Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/BE713C72E06211F0BC8E94E0746F56BC.roa
File:                     BE713C72E06211F0BC8E94E0746F56BC.roa (raw, json)
Hash identifier:          EFjR0asu4wd/yeWWK7gzSOj/T05MOi3CBtWkuJ6nqxA=
Subject key identifier:   5F:50:3C:35:00:0E:F0:70:F0:CD:8E:BB:F7:99:80:9D:57:63:48:26
Certificate issuer:       /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Certificate serial:       E1
Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/BE713C72E06211F0BC8E94E0746F56BC.roa
Signing time:             Sun 01 Mar 2026 17:16:16 +0000
ROA not before:           Wed 24 Dec 2025 00:51:55 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     13335
IP address blocks:        2401:c2e0:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
                          rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:11:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 225 (0xe1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
        Validity
            Not Before: Dec 24 00:51:55 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47460-8a78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:7b:44:7d:07:f5:90:49:a0:39:b9:17:c9:
                    e6:7c:ac:31:36:29:28:de:a5:82:ce:27:92:24:44:
                    46:5d:73:55:8e:5c:48:1d:c5:a5:9b:e6:4d:19:ee:
                    51:4f:72:fa:b7:ed:90:1e:b3:e4:ab:69:7f:78:07:
                    d0:26:d4:85:19:c5:e3:aa:6b:54:5b:f6:8c:9e:73:
                    6f:58:14:d0:d9:ff:ee:b3:ab:ea:41:98:f3:ab:aa:
                    f7:a3:c9:11:62:be:da:22:07:88:f0:3d:d7:85:59:
                    a5:e5:b3:f9:ef:0a:c0:82:78:2b:11:b8:d1:d0:9d:
                    fe:4c:35:49:ce:61:ec:50:94:52:e8:6f:13:6d:22:
                    80:69:12:b4:72:94:8e:da:1c:a1:2a:a8:81:75:14:
                    49:bb:fd:5f:ec:bb:3b:2a:e8:a8:2e:07:5b:23:b0:
                    67:67:cb:b8:88:df:37:63:e5:25:68:47:d0:be:2a:
                    03:68:8f:c0:0b:71:f6:26:01:d0:eb:23:49:90:c4:
                    fd:d6:15:3e:56:9a:64:c4:63:56:91:7d:75:ef:c7:
                    92:4d:fd:47:ad:c8:4b:1f:0d:c2:0a:39:e1:f1:1e:
                    33:bf:9a:44:a6:26:d7:77:55:df:41:1f:ee:f3:54:
                    7c:89:d4:d2:ba:f3:34:54:27:b4:b6:22:5a:45:e4:
                    1b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:50:3C:35:00:0E:F0:70:F0:CD:8E:BB:F7:99:80:9D:57:63:48:26
            X509v3 Authority Key Identifier:
                keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/BE713C72E06211F0BC8E94E0746F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c2e0:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:be:89:fb:1f:d4:9c:7e:72:b0:de:7e:7f:67:45:1b:5a:98:
         a7:0a:09:4f:52:81:8d:37:84:77:77:19:64:9c:ae:1b:05:bd:
         0b:0d:42:36:d6:a2:1b:53:1c:f7:41:13:ac:c7:95:a7:86:62:
         10:bb:60:89:12:cf:84:7d:35:cd:0c:35:1c:50:9b:31:64:dc:
         3d:8a:03:c7:b6:01:9c:df:6d:15:ec:bc:a0:7a:f4:c5:ae:d3:
         94:a9:3d:e5:28:23:c9:b7:b3:75:d9:a2:39:9e:4f:a1:53:5b:
         41:5a:c2:49:f0:bd:e9:a4:47:f9:70:14:da:3a:bc:d7:21:14:
         1d:0f:fa:a1:ca:cc:14:fc:95:c2:59:06:f4:10:fc:d1:73:9c:
         f2:2f:c1:92:c8:22:80:5a:8a:05:36:a5:ca:ed:41:31:8c:56:
         00:1d:0b:7a:86:05:51:f1:83:f8:e0:dc:00:7c:49:86:b0:00:
         2f:ea:ae:19:32:29:7e:03:db:d1:87:cc:e2:2f:51:e3:95:54:
         ba:5a:c3:1a:f0:ee:0c:40:72:c3:dc:7b:e4:b0:0f:3a:7e:b1:
         95:cb:fa:6f:5a:0a:9b:15:a9:a2:ad:30:87:49:c6:ad:3c:ed:
         9d:8b:de:52:71:e6:3b:bd:0c:8c:d9:61:9c:70:b0:f3:0a:f1:
         64:4d:50:e2
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzA1OUUxMTAvBgNVBAUTKDcyNThERkQ1NkZBNUE0ODdGMEQ0QUNDNjlDQURCMUJF
QUMyRjk3MEUwHhcNMjUxMjI0MDA1MTU1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzQ2MC04YTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv5d7RH0H9ZBJoDm5F8nmfKwxNiko3qWCzieSJERGXXNVjlxIHcWlm+ZNGe5R
T3L6t+2QHrPkq2l/eAfQJtSFGcXjqmtUW/aMnnNvWBTQ2f/us6vqQZjzq6r3o8kR
Yr7aIgeI8D3XhVml5bP57wrAgngrEbjR0J3+TDVJzmHsUJRS6G8TbSKAaRK0cpSO
2hyhKqiBdRRJu/1f7Ls7KuioLgdbI7BnZ8u4iN83Y+UlaEfQvioDaI/AC3H2JgHQ
6yNJkMT91hU+VppkxGNWkX1178eSTf1HrchLHw3CCjnh8R4zv5pEpibXd1XfQR/u
81R8idTSuvM0VCe0tiJaReQbVQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFF9QPDUA
DvBw8M2Ou/eZgJ1XY0gmMB8GA1UdIwQYMBaAFHJY39VvpaSH8NSsxpytsb6sL5cO
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDU5RS81NTY2NkI1NkQ5
RDAxMUVGOThCODVFNkRDNEY5QUUwMi9jbGpmMVctbHBJZncxS3pHbksyeHZxd3Zs
dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NsamYxVy1scElmdzFLekduSzJ4dnF3dmx3NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
MzA1OUUvNTU2NjZCNTZEOUQwMTFFRjk4Qjg1RTZEQzRGOUFFMDIvQkU3MTNDNzJF
MDYyMTFGMEJDOEU5NEUwNzQ2RjU2QkMucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAHC4IAAMA0GCSqGSIb3DQEBCwUAA4IBAQA4von7H9ScfnKw3n5/
Z0UbWpinCglPUoGNN4R3dxlknK4bBb0LDUI21qIbUxz3QROsx5WnhmIQu2CJEs+E
fTXNDDUcUJsxZNw9igPHtgGc320V7LygevTFrtOUqT3lKCPJt7N12aI5nk+hU1tB
WsJJ8L3ppEf5cBTaOrzXIRQdD/qhyswU/JXCWQb0EPzRc5zyL8GSyCKAWooFNqXK
7UExjFYAHQt6hgVR8YP44NwAfEmGsAAv6q4ZMil+A9vRh8ziL1HjlVS6WsMa8O4M
QHLD3HvksA86frGVy/pvWgqbFamirTCHScatPO2di95SceY7vQyM2WGccLDzCvFk
TVDi
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:05:50 2026 by rpki-client