Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/8B0E94087E7711F0825F7E6BC4F9AE02.roa
File:                     8B0E94087E7711F0825F7E6BC4F9AE02.roa (raw, json)
Hash identifier:          tpEbntANqqH62uyg72ojsNyUatPaZSI32JfG1Q2fADg=
Subject key identifier:   3C:9A:95:F7:3D:19:1D:FA:2A:7C:FA:A5:F8:F6:7F:DC:A3:96:20:B4
Certificate issuer:       /CN=A91ADD64/serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
Certificate serial:       0173
Authority key identifier: 40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/8B0E94087E7711F0825F7E6BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:09:06 +0000
ROA not before:           Thu 21 Aug 2025 10:13:55 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        2407:7a80:104::/48 maxlen: 48
                          2407:7a80:105::/48 maxlen: 48
                          2407:7a80:106::/48 maxlen: 48
                          2407:7a80:107::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl
                          rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:11:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ADD64, serialNumber=40B55C1AC7404CC05F17763A99BBB2389BD2EABE
        Validity
            Not Before: Aug 21 10:13:55 2025 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=69a59a02-b934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e6:a7:3a:1b:6c:ae:de:f1:f4:06:3c:fd:dd:
                    c0:12:92:98:a1:67:c3:2b:b3:7d:03:bb:42:3c:2d:
                    b9:e6:46:72:66:66:0f:4b:82:86:45:ee:d8:11:56:
                    3b:6c:0a:c7:dc:22:f9:87:13:0b:42:34:03:f8:00:
                    d6:de:db:69:30:26:f9:cd:9e:f0:09:f5:07:b2:e8:
                    24:12:8e:0c:05:2a:bf:72:65:d1:61:c7:0f:c2:e9:
                    38:b5:4e:fb:c7:bd:96:5e:ac:08:2a:7d:93:cf:a6:
                    ee:09:92:d4:f6:2d:ac:06:d2:2a:cd:1a:16:ee:94:
                    b6:4a:d7:f4:09:db:04:a8:17:57:4f:64:26:dc:b2:
                    67:f0:02:cb:d2:da:0d:13:82:09:44:b5:56:0f:06:
                    45:2f:58:0a:86:21:f7:db:be:e3:fb:ca:99:cc:5b:
                    73:33:e6:b4:0e:cd:ac:c0:47:b9:86:5b:e7:62:b0:
                    ff:c9:06:d5:1f:a8:55:45:60:04:a3:18:90:f4:80:
                    b0:85:89:9a:61:46:f4:fd:f1:fd:ca:e6:aa:f2:e7:
                    e9:7f:c7:e0:8f:86:c3:ad:6f:58:d1:8e:44:cb:33:
                    60:cc:44:0e:06:b4:f9:0f:5d:b4:44:93:cc:ff:a1:
                    be:32:32:29:c8:f0:ac:73:07:7f:2c:05:6d:4a:ed:
                    5a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:9A:95:F7:3D:19:1D:FA:2A:7C:FA:A5:F8:F6:7F:DC:A3:96:20:B4
            X509v3 Authority Key Identifier:
                keyid:40:B5:5C:1A:C7:40:4C:C0:5F:17:76:3A:99:BB:B2:38:9B:D2:EA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/QLVcGsdATMBfF3Y6mbuyOJvS6r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QLVcGsdATMBfF3Y6mbuyOJvS6r4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/5840A07C134B11EF94424D3DC4F9AE02/8B0E94087E7711F0825F7E6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:7a80:104::/46

    Signature Algorithm: sha256WithRSAEncryption
         09:cc:ea:4e:93:32:08:f4:14:be:31:fc:48:f6:f0:d0:16:15:
         55:77:c5:62:83:02:06:7b:89:ea:5d:30:eb:66:56:ef:5b:e7:
         45:ae:a6:e5:2c:3f:6a:7e:50:85:7d:c0:97:95:9a:de:61:51:
         97:41:cf:c2:f8:ba:91:f4:6b:a3:e2:43:96:c1:94:e0:a2:43:
         0b:4d:8a:0d:6b:39:3c:d6:fa:5b:a6:b8:06:c3:f3:5b:63:3d:
         2d:74:bd:47:0d:8d:43:af:96:0f:d2:25:f8:70:0f:72:db:81:
         dc:2a:8d:0e:6c:b5:0b:68:01:99:5c:98:b6:d2:68:12:18:28:
         25:bf:32:c2:34:8f:f8:3f:32:ca:be:3d:77:14:f6:9f:fa:4b:
         df:c2:17:84:4f:7f:6c:48:f0:ef:8b:48:45:61:f2:a2:de:be:
         fe:c4:5a:36:46:8c:06:8b:1e:54:bc:02:14:44:af:ea:f4:e0:
         83:14:f2:54:c8:5e:bb:9d:41:66:6c:0f:e9:59:8c:10:35:4d:
         bb:34:01:15:c4:e1:13:11:c4:2a:f7:45:60:0b:0e:8e:29:48:
         67:4b:fc:7f:b2:1f:98:0d:f8:fc:a8:af:8a:fa:e8:fa:57:49:
         56:92:ac:ec:1f:af:4e:9c:fd:c8:19:8a:f8:a2:c6:d3:e5:82:
         a2:5b:ec:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:50:10 2026 by rpki-client