Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/0900F7CA7AE611EF8CE1F784C4F9AE02.roa
File:                     0900F7CA7AE611EF8CE1F784C4F9AE02.roa (raw, json)
Hash identifier:          VsSWHNWtSicRbaAy2oWMpH/483BYa5Ylp4bCvkTsd4E=
Subject key identifier:   0E:3C:C4:19:60:5D:98:0B:BB:5E:FF:77:82:1A:75:E8:E2:2C:4D:9F
Certificate issuer:       /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial:       029D
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/0900F7CA7AE611EF8CE1F784C4F9AE02.roa
Signing time:             Thu 23 Apr 2026 02:34:41 +0000
ROA not before:           Thu 23 Apr 2026 02:34:41 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     215304
IP address blocks:        2400:e3e0:aa00::/40 maxlen: 48
                          2400:e3e0:ab00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
                          rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:15:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 669 (0x29d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
        Validity
            Not Before: Apr 23 02:34:41 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e98541-7044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:78:77:03:b4:e3:b9:92:3e:0c:ed:ad:70:e5:
                    b1:60:22:9c:5c:12:36:1b:31:39:53:4d:16:09:f4:
                    33:f1:2f:a2:a5:57:72:0b:5d:eb:5d:13:9e:76:41:
                    1a:57:ff:cd:73:1a:bd:09:2f:6f:1a:22:dd:dd:27:
                    f7:f3:2e:12:4a:09:0b:0e:e1:f4:13:65:6b:c6:7c:
                    8a:79:87:72:74:1c:23:02:1a:b3:63:de:fb:e8:f5:
                    a4:81:be:fe:a6:d6:38:20:5a:e4:29:57:f9:c0:99:
                    4d:4c:b7:7d:d5:24:77:fa:e0:c1:e4:67:bc:71:21:
                    b4:35:0b:6e:df:4b:8f:5a:8f:47:0c:b1:b0:43:7e:
                    a2:4e:55:fb:dc:3c:78:0a:31:2b:42:49:f9:ea:d3:
                    4a:42:a1:8a:5f:d8:48:22:bc:d3:1d:98:56:ac:56:
                    20:a2:10:9b:5b:03:1e:5c:47:f2:88:4f:17:a5:15:
                    1b:ce:b8:f4:02:de:06:98:d8:a2:b1:c0:7b:b8:13:
                    cf:e2:d4:58:f8:88:f1:6d:9f:58:f5:0e:d1:67:ea:
                    2b:bb:6e:8d:5f:1b:59:4d:a2:05:2b:90:a7:ca:85:
                    ae:b5:f1:07:8f:ee:5d:76:ac:c9:a2:53:80:98:90:
                    c8:3f:58:b4:b2:7c:1f:69:60:22:a4:c5:4e:43:ad:
                    72:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:3C:C4:19:60:5D:98:0B:BB:5E:FF:77:82:1A:75:E8:E2:2C:4D:9F
            X509v3 Authority Key Identifier:
                keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/0900F7CA7AE611EF8CE1F784C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e3e0:aa00::/39

    Signature Algorithm: sha256WithRSAEncryption
         97:6c:fd:ef:47:21:b7:a4:64:bd:c1:27:da:31:29:e8:dc:cb:
         17:b5:b5:08:23:17:5c:90:66:68:8d:74:0f:f5:fd:87:d9:05:
         0a:a3:35:ee:53:67:00:92:95:6e:69:46:86:76:0d:ff:4a:af:
         36:18:96:13:c7:e4:ef:60:b9:a8:94:07:7c:d0:1a:c6:78:1f:
         47:ab:64:e9:33:66:7a:28:c7:ee:66:f7:43:23:1b:8e:62:f2:
         ab:2d:75:bd:7c:17:0c:da:72:74:4e:5b:72:1b:cf:3f:86:90:
         4b:55:18:6e:80:7d:28:bc:c9:cf:05:d0:85:12:4f:16:56:07:
         ef:29:d3:e3:2e:d8:76:87:83:a0:99:3c:17:1e:0a:00:ac:ca:
         43:be:75:54:6e:19:04:3a:35:fa:13:32:42:b2:cc:e8:a0:b4:
         ff:e3:06:64:c7:fa:d9:0c:93:db:aa:5d:60:4f:46:c3:f8:b2:
         85:a7:7e:af:f0:16:c3:36:9c:5c:12:17:8f:df:2f:50:a0:66:
         63:75:c5:d3:47:83:80:13:87:b3:aa:5d:06:92:eb:a3:10:4c:
         56:20:ee:ca:06:a6:ef:2d:30:e0:01:73:e7:c2:35:5f:3d:61:
         df:01:1a:c4:c0:64:c2:d2:76:34:14:32:cf:05:d1:7b:d4:4d:
         73:32:eb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:50 2026 by rpki-client