Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/C3261EF826DF11ED94E18118C4F9AE02.roa
File:                     C3261EF826DF11ED94E18118C4F9AE02.roa (raw, json)
Hash identifier:          hTS0InVz4oILVGeujjlkHVbEAsw1NZRZHIk3vW8oIWw=
Subject key identifier:   E3:29:55:44:86:5A:FF:F7:B6:A9:6D:28:04:47:62:E9:1D:64:46:C2
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       04DE
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/C3261EF826DF11ED94E18118C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 00:32:39 +0000
ROA not before:           Tue 03 Mar 2026 00:32:39 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     209642
IP address blocks:        2400:54a0:2100::/44 maxlen: 48
                          2400:54a0:2130::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 23:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1246 (0x4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: Mar  3 00:32:39 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a62c27-5b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:06:ce:7b:da:d7:c2:ca:6b:10:86:75:b9:f9:
                    a5:2e:50:7d:09:85:65:e3:95:d8:a6:29:ba:bd:13:
                    dd:58:f6:65:1a:93:58:26:23:eb:6d:c8:54:96:59:
                    95:7c:12:f0:2b:3b:4b:13:e1:5f:07:23:f6:f7:4d:
                    83:75:7d:86:56:98:20:69:f6:89:de:08:a2:aa:b7:
                    ef:e5:3c:2d:23:8f:2a:6b:8b:3e:d5:63:3a:c6:b6:
                    9c:11:44:18:61:2a:94:20:37:58:2a:97:1d:8c:85:
                    a5:a4:00:df:a8:48:23:cd:93:95:4e:32:ad:ed:d7:
                    f5:98:66:02:e8:14:ac:cc:69:15:10:fa:28:91:42:
                    a4:96:9d:34:0a:a5:cb:e7:f8:9a:13:05:28:da:93:
                    d1:7f:e8:e7:f6:4b:65:eb:f2:34:12:f7:68:6e:30:
                    df:08:ca:18:fe:c7:7a:d6:9a:83:0d:06:88:ca:62:
                    2c:58:35:c6:3c:87:61:af:f0:31:85:e7:09:05:4b:
                    ec:9b:59:99:1d:35:f6:0d:5e:34:60:bf:ea:36:39:
                    bf:df:ca:09:2d:fb:f1:db:73:a3:dc:5c:38:a1:8d:
                    e6:a3:cf:81:97:93:34:f5:f5:29:26:f3:85:d7:90:
                    e9:6b:4d:2a:08:2c:be:4a:25:7a:ae:99:00:7a:52:
                    f1:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:29:55:44:86:5A:FF:F7:B6:A9:6D:28:04:47:62:E9:1D:64:46:C2
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/C3261EF826DF11ED94E18118C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:54a0:2100::/44
                  2400:54a0:2130::/44

    Signature Algorithm: sha256WithRSAEncryption
         5d:36:f0:be:15:98:97:83:13:ba:a8:04:37:e2:d1:2d:d7:3d:
         b7:5a:e5:c2:3c:4d:34:52:2a:d6:18:ac:9a:6f:a3:0a:f2:16:
         38:2a:ae:04:e4:ab:07:0e:a6:38:8f:50:e4:12:54:23:1b:5f:
         bc:bc:90:17:b1:64:42:06:ed:b7:ec:f1:02:2e:ed:c1:ab:10:
         b9:28:bc:f4:c8:0a:ed:ea:f1:73:4e:54:3f:a5:b6:bd:2e:ad:
         37:cb:8b:6b:ca:ab:3b:f7:57:16:d8:f0:5c:75:8e:b4:25:26:
         af:5c:2d:7c:1e:6a:91:06:66:10:26:39:9b:54:4d:53:61:da:
         7b:a5:94:ef:d7:65:89:54:c4:37:35:09:0e:b8:a4:f1:89:e5:
         c6:ff:70:69:39:b0:40:37:ad:e6:46:47:e8:5c:be:6f:8d:63:
         de:bb:d3:16:6f:a5:2f:94:43:c7:ce:f0:37:df:d9:19:4c:07:
         1a:12:62:30:1a:c3:4a:5d:ab:ce:48:dd:e8:b5:0e:d8:08:92:
         8c:0c:31:9f:f4:55:51:8f:14:d0:76:6a:e8:38:11:b0:3e:eb:
         ba:aa:8c:1c:11:47:35:76:db:c8:68:58:20:02:ea:56:ed:ff:
         06:59:54:63:d3:fc:41:5f:36:63:55:bc:d0:3f:21:38:46:ed:
         0c:d5:3d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:39:42 2026 by rpki-client