Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/B1078FAAF1C411F0A342834F396F56BC.roa
File:                     B1078FAAF1C411F0A342834F396F56BC.roa (raw, json)
Hash identifier:          +jzkYrDbV9l56QxlBYuE37I0us4Fnv7wiflNV5QShGE=
Subject key identifier:   DC:DB:D5:E0:B6:53:6C:81:DF:68:A1:5E:C6:54:1E:CA:99:68:B2:55
Certificate issuer:       /CN=A915B358/serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
Certificate serial:       1D
Authority key identifier: 85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/B1078FAAF1C411F0A342834F396F56BC.roa
Signing time:             Sun 01 Mar 2026 05:45:27 +0000
ROA not before:           Thu 15 Jan 2026 03:45:53 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142200
IP address blocks:        2402:47a0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl
                          rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:24:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915B358, serialNumber=85392251C921CA9F519DB911C5A80A77DFE354C4
        Validity
            Not Before: Jan 15 03:45:53 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3d277-d281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fc:92:34:9b:bb:e6:0b:06:c9:0c:6d:15:38:
                    da:5a:b5:3d:92:ea:ec:54:e9:62:13:f7:57:d3:18:
                    e8:cc:b9:d9:ab:07:2e:73:71:cb:68:6a:dd:10:86:
                    c2:d8:57:2d:cb:73:71:45:25:b2:c9:6d:fc:9b:35:
                    d8:2c:9a:06:51:5b:bc:fc:6f:b1:50:ae:77:f8:a8:
                    1d:38:0e:57:2d:52:ac:2e:24:94:bb:20:28:98:fc:
                    a7:7d:56:46:44:d5:f8:ba:64:70:71:60:a4:6a:2d:
                    d4:2e:24:fa:0e:00:68:4d:cc:88:b5:88:f7:f0:6e:
                    0d:fe:af:de:dd:c4:47:7b:cb:e5:3f:b8:08:d0:64:
                    ab:95:57:98:bd:ec:10:f0:28:63:95:e7:dc:59:72:
                    29:a4:5d:08:e2:17:3f:76:1e:e0:92:13:a1:2f:d9:
                    90:21:db:3e:da:57:3d:bc:d1:70:3d:b8:13:86:b0:
                    41:45:64:49:32:77:e8:f3:3e:6b:dc:12:0f:65:bb:
                    f5:53:0d:fd:9b:2f:10:05:01:fa:70:fb:c1:ef:c6:
                    b8:65:7d:44:07:84:00:4c:27:98:f2:ee:f3:66:bf:
                    7a:41:f3:f2:68:ea:e5:ef:f9:c9:ca:3b:03:cb:17:
                    7f:e8:1e:be:f5:21:f7:0f:64:3a:cd:1e:99:36:1f:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:DB:D5:E0:B6:53:6C:81:DF:68:A1:5E:C6:54:1E:CA:99:68:B2:55
            X509v3 Authority Key Identifier:
                keyid:85:39:22:51:C9:21:CA:9F:51:9D:B9:11:C5:A8:0A:77:DF:E3:54:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/hTkiUckhyp9RnbkRxagKd9_jVMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hTkiUckhyp9RnbkRxagKd9_jVMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B358/CE7F8EE4F11411F096CD554D4B6F56BC/B1078FAAF1C411F0A342834F396F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:47a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:60:ee:2a:e5:85:c5:a4:99:8d:b2:e1:2f:e3:d0:5b:7d:a7:
         ba:96:84:48:1d:6d:af:47:78:07:d7:35:47:9f:e9:72:97:0c:
         3f:a1:9d:bf:ce:07:11:c9:1c:97:10:b2:5d:d2:37:d9:d6:28:
         90:13:2c:f0:a8:98:ea:b3:4a:d0:be:94:72:91:97:55:49:b4:
         a2:61:72:26:65:62:5e:c5:96:c7:ae:08:c5:0a:5f:ff:05:b9:
         73:5f:ab:fc:5e:65:70:8d:f3:a5:40:9b:0c:01:e7:7e:0b:03:
         a4:f0:75:a4:f3:59:30:31:75:40:3f:2e:29:12:d2:7e:ce:c3:
         f3:eb:23:1f:0a:66:24:2d:fb:72:cf:a1:7e:fe:e1:d8:a7:27:
         e0:13:9d:2c:7c:45:80:2a:c3:4c:81:24:2d:54:e9:e2:76:cb:
         7f:35:d5:73:07:bf:5f:75:2f:2a:b8:4b:96:78:11:5f:81:05:
         15:e6:64:f9:92:06:b3:23:a4:bd:00:07:01:04:cf:ea:ae:e5:
         7c:ef:34:57:5d:da:34:8a:b2:7d:f1:a8:8a:3f:cc:6e:2c:3b:
         ab:05:2e:53:a1:5e:c3:fe:76:51:0b:12:5b:75:93:8a:c7:7e:
         04:b9:7e:7b:7a:ab:08:06:89:30:96:be:6e:43:b0:d1:1d:19:
         b4:f6:a1:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:11:45 2026 by rpki-client