Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/7AE3D13C62A111ED80F96E47C4F9AE02.roa
File:                     7AE3D13C62A111ED80F96E47C4F9AE02.roa (raw, json)
Hash identifier:          XwSVfomRX7G4MnjlJ+PBSsE8vc5xoODsWcCK7AyQxFs=
Subject key identifier:   9E:9A:DF:82:25:E8:AA:E5:5C:26:2B:55:6F:3D:04:1E:B5:33:23:E9
Certificate issuer:       /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial:       0965
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/7AE3D13C62A111ED80F96E47C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:41:52 +0000
ROA not before:           Fri 02 May 2025 21:01:35 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     18041
IP address blocks:        2404:c140:2596::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 17 Mar 2026 19:53:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2405 (0x965)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
        Validity
            Not Before: May  2 21:01:35 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a45e40-1228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:50:d8:1e:45:83:fa:e6:6d:ec:d8:2c:f5:a6:
                    1f:12:b6:a0:57:08:3c:36:1d:58:14:58:32:6c:fe:
                    91:a0:24:d3:57:65:fa:42:6b:31:ab:ea:3f:d6:74:
                    da:5b:b1:8f:6f:8c:17:4a:48:b2:e3:38:ab:2f:54:
                    a2:eb:d5:78:b4:43:ce:6c:1e:e8:78:f0:22:c5:e7:
                    ba:56:88:e9:6c:2a:26:18:ce:98:2f:89:ff:be:d7:
                    08:46:e6:44:28:39:70:5d:68:0e:cb:f8:06:d4:12:
                    9e:18:51:d8:43:23:77:d4:6e:ab:64:79:1a:94:aa:
                    16:e0:39:07:a1:7e:4b:c9:a7:89:fe:54:19:01:08:
                    bf:73:65:98:78:00:a4:e1:d4:e9:19:a2:57:e4:c2:
                    e6:6c:f2:2c:97:67:e9:ea:e5:0f:a4:f2:2b:7b:c8:
                    9a:be:9a:18:9d:f0:36:e4:c9:af:75:66:bf:a5:85:
                    1b:1e:4e:89:af:d3:7d:8a:d2:4b:02:8d:d1:5c:b7:
                    26:f4:43:71:30:46:ed:34:b5:09:4b:2e:d3:83:8f:
                    d3:65:99:75:e7:e3:b1:b5:0c:e9:b1:d7:c9:80:18:
                    27:f0:7d:c6:98:2d:eb:be:82:89:c4:67:98:92:fe:
                    7b:3e:08:14:4c:06:21:ca:09:99:02:f2:a5:e1:ed:
                    2d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9A:DF:82:25:E8:AA:E5:5C:26:2B:55:6F:3D:04:1E:B5:33:23:E9
            X509v3 Authority Key Identifier:
                keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/7AE3D13C62A111ED80F96E47C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:c140:2596::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:3c:04:84:e8:70:6f:4f:26:e1:a5:ef:c0:22:d2:14:d7:16:
         1c:26:71:73:a9:00:e9:d0:29:ac:2d:d7:2f:19:df:43:e0:90:
         ac:66:45:c7:96:fb:24:ae:3d:54:79:67:ec:22:9f:45:3b:87:
         b8:2e:7f:29:a5:20:89:32:25:13:f8:c8:a3:18:ab:05:cf:4f:
         07:b8:e6:5b:39:c2:42:46:71:ee:7c:ce:3b:97:b0:5e:d4:5e:
         dc:ca:30:58:ef:60:89:d7:75:9a:d8:be:03:ca:97:5d:58:03:
         57:f5:be:ce:00:78:e4:f7:f4:bb:ab:ec:0b:93:78:0d:80:b8:
         fc:aa:03:81:5b:58:96:6a:f6:e0:b5:87:22:db:c9:6f:68:af:
         a2:3f:7d:a2:e8:41:91:ef:57:cd:59:42:b7:ec:37:3c:3e:5e:
         89:28:f5:cc:c3:33:3d:9d:cd:f7:a8:92:9b:0d:a2:4a:b4:2f:
         88:11:49:76:66:62:f4:ac:6b:ec:95:e1:cd:b5:24:ff:f9:6d:
         70:f8:25:ce:71:f6:e8:c8:f8:fc:8f:d1:69:cc:2e:d7:5e:4b:
         e2:8f:dd:11:e6:4a:ed:83:2b:71:df:91:2b:3d:80:88:32:44:
         0e:61:99:b3:07:44:15:3a:38:18:d7:93:c6:78:4c:40:72:6f:
         31:29:f7:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 10:59:41 2026 by rpki-client