Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/309A0AEC073D11EE94A9410CC4F9AE02.roa
File:                     309A0AEC073D11EE94A9410CC4F9AE02.roa (raw, json)
Hash identifier:          pFDSBEaXQzskq04841VPkdgOexvbY84+Oq7ogG0dvvc=
Subject key identifier:   DF:C8:3F:F1:B8:1C:7D:4B:50:34:5A:AD:1F:E0:5C:85:B2:42:86:A6
Certificate issuer:       /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial:       0260
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/309A0AEC073D11EE94A9410CC4F9AE02.roa
Signing time:             Fri 05 Jun 2026 03:33:15 +0000
ROA not before:           Fri 05 Jun 2026 03:33:15 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     212483
IP address blocks:        2401:5a0:ff00::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
                          rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 03:33:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
        Validity
            Not Before: Jun  5 03:33:15 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a22437b-3a17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:26:a1:74:54:be:41:23:e7:97:ec:6a:62:81:
                    9d:84:8d:55:c4:fa:58:8c:55:cf:3f:57:b4:d3:7a:
                    7f:99:ac:03:81:c1:83:fc:cb:57:21:7a:34:13:2c:
                    35:65:d4:2b:02:1b:e3:fe:ed:f9:47:f3:5a:c5:03:
                    44:62:5f:b8:04:16:fa:e9:25:97:55:ed:15:5b:69:
                    37:7c:e3:4e:ad:a8:5d:8a:09:f6:65:d8:00:0a:50:
                    88:c9:1d:d9:f6:1f:e7:9d:2e:80:ff:30:56:af:c4:
                    0b:e1:9f:55:8d:3d:30:08:f8:bd:38:5a:69:4c:ae:
                    2e:47:80:87:34:85:ef:c0:4b:f7:6b:96:5e:52:75:
                    4d:e1:09:b9:4f:5c:fb:68:24:8e:77:73:95:9a:75:
                    5e:94:db:ac:2e:af:00:67:1f:13:0a:de:b2:14:51:
                    ec:fc:95:76:9e:90:79:66:da:eb:f2:34:39:48:f8:
                    d2:33:1c:2f:d7:c7:7b:37:9f:8b:33:f9:46:d1:fe:
                    c5:61:d4:fa:63:00:6e:23:c6:64:63:a1:2b:5d:55:
                    61:2c:c7:2c:62:b8:97:82:11:d6:04:7a:03:45:dd:
                    dd:cc:b5:85:1a:3c:36:bd:9b:10:23:23:56:21:65:
                    65:66:11:be:ed:5c:ce:b4:e0:2a:4e:06:ed:86:ac:
                    22:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C8:3F:F1:B8:1C:7D:4B:50:34:5A:AD:1F:E0:5C:85:B2:42:86:A6
            X509v3 Authority Key Identifier:
                keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/309A0AEC073D11EE94A9410CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5a0:ff00::/44

    Signature Algorithm: sha256WithRSAEncryption
         99:30:ca:92:25:0c:26:cd:9f:30:63:56:0d:fe:c9:60:c0:01:
         db:4d:68:24:0a:d1:e3:37:a8:f7:a4:46:99:a3:8b:34:6c:32:
         e1:6f:48:9d:e3:66:a7:0d:27:4f:53:05:64:19:76:d0:cd:53:
         76:48:20:6e:6c:de:15:aa:5d:c3:62:3f:ca:53:47:6a:63:f5:
         2e:10:1b:93:89:82:3e:52:6f:a6:db:00:b1:ee:f4:6d:70:52:
         02:75:e3:f4:e9:65:2c:4d:6b:04:d4:c1:f9:62:94:13:fd:a2:
         43:fa:50:28:54:cb:c4:c4:43:9c:8a:b5:ec:e0:79:5d:a7:64:
         1e:0a:ca:eb:37:cf:4a:f4:89:ca:58:7c:97:95:72:5c:09:8e:
         23:57:cb:c6:31:53:5d:23:ad:b7:6c:3a:de:dc:da:7e:21:98:
         de:7f:6c:9a:cf:2f:7e:9e:8e:dd:88:ec:44:5d:3d:b1:65:38:
         b2:43:90:f4:07:5e:29:06:4a:66:00:62:f6:b5:0e:cd:c2:5e:
         29:67:44:ce:5b:8f:1b:30:e4:40:35:81:50:15:bf:db:05:68:
         d1:81:b2:31:ea:98:7c:9f:70:b7:79:9e:ea:bb:55:18:a4:94:
         ca:57:2a:68:f1:c0:a0:c3:44:cf:40:27:cd:7e:de:26:31:78:
         c0:39:b4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 7 02:57:53 2026 by rpki-client