Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/A8689054340411E9A22CD05CC4F9AE02.roa
File:                     A8689054340411E9A22CD05CC4F9AE02.roa (raw, json)
Hash identifier:          AZihbaN8E44U2FxVABNpgB/Zu9iqvuTBqyKY3ZPJiVw=
Subject key identifier:   DD:D8:4B:5B:73:A7:99:EF:6E:2D:56:E6:82:9E:0B:25:F5:2C:A7:43
Certificate issuer:       /CN=A9111318/serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
Certificate serial:       362A
Authority key identifier: 80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/A8689054340411E9A22CD05CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:59:43 +0000
ROA not before:           Sat 14 Jun 2025 14:50:49 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     45787
IP address blocks:        2404:138:1301::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl
                          rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:19:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13866 (0x362a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111318, serialNumber=806ABFF463594CAA30DE70A311AE2F849189BC64
        Validity
            Not Before: Jun 14 14:50:49 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a47e8f-1e86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ae:8f:53:1c:40:57:6b:c6:80:50:64:54:84:
                    68:a4:3f:5e:b3:d3:f5:87:6b:ca:b5:1b:af:be:74:
                    8f:ad:5c:6d:a3:f3:b6:f6:6e:d4:83:14:0a:d7:8b:
                    05:05:cc:78:4d:d7:7c:80:9c:20:32:e7:4e:f3:cb:
                    d6:58:5a:1c:f1:5e:5f:c3:96:70:51:5b:01:80:88:
                    6c:a9:18:67:47:8f:05:b2:ca:f7:44:63:80:f8:eb:
                    15:ec:77:ad:de:2d:f7:45:75:37:11:cd:70:7c:3a:
                    51:c4:c4:33:43:31:ce:13:67:0c:13:72:f5:13:7c:
                    98:8a:52:0e:87:35:7b:4b:c1:12:6f:82:6d:37:75:
                    13:cb:ff:63:da:32:17:1c:49:e3:e9:4c:c0:2f:6d:
                    30:33:71:ca:3d:e3:fa:3e:bc:5c:e2:00:1c:00:e4:
                    ea:ad:83:d8:6e:1e:eb:5e:30:22:5c:3d:20:be:21:
                    d5:de:fa:41:75:f6:88:f2:80:e3:56:8c:01:db:7d:
                    41:18:2b:fe:c3:dd:f3:92:0e:5d:23:d3:94:5a:61:
                    09:68:a3:3f:57:42:4d:82:46:ea:56:8b:fe:2b:66:
                    bd:c3:e7:1b:37:f4:38:ef:25:db:df:ce:9a:90:58:
                    35:13:d6:e4:ce:fc:30:1f:1d:e1:0e:69:2c:5f:84:
                    cf:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D8:4B:5B:73:A7:99:EF:6E:2D:56:E6:82:9E:0B:25:F5:2C:A7:43
            X509v3 Authority Key Identifier:
                keyid:80:6A:BF:F4:63:59:4C:AA:30:DE:70:A3:11:AE:2F:84:91:89:BC:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gGq_9GNZTKow3nCjEa4vhJGJvGQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111318/DC7451F21D9111E298E746F408B02CD2/A8689054340411E9A22CD05CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:138:1301::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:0c:dc:44:72:ac:8d:57:9d:cc:02:86:29:e3:62:c8:9f:88:
         b5:b6:99:9f:96:d7:d7:56:3a:26:74:ae:a8:d7:d6:53:fc:ce:
         b4:e0:1e:3d:7e:cb:f5:fd:40:b5:00:94:bb:34:01:dd:d8:b7:
         20:23:7b:19:47:37:2c:44:30:44:92:0b:3d:ba:fe:01:dc:24:
         f5:50:dc:a3:dd:24:ed:15:af:30:69:9c:00:7c:fb:df:eb:ca:
         04:b4:5e:a2:ac:91:df:ff:d1:2c:37:29:b3:b1:2d:60:dc:7a:
         cb:3a:25:b4:af:34:9b:16:71:ee:e3:92:63:0d:74:ae:a4:bf:
         7d:8c:fd:c0:99:fb:8e:81:6f:ca:c2:2e:3f:68:27:b9:43:a8:
         93:4b:61:ad:86:2e:0e:6f:23:11:1b:96:f3:ae:d4:e3:e7:99:
         31:e4:99:24:30:9f:a5:68:d9:9b:a9:a6:1c:3f:8e:bd:94:d4:
         8a:5c:55:f8:4b:55:46:ad:19:3e:7a:44:ff:13:1c:44:32:25:
         a0:e0:02:89:06:8c:c2:1c:c7:5c:72:c6:d2:85:eb:d4:e5:5a:
         e0:92:ab:9d:96:5f:3e:22:29:c8:de:4c:f3:4a:2d:1c:dc:3d:
         c1:7c:3c:fb:f2:c8:ee:2d:21:94:bc:a2:eb:e6:d6:7d:e0:40:
         59:01:11:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:30:06 2026 by rpki-client