Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/13B569D89B7C11EFA635C368C4F9AE02.roa
File:                     13B569D89B7C11EFA635C368C4F9AE02.roa (raw, json)
Hash identifier:          ETXnCL+8R0pFtp2sGo3J4kNKxEM+18FYnbqmw8RAd24=
Subject key identifier:   DC:F5:D8:38:40:00:DF:0F:7B:E8:24:BF:C9:D7:CB:E5:17:D0:B7:DD
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       108D
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/13B569D89B7C11EFA635C368C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:30:59 +0000
ROA not before:           Thu 22 May 2025 20:08:20 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     215750
IP address blocks:        2406:840:9600::/44 maxlen: 48
                          2406:840:9610::/44 maxlen: 48
                          2406:840:9620::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 09:57:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4237 (0x108d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:08:20 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493f3-4b35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:00:1c:61:70:b7:21:85:f1:da:79:f0:21:01:
                    e8:39:89:76:09:df:14:7a:4c:21:3a:9b:d1:99:19:
                    89:66:0b:c3:57:5f:61:3c:a7:c5:cd:3e:40:89:8b:
                    10:11:8d:6f:64:cc:e5:1b:51:fd:ac:ba:34:54:da:
                    a8:14:e9:6f:10:cf:b5:c7:f8:63:61:90:f7:15:63:
                    20:a6:9f:89:ea:1c:91:f5:af:79:35:9a:fd:8f:97:
                    27:41:32:c3:5b:d5:22:56:26:35:75:3f:6d:47:34:
                    e1:94:ff:1a:3f:88:08:92:2d:1f:cf:1a:0e:ad:6e:
                    29:10:76:1a:fa:be:3e:86:ce:5d:bf:ab:e7:bf:f4:
                    68:34:ec:43:7a:84:6a:72:35:22:eb:45:cb:75:f0:
                    d9:dc:b5:0d:a6:d8:e1:6e:23:5e:89:30:2f:bb:9f:
                    68:73:f3:95:88:e6:49:43:d3:f6:58:1a:75:54:79:
                    e2:e8:e2:3c:b2:79:67:6f:9c:3f:39:cd:4d:7a:3b:
                    dd:06:d5:57:19:dc:9d:7f:1b:18:58:87:ae:e9:43:
                    37:0a:eb:a0:6c:75:88:b5:af:60:d9:a5:b6:e4:f3:
                    da:51:3a:36:9f:f1:b2:87:b4:0b:78:1e:95:55:09:
                    d0:34:cf:db:c6:65:b4:33:46:83:bb:d3:c3:66:c9:
                    51:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F5:D8:38:40:00:DF:0F:7B:E8:24:BF:C9:D7:CB:E5:17:D0:B7:DD
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/13B569D89B7C11EFA635C368C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:9600::-2406:840:962f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         86:50:02:76:a2:c5:90:ce:ea:f0:47:1d:a3:d7:cd:4d:06:41:
         cb:a6:a4:c0:a7:84:fe:7e:30:d0:1e:57:69:59:61:ef:68:54:
         77:5e:b2:6f:70:dd:cc:fe:81:8c:f4:89:7f:5c:53:d7:7f:f7:
         6a:d7:8f:a9:76:d4:ba:77:57:21:71:7e:c7:8b:2e:0b:01:cf:
         ef:ca:7d:98:08:ef:cc:0c:59:5f:60:6a:d2:26:00:8c:0a:c6:
         92:bd:08:16:de:22:e8:bd:8c:1d:f0:76:ab:91:2d:41:ab:7c:
         70:ca:59:53:17:47:87:fd:da:dc:45:73:23:b6:37:a3:57:e7:
         4c:7f:58:b4:53:8b:9f:e7:54:86:7a:b8:e1:42:82:88:b8:8d:
         fe:eb:2e:d6:a9:03:0f:d9:60:d3:b4:67:cd:50:c5:8e:6f:31:
         fd:ef:88:d4:c9:22:e7:33:7c:d2:f9:fc:dc:16:8f:0c:43:dc:
         4a:5d:87:2a:ab:ba:b8:e1:e0:61:61:65:f4:55:e5:cf:61:3f:
         79:c5:c1:2f:c1:4e:7d:f9:e6:4b:ed:17:13:c9:10:bd:3d:f1:
         e0:2a:4c:64:17:cf:1a:8f:5d:e0:9b:e5:40:04:1d:ef:d1:e4:
         c0:ec:86:8c:bf:5b:23:39:bc:6d:44:1c:a8:74:01:4f:19:4b:
         23:21:bd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 01:39:16 2026 by rpki-client