Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/1FB57044282911F18EC27654C4833773.roa
File:                     1FB57044282911F18EC27654C4833773.roa (raw, json)
Hash identifier:          cIC3mh9+HScM982pQxZELzTgJLhXi90s7mwohLJpYHU=
Subject key identifier:   8E:23:54:84:3A:6E:74:A5:6B:11:17:07:6A:3A:95:D1:FF:33:CF:1B
Certificate issuer:       /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
Certificate serial:       0914
Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/1FB57044282911F18EC27654C4833773.roa
Signing time:             Wed 25 Mar 2026 09:00:52 +0000
ROA not before:           Wed 25 Mar 2026 09:00:52 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154392
IP address blocks:        2001:df5:a3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl
                          rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:10:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2324 (0x914)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02
        Validity
            Not Before: Mar 25 09:00:52 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69c3a443-0e8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:90:97:51:6d:15:c6:8c:b5:35:21:49:3b:1e:
                    5d:9f:1d:7e:8c:45:f8:c6:c7:e3:12:52:c4:fc:b9:
                    ef:48:a5:b8:ab:29:3a:9d:9c:b9:18:f2:cc:81:be:
                    9c:0c:94:33:30:dd:f8:46:4d:c5:c8:6c:67:e4:82:
                    10:96:1a:e5:f2:53:b8:38:08:4d:08:4a:d5:1b:36:
                    7c:9b:9f:0b:d4:c3:07:19:d3:50:b9:af:8d:c8:eb:
                    b3:44:58:e7:da:d0:9d:17:85:b2:2c:1a:bf:bc:70:
                    bd:64:a4:a7:fa:6b:43:1b:6f:77:3f:d6:2b:82:8f:
                    56:bc:38:e8:19:ce:19:d7:49:c2:42:c8:c1:ab:2c:
                    e9:b3:c3:9a:77:5c:5c:4c:42:2f:59:cf:4d:0e:78:
                    26:21:a8:9a:67:04:41:88:97:6e:8e:04:09:f4:b6:
                    bc:f8:3a:93:a6:db:c9:63:54:ae:fb:21:ff:f6:86:
                    4f:e8:53:8e:b4:fc:3d:f9:e7:db:08:6b:58:cf:c0:
                    de:d4:bb:85:f0:4f:51:ac:4b:49:5b:cd:46:12:60:
                    d7:4f:39:78:89:b5:53:64:09:59:ed:13:b2:86:c6:
                    d6:28:f5:1c:e7:9d:92:e3:17:33:2c:32:33:0c:e4:
                    f3:04:9b:a6:8e:9d:9b:b6:92:dd:67:58:a8:ee:5c:
                    bd:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:23:54:84:3A:6E:74:A5:6B:11:17:07:6A:3A:95:D1:FF:33:CF:1B
            X509v3 Authority Key Identifier:
                keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/1FB57044282911F18EC27654C4833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:a3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:ad:0f:c5:48:57:6b:f7:4f:df:0d:23:8e:75:8a:9c:c7:81:
         4e:f7:21:b9:91:2d:f4:1a:e9:34:ed:5d:d8:9a:52:95:63:25:
         f0:f9:64:7c:b5:09:11:9e:83:0c:4c:ad:c7:03:52:72:8c:a8:
         1c:76:45:54:bd:f3:b0:13:c7:52:62:84:9b:92:e4:23:55:c3:
         37:04:f8:1a:d4:31:97:2d:ba:3c:8a:0b:af:22:57:a8:2e:fc:
         c7:27:2b:c8:02:a9:fc:e8:e0:be:c8:56:b1:80:4b:9e:84:5e:
         2c:ba:89:00:66:1c:f7:eb:f6:dd:bd:02:cd:fc:51:77:6a:0c:
         24:a7:60:af:a6:e9:03:97:35:d2:1a:e7:23:fa:98:b8:a9:60:
         74:b0:25:70:5b:f0:f4:4c:a5:b0:f0:69:c9:4a:63:c1:f3:a0:
         56:71:1e:c6:c7:d4:cf:2a:c6:79:00:20:67:c2:68:9d:d6:cb:
         16:a7:23:65:98:b8:93:67:29:8a:38:77:80:51:5d:0e:82:34:
         e7:7a:44:b7:b3:38:fb:f2:7d:fe:5d:5a:f5:c4:41:47:ed:56:
         24:bf:d0:8a:e3:c6:65:f3:dd:73:e8:17:4f:39:27:d8:fa:b0:
         fd:a9:65:0f:de:b1:b1:2d:ac:28:0f:8b:ff:48:90:fd:7b:73:
         08:6f:76:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:48:23 2026 by rpki-client