Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/48B227F4E8D111F089B2D8B5616F56BC.roa
File:                     48B227F4E8D111F089B2D8B5616F56BC.roa (raw, json)
Hash identifier:          WkyL76qiMF9RZhUkNMb3RMO30+J1U+zYYA70lfRZGcY=
Subject key identifier:   EC:08:97:15:26:04:62:11:14:C8:A5:26:E5:54:E5:3E:E9:21:41:A0
Certificate issuer:       /CN=A911D9B2/serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63
Certificate serial:       01E0
Authority key identifier: 91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/48B227F4E8D111F089B2D8B5616F56BC.roa
Signing time:             Sun 01 Mar 2026 16:12:36 +0000
ROA not before:           Sat 03 Jan 2026 18:23:21 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     139601
IP address blocks:        2401:3a60:5400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl
                          rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:21:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 480 (0x1e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D9B2, serialNumber=91295BBB75BFAAEB9531B39B36EC7521DDE30D63
        Validity
            Not Before: Jan  3 18:23:21 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a46573-3f28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:39:18:cf:84:ab:49:f3:66:58:7d:5e:60:8b:
                    45:02:32:da:f4:6a:58:87:2d:b0:6a:5c:3e:3c:77:
                    22:a3:8b:6d:24:e0:6f:1d:54:55:95:83:d7:a7:46:
                    b0:44:5b:a9:a6:e6:81:b4:f7:7d:37:fa:cf:d1:7b:
                    f0:bd:23:e3:d5:96:d6:76:50:cd:37:69:5c:78:53:
                    31:a7:b9:fb:e6:56:14:b8:1e:c7:f8:4e:4a:93:52:
                    ed:27:99:e2:42:92:6a:e4:b2:0a:05:86:d2:06:ad:
                    69:2f:2e:24:e3:f9:be:ea:e4:bc:c9:e5:d5:74:18:
                    5e:e2:9d:54:77:d6:88:75:29:d2:83:57:a1:41:92:
                    43:53:04:01:94:df:7f:d4:a4:9b:d2:b1:fe:e4:3c:
                    22:25:54:a6:24:8f:d8:b7:65:a9:b9:86:c2:40:7d:
                    75:10:3c:30:d2:11:2c:6f:77:a1:ee:7c:62:77:29:
                    bb:e4:f6:35:6e:15:95:4a:32:95:9b:05:6b:6d:e3:
                    f3:b6:ab:37:67:c3:d2:38:5c:05:fd:69:b5:d4:60:
                    57:67:17:f5:fc:fe:eb:a9:b6:6d:53:f0:5c:38:07:
                    37:06:a4:53:7b:f8:91:94:6e:15:df:28:80:66:2b:
                    4b:fb:15:93:75:2a:cd:9e:f2:b0:25:96:bf:83:e4:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:08:97:15:26:04:62:11:14:C8:A5:26:E5:54:E5:3E:E9:21:41:A0
            X509v3 Authority Key Identifier:
                keyid:91:29:5B:BB:75:BF:AA:EB:95:31:B3:9B:36:EC:75:21:DD:E3:0D:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/kSlbu3W_quuVMbObNux1Id3jDWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kSlbu3W_quuVMbObNux1Id3jDWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D9B2/0A6F3B42915511EEA4C0F668C4F9AE02/48B227F4E8D111F089B2D8B5616F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3a60:5400::/40

    Signature Algorithm: sha256WithRSAEncryption
         4b:37:93:d1:1b:3a:7b:86:e9:a1:a0:4b:b2:de:f5:ca:a7:5e:
         5d:17:c1:f4:39:2f:74:9d:e0:20:d6:c3:df:b3:a0:83:f5:a3:
         95:47:97:9f:ce:01:ad:7c:29:85:21:23:95:59:c5:73:54:0f:
         fc:e5:e1:53:49:85:af:3f:6c:75:30:7b:c8:58:f1:f9:82:53:
         f7:44:3a:82:37:b7:49:0d:60:2e:6e:31:33:20:56:55:b4:04:
         60:9f:68:98:f0:81:8a:2b:79:97:3a:b6:de:d0:df:3d:37:fe:
         c9:9c:41:e3:e6:90:da:1e:89:0c:3b:11:eb:a4:c2:6f:7a:20:
         a9:c6:91:a5:d0:ae:8b:87:ed:11:dc:66:66:80:b0:d8:1c:a4:
         14:a9:83:35:8a:84:df:9f:53:75:84:ff:d9:0e:04:31:62:76:
         bb:23:44:76:36:3d:58:a8:bb:87:49:e7:09:42:89:8d:4c:94:
         bc:0d:cf:48:ce:cc:77:ac:64:fe:d5:c3:a9:3f:42:ec:86:6d:
         95:e4:26:57:e8:aa:2c:2b:3c:9a:77:09:ef:eb:1b:d4:34:05:
         9e:50:b3:2e:28:79:3f:3a:66:e7:6c:3a:44:7f:26:3e:ff:84:
         d3:d0:b8:99:35:0e:c2:7a:a8:45:5d:20:5b:02:f4:96:6e:b4:
         e2:6f:04:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:39 2026 by rpki-client