Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa
File:                     C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa (raw, json)
Hash identifier:          FWaWZRn2VagzBM02EknVAFE8HgmoQjfzWkVbJA60FRs=
Subject key identifier:   4E:CA:93:23:21:16:B1:9F:99:FC:15:22:D1:1F:86:D5:C6:E3:8A:3C
Certificate issuer:       /CN=A9158682/serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
Certificate serial:       5E
Authority key identifier: 23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa
Signing time:             Fri 29 May 2026 08:40:44 +0000
ROA not before:           Fri 29 May 2026 08:40:44 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     15932
IP address blocks:        2403:d300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl
                          rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158682, serialNumber=23E1E4259FABCD49FD58CCD46CF200CD121E2EAC
        Validity
            Not Before: May 29 08:40:44 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a19510c-509f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3c:52:b5:2f:4b:97:25:37:6f:ba:6b:ca:89:
                    f9:80:69:5c:61:75:6c:fc:99:8e:f2:2c:d6:de:67:
                    69:b8:44:23:62:0f:38:fb:7d:fa:ab:c6:99:33:22:
                    a0:ef:e5:b0:f7:f2:16:31:25:f6:c6:be:8f:78:86:
                    03:43:a7:c4:ec:d9:99:a5:f3:5f:07:6c:b6:57:f8:
                    06:1d:0b:83:a4:bd:1b:72:34:51:2d:fe:6d:2c:a0:
                    ee:73:9e:b9:1f:2f:35:15:99:35:bb:c6:70:ea:67:
                    82:f7:e3:83:92:e7:f3:eb:91:1b:4d:3e:ef:9c:e0:
                    a8:c1:58:33:66:47:d1:45:c2:99:fc:13:48:97:11:
                    ca:5b:8d:10:b8:25:e7:98:28:6a:76:6f:9a:e2:7b:
                    c8:52:72:51:cc:a0:a9:f9:09:70:e2:99:9d:56:97:
                    42:d0:c1:83:33:b3:39:1d:be:56:83:14:f7:a7:1f:
                    bc:a4:cc:0b:c0:24:76:57:94:61:94:8f:7c:db:71:
                    9f:61:d9:cb:b0:0d:27:9a:08:35:fd:ec:5b:a8:0f:
                    fa:52:5a:b6:d3:5f:ef:8b:9b:21:78:d5:09:ee:98:
                    1c:7c:1f:03:86:65:13:c3:f0:e6:0b:5a:40:ec:d4:
                    49:0b:3c:df:60:2a:d7:ca:18:d6:7e:0e:2a:36:81:
                    46:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:CA:93:23:21:16:B1:9F:99:FC:15:22:D1:1F:86:D5:C6:E3:8A:3C
            X509v3 Authority Key Identifier:
                keyid:23:E1:E4:25:9F:AB:CD:49:FD:58:CC:D4:6C:F2:00:CD:12:1E:2E:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I-HkJZ-rzUn9WMzUbPIAzRIeLqw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158682/0729DD2ED5BA11F0AB90DA7CC4F9AE02/C5D7EA08D5CF11F0A0EA7C48C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:d300::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:1f:0e:fa:f4:d9:2c:ba:67:90:bb:69:57:60:a5:28:62:cf:
         10:ba:a0:96:3a:94:d7:71:85:6a:c5:92:81:cf:9e:fc:bd:9c:
         36:f0:83:8c:a6:c3:86:0d:2e:bf:23:52:7e:c9:e8:cd:bc:11:
         5e:a8:e8:35:d9:42:b4:1d:2a:56:c6:31:ea:4a:4b:27:ff:7b:
         ad:e9:89:bf:98:87:68:e5:f7:8f:eb:ab:33:32:dd:d5:86:c3:
         7c:f3:f6:d0:f1:a0:5c:9b:10:d4:39:be:dd:af:05:69:32:dc:
         d0:d7:79:f2:04:ed:ab:e9:2b:19:b2:9a:94:2f:eb:28:f0:71:
         18:9d:cf:7a:e0:12:fd:26:c1:d7:b4:4e:90:95:6f:d0:d0:a5:
         f2:cd:fe:b7:fc:68:ce:1b:aa:ab:d9:d2:66:f5:b8:74:e4:71:
         9d:41:f1:d9:0c:5b:a5:18:77:5b:3b:70:4b:3d:2f:92:52:8c:
         49:e3:e7:dd:2c:2f:49:e5:74:f3:76:25:b4:b7:63:dd:be:26:
         8d:c6:ca:ed:a7:37:d7:c7:27:1f:70:ef:b9:89:73:a9:88:c3:
         b3:4f:12:43:23:ba:67:a7:d3:e5:39:a4:1a:14:dc:33:c7:35:
         27:f9:a6:e5:28:20:1f:be:22:62:5f:33:24:c4:bd:99:3e:6a:
         07:3e:45:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:16:17 2026 by rpki-client