Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/EFEEF8165BB211EE88BB1945C4F9AE02.roa
File:                     EFEEF8165BB211EE88BB1945C4F9AE02.roa (raw, json)
Hash identifier:          KfF+sdY15wScqVXeMPonUzAOtF219x8HRR+57slUS1M=
Subject key identifier:   DF:65:D8:F0:34:96:AC:B2:4F:10:60:66:FD:A4:ED:2B:31:13:2C:A2
Certificate issuer:       /CN=A9198996/serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
Certificate serial:       03ED
Authority key identifier: 69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/EFEEF8165BB211EE88BB1945C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:25:07 +0000
ROA not before:           Tue 17 Jun 2025 00:57:58 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     150414
IP address blocks:        2402:e940:10::/44 maxlen: 44
                          2402:e940:50::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl
                          rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 00:27:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1005 (0x3ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9198996, serialNumber=692135608683755E94D8ECA57D8B0B358ECE1718
        Validity
            Not Before: Jun 17 00:57:58 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47673-02e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2a:e2:07:13:62:4f:6d:54:5d:88:52:6e:9f:
                    ee:a1:4f:cf:0c:67:3b:8e:0d:2f:66:4d:13:fb:f5:
                    32:38:a2:0f:46:c8:2f:fd:67:82:c2:31:c7:2e:42:
                    1c:f3:a9:ae:48:46:5f:f5:65:60:a1:99:86:3b:5d:
                    69:6e:9f:46:72:8d:6f:51:f6:e5:93:9d:7f:79:ad:
                    f4:d2:c6:d9:43:31:f4:97:21:ae:46:82:92:8b:ba:
                    18:94:00:8e:1c:d1:55:bb:15:34:c9:9d:94:0a:eb:
                    87:98:37:4d:97:6a:93:ee:b1:7c:9b:ac:77:09:3d:
                    b4:f6:a2:e8:42:e0:3a:e5:55:7c:97:66:89:22:f1:
                    4b:a6:2f:02:18:48:59:49:b1:1a:6a:d8:52:bf:33:
                    3e:a3:71:30:b0:8b:4f:eb:5f:5f:db:ff:73:74:62:
                    92:55:c4:c4:cb:1d:5d:4a:51:9e:57:e8:76:d9:f4:
                    e8:83:49:93:4d:7a:c5:c1:5b:f1:6e:4d:d8:3c:f9:
                    1f:65:76:3a:bf:67:d6:01:b8:66:22:7f:33:76:1f:
                    40:18:20:ac:3e:70:26:4d:ef:9a:20:67:dc:2c:66:
                    16:d0:bd:76:6e:af:70:b1:e3:e0:d7:fd:78:e5:7e:
                    ba:49:af:c8:1f:22:b9:bb:a7:db:82:26:4a:5c:fe:
                    60:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:65:D8:F0:34:96:AC:B2:4F:10:60:66:FD:A4:ED:2B:31:13:2C:A2
            X509v3 Authority Key Identifier:
                keyid:69:21:35:60:86:83:75:5E:94:D8:EC:A5:7D:8B:0B:35:8E:CE:17:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/aSE1YIaDdV6U2OylfYsLNY7OFxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aSE1YIaDdV6U2OylfYsLNY7OFxg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9198996/66030F5ED06011ECBA40FC83C4F9AE02/EFEEF8165BB211EE88BB1945C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:e940:10::/44
                  2402:e940:50::/44

    Signature Algorithm: sha256WithRSAEncryption
         77:6a:0c:50:01:14:3d:8f:db:e7:60:6f:09:04:81:d3:6a:c9:
         b6:03:99:a1:8a:18:e5:2d:73:51:c0:9a:85:3e:48:9d:85:39:
         62:ca:f6:ef:ab:84:2f:99:59:d2:bc:d9:cd:06:c1:ad:ac:b9:
         e0:6b:b2:b0:89:1a:d1:b9:30:5c:07:bf:7f:55:ea:9c:96:86:
         9f:13:59:60:cf:7d:31:2e:88:39:a9:69:46:ac:4f:e1:ee:37:
         d5:51:69:15:c5:d8:46:73:3d:f7:8a:dd:e1:da:56:03:f5:5e:
         f9:c4:5d:cc:74:a5:51:76:14:b8:1e:a6:fc:4a:37:61:1c:fb:
         09:04:0e:30:e8:eb:94:68:1b:40:12:ab:6e:e0:ed:38:e0:08:
         2a:3f:70:fe:21:24:40:2f:dc:5d:21:8b:20:85:4f:73:82:13:
         57:3d:f4:19:9f:92:4e:1e:cf:f4:b4:ee:5c:70:eb:cf:8c:c0:
         ad:99:68:cf:a8:fc:3f:b6:b4:6c:79:15:3a:60:a4:7e:b6:d5:
         6c:72:50:fc:44:36:40:9c:3a:ae:c9:fe:c5:9c:76:4d:40:13:
         f6:5b:2e:85:f4:ec:11:52:5d:ac:b1:f5:17:53:c1:d6:28:fe:
         a0:f7:df:98:bf:42:28:09:f9:e8:21:b8:6a:20:16:0d:d4:d6:
         4a:93:0d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:17 2026 by rpki-client