Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/41372C94C1A311EC8986B978C4F9AE02.roa
File:                     41372C94C1A311EC8986B978C4F9AE02.roa (raw, json)
Hash identifier:          zj0Itfj/mWsyYF36GyZuIWt/kUY9pqIMFEUW5d9yYaI=
Subject key identifier:   EE:D5:55:06:53:0C:BC:6F:15:FB:54:E8:7A:F1:9A:54:7D:EC:52:AF
Certificate issuer:       /CN=A9137242/serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
Certificate serial:       083C
Authority key identifier: EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/41372C94C1A311EC8986B978C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:07:33 +0000
ROA not before:           Sun 14 Sep 2025 18:27:51 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     139192
IP address blocks:        2001:df0:8080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl
                          rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:30:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2108 (0x83c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137242, serialNumber=EAB24A90C6D046CD83FB5EF4A3C598E4EA9A168C
        Validity
            Not Before: Sep 14 18:27:51 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a48e75-2846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:13:ea:ec:fd:c8:a8:bd:93:05:7f:32:63:e8:
                    ef:2c:ff:77:6c:44:ac:8d:c2:78:93:67:95:2c:1e:
                    d0:58:19:7e:34:f0:b1:d3:c2:27:08:3d:48:06:1b:
                    3f:05:3c:28:e6:54:fc:da:2d:55:fe:3e:dc:19:2f:
                    74:71:a9:20:f5:61:cf:55:a0:46:25:68:21:ab:e4:
                    ff:7b:b4:7d:96:88:5a:38:52:2e:d7:c0:37:3c:d6:
                    e5:01:2d:4f:37:e7:4b:c3:23:1c:87:d3:1c:30:25:
                    6f:8e:35:c9:92:8c:cc:4d:51:bd:22:b8:a6:69:c9:
                    cf:59:cb:7c:64:02:88:1d:e9:4d:7b:8e:b2:23:ae:
                    e6:cd:b0:b9:13:fb:c8:1f:3f:8f:10:31:ff:37:8e:
                    b1:a6:03:89:10:c8:ef:43:ea:ed:e5:5a:98:16:61:
                    8c:5d:40:4e:70:41:a1:dc:e1:b7:e7:36:f6:40:95:
                    cf:10:5f:70:7e:8a:0b:a6:3c:5c:12:df:06:6c:11:
                    72:19:c3:8c:15:28:57:c6:cb:0e:64:00:39:62:2c:
                    ee:9d:6f:5e:4f:19:4c:93:7d:ef:11:81:4b:79:d4:
                    32:55:7c:96:a4:cb:30:4e:a6:b8:42:4f:a1:8e:1e:
                    de:a5:f6:35:b7:67:bf:0c:dd:29:5f:5c:2a:f6:e7:
                    0f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D5:55:06:53:0C:BC:6F:15:FB:54:E8:7A:F1:9A:54:7D:EC:52:AF
            X509v3 Authority Key Identifier:
                keyid:EA:B2:4A:90:C6:D0:46:CD:83:FB:5E:F4:A3:C5:98:E4:EA:9A:16:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/6rJKkMbQRs2D-170o8WY5OqaFow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6rJKkMbQRs2D-170o8WY5OqaFow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137242/0B608796CA3411E9BC769055C4F9AE02/41372C94C1A311EC8986B978C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:8080::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:1b:5e:43:24:46:f2:7e:d0:a2:68:ea:5d:20:c0:3a:9e:b0:
         3d:43:ac:5c:ba:64:39:55:0b:c3:b5:75:c8:70:fc:6d:e8:31:
         7d:b7:a4:69:29:10:18:45:fb:78:05:1a:cb:8a:c5:da:01:19:
         43:81:97:5f:6c:0e:70:f7:de:f5:00:fa:f2:f3:7f:c3:16:cd:
         9b:88:0f:b6:dc:15:20:33:dc:e4:e1:1a:6f:cf:2d:64:85:cf:
         9e:6c:44:79:73:2c:c9:85:54:65:4d:40:84:b0:ff:78:20:6d:
         8c:d9:5b:6d:ba:62:1c:c4:3c:de:e5:28:4c:e4:2b:12:e5:7a:
         b1:ae:ce:94:21:98:b0:52:19:ed:14:14:ec:fb:3c:6c:07:75:
         5a:78:5c:c3:f2:00:68:70:91:c7:03:43:45:eb:56:eb:a0:4e:
         79:5b:83:4c:b9:d3:1d:0e:e4:d1:8e:d6:c3:70:14:2a:0f:d7:
         39:06:55:da:27:86:b6:c5:2e:8d:6f:11:44:43:15:6c:c2:85:
         ee:94:a2:17:ac:73:1a:3c:2c:5e:cc:15:12:23:c5:b0:5e:2e:
         6c:34:2d:cb:de:73:d0:af:fa:21:ce:89:52:3e:c0:42:de:59:
         73:88:15:47:31:ca:71:d6:1b:86:23:a5:46:4c:8c:58:30:0a:
         f6:bb:df:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:13 2026 by rpki-client