Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/4F148EC8A89211EFBE18B52EC4F9AE02.roa
File:                     4F148EC8A89211EFBE18B52EC4F9AE02.roa (raw, json)
Hash identifier:          h4SMO1K7Vxm5I4exXEPl/nZCKs6/6HU7+nByrSlIiM0=
Subject key identifier:   73:36:9F:15:67:37:99:7E:22:A7:53:D7:CC:50:C5:18:0C:E6:50:D2
Certificate issuer:       /CN=A9137627/serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
Certificate serial:       F5
Authority key identifier: 08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/4F148EC8A89211EFBE18B52EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:14:02 +0000
ROA not before:           Wed 21 Jan 2026 05:24:37 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     142031
IP address blocks:        2001:df4:a7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl
                          rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:47:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137627, serialNumber=080EC14A00125D914C7E6285DE9C56689C5872A4
        Validity
            Not Before: Jan 21 05:24:37 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43b9a-cdb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:dc:8c:c9:b9:c9:89:74:73:38:2b:9e:e0:
                    30:b6:cc:24:23:28:e4:fb:df:33:f3:49:19:75:64:
                    ab:59:af:88:c0:56:5d:58:3d:eb:7c:37:19:e6:a0:
                    9f:02:fd:7e:69:a5:fa:0f:58:c2:54:3a:69:32:84:
                    26:7f:3f:28:cb:1b:af:25:19:a5:5f:0a:00:a5:03:
                    a3:8e:19:19:e6:32:4f:f2:79:d9:80:0a:84:fb:68:
                    27:9f:e5:f6:2d:be:b7:01:ec:6e:f5:ee:17:e0:f3:
                    0c:8d:d3:f6:32:3c:39:98:86:2c:3f:58:c2:83:d5:
                    68:e6:9e:cb:99:25:5b:29:0e:a2:ef:27:69:01:f5:
                    b9:13:75:dc:c1:dc:da:24:9e:82:a5:ac:d5:9c:98:
                    04:ad:55:32:dc:d3:5a:50:c8:70:29:28:c6:6a:52:
                    6c:0c:83:4a:fe:92:00:68:21:7c:81:67:dc:1a:72:
                    1b:7b:1a:b9:52:71:b6:a3:23:18:4a:f4:1b:5d:ed:
                    be:ff:29:57:31:50:f5:28:b4:8b:8b:d7:22:e5:48:
                    54:56:a0:37:26:20:8d:03:00:f2:24:7e:d9:db:34:
                    3d:3e:49:75:a6:a9:43:6d:1c:f4:89:58:fd:22:e6:
                    f0:88:7c:69:12:9a:e8:7d:c2:bc:0f:4b:f5:e5:54:
                    65:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:36:9F:15:67:37:99:7E:22:A7:53:D7:CC:50:C5:18:0C:E6:50:D2
            X509v3 Authority Key Identifier:
                keyid:08:0E:C1:4A:00:12:5D:91:4C:7E:62:85:DE:9C:56:68:9C:58:72:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/CA7BSgASXZFMfmKF3pxWaJxYcqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CA7BSgASXZFMfmKF3pxWaJxYcqQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137627/E7D25786A89111EF92688B2BC4F9AE02/4F148EC8A89211EFBE18B52EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:a7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:78:66:fe:dd:29:9d:a5:35:ba:b6:2e:33:e9:12:c8:8d:
         d1:51:7c:65:25:73:63:19:52:2a:dd:be:f4:cf:49:6a:e6:cd:
         85:43:bf:cc:d8:67:b8:75:4f:65:8c:e1:22:3f:3b:0f:f1:b9:
         12:5d:cd:ad:8d:36:0e:a2:93:cd:ff:1b:c2:93:b9:8f:e1:9f:
         95:6f:cb:c2:0a:88:1a:e8:2a:6a:c9:9f:f8:3f:ff:13:d8:ef:
         f4:7d:1d:31:b7:df:0e:c9:c6:5a:7d:05:33:bb:da:1d:2c:2b:
         2d:5d:f0:11:e7:2c:55:cf:66:73:43:94:c4:e2:fe:5d:5d:2b:
         93:1c:f7:3a:92:64:09:e6:c8:37:95:fb:49:ac:82:3a:89:bf:
         bd:5d:a7:e9:16:6e:f8:64:80:70:3d:dc:0c:bb:d1:05:4a:62:
         9c:ee:c5:46:d6:80:d0:3d:c2:94:e8:6d:cd:15:9c:d9:a8:d1:
         43:f6:e4:41:bd:80:e4:69:89:6b:24:3f:d8:01:df:04:70:56:
         ee:71:dd:48:ad:76:7e:80:94:56:fc:18:32:21:03:cd:0d:a0:
         72:55:1b:62:1d:31:61:a9:0b:d6:9c:99:8a:8e:d3:bd:05:26:
         f3:be:6d:f3:35:ea:d3:2d:f3:93:e5:a4:e1:a6:0c:9a:b5:e9:
         8a:d5:c9:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:14:45 2026 by rpki-client