Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/35ADE898B90A11EF97D24653C4F9AE02.roa
File:                     35ADE898B90A11EF97D24653C4F9AE02.roa (raw, json)
Hash identifier:          j4HW8v+J9rL2PkNopASjMuegUlrtdhRwhQv/dAW6LJM=
Subject key identifier:   18:B1:8D:ED:A6:1E:6C:6E:F5:CB:02:3D:5B:A5:E8:09:C6:95:6F:47
Certificate issuer:       /CN=A9148D61/serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
Certificate serial:       0286
Authority key identifier: 69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/35ADE898B90A11EF97D24653C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:16:42 +0000
ROA not before:           Wed 05 Nov 2025 02:16:40 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     150286
IP address blocks:        2001:df1:3440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl
                          rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:42:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 646 (0x286)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148D61, serialNumber=69FF68D39AC1773E28A85785C791B4A8D9B38486
        Validity
            Not Before: Nov  5 02:16:40 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4747a-e2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:63:b0:26:ff:2d:b7:84:04:c6:b2:e0:7b:d0:
                    b3:01:75:af:3d:e5:87:fb:4a:5c:e6:1e:f2:c0:bd:
                    6b:a3:d1:63:11:9f:5e:36:08:35:b6:2f:e6:41:f6:
                    a0:5b:1c:20:3f:ed:ce:9d:3e:4d:9f:ea:fa:92:fd:
                    2a:5d:21:b8:14:a9:ea:26:6b:37:14:e9:ee:1c:42:
                    21:c2:4d:8e:f2:9a:b4:c4:d3:56:d5:f5:14:59:c0:
                    c1:16:63:ed:68:f6:90:62:92:c3:61:b5:8f:06:00:
                    f9:a0:2a:f3:1b:27:42:de:48:0f:ac:8f:0e:df:51:
                    51:f2:c6:9c:61:85:a7:5e:5c:66:1d:c2:01:8d:57:
                    63:ab:7d:85:6d:00:3d:6b:70:55:63:70:96:07:43:
                    56:ac:5c:4f:18:e8:a7:57:5a:56:53:8b:86:99:00:
                    90:24:25:d3:44:32:93:3c:9d:86:58:21:56:5e:55:
                    58:c8:b7:f6:3c:a3:d6:11:d6:48:f2:1d:4d:7e:79:
                    22:c2:cf:cd:d5:7f:84:ab:d4:16:f0:d5:af:bc:4c:
                    1d:28:0a:c7:e4:0a:3f:f7:46:ac:4f:c5:70:8b:53:
                    01:86:e0:31:12:70:6c:e5:37:bc:04:78:e7:d7:9d:
                    d8:de:53:7b:8c:8c:42:9a:86:ba:ec:3f:89:76:b7:
                    5a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:B1:8D:ED:A6:1E:6C:6E:F5:CB:02:3D:5B:A5:E8:09:C6:95:6F:47
            X509v3 Authority Key Identifier:
                keyid:69:FF:68:D3:9A:C1:77:3E:28:A8:57:85:C7:91:B4:A8:D9:B3:84:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/af9o05rBdz4oqFeFx5G0qNmzhIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/af9o05rBdz4oqFeFx5G0qNmzhIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148D61/295E4C76601B11EDA5C7276EC4F9AE02/35ADE898B90A11EF97D24653C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:3440::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:ce:31:6f:f4:ce:04:92:f7:13:f4:c8:db:68:74:9a:d9:19:
         84:42:91:e8:49:7c:08:33:22:00:41:e5:ae:cc:b8:40:0c:0a:
         50:53:84:f8:47:3e:fb:45:44:4d:03:d9:09:37:90:d3:0a:ac:
         e4:a7:7f:50:f8:b0:50:ea:4f:f1:38:80:2c:8c:db:81:4b:54:
         6d:3d:b0:49:19:a4:65:52:fb:15:15:23:30:c1:12:4d:cf:82:
         5b:46:4a:1d:dc:94:f6:21:0d:e6:9e:3c:78:c2:52:af:d7:e5:
         ff:e5:fc:a6:bb:2e:d3:53:04:a5:cc:11:b3:b5:b6:70:ab:fd:
         59:ee:64:23:37:15:73:08:18:db:7a:08:dc:a5:1b:7b:24:14:
         8c:f0:99:47:cf:54:b9:62:60:29:ac:63:4d:b9:02:d4:9c:ec:
         04:f8:44:47:d1:93:74:f9:f2:33:91:b6:fd:25:3a:27:01:e0:
         ad:36:f5:55:9e:82:70:53:56:04:4c:f5:20:ca:1a:c7:dd:a6:
         4c:5b:22:e9:67:10:fe:64:f7:16:33:23:95:4b:1c:92:c2:f2:
         6f:76:94:d2:bb:be:d7:ff:d7:c5:ad:6d:47:68:e6:ad:3f:75:
         92:61:03:9e:1a:d7:60:f7:4a:de:31:14:5c:36:b0:59:45:49:
         05:f7:a5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:34 2026 by rpki-client