Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/EF6D0418235911EFB1B55375C4F9AE02.roa
File:                     EF6D0418235911EFB1B55375C4F9AE02.roa (raw, json)
Hash identifier:          K+H/sCg/7uo16p0l9r8hsE4GJ7oFMKIq4jprTznasVQ=
Subject key identifier:   50:FB:F3:E8:41:71:2C:14:DE:56:8E:84:3A:1B:D3:0F:B2:A9:EB:03
Certificate issuer:       /CN=A91C9B08/serialNumber=614CCD24F785E9299215916408294042F1463294
Certificate serial:       048B
Authority key identifier: 61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/EF6D0418235911EFB1B55375C4F9AE02.roa
Signing time:             Fri 13 Mar 2026 00:32:47 +0000
ROA not before:           Fri 13 Mar 2026 00:32:47 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     60068
IP address blocks:        2400:52e0:1e00::/48 maxlen: 49
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 23:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1163 (0x48b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9B08, serialNumber=614CCD24F785E9299215916408294042F1463294
        Validity
            Not Before: Mar 13 00:32:47 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69b35b2f-85fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a7:cb:28:c8:44:c6:55:b6:58:be:0e:e3:43:
                    69:18:69:13:99:69:bf:89:f1:0a:b0:c4:64:33:0d:
                    c1:21:ee:ff:7c:2d:6a:6a:7e:30:68:56:7b:1f:0d:
                    f7:bd:d7:31:fb:4e:78:aa:5f:8c:53:c0:dd:2f:22:
                    48:9a:5d:7b:92:a9:ff:b8:c2:f3:25:88:e0:dd:9e:
                    2c:e6:34:df:d9:7d:a1:0b:29:ea:10:25:e1:23:60:
                    fb:96:ca:42:4f:42:98:2b:17:a5:60:c3:ca:c0:5a:
                    3c:fb:18:cb:e8:2d:07:e8:d7:6e:9b:5c:c9:2e:6d:
                    76:b3:87:34:8d:e7:8c:23:45:38:22:5e:c1:be:fc:
                    29:bc:35:3b:d9:ac:9d:a6:9b:03:02:dc:2e:25:96:
                    01:22:db:6d:59:50:1e:6a:5b:f2:e3:80:20:39:c3:
                    c1:ad:02:ce:b1:d5:cf:e6:36:33:9b:cc:84:bf:06:
                    04:0a:98:80:00:7b:b4:3f:84:65:8c:33:13:5b:01:
                    01:0b:b7:5b:f7:ba:f6:4f:88:53:bf:78:6a:20:89:
                    e2:ce:8b:1d:13:23:f6:33:17:6a:7f:c0:ed:1d:6e:
                    2d:20:6e:9c:e7:b0:0a:73:77:70:73:ee:8a:64:cb:
                    81:dd:e8:83:df:81:e2:3d:2b:2d:a9:80:eb:3b:7c:
                    fd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:FB:F3:E8:41:71:2C:14:DE:56:8E:84:3A:1B:D3:0F:B2:A9:EB:03
            X509v3 Authority Key Identifier:
                keyid:61:4C:CD:24:F7:85:E9:29:92:15:91:64:08:29:40:42:F1:46:32:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/YUzNJPeF6SmSFZFkCClAQvFGMpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YUzNJPeF6SmSFZFkCClAQvFGMpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9B08/37553A56899D11EC8B424E0BC4F9AE02/EF6D0418235911EFB1B55375C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:52e0:1e00::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:2c:a6:9b:05:07:91:75:25:f4:62:e5:8d:3d:f2:9d:2f:b5:
         cb:98:83:3d:c9:b1:aa:5c:9f:1e:ff:c5:52:fe:ff:4c:51:e3:
         42:fc:2b:15:00:60:b4:ed:1c:07:9d:28:39:cf:57:4c:fd:31:
         cf:5b:dc:12:2d:b9:8d:a5:24:bc:3d:44:49:0c:86:77:a8:97:
         7b:4c:cd:af:39:27:58:bd:6e:b7:91:01:e8:f2:e6:1b:21:d0:
         d4:4e:7f:ed:93:c1:8c:6e:18:71:ed:ec:52:34:a1:a3:c1:36:
         b8:94:b6:40:b9:2b:b4:a4:9e:d9:24:36:98:52:bd:51:7f:10:
         46:c4:16:f4:f1:c4:58:a1:61:2d:60:40:b5:de:82:3e:41:1f:
         01:e4:e7:6e:54:02:9e:ab:83:a5:4a:14:a1:be:b6:af:b0:48:
         6c:a2:63:e0:24:5b:dc:4e:cc:a0:b7:fb:d8:7e:7d:d9:a8:3e:
         53:a6:14:bd:5f:88:20:2e:6b:b9:a2:09:45:9b:30:88:81:3b:
         34:2b:05:46:0b:fd:e1:9f:37:45:be:63:bd:2e:33:f7:a4:47:
         5c:0b:10:37:00:db:c3:96:95:de:5c:d3:d8:4b:61:f7:e0:02:
         27:9b:1a:ab:de:b3:94:92:a6:97:d8:23:e8:49:7c:87:d8:c2:
         83:6a:1b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:27:52 2026 by rpki-client