Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/AD7B2798CDCA11F096B9035EC4F9AE02.roa
File:                     AD7B2798CDCA11F096B9035EC4F9AE02.roa (raw, json)
Hash identifier:          1rrUr85BF/sY2udLImZ0ePN2Kgi1s7SnmiZY7CqnRO0=
Subject key identifier:   9F:0D:51:68:68:AC:94:7F:B8:55:03:C8:3E:0F:2F:3F:76:E2:42:47
Certificate issuer:       /CN=A9157DAE/serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
Certificate serial:       1469
Authority key identifier: E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/AD7B2798CDCA11F096B9035EC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:14:06 +0000
ROA not before:           Sat 20 Dec 2025 17:14:32 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     137937
IP address blocks:        2403:cfc0:100d::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl
                          rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5225 (0x1469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157DAE, serialNumber=E1B807AC2B7455FBB1E316068D1D0171260BB1C7
        Validity
            Not Before: Dec 20 17:14:32 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a58d1e-b4c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d2:0f:39:62:79:8f:5c:f4:44:a0:ca:8a:e5:
                    92:37:0a:85:8d:9b:ea:5d:db:1b:54:94:e4:68:72:
                    40:51:1a:18:d2:80:4f:e9:1c:34:5e:9a:55:65:8d:
                    79:b7:d3:e9:85:83:7d:80:0d:51:c8:92:38:8b:6d:
                    b5:c5:03:3e:3b:2e:c7:81:ce:4d:27:9d:f3:01:b4:
                    12:7b:28:b6:d4:68:13:1b:fa:0d:c5:fa:d0:87:c8:
                    83:b5:6f:da:1b:68:bf:5f:9d:9f:27:b4:bf:7e:d3:
                    42:3d:e2:c0:68:25:5f:b3:e0:ce:2e:ae:0d:63:04:
                    9f:3c:4d:fe:c6:fb:0e:a2:79:45:ff:49:38:27:70:
                    d8:44:52:8f:7b:31:98:d4:c0:32:12:0e:37:23:91:
                    6e:cc:66:65:ae:5d:7d:d8:7f:4a:20:85:6f:c4:fc:
                    44:1a:e9:11:22:aa:5f:7e:ea:d0:fb:3d:95:37:17:
                    77:1a:37:de:39:7f:ce:b9:52:70:bb:dc:c0:83:93:
                    70:a1:4b:88:41:e0:4a:0c:7a:c4:bc:c3:ba:ac:46:
                    3d:ca:2c:ad:4f:2b:fd:70:7f:9a:37:c8:90:2c:9c:
                    42:db:4c:5a:c3:7b:1e:1c:e7:2c:92:8b:17:8e:7b:
                    ae:1a:9d:ec:8a:20:7a:87:1c:a4:02:f3:c3:01:8e:
                    07:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:0D:51:68:68:AC:94:7F:B8:55:03:C8:3E:0F:2F:3F:76:E2:42:47
            X509v3 Authority Key Identifier:
                keyid:E1:B8:07:AC:2B:74:55:FB:B1:E3:16:06:8D:1D:01:71:26:0B:B1:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/4bgHrCt0Vfux4xYGjR0BcSYLscc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4bgHrCt0Vfux4xYGjR0BcSYLscc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157DAE/61666C0ED68911E8B6811433C4F9AE02/AD7B2798CDCA11F096B9035EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:cfc0:100d::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:54:e3:c1:5d:97:ca:38:aa:1d:6c:46:1a:43:fa:b4:60:ad:
         f9:f9:41:96:26:e6:af:ae:c1:65:1d:99:21:6f:2b:55:6b:9c:
         63:5b:50:5d:ec:72:8d:97:ac:d8:a5:88:16:1b:4c:b5:73:39:
         11:11:dc:e7:70:06:da:68:29:79:8b:9e:fe:f8:0e:4c:21:0e:
         5c:d9:93:37:8c:67:bd:83:40:90:1f:df:30:40:3c:61:29:84:
         06:3a:f0:bd:91:92:db:6e:12:7c:e6:87:6f:45:f0:b3:52:98:
         a2:31:07:d0:d5:c9:d1:aa:b1:c8:42:28:32:6d:9e:ae:94:c1:
         0a:22:f4:fa:fb:2b:5c:69:c1:58:ff:da:2e:2a:14:fc:5f:ed:
         12:2e:4b:81:d9:0b:94:67:c3:7f:80:58:6e:f1:58:43:a7:da:
         61:42:c8:32:60:e8:11:a1:41:c2:1c:2a:d7:f7:a7:60:b5:d3:
         3a:ae:08:91:9e:12:6f:51:17:92:00:db:d6:6e:94:b2:8a:46:
         60:07:8f:87:bb:09:d5:47:21:54:07:ad:31:9f:70:74:0e:0f:
         82:49:72:be:67:6d:25:00:98:21:a4:38:4b:4e:4b:dd:fb:ff:
         9d:4f:bf:1a:42:56:7e:49:1b:5e:77:32:14:78:24:f9:12:71:
         a6:db:ee:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:40 2026 by rpki-client