Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68087952EABF11EF9D79F20DC4F9AE02.roa
File:                     68087952EABF11EF9D79F20DC4F9AE02.roa (raw, json)
Hash identifier:          2ofFCmNJGo9YsGDeJIkygEbRmhSPYLus/Stub7LPnyY=
Subject key identifier:   5E:97:8B:4C:D6:F3:3F:D4:DF:AF:2D:B9:0A:22:DA:8B:13:49:79:82
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1095
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68087952EABF11EF9D79F20DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:31:07 +0000
ROA not before:           Thu 22 May 2025 20:08:27 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     401009
IP address blocks:        2406:840:e180::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 17:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4245 (0x1095)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:08:27 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a493fb-d09d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:80:e3:70:13:09:65:a1:68:b9:f7:e1:bb:a7:
                    6a:f6:97:15:c1:9a:c3:f4:f3:f0:54:e5:5f:29:11:
                    0b:8c:30:a4:a5:6d:66:bf:ff:19:61:bd:45:85:52:
                    97:49:1e:d0:ce:de:8b:22:e7:54:ce:81:4d:fa:d9:
                    5c:b5:89:68:77:79:83:2b:bb:87:2a:1d:f0:59:ef:
                    72:7b:c3:65:45:9e:b2:cb:d2:dd:7f:b8:44:cc:28:
                    38:a2:6a:f5:ec:33:64:75:a0:0c:ff:77:28:7a:60:
                    3f:76:b6:22:86:cc:28:72:86:7b:ec:d3:07:25:25:
                    84:7c:3f:b3:6c:e1:55:55:61:23:db:10:40:0b:15:
                    e9:f5:04:16:f8:6d:df:cc:8d:f7:35:0e:11:23:e8:
                    4f:40:ba:aa:c0:71:d0:63:b3:97:f2:ad:48:85:52:
                    f8:2a:66:0c:c9:ff:54:ad:33:dc:6b:84:94:b8:40:
                    91:3c:46:4f:23:f8:cf:41:8a:ab:02:f2:b4:f1:1c:
                    ee:09:91:07:ac:86:5e:34:14:73:b1:ed:1f:74:5f:
                    18:1c:84:ac:70:03:95:a4:a4:0e:36:20:a5:0f:d0:
                    4e:cc:30:a6:b3:a6:8e:4a:6b:89:36:e5:08:51:e5:
                    89:7b:8d:57:4f:e0:60:90:23:08:b9:e6:91:4d:f6:
                    3f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:97:8B:4C:D6:F3:3F:D4:DF:AF:2D:B9:0A:22:DA:8B:13:49:79:82
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/68087952EABF11EF9D79F20DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e180::/44

    Signature Algorithm: sha256WithRSAEncryption
         35:9c:58:1a:50:0f:d6:35:39:3a:f5:c1:a4:d1:c6:4c:e8:cb:
         69:76:62:2d:5e:3f:40:b2:8d:0e:66:1d:3e:bf:fa:03:73:ea:
         9c:3b:67:4a:36:a5:85:22:4f:46:c0:2f:0a:f4:36:a9:a0:ce:
         d0:68:dd:74:97:e6:cf:7a:3d:a3:ff:09:1a:b3:64:f6:6c:90:
         6d:fb:cc:ad:de:43:0b:42:49:82:fd:18:e0:f2:05:d0:24:c1:
         dc:eb:59:8f:ba:a4:60:6a:42:90:91:b7:d1:db:b3:87:e5:d2:
         08:46:55:85:6d:3c:dd:d4:1b:02:c0:da:0b:16:1d:7e:c5:30:
         9b:51:c4:3a:db:6e:9c:b0:7b:a0:92:b6:3c:41:cd:e7:8f:5c:
         59:63:6d:a0:17:93:1d:ab:2e:ba:57:18:4d:90:54:93:d8:4f:
         f3:5f:1b:d0:0d:ba:19:4f:92:80:cd:3d:7b:ef:dd:39:dd:40:
         4c:6d:ad:a7:49:77:da:9a:24:09:22:a2:05:bd:9a:a4:7f:29:
         4f:e5:c9:16:49:59:31:6d:d3:7b:05:90:3a:28:f5:22:62:0e:
         ea:04:50:04:9c:54:41:92:9a:62:14:1b:0c:72:27:6e:df:fd:
         df:a5:79:77:4f:45:cd:2a:bb:5e:be:07:06:8f:57:27:a4:ee:
         fb:34:70:53
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICEJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjUwNTIyMjAwODI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTNmYi1kMDlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAmIDjcBMJZaFouffhu6dq9pcVwZrD9PPwVOVfKRELjDCkpW1mv/8ZYb1FhVKX
SR7Qzt6LIudUzoFN+tlctYlod3mDK7uHKh3wWe9ye8NlRZ6yy9Ldf7hEzCg4omr1
7DNkdaAM/3coemA/drYihswocoZ77NMHJSWEfD+zbOFVVWEj2xBACxXp9QQW+G3f
zI33NQ4RI+hPQLqqwHHQY7OX8q1IhVL4KmYMyf9UrTPca4SUuECRPEZPI/jPQYqr
AvK08RzuCZEHrIZeNBRzse0fdF8YHISscAOVpKQONiClD9BOzDCms6aOSmuJNuUI
UeWJe41XT+BgkCMIueaRTfY/FwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFF6Xi0zW
8z/U368tuQoi2osTSXmCMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvNjgwODc5NTJF
QUJGMTFFRjlENzlGMjBEQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAYIQOGAMA0GCSqGSIb3DQEBCwUAA4IBAQA1nFgaUA/WNTk69cGk
0cZM6MtpdmItXj9Aso0OZh0+v/oDc+qcO2dKNqWFIk9GwC8K9DapoM7QaN10l+bP
ej2j/wkas2T2bJBt+8yt3kMLQkmC/Rjg8gXQJMHc61mPuqRgakKQkbfR27OH5dII
RlWFbTzd1BsCwNoLFh1+xTCbUcQ6226csHugkrY8Qc3nj1xZY22gF5Mdqy66VxhN
kFST2E/zXxvQDboZT5KAzT1779053UBMba2nSXfamiQJIqIFvZqkfylP5ckWSVkx
bdN7BZA6KPUiYg7qBFAEnFRBkppiFBsMcidu3/3fpXl3T0XNKrtevgcGj1cnpO77
NHBT
-----END CERTIFICATE-----
Generated at Sat Mar 7 02:25:28 2026 by rpki-client