Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
File:                     EF1D0466455311E98FA31F68C4F9AE02.roa (raw, json)
Hash identifier:          WNcYetTPqeiv/gJdhSaTlqe8oWCCpgSvbxYX4ELwCGg=
Subject key identifier:   6F:D4:DF:B4:90:5C:01:20:60:9E:44:E7:AB:09:11:D8:A0:DE:FB:D5
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       3605
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:26:03 +0000
ROA not before:           Thu 30 Oct 2025 15:31:26 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     55433
IP address blocks:        2405:8a00:6029::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 15:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13829 (0x3605)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Oct 30 15:31:26 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a484bb-6331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cf:2a:8c:c3:ac:da:9f:23:38:58:7d:e4:d4:
                    33:b4:68:c8:0a:fa:fc:46:68:66:65:a8:f2:b3:56:
                    91:d6:d8:ca:66:1d:d2:d6:4b:7f:e4:21:2d:24:ae:
                    71:bc:99:04:da:6b:15:a2:a8:88:4b:a0:3c:64:ac:
                    b5:53:f6:88:54:62:4d:a4:c1:c0:7f:0a:c5:d4:a4:
                    ea:e4:5e:1c:03:4f:86:a4:e5:a0:03:83:73:d5:4d:
                    6b:4a:2f:9e:c4:8f:e8:13:27:d1:7e:83:db:a2:ad:
                    d8:8c:de:60:c5:3b:a4:e5:36:c5:33:b6:6b:a7:f4:
                    fe:7e:82:dd:44:8a:2a:83:7f:52:48:3c:99:69:07:
                    d8:42:a1:d0:88:b8:cc:6f:7f:27:9e:e9:d9:ee:4a:
                    61:bb:3a:41:8f:7e:d1:7f:58:df:60:ae:ae:6b:a9:
                    9c:16:28:f3:42:76:72:f0:73:9d:43:c0:57:8b:d4:
                    74:e0:5d:eb:00:b8:34:3b:3b:27:c0:89:5a:3b:e8:
                    7d:ff:df:90:09:e5:ba:bb:f4:65:d2:dc:9e:e0:43:
                    b8:60:de:63:bf:f2:42:33:de:c6:bd:a9:7f:47:6a:
                    c8:70:19:79:e7:31:34:92:17:b8:2b:bd:d4:34:ce:
                    4a:f8:fd:07:59:99:d8:0b:00:e6:ef:b1:c6:76:f3:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D4:DF:B4:90:5C:01:20:60:9E:44:E7:AB:09:11:D8:A0:DE:FB:D5
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/EF1D0466455311E98FA31F68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:8a00:6029::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:d0:da:01:de:c1:31:3b:6e:c9:b7:1b:74:78:a5:b9:84:ba:
         71:86:6b:fb:fd:73:c1:b7:35:9e:e0:9f:ce:e1:13:03:f4:71:
         d2:f7:e3:25:54:08:1f:10:44:aa:8b:b1:2f:44:09:90:06:83:
         88:9e:67:b8:cb:e5:ea:ca:1a:3d:23:d5:c6:a4:20:d7:5a:b5:
         e3:f3:0f:49:3c:66:85:de:46:89:a5:af:bd:81:ee:e4:4d:bb:
         20:49:f4:17:73:ef:ad:1b:a9:13:d8:74:a1:b2:ce:98:4e:be:
         8f:3f:88:9f:ca:b2:b4:4e:d8:d6:80:e7:bb:50:db:88:f0:87:
         fd:c2:17:5f:34:8a:42:6b:d4:02:74:4a:17:fc:c9:62:d9:a3:
         40:18:7c:41:86:e2:ba:95:97:3b:76:fb:5c:57:4b:fa:40:e2:
         97:da:1a:71:e9:7d:c9:e1:d5:9b:44:fb:cf:93:99:72:0c:f9:
         3e:1d:7d:60:d8:79:f3:ab:d6:bb:07:8b:78:8d:2a:a0:72:aa:
         bf:49:b0:a3:e2:3c:f4:89:14:7e:69:a4:db:2b:26:8f:c0:0d:
         a2:0d:2c:64:25:51:29:8b:7c:64:cc:0a:80:80:2e:07:fb:58:
         1f:05:aa:c0:56:af:da:84:e4:aa:e7:ce:b4:74:3d:a6:e4:37:
         04:cf:b3:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:13:24 2026 by rpki-client