Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/774A232A718011EEA0E7EF5EC4F9AE02.roa
File:                     774A232A718011EEA0E7EF5EC4F9AE02.roa (raw, json)
Hash identifier:          Hstyae6k8xIeoi1my+B5kQarqQcD+TsEkNPZyhAFLww=
Subject key identifier:   11:C1:D4:59:D3:F6:4D:EA:77:71:9B:FF:48:A4:22:9B:20:FF:7D:95
Certificate issuer:       /CN=A914254C/serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
Certificate serial:       171E
Authority key identifier: 7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/774A232A718011EEA0E7EF5EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:44:52 +0000
ROA not before:           Sat 10 May 2025 16:57:56 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     394749
IP address blocks:        2403:b100:2013::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl
                          rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:15:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5918 (0x171e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914254C, serialNumber=7B3F60D9B1A28002A07875CAB58A21457073E17F
        Validity
            Not Before: May 10 16:57:56 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a442d4-7c3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ad:ec:b2:5a:77:17:5e:38:fb:e9:b9:6c:7c:
                    be:6a:eb:a2:f2:a1:cf:57:ef:ae:08:33:65:cb:2d:
                    15:66:8d:c6:d4:50:16:0b:e9:56:12:33:86:cc:c6:
                    73:24:a4:93:d0:ca:08:f1:19:b7:61:b2:37:89:c8:
                    1a:43:f2:f6:46:2f:e1:14:f5:67:b0:36:b7:5d:a9:
                    84:bd:0e:41:b9:15:38:11:63:f5:45:07:4e:dc:0a:
                    aa:05:58:b1:3c:cc:37:30:a4:b2:6f:2e:22:ec:fc:
                    56:db:2d:71:db:01:b1:60:b8:b9:12:7b:f0:17:80:
                    b8:6a:c4:92:a9:33:f5:5b:bf:3d:4a:48:68:38:12:
                    14:08:39:b2:f3:a8:f2:3b:b5:36:d5:53:03:55:5d:
                    2b:ab:fe:05:da:76:e1:13:c4:e1:b1:90:92:17:c8:
                    a6:a0:ae:ab:60:3a:d6:5d:53:5b:02:18:08:9f:1e:
                    d7:2e:79:68:fa:3f:6c:46:c4:55:2d:e7:c4:eb:69:
                    51:99:83:c7:db:4c:2e:b0:7e:f2:88:98:30:83:1c:
                    66:ed:40:20:cd:d4:7a:d4:2e:5b:4b:63:2e:8b:b6:
                    52:15:48:73:21:58:90:60:7c:58:fe:7c:f7:2f:98:
                    74:99:10:37:7d:1c:bb:a8:11:8a:bb:57:22:d6:e9:
                    f5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C1:D4:59:D3:F6:4D:EA:77:71:9B:FF:48:A4:22:9B:20:FF:7D:95
            X509v3 Authority Key Identifier:
                keyid:7B:3F:60:D9:B1:A2:80:02:A0:78:75:CA:B5:8A:21:45:70:73:E1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/ez9g2bGigAKgeHXKtYohRXBz4X8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ez9g2bGigAKgeHXKtYohRXBz4X8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914254C/5A564D4819E811E8B9650C7EC4F9AE02/774A232A718011EEA0E7EF5EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:b100:2013::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:d1:94:be:6f:7a:3b:32:52:34:39:4e:49:90:3a:28:01:d4:
         85:0a:34:5c:5f:cd:85:ba:91:8e:fd:b4:39:f6:f6:b2:58:9d:
         be:43:b0:23:44:b9:4c:53:95:51:31:57:63:70:05:0c:59:44:
         3d:76:0c:12:97:f4:3b:c4:57:42:45:27:6c:bd:26:b7:74:37:
         de:f8:35:42:4d:1b:16:83:2d:b6:a7:47:ab:ab:d6:6d:9b:01:
         9d:a0:cf:12:07:e4:80:b7:a2:77:aa:73:6d:40:1e:0e:57:fa:
         8d:fc:95:80:2e:90:a5:8e:ed:ef:d6:18:c9:b4:40:d6:b1:85:
         36:57:c6:df:a5:c1:be:b5:7b:f7:55:70:0c:a5:3f:f6:fd:20:
         cd:bf:87:9e:6c:58:20:1d:21:bb:9e:6f:e3:d1:cb:5c:8d:34:
         5f:d2:5b:85:fd:d3:b0:74:6e:90:0a:af:8e:0a:60:7e:61:56:
         a6:5e:bd:ec:80:f1:6b:5a:5d:ef:4a:08:85:59:06:58:b2:9f:
         43:d6:d4:bc:02:06:eb:d1:58:15:b0:49:21:2b:39:c9:c2:17:
         b4:e7:3f:fa:48:74:ad:cb:96:63:d0:e1:81:91:0d:88:73:03:
         2c:9c:cb:4a:e2:7a:6e:e1:34:d8:63:87:25:bd:70:dd:7b:ee:
         fc:01:9c:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:41 2026 by rpki-client