Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/71321E44DB9A11F0BFEA763F67D3641D.roa
File:                     71321E44DB9A11F0BFEA763F67D3641D.roa (raw, json)
Hash identifier:          vBgzrqdeu3EkuqUjV7KPEH2F3wb3MYhbBZTXUDf9gBg=
Subject key identifier:   5E:56:2C:42:FA:55:6B:E3:0A:A2:3D:34:54:80:25:53:D5:DD:5E:AD
Certificate issuer:       /CN=A915D062/serialNumber=44CA614B05535410083EFBAB1A2DB1B2036268BA
Certificate serial:       29
Authority key identifier: 44:CA:61:4B:05:53:54:10:08:3E:FB:AB:1A:2D:B1:B2:03:62:68:BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMphSwVTVBAIPvurGi2xsgNiaLo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/71321E44DB9A11F0BFEA763F67D3641D.roa
Signing time:             Sun 01 Mar 2026 05:51:23 +0000
ROA not before:           Wed 17 Dec 2025 22:48:02 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154439
IP address blocks:        2001:df6:76c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.crl
                          rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMphSwVTVBAIPvurGi2xsgNiaLo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:14:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915D062, serialNumber=44CA614B05535410083EFBAB1A2DB1B2036268BA
        Validity
            Not Before: Dec 17 22:48:02 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d3db-477e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d3:4f:18:b4:d2:bc:7f:db:02:5c:74:80:6b:
                    3c:1a:7f:ee:91:f9:38:88:4b:1a:ca:ee:66:6b:02:
                    e7:96:98:ba:35:90:6c:ca:85:0b:40:f1:c9:1f:04:
                    b0:5b:87:e8:b9:39:d3:e3:1a:37:20:40:38:05:5f:
                    21:9c:79:d5:33:16:a9:c6:df:d0:79:43:6d:4a:d5:
                    a0:d0:18:1b:cc:2c:2d:5e:1a:f4:79:0d:55:6b:61:
                    8b:22:e7:e8:c0:86:81:05:3b:9b:12:be:38:74:26:
                    f2:ca:6b:a0:5d:98:e0:6b:1a:73:44:44:52:6a:b3:
                    8a:b8:0d:1b:b7:8a:1f:22:04:c1:c6:fe:09:0b:b4:
                    66:5e:ac:26:d8:2d:4b:e6:d9:37:45:b7:e0:49:7c:
                    06:8a:21:75:bd:ac:4b:a4:41:85:53:d2:db:b6:28:
                    c4:8c:55:4e:17:21:4c:70:1b:b6:36:47:22:b5:85:
                    d6:13:35:8f:c0:43:c5:26:46:39:06:e1:3b:51:8f:
                    87:cc:82:da:46:f9:1a:04:68:70:21:43:9b:0c:31:
                    5c:fd:71:86:0e:9a:03:ff:a4:e2:bf:90:d4:05:83:
                    84:45:c1:87:1c:b3:39:a5:3d:33:42:54:02:13:37:
                    0b:fc:df:ef:69:7a:fd:76:15:37:b1:34:5c:d3:3e:
                    bd:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:56:2C:42:FA:55:6B:E3:0A:A2:3D:34:54:80:25:53:D5:DD:5E:AD
            X509v3 Authority Key Identifier:
                keyid:44:CA:61:4B:05:53:54:10:08:3E:FB:AB:1A:2D:B1:B2:03:62:68:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/RMphSwVTVBAIPvurGi2xsgNiaLo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RMphSwVTVBAIPvurGi2xsgNiaLo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915D062/BB3ADFA4DB9911F090A4BCD166D3641D/71321E44DB9A11F0BFEA763F67D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:76c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:c1:38:64:2d:ef:a8:f0:f0:29:3c:12:fd:ca:a5:90:a1:5c:
         2d:5b:27:93:f5:9f:f7:ff:f6:44:7b:78:42:f6:9b:dd:60:e5:
         ae:39:2b:b5:8b:64:fc:d0:91:9f:3f:1e:fa:ba:85:d4:9a:1d:
         62:bb:87:8d:e0:5b:0b:59:68:3c:45:64:02:7c:c9:60:fb:51:
         6a:72:5f:04:57:e2:60:fb:fa:9b:c0:75:e2:9f:fc:0e:79:26:
         9b:61:df:fc:4b:a3:77:2f:30:22:9f:a9:be:46:00:f1:d9:fe:
         d7:9d:7e:10:65:bc:54:36:4b:0e:b0:e7:bb:9d:a9:2a:5a:bb:
         a1:b3:85:f4:01:49:35:95:e2:2c:87:dc:73:b8:aa:49:3f:e6:
         3b:aa:eb:78:ac:b7:a0:96:46:20:53:c6:34:9f:af:ce:9f:49:
         c5:d6:54:db:8b:07:8a:a0:f1:10:c5:59:9b:c6:25:69:e4:e1:
         6e:85:dd:48:06:23:0f:9d:32:c5:86:fa:ce:9c:50:0d:11:d3:
         31:5d:d2:76:78:72:6c:27:85:2e:bf:c2:6e:61:ce:ad:e3:e2:
         4f:26:1a:c1:54:28:bb:c1:e0:e7:82:48:34:33:ed:eb:d0:ab:
         4c:d9:d3:e1:7a:1b:25:2f:a8:2c:f1:b7:ae:54:dd:2b:18:58:
         a5:2d:01:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:21:00 2026 by rpki-client