Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/3143DEC26C8811EEBAB7F227C4F9AE02.roa
File:                     3143DEC26C8811EEBAB7F227C4F9AE02.roa (raw, json)
Hash identifier:          bujDqUQBYDEOHRylquQ9lrhwkzTG5J4D6+3AWwTVyYY=
Subject key identifier:   07:F5:CF:4D:DF:C1:11:2C:21:E4:66:08:D8:0F:5A:DD:19:13:47:7B
Certificate issuer:       /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial:       0440
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/3143DEC26C8811EEBAB7F227C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:10:27 +0000
ROA not before:           Wed 07 May 2025 01:07:31 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     216173
IP address blocks:        2401:1740:c02::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
                          rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 00:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1088 (0x440)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
        Validity
            Not Before: May  7 01:07:31 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a464f3-4b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:00:c2:9e:0d:62:bc:5e:12:a9:6b:a2:56:5f:
                    fe:b2:86:8c:fa:f3:cb:96:07:a1:04:26:43:4c:96:
                    6e:5a:0c:44:b0:c8:76:b5:ad:07:9a:fe:ce:ea:f7:
                    15:05:ea:e6:5b:b6:46:1e:19:50:3a:39:71:94:f1:
                    ad:bb:22:6d:0b:c4:b8:d4:7e:82:d6:54:9e:89:a6:
                    a2:36:2d:28:dd:1d:a3:5d:46:6d:9d:a6:0d:af:00:
                    b7:38:76:33:71:17:c7:a6:42:3b:34:af:fe:d5:63:
                    1e:d7:da:4d:b9:ab:13:10:68:16:a8:9e:a2:e0:4c:
                    27:08:64:ac:be:93:45:a7:49:56:e5:4c:1a:c3:75:
                    76:12:e2:4b:8f:05:ab:31:f0:63:e7:c3:ad:20:09:
                    14:e8:37:fd:a7:e3:c0:0f:2f:28:ac:89:2c:23:b9:
                    4f:73:aa:5d:90:82:e4:74:cb:89:78:e3:5c:b8:c4:
                    5b:b8:75:c4:83:36:57:97:c8:a9:b2:f0:8b:0b:24:
                    0b:14:b1:22:a6:02:fc:07:a7:be:0b:05:8c:a2:92:
                    68:05:17:cb:17:df:bb:81:af:ce:78:3e:16:c5:1c:
                    76:04:99:bb:15:e6:83:dd:17:40:d2:c2:db:9a:c7:
                    f6:67:af:7a:b8:20:5f:f2:88:15:3c:d1:20:ea:a1:
                    67:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F5:CF:4D:DF:C1:11:2C:21:E4:66:08:D8:0F:5A:DD:19:13:47:7B
            X509v3 Authority Key Identifier:
                keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/3143DEC26C8811EEBAB7F227C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1740:c02::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:72:9d:e3:59:8f:13:4f:36:fa:96:b3:3c:e5:bc:c6:b2:1f:
         ef:c4:82:f7:0d:eb:5e:62:dc:14:0d:a8:53:e3:aa:5a:b6:56:
         b4:b7:2f:22:33:d1:45:62:4e:8b:e0:1b:59:67:f9:8a:87:3d:
         c1:46:f4:bf:12:c4:ad:5b:18:7a:2f:88:7f:9f:69:bf:f2:6e:
         ed:4e:ed:18:a4:ee:b7:f6:31:13:7a:7e:0e:a1:d1:e3:0f:20:
         01:56:08:96:6b:2e:33:d0:7a:ee:15:ce:1d:88:07:19:15:cc:
         56:ea:9b:5a:dd:e5:a3:c6:87:35:25:17:87:d6:2c:47:4c:63:
         08:b1:81:66:14:87:33:11:9b:03:89:35:71:91:67:f8:e8:1a:
         88:a4:a2:39:c0:f6:fd:73:bd:62:21:be:03:a6:3c:99:55:93:
         c4:b1:95:f6:96:68:82:72:f8:02:54:a7:42:9d:5f:6f:17:29:
         2e:1f:e8:43:5b:70:ac:98:49:8f:15:f0:2f:d2:6c:b0:b3:91:
         1e:7a:d4:61:4c:ce:80:f6:64:19:f3:fa:1e:e2:c1:b3:e6:cf:
         fa:e4:78:05:79:05:a6:33:d9:ee:f4:cd:e2:02:01:62:b9:64:
         c6:e7:91:d0:62:fe:93:92:58:92:ab:53:be:5c:f8:b6:fc:c3:
         5f:b0:66:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:34:54 2026 by rpki-client