Route Origin Authorization

$ rpki-client -vvf rpki.sub.apnic.net/repository/A917447B0000/1/323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa
File:                     323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa (raw, json)
Hash identifier:          6d79MjPujLDyKtMpkk4jphJnh2+RAK01Ho2cDxHKrKM=
Subject key identifier:   0A:81:67:53:41:0C:BF:40:82:25:0B:E3:E8:4D:5B:57:95:C8:3B:D0
Certificate issuer:       /CN=A917447B0000/serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
Certificate serial:       58F9F3851C6EE803F5AE1694C432686AF63BE96C
Authority key identifier: 17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A917447B0000/1/323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa
Signing time:             Sat 14 Feb 2026 16:06:18 +0000
ROA not before:           Sat 14 Feb 2026 16:01:18 +0000
ROA not after:            Sat 13 Feb 2027 16:06:18 +0000
asID:                     153346
IP address blocks:        2001:df4:514e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl
                          rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Feb 2026 07:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:f9:f3:85:1c:6e:e8:03:f5:ae:16:94:c4:32:68:6a:f6:3b:e9:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917447B0000, serialNumber=17AA392C0CFF754F6249006D89386F871B9693FA
        Validity
            Not Before: Feb 14 16:01:18 2026 GMT
            Not After : Feb 13 16:06:18 2027 GMT
        Subject: CN=0A816753410CBF4082250BE3E84D5B5795C83BD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fb:45:dc:29:5b:73:a7:4f:a4:8f:af:ee:6f:
                    c9:ad:50:03:58:7e:e7:fa:da:5a:6d:94:60:09:15:
                    69:62:4e:6f:1f:8f:2a:46:00:f8:54:8b:c3:fa:ae:
                    7d:23:4f:68:16:95:e6:7f:59:fe:d0:c9:60:69:f7:
                    16:81:e4:17:10:24:25:d4:31:9f:10:79:1f:14:b3:
                    43:6c:ed:66:cd:66:52:63:92:eb:b8:71:81:cc:d3:
                    f7:17:04:cd:60:cd:85:f8:db:14:2c:f7:ac:e2:c0:
                    71:42:69:89:0e:e8:12:77:63:2f:bc:77:07:9e:1e:
                    38:d0:c4:f3:d2:81:07:31:36:27:58:9c:f6:2e:e7:
                    28:e5:32:54:92:fb:b4:1e:4b:8c:1b:4c:d7:74:be:
                    97:6c:4c:22:12:0f:45:d0:ce:48:78:b7:f8:3f:99:
                    8b:db:dc:cd:36:fe:4e:7c:fe:e1:09:a2:e8:1f:65:
                    5e:14:61:5f:b8:1e:a4:30:dd:56:da:a0:30:02:06:
                    04:6a:b2:0a:f8:6c:c6:32:3b:ee:50:b0:58:2e:98:
                    c4:24:90:ef:10:34:ec:a4:cc:d4:fa:0a:c6:1c:d3:
                    8c:58:7a:bb:f4:12:7f:48:f2:1a:14:4c:0c:dd:fb:
                    ce:80:b4:02:f7:4e:39:8b:4f:18:20:65:4d:b4:02:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:81:67:53:41:0C:BF:40:82:25:0B:E3:E8:4D:5B:57:95:C8:3B:D0
            X509v3 Authority Key Identifier:
                keyid:17:AA:39:2C:0C:FF:75:4F:62:49:00:6D:89:38:6F:87:1B:96:93:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/17AA392C0CFF754F6249006D89386F871B9693FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F6o5LAz_dU9iSQBtiThvhxuWk_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A917447B0000/1/323030313a6466343a353134653a3a2f34382d3438203d3e20313533333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:514e::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:48:93:78:eb:90:52:33:54:00:9d:03:30:87:8f:a3:13:97:
         b8:06:2a:5c:47:a7:93:76:3e:b4:c3:f7:3b:11:15:04:04:b2:
         64:13:8d:1d:67:26:d0:d8:5f:44:52:47:f9:3d:da:3c:11:a8:
         4a:27:f9:8f:e9:62:0d:a8:66:0c:03:8c:78:a7:7d:bf:25:89:
         cc:de:c6:de:37:f0:32:67:02:16:cd:14:54:1d:4f:7c:4b:56:
         2e:df:45:18:9e:56:f7:3b:db:a5:77:5c:fc:6a:0c:e1:13:fd:
         8a:fd:f6:76:15:75:f3:5e:61:d8:48:60:08:7f:89:e7:ae:0b:
         9f:c3:c3:71:61:6f:63:ad:46:51:18:d4:65:2c:8d:8b:b5:de:
         1f:16:c3:30:06:c1:0b:39:d7:f7:f4:f1:b9:6d:3b:c9:36:9c:
         d0:eb:f9:54:56:92:ec:54:62:c1:75:bd:43:41:b6:86:39:50:
         63:ed:fa:92:a4:b9:97:62:7e:5a:af:1a:9b:cb:27:b3:46:44:
         54:f0:33:a1:93:65:34:71:9e:75:36:3b:de:1a:b2:93:a4:03:
         24:be:8d:21:7f:6c:f9:8e:18:ba:b3:b8:37:a5:4a:c1:9b:9c:
         7d:ea:a9:29:04:68:bf:89:d0:4e:f5:50:1a:f8:e8:4e:19:61:
         5f:86:6c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:04:43 2026 by rpki-client