Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/BC26B7548CAB11F0BDAA8B67C4F9AE02.roa
File:                     BC26B7548CAB11F0BDAA8B67C4F9AE02.roa (raw, json)
Hash identifier:          1xbmeKrtdkfMeaYJXV3nxlxzWBfNoeXUz9/FaAvLRY4=
Subject key identifier:   74:5D:36:E2:C6:00:5B:C9:FC:9E:7C:A9:1A:87:4E:2A:04:37:03:7D
Certificate issuer:       /CN=A919A777/serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
Certificate serial:       01C0
Authority key identifier: 64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/BC26B7548CAB11F0BDAA8B67C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:14:35 +0000
ROA not before:           Mon 08 Sep 2025 12:02:47 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     213903
IP address blocks:        2403:ad80:101c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl
                          rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:57:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919A777, serialNumber=647D0927DB3B178E2F654A3268557FE5B5D6729C
        Validity
            Not Before: Sep  8 12:02:47 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4820b-a457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:04:cb:89:92:88:33:b9:da:7d:0a:b4:b1:34:
                    2e:72:5b:27:56:d2:21:16:19:cf:22:73:85:c1:89:
                    55:fc:3a:2b:0b:a9:a8:a6:26:56:2c:a4:58:3e:ec:
                    97:b4:66:51:3c:4e:5d:b1:76:33:30:72:55:7e:85:
                    6a:04:a2:a1:71:67:93:61:f1:0c:77:fa:27:aa:29:
                    ce:56:a6:fd:0b:cd:0f:e2:0c:b4:60:09:8c:87:bd:
                    26:d8:6f:f0:ed:84:a3:4c:8c:c4:a7:91:32:a7:ef:
                    27:ec:a5:f5:b0:3e:3d:34:0f:3d:37:f7:14:54:2c:
                    d6:77:89:ae:25:36:ff:af:da:f0:b2:fc:7f:87:87:
                    88:c6:38:8a:aa:7d:e0:a4:a1:25:17:7b:ed:d3:4a:
                    3c:92:5a:3d:10:1d:f5:a8:17:62:14:a9:84:24:a8:
                    84:99:9e:e3:0c:da:4c:5e:cc:06:0d:fb:97:8a:9b:
                    6a:e6:9b:24:0d:2d:32:18:43:71:a1:ad:db:3d:3e:
                    72:1d:15:8f:6b:a5:82:c3:9f:ac:dc:18:d9:ff:dc:
                    25:f6:6f:b2:03:e0:ea:b8:07:72:d7:92:b7:c2:f8:
                    7f:c5:d1:09:51:cd:ee:3e:a9:18:ba:41:d2:28:4a:
                    71:ad:7c:c9:6a:f1:7a:29:cc:ea:4d:4c:3c:c1:3e:
                    05:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:5D:36:E2:C6:00:5B:C9:FC:9E:7C:A9:1A:87:4E:2A:04:37:03:7D
            X509v3 Authority Key Identifier:
                keyid:64:7D:09:27:DB:3B:17:8E:2F:65:4A:32:68:55:7F:E5:B5:D6:72:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZH0JJ9s7F44vZUoyaFV_5bXWcpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A777/0BA572B0EC4F11EEA1B38866C4F9AE02/BC26B7548CAB11F0BDAA8B67C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:ad80:101c::/48

    Signature Algorithm: sha256WithRSAEncryption
         62:2b:2f:1e:d5:fd:1b:58:30:00:23:e0:f5:62:4e:ee:da:7b:
         c8:1e:96:ed:53:a8:1c:ca:43:39:b9:81:60:b3:5c:a1:75:69:
         07:11:fe:e1:b7:84:04:06:be:ea:ba:01:36:3a:32:f8:1b:c5:
         bf:73:d0:28:6e:17:27:a4:02:63:d6:c2:48:c2:40:a3:05:b3:
         24:e5:c8:a8:07:2d:e8:bf:c5:02:a9:f6:de:4a:b4:15:2e:65:
         94:3e:f4:9e:aa:c2:eb:18:53:bf:9a:33:01:17:30:89:90:cc:
         68:c5:a2:c1:93:c8:24:eb:cd:e1:06:d2:f5:03:5e:28:26:bb:
         93:7a:a0:ee:8e:88:9a:9f:ac:ce:b9:f6:17:da:08:fb:1a:1c:
         9c:4a:34:1d:d5:20:16:cb:42:80:e9:7e:71:83:10:d9:e6:ed:
         c4:c1:1b:64:ff:ec:3a:d1:23:7f:e6:68:7c:98:0d:06:d5:73:
         5e:67:f2:f7:83:36:70:cb:49:a4:28:f9:1e:e2:94:48:23:4e:
         d5:e4:25:e7:e4:19:85:da:c3:d4:88:c3:ab:89:bd:f1:1d:a3:
         9f:e2:61:f9:61:77:d5:9e:e7:65:9b:ad:54:63:af:91:20:0b:
         0e:4d:50:f5:b4:dc:9c:31:a3:f7:53:b3:ab:c9:32:4b:02:41:
         7f:91:5c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:22:55 2026 by rpki-client