Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/748DB0E603F711F18E6BFAB3133D8C67.roa
File:                     748DB0E603F711F18E6BFAB3133D8C67.roa (raw, json)
Hash identifier:          5yXcCvusSroRDCFFg1R3qeA96L5dbXS1rgIr2rg2kIE=
Subject key identifier:   97:7C:34:9B:D0:6E:C0:8C:C6:8D:28:DA:1A:95:28:C5:94:74:32:95
Certificate issuer:       /CN=A911E74F/serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
Certificate serial:       027A
Authority key identifier: F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/748DB0E603F711F18E6BFAB3133D8C67.roa
Signing time:             Sun 01 Mar 2026 16:15:29 +0000
ROA not before:           Sat 07 Feb 2026 07:34:37 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137704
IP address blocks:        2402:c140::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl
                          rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 634 (0x27a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E74F, serialNumber=F602A6293F7E6492077E7B4D6016307ED12C1C31
        Validity
            Not Before: Feb  7 07:34:37 2026 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a46621-9425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7f:26:71:d6:30:e9:d6:c2:ee:a0:7c:64:6b:
                    21:53:8d:87:b7:c6:d4:2d:7e:aa:ee:07:33:f2:2b:
                    77:ac:38:4c:ca:82:0c:53:88:f4:80:22:0f:46:c9:
                    d7:bb:8b:a6:47:03:77:6e:e4:96:c5:5d:85:44:68:
                    ca:7f:31:cf:eb:d5:de:eb:87:c0:2d:58:95:0e:a3:
                    36:85:ae:78:f7:90:d7:80:ee:3e:c6:59:5f:f1:00:
                    38:88:04:ea:75:78:cc:cd:5f:dc:4b:ed:fc:32:eb:
                    70:46:98:80:a3:43:a7:81:d9:47:c7:1a:c2:d6:be:
                    ef:67:bb:e0:ff:70:89:32:c3:78:32:90:48:50:3b:
                    73:9f:f4:18:1c:e2:4d:81:e7:49:db:dd:c5:2c:47:
                    36:ce:54:a5:a2:c9:b6:35:43:49:2c:b9:7b:8c:73:
                    3c:fd:b7:ae:69:64:6a:65:ad:2a:7b:0b:21:f0:cf:
                    24:ef:24:e7:79:be:94:87:fb:24:0c:7c:9d:39:f5:
                    4e:41:5b:93:c8:50:fc:96:2d:83:43:0a:08:88:9c:
                    95:d3:df:9a:6e:f1:51:de:4f:de:3e:bc:bb:c8:2d:
                    51:ef:ca:6b:e1:76:c5:eb:dc:2a:c0:cb:cd:87:4a:
                    d7:e7:e0:73:01:9c:35:e1:92:04:1a:51:7a:01:f4:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7C:34:9B:D0:6E:C0:8C:C6:8D:28:DA:1A:95:28:C5:94:74:32:95
            X509v3 Authority Key Identifier:
                keyid:F6:02:A6:29:3F:7E:64:92:07:7E:7B:4D:60:16:30:7E:D1:2C:1C:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/9gKmKT9-ZJIHfntNYBYwftEsHDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9gKmKT9-ZJIHfntNYBYwftEsHDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E74F/1E157038638B11EDB103C02CC4F9AE02/748DB0E603F711F18E6BFAB3133D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:c140::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:6a:f1:aa:56:f1:30:59:38:25:e7:aa:bf:a3:99:f2:0e:46:
         7d:a2:c4:80:97:99:cb:b1:62:fc:74:51:44:99:dc:b0:a7:8a:
         ff:1e:04:ef:35:e1:34:36:fe:05:e9:e2:5b:dc:dc:14:0f:6a:
         d5:bb:5c:82:88:85:3e:14:05:ec:65:02:42:3e:9f:de:58:cd:
         c7:21:83:be:5b:30:cd:8c:44:c0:e1:64:1c:b6:8f:bb:9f:1a:
         e5:b8:ce:06:32:4f:ac:6b:02:ab:bc:8e:30:a0:83:22:32:25:
         d9:31:be:8f:89:e2:d9:df:e6:ec:d2:31:15:57:06:1e:44:68:
         18:0b:a4:48:1a:a2:e6:4b:5d:30:66:70:97:69:c4:e1:06:93:
         14:2b:43:26:78:af:c6:bd:4f:9c:05:f1:3c:13:8a:32:21:38:
         e3:22:4f:67:99:9c:b0:86:b4:4d:0f:33:9b:52:b5:4a:c7:d8:
         50:a6:7f:f7:48:75:35:7f:f8:e2:22:b5:f1:2f:ce:a8:a4:29:
         8b:a4:bc:df:c1:04:6f:77:a8:1a:84:c1:1b:21:fe:d3:8a:fb:
         85:38:ea:35:b8:53:a3:35:52:57:da:df:fe:66:fe:34:02:32:
         9c:82:e8:f2:68:48:0d:ca:e1:45:d8:90:8d:75:51:bb:bd:b3:
         4e:a1:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:35:36 2026 by rpki-client