Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/C735270A8B4911F197B84AD94811F970.roa
File:                     C735270A8B4911F197B84AD94811F970.roa (raw, json)
Hash identifier:          +LKnrorxjBkm1K+JOzimfHxI4AeC1+1bODCZ0IR/L8s=
Subject key identifier:   19:3A:AD:2C:30:28:05:EF:64:E7:C3:8F:13:22:16:54:AE:E8:8F:55
Certificate issuer:       /CN=A9181292/serialNumber=D248E5B7859738417219C739320BDAFB83B50501
Certificate serial:       03
Authority key identifier: D2:48:E5:B7:85:97:38:41:72:19:C7:39:32:0B:DA:FB:83:B5:05:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/C735270A8B4911F197B84AD94811F970.roa
Signing time:             Wed 29 Jul 2026 12:34:02 +0000
ROA not before:           Wed 29 Jul 2026 12:34:02 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     134382
IP address blocks:        2001:df7:38c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl
                          rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:51:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181292, serialNumber=D248E5B7859738417219C739320BDAFB83B50501
        Validity
            Not Before: Jul 29 12:34:02 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a69f339-7991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d4:4b:88:ff:90:4c:97:1f:be:0f:08:1f:94:
                    cd:8b:76:88:1e:91:d7:bd:61:68:21:d9:a9:08:69:
                    ef:82:ff:ca:19:61:50:b1:21:35:bc:c3:02:f0:de:
                    f1:65:f4:bd:05:2d:4b:09:88:ec:2c:f3:42:57:78:
                    39:07:79:44:a5:b3:79:59:67:9f:18:da:85:b8:3f:
                    af:4e:a3:b7:37:09:7c:ff:54:62:e1:b7:8f:50:29:
                    64:ee:a6:59:28:76:92:30:50:1d:82:bf:46:5d:6c:
                    bd:68:64:30:dc:31:85:cc:86:ee:2b:fa:de:06:c1:
                    4f:a4:ec:71:ba:a1:84:47:7c:d3:e4:cf:90:24:b4:
                    b0:c9:fc:19:4e:2e:20:39:83:c5:8a:bb:9a:75:74:
                    a4:2c:dd:06:c0:69:7d:92:58:a1:6f:45:1f:0d:42:
                    5e:e5:4e:93:7e:05:a2:f6:b0:11:ef:23:8f:62:91:
                    dd:d9:a2:cb:23:93:74:65:7f:d4:c4:26:84:16:8f:
                    65:70:03:46:95:2c:3a:b7:b6:20:63:8f:fa:f4:33:
                    3d:6d:37:c1:a1:7b:82:76:dd:a7:30:9d:dd:a7:04:
                    4b:02:e9:68:00:31:85:0d:58:ba:86:21:70:39:28:
                    8c:ec:73:dc:14:17:3f:0a:b2:2c:7a:e7:fc:b5:1d:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:3A:AD:2C:30:28:05:EF:64:E7:C3:8F:13:22:16:54:AE:E8:8F:55
            X509v3 Authority Key Identifier:
                keyid:D2:48:E5:B7:85:97:38:41:72:19:C7:39:32:0B:DA:FB:83:B5:05:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/0kjlt4WXOEFyGcc5Mgva-4O1BQE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0kjlt4WXOEFyGcc5Mgva-4O1BQE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9181292/51E505228B4611F192E7A6494611F970/C735270A8B4911F197B84AD94811F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:38c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:6c:49:fd:d1:f8:01:dd:b6:21:2f:ad:a2:5e:28:f1:6f:24:
         f7:ad:e7:c9:30:98:2d:34:7a:14:1a:99:b2:50:97:9f:3c:3e:
         ba:c1:2b:dc:40:b1:8f:cd:b7:8f:79:3a:19:e8:c6:d6:21:f6:
         fc:da:ea:d5:ce:a9:67:0b:f6:f8:af:39:1d:70:de:4d:9b:1e:
         69:96:fe:76:f0:9a:cc:9e:1c:17:00:23:58:d6:8b:de:c8:13:
         7e:bb:bf:2a:cf:d0:71:ec:97:1d:ce:2a:a8:97:53:65:c2:be:
         20:2d:de:13:17:75:6e:72:76:0c:15:38:6c:cf:9b:cc:0f:85:
         9e:ef:d0:0c:e0:c5:54:f8:d4:6b:d4:b5:d8:32:f9:6a:a3:66:
         1f:0a:02:5e:84:2b:ad:fa:e7:0b:b9:ca:50:e8:b5:ee:19:a5:
         d5:a6:0e:3f:c9:79:f3:98:b0:7e:d7:67:7e:43:4b:59:92:fc:
         c6:64:e2:9f:c4:5a:af:08:1a:25:a4:ff:24:88:ff:3f:db:f2:
         9f:fd:96:2b:da:b2:f8:e3:6a:2c:88:9e:0c:8c:e1:62:60:c0:
         c5:90:63:55:d5:bf:88:e6:9f:6c:2c:30:1f:1a:96:a1:a1:23:
         8f:e5:23:69:3a:07:c1:5f:a9:79:ad:b7:97:ec:0a:06:d1:c0:
         9c:df:7f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:37:27 2026 by rpki-client