Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/5A44099895C111EE951C9E4CC4F9AE02.roa
File:                     5A44099895C111EE951C9E4CC4F9AE02.roa (raw, json)
Hash identifier:          DkdcatwLmN2ONkPOpKETQhUgaZX36ttB9+kcADlT4Z4=
Subject key identifier:   89:01:CE:8E:3B:C8:CE:A9:B5:13:8F:4F:F6:0D:B5:42:F7:01:D8:A9
Certificate issuer:       /CN=A913939F/serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
Certificate serial:       01C2
Authority key identifier: 07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/5A44099895C111EE951C9E4CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:05:16 +0000
ROA not before:           Sat 03 Jan 2026 03:25:21 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141026
IP address blocks:        180.94.28.0/23 maxlen: 23
                          180.94.28.0/24 maxlen: 24
                          180.94.29.0/24 maxlen: 24
                          2001:df3:2ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl
                          rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:23:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 450 (0x1c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913939F, serialNumber=071E25855E6A35B3D808FF7A60A08B8781356362
        Validity
            Not Before: Jan  3 03:25:21 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4398c-38c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7b:27:26:63:c4:64:7c:8e:4b:50:e6:c8:ec:
                    9a:6e:ff:4c:98:03:be:0c:52:0a:26:05:76:c5:14:
                    42:32:2b:9c:bb:93:e1:92:1b:2e:21:d4:c9:95:74:
                    e3:01:10:e7:8e:e8:7b:9c:5e:08:71:8c:05:78:98:
                    ae:53:e8:d9:45:4e:42:45:63:6e:e8:67:98:ca:c6:
                    f3:e4:52:d0:2c:39:92:c6:ad:fd:2d:0c:20:06:bb:
                    dd:1d:1b:1e:2a:5c:3e:5c:f1:61:2a:c7:a2:3f:4d:
                    48:5e:34:e8:00:bf:61:d3:6f:0f:85:56:a4:a4:d8:
                    29:fa:29:0c:ab:a8:54:a8:7a:47:fb:dd:0d:93:77:
                    c2:04:b9:0f:9e:e6:43:95:f6:32:14:8d:dd:78:bf:
                    5d:e1:22:0f:b4:28:77:e8:bf:0c:3f:1d:3f:11:11:
                    02:3c:14:c0:a0:b4:41:29:78:45:65:99:6d:3e:3f:
                    c6:ce:87:32:e9:74:8d:c1:4e:36:79:d4:15:b8:ed:
                    66:14:50:64:3d:ee:2d:53:44:a7:c6:48:3e:1a:55:
                    58:5f:93:ec:0c:91:b3:31:02:70:06:03:e7:dd:79:
                    1d:64:0b:35:0d:a1:71:36:98:d8:b6:32:00:40:3b:
                    ee:0d:17:20:4c:78:f8:33:37:b2:d4:fe:03:2c:25:
                    6f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:01:CE:8E:3B:C8:CE:A9:B5:13:8F:4F:F6:0D:B5:42:F7:01:D8:A9
            X509v3 Authority Key Identifier:
                keyid:07:1E:25:85:5E:6A:35:B3:D8:08:FF:7A:60:A0:8B:87:81:35:63:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bx4lhV5qNbPYCP96YKCLh4E1Y2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913939F/22E5F6568AC111EE8513BB1DC4F9AE02/5A44099895C111EE951C9E4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.28.0/23
                IPv6:
                  2001:df3:2ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         84:c1:2f:52:94:bf:d8:9a:e4:a3:3e:7f:0e:31:19:70:8a:37:
         80:ea:90:17:a6:67:e0:b7:4d:62:89:13:d1:92:66:48:84:8e:
         a3:88:82:f2:4b:22:29:32:80:16:67:21:32:b9:49:3e:a5:61:
         1b:f7:1c:24:e4:04:6d:3e:ea:23:25:66:2e:f8:0c:77:27:8a:
         6b:d6:fe:48:91:fe:6d:53:20:06:a1:8a:35:00:dc:11:2f:01:
         ab:65:8b:35:65:9f:4d:c0:52:ed:74:57:b0:bf:1a:1f:f7:c7:
         d4:ba:a6:2d:fe:47:a0:3d:67:25:12:b1:4d:e9:1e:57:b0:38:
         94:de:e8:51:5f:6f:f7:ee:c1:19:2c:55:51:71:31:b2:25:ad:
         61:7d:69:43:01:61:f4:11:8f:7f:b4:da:be:af:e0:c3:8e:a9:
         c0:12:1c:35:86:a3:eb:42:94:61:ec:18:48:22:5c:30:63:32:
         81:48:d0:6e:43:96:61:b6:44:b5:c6:8f:38:28:50:51:59:87:
         c8:a8:5d:01:f3:b8:dd:2d:3f:a8:1d:6f:5b:04:09:e2:90:94:
         96:ad:e3:dc:31:9b:8f:6c:04:ef:22:ff:95:00:61:9e:56:5c:
         c5:9a:c6:59:36:14:52:40:b1:fa:d5:e4:c3:3c:06:32:ae:09:
         39:3b:cf:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:56:38 2026 by rpki-client