Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/5E34D78AB13A11F08347B23DC4F9AE02.roa
File:                     5E34D78AB13A11F08347B23DC4F9AE02.roa (raw, json)
Hash identifier:          5CPAW2mxN8hPP0I4PVFiFH6nD43U1ctt8WCYmCDxk4s=
Subject key identifier:   6C:4A:47:46:06:9C:47:27:81:3B:B0:40:9B:C2:77:5B:F7:BE:56:A9
Certificate issuer:       /CN=A911F753/serialNumber=47535D03475F0059C61CE28858F5C88676E3C3FE
Certificate serial:       76
Authority key identifier: 47:53:5D:03:47:5F:00:59:C6:1C:E2:88:58:F5:C8:86:76:E3:C3:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/5E34D78AB13A11F08347B23DC4F9AE02.roa
Signing time:             Sat 31 Jan 2026 06:24:27 +0000
ROA not before:           Sat 31 Jan 2026 06:24:27 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154317
IP address blocks:        2001:df5:d440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl
                          rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 07:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911F753, serialNumber=47535D03475F0059C61CE28858F5C88676E3C3FE
        Validity
            Not Before: Jan 31 06:24:27 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=697da01b-fef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1a:1a:ec:28:79:1f:2c:18:e3:8b:43:f2:92:
                    d3:64:b7:9d:64:bd:84:ca:3f:7c:1b:5a:d7:1d:90:
                    c5:e0:5a:ec:25:e6:69:8f:c2:00:e0:0d:ce:81:73:
                    ee:8c:e3:9a:b6:a2:fe:bc:80:1e:8f:34:1c:d8:f1:
                    e6:28:0f:7f:33:bf:3e:b8:b2:f0:c4:68:11:0a:ae:
                    8c:03:a9:5e:0d:c1:6b:da:9d:e1:a1:56:67:08:94:
                    67:5f:58:a2:f3:2d:0d:30:e7:17:e9:e8:7e:28:6d:
                    6e:26:1e:d3:eb:53:da:f9:02:d3:6d:58:88:7c:b6:
                    c9:0f:28:90:16:ab:fb:fc:07:19:e9:5f:86:e6:c5:
                    96:a3:13:cf:a3:a8:85:7e:ac:f9:ca:e8:f3:23:36:
                    e5:54:ab:6c:be:7a:36:f5:dd:76:1a:9e:dc:6c:e2:
                    c4:53:5b:7b:c6:29:9f:46:5d:3f:a3:3d:0f:76:52:
                    f0:88:fa:d0:1d:65:2e:c9:42:5e:71:b5:b1:a0:25:
                    0b:02:f7:4d:ce:ef:d4:17:66:d3:63:34:3e:42:3c:
                    68:5e:6a:e5:44:d5:a0:6c:91:e9:e6:4b:5a:d1:a4:
                    bd:d6:76:e2:1b:1e:01:d4:21:52:d0:c6:06:13:08:
                    96:0d:82:c8:56:12:dc:fc:ca:90:90:bc:28:05:46:
                    44:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4A:47:46:06:9C:47:27:81:3B:B0:40:9B:C2:77:5B:F7:BE:56:A9
            X509v3 Authority Key Identifier:
                keyid:47:53:5D:03:47:5F:00:59:C6:1C:E2:88:58:F5:C8:86:76:E3:C3:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/R1NdA0dfAFnGHOKIWPXIhnbjw_4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1NdA0dfAFnGHOKIWPXIhnbjw_4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/B3F9B56A589C11F09CEAE246C4F9AE02/5E34D78AB13A11F08347B23DC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:d440::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:69:c9:e0:4e:2e:c3:ed:41:06:e0:59:19:1b:60:13:81:2e:
         b7:94:8a:04:71:a0:82:ae:3b:eb:a7:d3:58:49:ef:27:16:69:
         24:9e:35:0f:0a:b5:9c:be:1c:21:88:7e:4a:4f:e6:45:dd:06:
         55:73:7b:0e:4c:f2:17:d8:4f:74:8d:68:01:e8:80:73:4c:5d:
         9f:ca:52:1e:7b:71:a5:59:92:2f:07:d1:99:af:45:18:35:5d:
         77:be:27:04:a5:2a:e9:0a:da:d1:b6:7a:62:3a:5c:51:92:fe:
         23:6f:d7:a6:98:a1:9f:11:f2:0a:a3:46:69:69:9b:72:a1:eb:
         1f:c6:c5:e0:a9:00:be:49:fc:56:45:3d:aa:1d:31:36:c9:ff:
         a1:b0:b1:78:74:a6:9e:e0:16:10:0a:4d:24:fd:ba:fc:92:bf:
         ea:78:da:17:f1:ed:c2:a7:9b:76:ed:5a:25:be:c0:5f:f7:3e:
         69:d5:e9:3a:a8:a1:c4:4e:42:8c:50:1d:17:fd:7c:87:38:ba:
         47:e2:16:fe:dc:43:61:13:f7:ce:68:9b:b3:2e:08:df:88:6b:
         df:1c:bd:6c:60:58:9a:22:07:e5:97:e3:44:65:d0:33:e7:26:
         84:11:62:21:99:a1:c3:66:ae:88:6b:7d:94:e6:88:a2:78:c1:
         7b:d7:99:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:40:52 2026 by rpki-client