Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/CE879A58457411F1A79BF008B4833773.roa
File:                     CE879A58457411F1A79BF008B4833773.roa (raw, json)
Hash identifier:          FAofXEWNWRLbLUEmI8l44ekM0qZ+AweWVtuPzYnEfd8=
Subject key identifier:   A2:57:06:A4:98:BD:AF:52:BF:68:6C:40:53:00:6E:90:A6:7E:3B:C6
Certificate issuer:       /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Certificate serial:       0142
Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/CE879A58457411F1A79BF008B4833773.roa
Signing time:             Fri 01 May 2026 15:45:41 +0000
ROA not before:           Fri 01 May 2026 15:45:41 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     23467
IP address blocks:        2401:7c60::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
        Validity
            Not Before: May  1 15:45:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69f4caa5-9ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:58:71:9e:3e:71:f0:8d:f2:b2:8b:d2:2d:0f:
                    ce:ec:d2:f4:3a:cf:7e:53:d9:50:00:a2:db:05:af:
                    61:8d:29:16:57:4d:e2:81:ba:32:15:6d:18:d4:06:
                    99:9c:77:8d:62:7b:35:98:ce:01:82:7c:b4:9f:be:
                    bb:e1:82:9b:85:6b:75:38:07:fe:b2:d6:46:28:80:
                    d4:7c:f7:a1:72:fe:91:4e:10:47:fa:35:f8:d4:c2:
                    e9:f8:08:7c:4f:e1:54:29:95:7d:c5:67:39:b9:46:
                    f0:64:5d:3f:6c:9e:c8:30:f2:99:e5:e7:c8:87:1c:
                    01:ab:0d:db:e0:34:7e:da:62:a8:2b:bc:07:d0:cf:
                    7c:66:38:6d:91:ac:0b:37:c2:66:ec:44:a3:d7:ee:
                    2e:b5:4c:f1:46:7d:c1:87:3f:5c:1a:b7:c2:4c:19:
                    6f:9e:48:69:03:04:6b:73:67:6d:61:75:62:60:50:
                    2b:4f:f4:49:fb:67:8d:e6:11:d7:66:d4:a3:00:4c:
                    2f:e2:69:75:dc:e0:60:00:12:3a:a3:d7:fd:03:e2:
                    4e:38:5e:02:15:23:af:de:e1:d2:1f:13:05:bc:bd:
                    78:a0:b1:cd:6f:6a:cc:b0:3d:30:49:93:98:b3:87:
                    eb:33:20:31:cd:f1:a2:69:67:ec:04:42:3b:4a:0e:
                    4a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:57:06:A4:98:BD:AF:52:BF:68:6C:40:53:00:6E:90:A6:7E:3B:C6
            X509v3 Authority Key Identifier:
                keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/CE879A58457411F1A79BF008B4833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7c60::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:6a:83:85:dc:d9:06:7f:d1:e6:75:73:fe:b9:5f:d3:7f:20:
         9b:5f:7c:6e:1f:01:e0:28:65:59:cc:8b:2f:de:1b:a5:e6:42:
         f2:2d:2c:45:c8:a1:04:41:d1:3d:34:b9:07:70:10:c8:b0:37:
         41:d9:f5:73:25:8e:75:b2:a3:2e:91:ef:b8:5f:c1:fa:59:ac:
         3e:35:73:05:b4:40:bf:df:66:6f:8e:5b:77:2c:1d:9e:f3:95:
         78:1f:93:8b:bb:4e:f7:3b:2f:06:11:bf:d5:29:0e:20:5e:13:
         cc:5d:a2:d3:07:be:50:9d:1c:43:05:2e:1d:f5:ad:e0:d7:b3:
         91:85:a5:bb:3f:56:ed:ee:70:33:93:de:64:46:e2:eb:61:86:
         6a:69:3c:67:d7:4b:09:83:52:eb:fe:ca:7e:95:ad:08:93:64:
         70:b8:a0:ec:7d:e1:6d:b8:ac:6f:73:b6:0d:0f:41:44:36:41:
         49:84:f0:82:7d:75:d9:11:d1:c1:da:bf:0c:ff:9c:86:25:6e:
         5c:5c:63:c7:e7:c1:c8:d1:da:36:fe:86:ee:3b:5b:58:1a:7a:
         27:b7:45:fd:15:11:ed:8e:b0:f6:f1:70:65:0e:93:7f:6e:c7:
         b4:6f:96:d1:83:06:c3:b5:26:ee:28:66:69:f4:66:b4:84:50:
         03:2f:20:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 19:32:30 2026 by rpki-client