Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/C4C01E3800D111F19FE1BBA3726F56BC.roa
File:                     C4C01E3800D111F19FE1BBA3726F56BC.roa (raw, json)
Hash identifier:          p1oQCRK+fQYWeQ7xAw2NDpJod3IgxEqJpRDS9Wtf4SU=
Subject key identifier:   3D:A0:62:72:52:12:02:F3:86:B6:56:40:73:6C:85:0F:2C:FA:E2:7A
Certificate issuer:       /CN=A9179EAE/serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
Certificate serial:       FA
Authority key identifier: 72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/C4C01E3800D111F19FE1BBA3726F56BC.roa
Signing time:             Tue 03 Feb 2026 07:27:17 +0000
ROA not before:           Tue 03 Feb 2026 07:27:17 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     151151
IP address blocks:        2001:df6:3fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl
                          rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 26 Feb 2026 04:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 250 (0xfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9179EAE, serialNumber=7270F34299A21EA5B0C76ED3D7EB2E07BB6723F7
        Validity
            Not Before: Feb  3 07:27:17 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=6981a355-ed5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:53:64:cd:9d:d6:74:b1:d3:e0:f4:c6:b7:2a:
                    c9:fa:d1:66:08:c2:17:03:e9:db:18:80:6c:ef:f8:
                    6e:c6:9b:0a:97:82:4e:7b:82:37:3c:e7:1c:98:b0:
                    e8:94:b1:ba:dc:63:a4:eb:bf:98:38:ec:00:67:b7:
                    19:66:38:52:a7:d7:27:0b:85:71:67:6a:06:3c:45:
                    40:a1:04:fc:4d:4d:06:bb:fa:1b:d1:e9:9f:cd:8a:
                    82:59:22:68:cf:b8:8b:fc:0f:2f:03:f3:0b:f6:2e:
                    39:0a:20:4a:f4:34:1f:06:91:c6:7e:63:41:53:39:
                    80:06:25:16:5f:f3:45:ec:60:46:3c:31:41:6f:b2:
                    5d:87:bb:8f:be:3a:d5:6f:d2:a4:a7:d6:8b:34:5a:
                    4a:5d:58:a3:8e:1a:a8:b4:6a:5c:1e:0d:bf:8e:a9:
                    65:95:5d:4e:dc:71:44:e6:30:06:b3:2b:24:6d:df:
                    e0:a8:ed:75:2b:fe:86:f3:06:5f:32:7b:b3:9a:c6:
                    ca:11:3a:53:c9:30:c5:1d:cd:ea:bb:1c:16:4f:ac:
                    92:f3:fe:b5:97:ff:c0:ad:d6:57:d0:25:a5:7a:f1:
                    57:0c:4a:2e:7f:7f:9d:f4:d6:fa:5d:f8:3d:42:79:
                    5b:9f:ca:ee:03:8c:00:2f:03:a5:48:2d:1f:a7:6a:
                    15:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A0:62:72:52:12:02:F3:86:B6:56:40:73:6C:85:0F:2C:FA:E2:7A
            X509v3 Authority Key Identifier:
                keyid:72:70:F3:42:99:A2:1E:A5:B0:C7:6E:D3:D7:EB:2E:07:BB:67:23:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/cnDzQpmiHqWwx27T1-suB7tnI_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnDzQpmiHqWwx27T1-suB7tnI_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179EAE/AE0280568D0E11EFA8FE9371C4F9AE02/C4C01E3800D111F19FE1BBA3726F56BC.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:3fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:ff:30:c9:ed:9b:80:67:bc:0e:7f:c8:2c:73:f4:3b:a9:ee:
         ee:18:38:cf:b0:e4:d5:2c:f9:27:cf:6d:bc:c7:da:f4:82:65:
         39:9d:36:af:75:79:d1:7a:d2:b3:0d:46:78:f6:65:e5:13:67:
         4a:cf:0a:94:49:86:da:58:81:8f:3b:3c:c5:ab:e1:ff:25:b4:
         eb:64:fd:3c:dc:1e:b6:e5:7c:b0:e5:27:11:f4:bb:19:63:63:
         16:e0:70:d9:15:19:40:e0:ea:2c:3c:ac:e3:5b:61:c3:4d:7e:
         b4:6c:62:d8:c4:4b:65:fc:93:2b:06:ff:a2:48:13:31:20:c9:
         e4:62:a0:49:f6:ab:53:de:ec:d3:b0:fe:8f:2a:62:62:b1:0c:
         22:ba:4e:09:d2:49:41:d9:4c:33:7e:e7:ba:37:82:fb:35:1c:
         a1:aa:08:1c:61:53:4a:11:80:26:92:35:b8:ec:1c:1c:bf:8a:
         3a:1e:64:f1:02:69:ab:19:d0:07:cc:52:b3:74:c7:67:1b:3b:
         a7:8b:eb:6c:91:9c:2c:a6:d8:31:3e:84:f4:fb:36:67:1e:a8:
         36:47:7e:37:b5:94:6c:36:cb:1a:6c:73:8f:d5:fa:43:79:f6:
         e1:47:22:a7:4a:d9:b4:d8:1f:bf:40:97:13:33:c4:81:ec:1b:
         fe:1c:43:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 22:37:58 2026 by rpki-client