Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/1A3A1E2C287D11F18C83C945A7833773.roa
File:                     1A3A1E2C287D11F18C83C945A7833773.roa (raw, json)
Hash identifier:          Tw9tkubBBNCNa0WzdkiGoAB9GeB7p8eEnqNQk5A660Q=
Subject key identifier:   54:CA:BA:E5:5D:6E:3D:EA:44:C8:17:3E:38:3E:A7:3C:CD:61:85:00
Certificate issuer:       /CN=A91982EF/serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
Certificate serial:       011F
Authority key identifier: 87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/1A3A1E2C287D11F18C83C945A7833773.roa
Signing time:             Wed 25 Mar 2026 19:02:00 +0000
ROA not before:           Wed 25 Mar 2026 19:02:00 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     9450
IP address blocks:        2402:2500:4400::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl
                          rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 19:02:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982EF, serialNumber=87197FD546DC31523111DD9390B1BA3F3D702656
        Validity
            Not Before: Mar 25 19:02:00 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69c43128-8faa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e2:09:88:ba:dc:63:f6:44:8a:1a:01:0f:32:
                    b1:f0:ef:9c:d2:79:af:2a:f8:cc:1c:9d:c9:1c:ac:
                    40:d6:16:93:79:bd:ec:09:71:5c:95:db:17:5f:a9:
                    8a:9f:a1:08:9a:3f:39:ba:99:3f:8b:a0:a6:78:86:
                    2b:95:50:29:a6:82:e0:1a:ed:43:c5:54:95:b2:6b:
                    ea:f6:04:68:c4:72:31:3f:9a:0f:10:0c:05:e2:82:
                    e8:15:42:90:00:0a:d9:4f:4f:0c:00:f3:f0:39:fb:
                    ab:fd:8c:48:ec:fc:28:4a:7c:ef:21:15:f0:78:f1:
                    50:c6:5d:e9:a0:25:40:87:e3:cf:0e:b3:f1:44:f9:
                    d7:4d:3c:77:73:af:e2:2c:a4:b4:ff:77:f2:5a:df:
                    1f:79:a6:a3:43:b1:64:fd:29:79:b0:3e:6c:f4:17:
                    5d:79:8e:a5:e3:09:bd:72:eb:aa:95:92:3b:b6:25:
                    77:02:bd:46:7e:57:46:77:66:4f:3e:dd:20:36:96:
                    85:af:7b:3a:3c:4e:c4:21:33:a4:04:49:b6:14:04:
                    c3:3e:5d:a6:3c:8d:a1:14:67:56:0c:c5:f0:e5:eb:
                    d4:e5:55:ce:e1:3e:7a:4f:d7:67:5f:ec:d5:0f:af:
                    9d:68:c2:21:49:11:18:8c:89:09:ac:2b:2f:eb:75:
                    47:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CA:BA:E5:5D:6E:3D:EA:44:C8:17:3E:38:3E:A7:3C:CD:61:85:00
            X509v3 Authority Key Identifier:
                keyid:87:19:7F:D5:46:DC:31:52:31:11:DD:93:90:B1:BA:3F:3D:70:26:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hxl_1UbcMVIxEd2TkLG6Pz1wJlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982EF/FC650B72B71D11EF8982C40CC4F9AE02/1A3A1E2C287D11F18C83C945A7833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2500:4400::/46

    Signature Algorithm: sha256WithRSAEncryption
         0b:5d:cc:ee:d8:82:65:a6:d3:44:95:95:cb:8c:cd:88:13:5f:
         31:0e:1c:83:38:f3:ae:45:18:d4:0f:cd:37:cc:9c:d9:16:20:
         c3:7a:67:41:c9:b4:32:e9:c2:3a:a2:e8:e9:7d:aa:7f:94:b5:
         1a:ea:81:91:1f:02:1f:be:15:30:87:80:fb:b6:97:43:63:2d:
         82:9c:f2:ea:01:ca:31:ac:f3:d9:d8:e2:6a:06:fd:98:7d:05:
         05:a5:f1:c0:aa:73:3b:81:6d:e7:88:49:6c:5e:98:53:7f:b1:
         02:5f:71:87:7a:d2:33:ed:62:f4:d3:4f:52:d2:ef:58:87:86:
         c3:bb:83:82:31:5f:75:16:e2:87:7f:a0:d3:1c:e4:69:3d:6c:
         9e:63:ef:01:67:a8:28:c0:58:99:69:ec:46:6f:26:12:8d:ba:
         c5:f9:a8:f3:9e:d5:20:ab:5a:2d:fa:96:76:0e:23:91:61:d6:
         b0:5c:72:83:16:d4:c8:af:08:88:db:67:4a:9d:fb:b8:18:0c:
         f6:a1:97:d2:24:80:7b:76:0a:16:ed:ce:f4:ff:24:f2:43:f0:
         3b:a0:da:00:91:0e:c3:56:59:3a:c9:f8:8b:e4:e4:bc:40:f1:
         5f:0e:3e:15:24:22:90:3b:6b:43:0f:de:79:f4:92:2a:6b:4a:
         0e:c1:ff:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:36:46 2026 by rpki-client