Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E474AF108D8811EDB3C13D6CC4F9AE02.roa
File:                     E474AF108D8811EDB3C13D6CC4F9AE02.roa (raw, json)
Hash identifier:          noBQw864/f72VFx3andbpjd4W9nv+2EjSEATcB2fGbI=
Subject key identifier:   36:0E:E7:EC:98:EA:56:0A:D1:D2:BA:54:82:2E:39:66:19:07:DD:EF
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       3608
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E474AF108D8811EDB3C13D6CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:26:06 +0000
ROA not before:           Thu 30 Oct 2025 15:31:29 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     9885
IP address blocks:        2405:8a00:ffff::/48 maxlen: 48
                          240a:eabc:d00d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:34:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13832 (0x3608)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Oct 30 15:31:29 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a484be-c1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:71:63:c4:95:06:5f:2b:9c:9a:f3:c8:93:bf:
                    4f:20:0f:b8:a8:a5:8f:2a:d2:0f:60:03:0d:ee:aa:
                    99:52:43:11:e5:bc:d0:35:e0:28:00:ce:6d:16:d3:
                    2b:f4:cd:72:01:18:64:23:fd:55:2a:41:f5:ef:34:
                    0d:32:6b:b7:f2:64:0f:6e:50:8f:84:39:8b:6b:81:
                    94:28:da:bf:d7:ad:3f:06:06:5e:56:f5:31:ef:ee:
                    13:a3:0d:91:bf:07:8e:d9:e9:8b:05:ae:73:38:78:
                    fa:1f:55:99:5e:41:1a:c9:6c:53:3d:43:c5:e8:9f:
                    ab:b3:d4:7b:8a:a1:9a:c1:67:13:cd:7e:9f:fe:f5:
                    3e:db:8e:3b:57:41:bb:ff:18:11:1c:60:1f:03:28:
                    4b:de:54:ed:3e:a2:7c:d3:e7:54:f9:a4:55:b6:26:
                    f5:31:af:fc:04:02:fe:a9:c5:39:ca:d6:9a:95:ee:
                    26:37:31:0f:12:4d:98:24:b4:bf:94:9d:e2:23:ca:
                    60:ee:ff:3f:6b:4b:79:62:da:31:a6:1b:c4:e2:fc:
                    4c:ca:db:f3:10:43:30:34:4a:08:f4:3e:c2:9f:4c:
                    a2:00:dc:5c:82:d9:f6:37:c4:0e:8f:e5:7a:8c:30:
                    24:0e:fe:5c:e0:3c:32:10:e2:c5:92:d5:9f:0e:39:
                    83:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:0E:E7:EC:98:EA:56:0A:D1:D2:BA:54:82:2E:39:66:19:07:DD:EF
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/E474AF108D8811EDB3C13D6CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8a00:ffff::/48
                  240a:eabc:d00d::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:97:9c:8c:dd:05:e7:23:99:b7:50:a6:ee:8e:db:3a:99:85:
         79:3c:d1:db:a3:47:87:56:1a:33:e8:5e:7b:6f:78:a5:fd:34:
         57:3d:7f:78:7a:d9:83:27:d9:5a:32:bf:54:03:0a:fe:85:37:
         a8:97:e1:4d:7b:40:12:19:f1:f4:61:42:c4:41:2f:d9:91:44:
         3f:32:08:a4:f4:a0:00:18:f4:b2:93:eb:b9:20:c4:4e:69:97:
         46:dc:b4:8e:b1:43:a6:2e:2d:15:d0:ff:8b:b3:2c:b2:42:30:
         16:ca:37:7d:52:80:16:84:3d:f5:52:85:b9:47:8a:b1:71:44:
         73:56:35:98:b9:f5:3d:a6:75:fc:fb:e9:72:5a:23:e0:90:40:
         f3:84:0d:e8:3e:b3:25:13:46:19:a8:c5:49:46:20:57:8b:a9:
         cd:7d:3e:c1:b4:de:eb:15:75:7a:23:af:7e:f0:d0:5c:0a:16:
         b7:77:cc:18:03:15:db:dc:54:57:21:ab:bd:2b:19:a7:06:36:
         94:94:f9:a3:ce:af:de:61:90:06:fd:0a:5c:17:e2:e7:ac:b3:
         52:73:37:b3:9b:c5:2a:e3:9f:66:da:9a:e3:ea:19:a0:78:08:
         cb:e8:da:41:a0:a8:a2:8f:f8:dd:65:45:45:b3:67:69:20:c6:
         af:43:90:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:15:53 2026 by rpki-client