Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/6A5F29CED8A511F0B3F453F094D3641D.roa
File:                     6A5F29CED8A511F0B3F453F094D3641D.roa (raw, json)
Hash identifier:          x8Gadu5mzZc6qu26lRbm5uUV5MWN8eTQq1KShULlErA=
Subject key identifier:   D5:AF:68:F6:33:55:51:EB:E3:C7:F8:21:E8:DE:59:04:B2:8F:88:37
Certificate issuer:       /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Certificate serial:       0138
Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/6A5F29CED8A511F0B3F453F094D3641D.roa
Signing time:             Sun 01 Mar 2026 11:07:32 +0000
ROA not before:           Sun 14 Dec 2025 04:29:01 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152698
IP address blocks:        2001:df4:13c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
                          rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:18:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
        Validity
            Not Before: Dec 14 04:29:01 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a41df4-2140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:1b:db:60:e0:98:7e:bb:97:95:da:ef:aa:bc:
                    31:77:f7:c3:90:96:92:fd:6f:98:15:d4:b2:c7:4f:
                    01:93:7d:8c:b6:d1:8f:c2:2e:cf:80:47:64:68:fa:
                    ad:59:fd:f9:49:c7:35:a4:20:5a:f8:77:ca:d6:2f:
                    39:7c:da:59:cd:ca:d9:fd:3e:fe:6d:89:4d:10:bf:
                    6f:05:f4:b6:10:78:5b:1a:1b:40:7e:28:b2:b6:e2:
                    98:d2:8d:ae:91:77:21:d2:6f:9b:bd:e3:ca:c3:0e:
                    ee:3c:4b:49:23:ee:54:fc:69:70:e8:7b:5d:14:94:
                    d1:99:e7:6d:11:30:68:1e:10:1b:30:9b:1e:cd:64:
                    02:f1:a9:d9:81:2b:9e:de:8e:40:35:b5:fc:0f:14:
                    46:de:26:8c:c1:c6:9d:27:e4:5c:1e:0e:00:b6:95:
                    25:da:c4:d3:52:ec:5b:1f:2b:7e:75:b7:f2:a3:47:
                    4a:7a:91:ca:a8:4d:a7:e6:35:bc:5d:ab:1a:86:9f:
                    b4:9a:fe:bd:48:25:1f:f9:d9:73:e6:37:1c:e4:53:
                    4d:35:d1:b7:5f:51:f1:f4:5f:f4:80:63:93:be:75:
                    57:30:b1:6c:56:21:ca:54:02:f0:5d:72:46:9f:45:
                    f1:99:5f:09:ec:f1:31:99:dc:1b:b3:c8:19:14:f4:
                    d0:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:AF:68:F6:33:55:51:EB:E3:C7:F8:21:E8:DE:59:04:B2:8F:88:37
            X509v3 Authority Key Identifier:
                keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/6A5F29CED8A511F0B3F453F094D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:13c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:40:20:59:0f:77:60:64:39:ec:1a:db:b6:33:32:5c:43:69:
         84:c2:ae:55:0e:2c:ea:26:c6:61:f8:2b:91:41:1a:b8:4d:a8:
         d8:89:cd:b6:5e:fc:7e:16:52:1e:18:05:ee:8c:87:4e:94:de:
         67:81:29:9e:8d:da:57:19:46:8a:7c:8d:7c:2b:06:8b:52:c0:
         f6:6b:ef:b0:03:5b:88:74:3c:38:b2:c6:bb:44:f3:57:35:c4:
         a5:83:56:7d:fc:fa:73:f9:e9:c6:1e:c8:4d:68:28:ca:4f:41:
         98:6e:95:6e:06:02:e6:b2:51:24:44:99:b7:4c:59:57:5d:44:
         bb:c2:27:6e:8a:3d:28:d7:33:14:41:d3:d8:7d:1a:9f:45:1e:
         e1:5b:80:50:68:fa:22:5d:21:5f:69:a3:5f:3a:4b:27:7d:47:
         b6:27:73:0a:50:9f:89:d6:69:fa:86:1e:cd:2e:c0:e1:01:b0:
         cb:3a:72:eb:4c:21:b5:0a:ad:3f:d1:c3:d1:08:30:64:87:dc:
         2f:13:9a:97:10:3d:b1:01:de:72:27:fa:25:2c:61:85:10:f6:
         e1:3a:1c:6d:9f:08:5c:d2:d5:8d:16:f4:60:d9:3c:a5:2b:57:
         05:70:fc:2b:37:dd:40:29:72:9b:0e:f2:c6:fb:3c:9a:33:95:
         09:e0:6e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:44:03 2026 by rpki-client