Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/E5AC554A897211EEA179DA5DC4F9AE02.roa
File:                     E5AC554A897211EEA179DA5DC4F9AE02.roa (raw, json)
Hash identifier:          J/y5zeodGHbN3vp7O7AJhQI6RPkj8TQkWk7gr7sHHCA=
Subject key identifier:   05:00:E0:5B:77:03:79:F6:02:A6:05:AF:3D:DE:2E:3F:48:5B:45:D0
Certificate issuer:       /CN=A9112DB1/serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
Certificate serial:       04F4
Authority key identifier: 22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/E5AC554A897211EEA179DA5DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:07:54 +0000
ROA not before:           Fri 28 Nov 2025 22:55:26 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     136011
IP address blocks:        2400:8a20:126::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl
                          rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1268 (0x4f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112DB1, serialNumber=22EDF9EB66087FD0E9817AE736C0039D188088D5
        Validity
            Not Before: Nov 28 22:55:26 2025 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a4807a-fe27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d7:9d:06:f7:46:b5:7e:8c:18:43:6a:9c:6a:
                    5e:51:e7:9c:c5:78:81:da:0e:cb:4a:b0:81:e7:7f:
                    3e:cd:b6:5c:f6:7c:1d:7d:ac:23:d6:34:19:e9:33:
                    22:0a:46:84:78:c9:31:dd:41:95:7d:66:00:02:89:
                    a4:66:69:c4:b7:71:16:2d:3b:62:a2:01:e9:06:9c:
                    63:4a:4b:84:35:6d:c7:a9:0b:d7:eb:4d:31:78:e1:
                    dd:20:16:7a:87:94:db:1e:15:c1:92:eb:e0:4d:f4:
                    f6:e7:be:06:b1:6d:5a:6c:01:9e:dd:20:16:72:7d:
                    2e:f8:e3:44:fc:07:e2:2b:0a:92:4f:3c:4b:5a:8b:
                    8b:58:46:22:bf:16:ec:d1:d7:54:94:9a:01:57:ed:
                    33:f3:c9:41:ed:7d:e5:f1:85:77:1c:c7:73:7c:c6:
                    91:da:98:4a:68:24:27:b6:36:e4:76:56:1d:60:06:
                    4b:ec:ae:4e:ec:31:53:a5:55:0d:c6:e2:0a:b1:de:
                    fe:83:6a:2f:02:2b:e1:77:d0:c1:34:96:24:8a:f4:
                    c6:1d:18:0e:cb:ae:0f:70:ab:93:8d:a0:cd:61:53:
                    2a:f3:c1:b2:7c:2f:f2:87:96:03:09:8f:4a:09:28:
                    d2:92:e9:fa:33:74:f6:08:b4:50:b0:1d:d3:cc:83:
                    a3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:00:E0:5B:77:03:79:F6:02:A6:05:AF:3D:DE:2E:3F:48:5B:45:D0
            X509v3 Authority Key Identifier:
                keyid:22:ED:F9:EB:66:08:7F:D0:E9:81:7A:E7:36:C0:03:9D:18:80:88:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/Iu3562YIf9DpgXrnNsADnRiAiNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Iu3562YIf9DpgXrnNsADnRiAiNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112DB1/3FA6920083C011ECB54B397FC4F9AE02/E5AC554A897211EEA179DA5DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8a20:126::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:c4:cf:ea:6f:19:63:69:75:80:6e:de:24:ec:2f:ac:34:01:
         e5:c8:27:8d:47:dc:6d:94:6b:fc:73:eb:93:6a:ea:41:ea:93:
         c9:f1:5b:89:29:8f:1b:e4:87:26:b5:a8:80:0f:84:f6:da:38:
         ac:c2:df:bd:a9:9b:60:af:e4:57:2a:10:14:c0:b2:50:82:36:
         a0:32:a4:23:87:97:29:d0:81:73:53:82:99:f2:65:b8:bd:c8:
         17:53:58:0b:ec:1d:18:f3:98:43:fd:e4:1c:85:9d:55:76:27:
         9c:91:b1:36:b9:a5:fa:cf:c2:a9:29:c5:e7:56:5a:a8:6e:af:
         ed:19:1e:0c:2f:c2:3a:40:cc:1e:90:72:aa:4b:c1:ea:16:b6:
         49:f0:18:fd:f7:f2:15:4b:c3:1d:7c:22:a7:44:fa:8e:76:4b:
         e3:a0:66:7f:7d:5a:d8:9c:76:40:34:b5:32:6d:fe:df:02:40:
         78:82:a4:6f:e8:de:aa:e2:68:cc:f0:9f:96:66:24:df:44:d5:
         02:66:8e:a2:11:42:5a:56:58:90:61:3f:14:5b:8f:4e:93:ad:
         17:59:a2:b3:3d:98:9a:0f:f5:33:49:7a:22:92:95:d3:56:de:
         09:03:4a:16:a6:53:34:bb:2a:e0:2a:75:46:9b:cb:cf:b5:c7:
         68:bd:cb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:19 2026 by rpki-client