Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/C1B3DE082BBE11EF809E1831C4F9AE02.roa
File:                     C1B3DE082BBE11EF809E1831C4F9AE02.roa (raw, json)
Hash identifier:          pjTWlhBU9uLdZ8Pokz/j8Myvf4pRfYFG3vHjcrWT10w=
Subject key identifier:   01:A6:3B:44:CF:25:F1:54:EB:55:53:94:E7:A2:04:4C:91:F3:4C:0A
Certificate issuer:       /CN=A911035A/serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
Certificate serial:       0A89
Authority key identifier: DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/C1B3DE082BBE11EF809E1831C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:39:35 +0000
ROA not before:           Fri 30 May 2025 20:06:58 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     151952
IP address blocks:        2400:6100::/32 maxlen: 32
                          2400:6100::/33 maxlen: 33
                          2400:6100:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl
                          rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:58:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2697 (0xa89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911035A, serialNumber=DC622008A8A1AD42BE2A254943491AFAA84549A5
        Validity
            Not Before: May 30 20:06:58 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a45db6-5b9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:56:eb:19:eb:d8:52:15:0e:36:be:14:48:bd:
                    f1:d2:6a:77:ab:cd:21:5b:0f:b3:fc:d3:57:5f:53:
                    83:63:bc:e0:8a:e3:1d:19:d1:18:2b:a0:d1:a1:b2:
                    67:6f:d9:17:d3:79:52:38:db:3b:38:81:2a:53:cf:
                    48:88:fb:78:a3:b7:78:47:35:b9:19:2b:04:76:c6:
                    bc:4a:b7:81:cb:ff:3d:bb:a3:cc:e0:b3:f5:76:af:
                    7f:7e:e5:3b:62:e1:3a:a6:20:b3:13:0a:a7:50:92:
                    be:7a:4a:7f:e3:3b:fd:da:a4:bf:22:46:45:fe:f2:
                    e8:7c:18:05:65:49:c4:5d:a5:61:0f:e6:c7:d5:5e:
                    88:b6:0b:53:ac:f3:d5:16:92:95:5d:ec:b2:56:1f:
                    1f:26:47:3b:95:3a:28:f7:64:72:0e:c8:a6:b9:2c:
                    aa:58:9b:77:d3:8f:e3:f6:f1:6d:70:bf:bc:69:fb:
                    10:3b:32:53:83:b0:d8:f9:28:78:ad:82:3f:da:4d:
                    53:d7:60:5c:3e:ec:89:d7:61:81:d8:87:18:5e:e5:
                    f3:65:8b:12:72:cc:72:30:34:04:02:0d:33:65:3c:
                    27:3e:11:40:85:53:ca:78:20:29:2e:b6:9d:5b:99:
                    16:d4:93:d8:59:7e:58:d8:d7:44:13:3f:ac:34:5e:
                    17:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:A6:3B:44:CF:25:F1:54:EB:55:53:94:E7:A2:04:4C:91:F3:4C:0A
            X509v3 Authority Key Identifier:
                keyid:DC:62:20:08:A8:A1:AD:42:BE:2A:25:49:43:49:1A:FA:A8:45:49:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/3GIgCKihrUK-KiVJQ0ka-qhFSaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3GIgCKihrUK-KiVJQ0ka-qhFSaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911035A/3C609B447C6611EA8089F351C4F9AE02/C1B3DE082BBE11EF809E1831C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:6100::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:d8:1a:d2:79:6a:44:27:63:70:99:ad:d2:4d:15:31:45:c4:
         73:30:27:10:04:d0:a0:86:b3:de:c7:36:66:d3:f0:3f:44:a8:
         d8:2b:45:60:74:b4:d6:c1:55:32:aa:47:8a:e8:19:be:9e:61:
         af:b6:f1:e0:f0:ed:81:0c:60:1c:72:26:c4:75:f8:35:78:d5:
         fc:6a:61:23:b6:e3:40:51:9c:e3:d2:7e:e7:49:ab:8b:e5:9a:
         b2:c1:8b:aa:14:b0:bd:95:f3:c9:33:db:df:0c:55:aa:8d:7e:
         5f:dd:2d:08:1e:f7:c9:f1:25:7e:4a:58:1b:f1:55:b4:3b:f2:
         f8:c7:ec:4e:27:18:25:8e:99:1a:bd:2c:45:54:c8:95:a6:41:
         b9:01:4e:8c:c0:92:78:5c:19:e0:41:bb:11:7a:51:69:98:d3:
         28:bc:e7:2b:4e:b1:eb:22:72:34:22:71:08:52:8b:b9:a5:5e:
         9d:b9:a5:f9:6f:76:3a:13:a0:4d:fa:27:66:bc:71:70:d1:ed:
         19:50:95:4b:78:65:71:64:73:85:3b:01:a3:90:34:69:15:e8:
         62:5d:4e:e8:f8:f8:c9:da:3c:d1:15:d6:88:47:a0:37:bc:a6:
         93:bf:c7:70:4d:39:5f:37:9f:8e:ce:f3:f6:0b:28:86:49:b2:
         97:8a:6b:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:36 2026 by rpki-client