Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/64F859DA812611EDA597255EC4F9AE02.roa
File:                     64F859DA812611EDA597255EC4F9AE02.roa (raw, json)
Hash identifier:          fn9COoreHDD+zdHLkrrnHjWHJo4W49aJWkK49HG6KBA=
Subject key identifier:   7A:90:28:BA:96:26:9C:A0:EF:29:C4:14:3A:D0:B4:57:5D:A8:63:50
Certificate issuer:       /CN=A915D03A/serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
Certificate serial:       1A73
Authority key identifier: 61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/64F859DA812611EDA597255EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:35:40 +0000
ROA not before:           Thu 08 Jan 2026 17:13:57 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     48337
IP address blocks:        2400:8905::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl
                          rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:43:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6771 (0x1a73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D03A, serialNumber=615ED84C44E657F7095E0212AFEA052C542A0D91
        Validity
            Not Before: Jan  8 17:13:57 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a486fc-63ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:11:91:30:3c:ab:ec:ce:e7:a2:b1:f9:e2:ff:
                    c7:3d:f0:dd:32:b7:8c:18:99:6e:40:ac:54:6a:db:
                    0c:16:52:17:47:3a:67:e9:9e:01:6e:7d:7a:42:23:
                    f9:63:69:61:52:d9:46:6b:99:30:55:ab:ec:ad:9c:
                    1b:93:3a:97:88:fc:42:69:50:f9:0e:c5:f2:40:98:
                    51:a5:4b:09:f6:9c:db:7e:84:b1:e9:07:f1:24:46:
                    bc:e3:42:fa:18:3a:d5:43:19:72:15:54:4f:94:bc:
                    83:f5:d6:e0:67:59:5b:bb:21:7d:1e:70:40:31:4d:
                    f7:fe:62:aa:9d:91:1b:83:e9:00:9f:54:79:f4:54:
                    48:9c:9d:f5:ce:21:cf:9e:2e:5a:40:c1:f8:4a:c9:
                    d4:f8:1c:a0:b6:11:48:6d:03:01:25:c9:3b:1a:da:
                    28:0e:4e:a6:3e:c2:a4:5d:fb:66:ef:93:54:33:c5:
                    39:35:c4:7f:07:a2:d4:50:86:94:1f:d0:29:3e:b8:
                    2e:45:95:ec:10:01:52:59:4a:a0:d8:7e:26:28:31:
                    22:c0:0f:93:23:77:aa:43:67:88:fd:2b:4e:9c:90:
                    9a:21:00:1d:48:17:2b:e9:c5:cd:69:97:83:14:59:
                    5a:b9:c2:76:7b:69:8a:bd:e8:3b:96:b5:34:25:0b:
                    6a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:90:28:BA:96:26:9C:A0:EF:29:C4:14:3A:D0:B4:57:5D:A8:63:50
            X509v3 Authority Key Identifier:
                keyid:61:5E:D8:4C:44:E6:57:F7:09:5E:02:12:AF:EA:05:2C:54:2A:0D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/YV7YTETmV_cJXgISr-oFLFQqDZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YV7YTETmV_cJXgISr-oFLFQqDZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D03A/1B647710924611E79AAEBE10C4F9AE02/64F859DA812611EDA597255EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8905::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:a1:86:c0:37:41:e2:8e:91:37:41:f6:48:55:d3:03:bc:c9:
         60:da:7f:5f:00:33:d2:4f:d6:53:0b:ec:65:59:39:80:8b:f9:
         e5:68:28:ac:72:e9:fe:27:a1:3b:c2:56:47:a5:5e:b6:2b:80:
         2d:05:89:cc:e1:2b:f2:a3:29:ba:b5:96:14:28:45:a4:67:dc:
         9a:85:2c:c0:5b:a4:b8:72:91:44:a7:b5:09:f4:81:07:4e:56:
         71:c3:bb:e3:11:52:cc:1b:3d:01:cd:2c:74:b5:be:6c:21:be:
         79:ab:b6:25:9d:7b:8e:7d:7e:1a:57:66:f7:5f:01:36:ad:53:
         7a:ac:73:bb:72:7e:dc:1a:74:9a:29:6b:0b:bd:af:c0:e2:b5:
         d2:f8:54:10:4e:36:69:0d:72:7f:71:16:2a:5a:21:b7:cd:30:
         3a:07:59:a7:41:51:59:79:17:e3:1c:be:04:c0:51:f0:2b:4c:
         13:f2:31:bd:b6:d6:85:ab:29:ed:c9:4f:63:0d:b0:26:5c:aa:
         54:61:d1:46:c1:6d:97:30:a1:60:d6:c1:8a:fe:30:0e:db:c2:
         a8:80:62:ed:4a:63:a9:f8:6a:cc:36:e8:2a:72:6d:ee:45:b9:
         f3:ca:7b:b3:76:c0:00:f4:a4:fa:b9:ef:c9:38:bf:bf:a8:f4:
         64:12:06:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:57 2026 by rpki-client