Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/7D4302A0BEC811F0AE45220FC4F9AE02.roa
File:                     7D4302A0BEC811F0AE45220FC4F9AE02.roa (raw, json)
Hash identifier:          DdCOIo33v4IDMQPtkKtDFsOxid92dMxNzutXTG46zeE=
Subject key identifier:   82:85:26:9B:A1:01:93:53:96:A3:5F:3F:7C:77:13:AE:99:C6:82:6C
Certificate issuer:       /CN=A915E131/serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
Certificate serial:       3F
Authority key identifier: DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/7D4302A0BEC811F0AE45220FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:07:20 +0000
ROA not before:           Tue 11 Nov 2025 06:34:35 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     154355
IP address blocks:        2001:df6:3ac0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl
                          rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:52:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E131, serialNumber=DA72D0CEDAAE19A1EC3EDBA0467D598EB9915656
        Validity
            Not Before: Nov 11 06:34:35 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a3d798-ce72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f2:41:48:99:eb:3d:81:44:74:00:11:4b:5a:
                    0b:c3:ae:c9:b2:8c:f8:bf:31:f6:b5:b6:5d:d1:d0:
                    a2:ef:b7:0c:19:d9:d3:cf:94:63:5f:c0:30:5f:11:
                    69:bd:1d:47:11:f4:c6:4a:90:9d:46:ca:09:01:63:
                    03:e8:3d:17:6b:a5:20:78:0a:86:0c:31:59:14:54:
                    9b:9f:21:73:88:ec:87:0b:e5:95:a9:7c:23:63:f5:
                    cb:8d:97:91:bf:a4:59:54:b7:af:75:d7:ad:94:f3:
                    16:43:89:cb:59:08:e5:27:e4:6b:08:80:ce:b3:26:
                    41:1a:c8:fc:3e:ed:0d:58:e0:e2:49:5d:3b:68:22:
                    01:21:ce:f3:e4:b0:24:5b:a7:8c:b2:8a:a1:a6:f7:
                    56:1d:b7:c0:18:fb:47:5a:4e:36:a6:db:87:91:62:
                    fa:8e:b4:65:da:f2:db:ce:0a:f7:ce:8b:3d:d5:c1:
                    b9:b3:5d:65:42:ac:95:23:7c:b9:8a:47:d2:41:07:
                    f9:df:03:f8:b6:06:55:5f:ab:55:a0:f0:3a:31:52:
                    12:af:5e:70:85:d3:00:50:41:3b:45:ee:80:dd:71:
                    ba:06:aa:95:c0:2c:97:a1:b1:1a:a3:95:8f:73:51:
                    46:d3:97:6f:fc:b3:fd:a9:bb:ec:0b:4d:e5:5e:88:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:85:26:9B:A1:01:93:53:96:A3:5F:3F:7C:77:13:AE:99:C6:82:6C
            X509v3 Authority Key Identifier:
                keyid:DA:72:D0:CE:DA:AE:19:A1:EC:3E:DB:A0:46:7D:59:8E:B9:91:56:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/2nLQztquGaHsPtugRn1ZjrmRVlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2nLQztquGaHsPtugRn1ZjrmRVlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E131/65C38C98BC1211F0B696607BC4F9AE02/7D4302A0BEC811F0AE45220FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:3ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:2a:8f:d6:c5:b5:87:1c:99:76:88:0d:c4:a7:c3:b6:30:75:
         8c:af:a3:85:02:f0:c7:ea:df:7f:e1:d5:67:fc:3a:b1:4d:8c:
         b3:8d:44:39:f1:89:84:fa:2f:66:61:81:24:8a:20:9e:3c:0f:
         a8:67:24:b2:76:de:89:32:e6:36:55:14:e8:f2:2f:89:8c:63:
         68:db:d6:ba:4b:6c:97:f1:9c:18:4d:2f:74:fb:91:b8:79:e6:
         97:3b:1d:66:9e:15:f8:c5:3c:86:81:cf:a2:4b:8f:5a:0d:ac:
         8e:46:ce:b2:d7:80:8a:f8:24:ed:c2:c2:5e:6e:c5:da:cd:83:
         ca:8a:93:14:b8:f5:dc:9e:03:5d:57:4c:68:5a:3f:8d:7b:c5:
         c7:38:1d:01:99:ac:e6:f0:17:40:ca:f0:f0:5d:a2:fe:67:27:
         e4:ef:3a:d4:8b:66:59:9f:f7:83:81:fb:4b:7f:cf:8e:74:f5:
         0a:79:64:8f:a4:9e:b5:f9:06:aa:16:58:d4:92:a7:8f:f6:ca:
         89:b1:0e:40:db:4f:e2:4c:43:35:c3:1a:e9:cd:63:cf:49:9a:
         f7:ff:67:28:78:77:52:1e:8d:8c:e0:b7:57:60:1d:04:f3:ee:
         e5:8e:8f:11:cc:cb:b9:8b:a4:b7:b7:69:0c:f9:e8:fc:58:8b:
         92:29:c7:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:00:37 2026 by rpki-client