Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa
File:                     DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa (raw, json)
Hash identifier:          wHIEc0JT3olfj86i79xTv/WCaO/VfEKTQ7Om7UWFzE4=
Subject key identifier:   0F:6B:DF:AD:1E:86:E8:65:24:8F:19:A8:1D:A7:03:96:8A:63:5E:B7
Certificate issuer:       /CN=A9127FC2/serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
Certificate serial:       0443
Authority key identifier: 73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:10:30 +0000
ROA not before:           Wed 26 Nov 2025 04:10:38 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     150318
IP address blocks:        2401:1740:c01::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl
                          rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1091 (0x443)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9127FC2, serialNumber=73BA21BE36DDDFD58690116D6EEC7BDC7EFEFB28
        Validity
            Not Before: Nov 26 04:10:38 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a464f5-6720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f0:8e:cd:c5:de:80:70:eb:64:ce:44:a5:aa:
                    d3:df:04:59:90:3d:61:9f:5b:bb:5e:fc:03:ef:21:
                    8d:64:10:7a:b9:89:62:b5:e6:42:8d:53:df:65:18:
                    3c:14:66:50:2d:80:77:da:3f:27:3a:98:b2:9b:75:
                    0e:86:19:8a:e9:9f:47:18:d5:6e:82:3b:32:b0:60:
                    43:f2:91:9a:c1:4f:69:58:96:4d:10:97:51:74:ea:
                    83:7c:88:f1:3d:8b:24:5c:e2:83:61:e4:2a:b2:f7:
                    6d:6f:17:ec:c9:d4:6a:4c:aa:e1:cf:b2:42:25:38:
                    9d:66:90:d8:ab:af:f7:16:a8:89:d8:89:32:00:e9:
                    b7:82:b9:c5:e7:ab:61:28:87:b2:13:72:3c:85:c4:
                    06:54:f5:70:d4:4e:4b:d7:b5:1a:9e:7a:24:f8:98:
                    98:f0:06:ef:21:d5:7e:f0:8f:f1:db:81:70:25:b1:
                    05:cf:8b:d5:2b:2d:50:59:29:91:1c:21:04:77:88:
                    c4:3f:e0:b9:9a:35:89:98:4c:b6:d9:fe:20:df:be:
                    38:c3:a2:c3:4f:e7:e3:42:e7:fe:74:6e:a1:10:36:
                    9e:79:67:99:3d:d2:c8:ea:a6:f2:51:54:2c:2e:9a:
                    95:b6:c9:a4:69:4a:59:d7:75:34:c2:89:9e:6a:31:
                    31:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6B:DF:AD:1E:86:E8:65:24:8F:19:A8:1D:A7:03:96:8A:63:5E:B7
            X509v3 Authority Key Identifier:
                keyid:73:BA:21:BE:36:DD:DF:D5:86:90:11:6D:6E:EC:7B:DC:7E:FE:FB:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/c7ohvjbd39WGkBFtbux73H7--yg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c7ohvjbd39WGkBFtbux73H7--yg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9127FC2/5E30BF70BBA611ECBAF43156C4F9AE02/DD152F4ECA7D11F0AD0F2B30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:1740:c01::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:7a:87:23:24:b6:13:29:32:06:b3:1e:35:37:e1:0e:b9:98:
         a9:52:e3:5f:3b:5a:ad:61:f6:11:f6:b6:59:a5:52:d1:32:71:
         cb:36:57:b5:f2:bb:0c:dd:76:02:73:db:8b:a1:b7:a3:f0:af:
         f6:7c:96:c2:92:9c:01:c8:2f:4f:8e:e1:87:17:a4:25:dc:e4:
         22:9f:f1:d2:ca:ff:3b:ee:4d:9e:a0:35:08:ab:fc:7e:83:04:
         d9:1d:a9:cc:eb:ca:f8:38:7e:5a:d4:b5:8e:8b:a3:09:7b:e2:
         c4:b2:0b:61:ae:61:46:86:6b:7c:1e:e1:fa:41:52:69:83:59:
         5a:58:5f:a1:7c:1f:0b:64:2c:9a:59:fa:dd:b1:b3:b0:e7:ba:
         4b:76:6b:37:ff:6b:fc:bf:ba:11:89:d4:f8:18:8e:4b:6e:cd:
         db:6b:59:f7:7e:42:19:ca:4c:ca:aa:3e:ec:89:c4:5c:2a:2c:
         79:f1:b3:b8:59:60:f4:74:dc:58:e9:0b:4b:ab:29:e7:49:34:
         b4:63:51:aa:cb:cb:5a:22:6d:ee:c6:2e:26:4f:95:47:16:11:
         e5:ca:ce:8f:27:83:1a:25:c2:35:83:d0:6c:60:88:2f:ec:6d:
         57:45:4f:dd:f4:ea:70:69:b1:18:35:37:11:11:d4:8b:fb:61:
         f9:a5:0a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:33 2026 by rpki-client