Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/2574266EAA4911F09A71D135C4F9AE02.roa
File:                     2574266EAA4911F09A71D135C4F9AE02.roa (raw, json)
Hash identifier:          Yq5oiH0EmhCavwCaD+J0apl3DbYBY7zFMqkNNlPV3Kc=
Subject key identifier:   62:EF:98:13:46:9E:CC:38:4B:0B:E1:67:6C:A7:E5:11:F1:81:40:2D
Certificate issuer:       /CN=A9186513/serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
Certificate serial:       07D6
Authority key identifier: B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/2574266EAA4911F09A71D135C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:00:59 +0000
ROA not before:           Sun 04 Jan 2026 21:17:33 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     55201
IP address blocks:        2402:3220::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl
                          rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 21:14:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2006 (0x7d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9186513, serialNumber=B6CCB5E431E45019150C4F3721F4F80A6F2ED7DB
        Validity
            Not Before: Jan  4 21:17:33 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47edb-5f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:33:32:3d:34:79:41:0e:88:4f:fc:4d:87:59:
                    d0:0a:74:e3:66:f0:84:ea:f2:1b:22:38:a6:73:eb:
                    9c:d1:b2:fb:8e:e2:7a:2e:a0:c7:d7:96:9e:eb:55:
                    48:a8:42:81:49:05:4d:ee:46:66:89:dc:ef:ec:57:
                    47:42:6e:8c:42:33:2d:94:4a:64:d7:98:99:37:07:
                    ff:57:43:35:53:8f:70:4f:3f:86:1e:e3:59:77:e4:
                    81:31:62:a7:dc:fa:33:14:e4:81:e9:ea:1c:2a:97:
                    36:f3:14:45:90:40:02:aa:70:f3:00:af:a2:36:34:
                    64:43:a0:4a:ed:bc:f6:f8:e5:62:c6:ce:c6:db:fb:
                    39:78:21:eb:f2:d7:1c:0c:4c:88:cd:47:98:a6:57:
                    75:18:28:1f:57:93:e4:86:b4:9f:e9:0b:15:5e:fb:
                    30:bc:c8:d7:73:19:66:46:89:83:b5:b6:15:81:79:
                    28:90:be:9c:47:c9:37:3d:38:50:dc:98:fa:53:9d:
                    92:2d:6c:f2:6b:52:bb:99:43:d1:b2:59:2d:b0:b7:
                    ab:48:dc:44:fc:b6:bd:fa:87:dd:ca:58:c7:df:af:
                    8b:1d:c0:3b:a3:ba:85:73:75:8e:b2:31:59:9b:d6:
                    ec:23:15:08:39:70:a3:51:74:5c:18:42:f0:90:b5:
                    6d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:EF:98:13:46:9E:CC:38:4B:0B:E1:67:6C:A7:E5:11:F1:81:40:2D
            X509v3 Authority Key Identifier:
                keyid:B6:CC:B5:E4:31:E4:50:19:15:0C:4F:37:21:F4:F8:0A:6F:2E:D7:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/tsy15DHkUBkVDE83IfT4Cm8u19s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tsy15DHkUBkVDE83IfT4Cm8u19s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186513/C2BA6BF0420111EBABFD5E60C4F9AE02/2574266EAA4911F09A71D135C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3220::/32

    Signature Algorithm: sha256WithRSAEncryption
         02:bc:20:48:c1:8d:e0:b4:d1:3f:cd:27:7f:5f:69:6e:b5:01:
         4b:66:04:71:c2:86:2a:8e:33:31:96:8b:f6:1a:fd:d7:ee:74:
         96:db:e0:c1:0d:e4:be:dd:0e:d2:2a:07:a5:9a:4a:eb:dd:b5:
         c8:56:a3:4d:a2:d7:1f:2f:ae:58:23:69:c8:16:93:58:5a:d9:
         ee:ee:0f:e9:69:02:f4:ce:77:87:00:1d:af:35:fa:f8:cb:c8:
         02:2e:36:02:5c:36:d4:8b:64:a3:b3:97:87:c6:8c:27:73:26:
         14:d1:d6:a6:91:bb:52:d3:d8:e1:a9:01:f0:a4:eb:22:54:a0:
         28:b6:ea:9b:5e:b9:a3:80:34:0f:7e:8d:a6:d9:9c:0d:bc:e4:
         c1:d9:a6:66:76:40:f5:35:ab:13:a1:53:5a:27:7e:88:bf:b0:
         63:21:b3:e3:3a:39:97:47:01:e0:f2:02:2b:38:ac:33:30:00:
         7c:2a:4e:e7:57:4f:39:cd:b1:68:c0:ca:5d:8e:f2:55:4b:46:
         22:9c:04:b1:1a:ef:26:03:d7:53:10:07:85:07:ed:c1:53:7f:
         14:e3:b9:0c:ca:2e:bd:2e:1c:5f:fe:88:00:5d:86:d9:3c:59:
         80:ac:32:b5:46:a1:52:3b:2a:26:55:41:dc:45:9b:cf:6c:b4:
         48:ee:03:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:27:01 2026 by rpki-client