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:41:DB:47:8C:B7:4D:81:E3:CA:A2:0B:12:6D:DD:F8:3E:E2:30:03
            X509v3 Authority Key Identifier:
                keyid:57:2F:BF:1A:C4:D2:F8:49:E2:F5:BB:80:76:74:F0:1B:EB:F1:72:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/Vy-_GsTS-Eni9buAdnTwG-vxcp0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vy-_GsTS-Eni9buAdnTwG-vxcp0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CC02/70E387DCB86B11EF9A6A5058C4F9AE02/56C91968C5C011EFA167B30AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:d260::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:7b:a4:a3:20:63:76:2d:19:f3:29:1b:44:ea:42:3e:05:cc:
         bb:14:05:eb:bf:48:d0:cb:b0:fb:80:fc:db:8d:1d:19:39:b9:
         85:4f:3b:e0:0b:1d:65:2b:aa:e2:d5:04:d3:48:5f:86:a6:cb:
         9c:c6:15:2a:1c:0e:21:2f:ce:9f:af:a8:60:95:b8:ea:20:9a:
         87:49:ee:37:d9:fb:25:93:31:6b:ad:3c:b7:9b:4a:2c:f0:68:
         5e:11:52:a5:03:e2:1a:3a:1e:f1:f1:be:38:4f:6c:04:62:cb:
         4f:56:72:98:73:30:b5:b1:5d:ca:6b:c4:f3:b7:ce:a1:ab:84:
         0b:9a:80:b5:22:12:4d:83:a8:ff:31:a6:5e:51:f8:3b:25:b2:
         94:6c:47:47:b2:7a:46:5f:5c:ca:6c:1f:b5:a0:b1:48:08:d6:
         78:e9:95:ae:c2:8c:7e:7f:a2:ef:d7:7d:c5:0f:e1:82:78:f5:
         c0:f3:6f:eb:ed:a6:b8:3d:29:e7:c3:2a:c3:c1:97:6d:9b:c1:
         5f:17:d9:7f:41:97:f4:0e:97:a7:dc:ce:b4:72:39:04:9a:e4:
         72:05:f0:63:8e:09:3f:f1:d0:64:32:7e:30:8d:7c:cd:37:f8:
         f3:a5:2b:c9:2f:31:b6:b4:50:61:1c:7b:5b:1e:fb:ea:e2:2e:
         2d:af:35:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:56:30 2026 by rpki-client