Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
File:                     0722D856931111EDB92FFC5FC4F9AE02.roa (raw, json)
Hash identifier:          yWlANq5g/pbbgNfseiIKUN8CyHFjSODbVb8MGxFsVq8=
Subject key identifier:   92:FB:64:54:91:86:C8:84:39:C7:0F:04:C2:F3:77:70:48:D6:AA:7D
Certificate issuer:       /CN=A913B805/serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
Certificate serial:       26DE
Authority key identifier: 42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:40:15 +0000
ROA not before:           Wed 31 Dec 2025 18:14:40 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     141384
IP address blocks:        2001:df0:5580::/52 maxlen: 52
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl
                          rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:24:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9950 (0x26de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B805, serialNumber=42D3ECB9C8570AB090EB601EDB3379C0D3D8A6D0
        Validity
            Not Before: Dec 31 18:14:40 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a4880f-d00d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:f5:49:b7:59:b5:90:1d:f3:f9:18:8b:5a:
                    d6:38:21:76:d8:81:ae:31:9e:6b:c6:53:cb:9e:ca:
                    21:bd:40:29:e4:69:2e:a1:9a:0e:da:9e:09:13:a9:
                    02:81:b9:d4:ab:f4:36:97:21:23:fb:13:78:07:35:
                    66:07:07:49:42:4c:84:c5:cb:7b:fa:73:33:5b:44:
                    d4:2a:ec:0a:33:f3:74:f8:ec:0c:c8:05:5d:9b:3d:
                    ad:86:0e:44:78:82:9d:4a:65:e7:cc:4d:b6:eb:53:
                    65:29:0c:74:ba:c5:57:08:24:55:d6:50:a3:ca:6a:
                    dd:db:fd:1e:35:e6:8a:99:3f:c0:9a:d1:c9:5e:7d:
                    d4:ff:2d:66:20:0e:1c:10:53:63:9d:d0:3f:69:60:
                    62:36:7b:13:b6:3f:46:6a:ac:ba:9a:72:aa:fd:ce:
                    a3:e9:5e:ab:a9:8a:1c:a1:61:94:da:0a:38:9e:ff:
                    5b:95:ae:88:5c:bf:f9:65:26:6a:9e:80:0f:31:3d:
                    c5:36:59:27:74:58:5e:d7:73:f0:f5:08:e8:42:06:
                    9b:76:42:d0:9e:f8:0e:88:4b:c1:22:f6:f7:f2:45:
                    b5:88:0b:62:2a:de:00:e2:cd:06:04:ea:35:16:10:
                    89:b2:7a:20:00:52:42:f2:65:61:44:5e:4c:b9:64:
                    cc:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FB:64:54:91:86:C8:84:39:C7:0F:04:C2:F3:77:70:48:D6:AA:7D
            X509v3 Authority Key Identifier:
                keyid:42:D3:EC:B9:C8:57:0A:B0:90:EB:60:1E:DB:33:79:C0:D3:D8:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/QtPsuchXCrCQ62Ae2zN5wNPYptA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QtPsuchXCrCQ62Ae2zN5wNPYptA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B805/F8076B8A7B7B11E98B6EC074C4F9AE02/0722D856931111EDB92FFC5FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:5580::/52

    Signature Algorithm: sha256WithRSAEncryption
         9a:2f:f3:f1:3f:a1:42:72:2a:d8:bc:e2:1a:b2:7f:92:3d:d0:
         33:91:38:2a:27:39:06:3f:ce:cd:2d:ab:0a:5b:76:b0:e9:f0:
         4d:bf:e8:06:7b:d3:31:1b:af:43:0e:d5:8c:61:00:42:77:81:
         8f:d5:9b:21:15:22:2b:91:51:04:7a:2b:4a:4a:54:ee:98:e5:
         c7:ba:4b:89:a0:d1:ce:d0:5b:44:72:8e:6c:00:00:2c:07:cc:
         76:6b:55:71:16:39:39:dc:37:d5:a2:25:f5:ad:d7:97:1f:4c:
         6f:09:58:ed:68:25:84:f3:4b:2f:2f:64:dd:a2:50:86:f6:fd:
         2b:bd:1a:01:a9:ae:65:d0:7a:a4:74:f7:b0:2f:84:1c:89:df:
         23:bb:78:b6:d2:c1:f2:0e:4a:a3:9c:8e:37:13:ea:0b:35:64:
         0d:16:88:67:02:7b:bb:a3:80:6c:72:ae:48:9b:5f:23:b5:a9:
         23:be:cc:61:1e:cb:5a:80:5b:92:29:da:4d:23:c3:4a:37:04:
         25:2a:2f:b9:0b:80:b7:0b:93:c0:86:80:02:ab:21:45:32:1d:
         e0:af:58:43:cd:4e:d8:43:44:86:03:31:fa:56:c3:15:b9:c5:
         b4:d7:a7:89:79:42:90:73:57:64:22:6e:cc:c6:7e:74:8d:24:
         b9:03:a5:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:40 2026 by rpki-client