Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa
File:                     C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (raw, json)
Hash identifier:          qzSxvuujDmL239/Gh/JLB+28QvjA0lGPnBH2BpP+kM4=
Subject key identifier:   61:03:21:7A:7A:72:FF:EA:DE:C3:67:C4:D3:03:5A:D3:8D:EE:08:B0
Certificate issuer:       /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Certificate serial:       2D
Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 05:54:01 +0000
ROA not before:           Wed 10 Dec 2025 13:54:40 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     15932
IP address blocks:        2403:d300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
                          rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
        Validity
            Not Before: Dec 10 13:54:40 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3d479-efec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f0:f8:53:71:bb:1a:66:54:3a:25:94:26:90:
                    3e:c9:f7:79:93:39:c1:aa:13:9e:2d:fb:4b:8e:9d:
                    29:76:24:2c:f4:0c:03:cc:a5:8a:03:a8:87:fa:fb:
                    87:e5:c6:3d:c6:47:22:41:0f:7a:0a:a1:ae:16:11:
                    ba:04:ea:44:6f:d6:bc:e0:5c:1b:f8:f4:36:09:1e:
                    6c:8b:7b:ca:d1:d5:19:b0:f1:f5:43:fc:2d:ad:73:
                    ef:9b:8c:64:0e:99:26:6b:47:75:20:92:4e:18:f0:
                    ec:11:75:1d:ab:a2:59:dc:f7:cd:3f:b3:65:1c:88:
                    e0:d2:1b:46:17:e9:3d:91:35:95:9c:53:e7:c9:cf:
                    f6:be:b2:66:b2:f6:28:22:4f:5e:f1:69:f3:b8:ef:
                    1c:fd:80:c0:6e:00:b3:87:22:3d:76:e2:83:09:c2:
                    cd:59:bd:b0:7e:c9:a9:3a:f8:c6:d8:29:92:ed:df:
                    a7:ab:4f:0f:63:83:93:c7:63:11:c5:b5:b1:e4:d3:
                    ca:8c:27:96:86:0f:fa:2f:18:f9:f8:59:66:1f:4b:
                    18:07:09:a2:ca:90:1b:21:e5:14:b2:cf:1c:0d:2e:
                    79:28:43:32:69:23:75:bc:21:76:ca:5c:d5:3d:3c:
                    82:ca:0f:04:24:55:5a:8f:9a:ea:7f:3d:78:63:54:
                    51:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:03:21:7A:7A:72:FF:EA:DE:C3:67:C4:D3:03:5A:D3:8D:EE:08:B0
            X509v3 Authority Key Identifier:
                keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:d300::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:10:4c:e9:67:7e:c7:14:46:6f:26:c0:9c:73:b7:62:4f:bc:
         f9:e2:ef:e2:85:76:1f:9a:ed:07:b6:25:66:0e:3d:cb:0c:04:
         cf:ba:19:ab:35:78:0b:07:81:a3:b0:06:27:68:7b:5f:45:21:
         4d:05:c4:06:66:40:11:50:49:08:25:06:dc:0a:49:62:6d:58:
         1e:dd:b2:18:0a:e6:37:ec:29:86:e8:5b:24:13:62:48:b6:eb:
         5e:b8:c6:5a:02:82:3f:b7:b4:d3:c9:ef:ed:ed:eb:1e:cc:a9:
         8c:8d:de:68:bc:a4:e0:a0:20:48:98:09:fe:fc:93:55:90:d2:
         f4:72:24:58:ee:cb:f2:52:25:4f:79:f5:10:c5:f8:34:97:5a:
         5c:83:a9:9b:dc:6a:84:f4:e8:50:b0:52:8b:ad:67:90:c7:77:
         ac:18:90:9b:c3:e3:b2:f6:ff:1d:43:b4:15:4c:f8:6a:c3:38:
         f6:d0:29:1d:f3:c6:a5:81:06:c8:48:87:54:a4:1e:ad:ee:02:
         bc:ec:85:4d:a8:5f:c7:ec:73:a1:7b:b9:49:54:1d:b1:a1:40:
         fa:6f:72:a3:91:78:30:73:1e:64:75:02:fd:80:91:c6:68:ac:
         9d:09:21:e8:78:78:03:d1:1a:ce:32:9d:82:18:40:89:bf:10:
         cf:93:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:29:03 2026 by rpki-client