Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/82755B58021E11F1B34B19A3496F56BC.roa
File:                     82755B58021E11F1B34B19A3496F56BC.roa (raw, json)
Hash identifier:          ifPwyUF2Mr82aFijpmqBd1JrpsYwJgee18Gcn8+c8eE=
Subject key identifier:   6D:15:FA:F5:7E:6A:34:EB:8E:9B:CC:13:05:04:7C:6E:33:9F:C8:5E
Certificate issuer:       /CN=A915EA14/serialNumber=BB1E8A03E698F9287BFC64253FBFC63745E8823A
Certificate serial:       11
Authority key identifier: BB:1E:8A:03:E6:98:F9:28:7B:FC:64:25:3F:BF:C6:37:45:E8:82:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/82755B58021E11F1B34B19A3496F56BC.roa
Signing time:             Sun 01 Mar 2026 05:37:29 +0000
ROA not before:           Wed 04 Feb 2026 23:09:09 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142265
IP address blocks:        2402:4c20::/32 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.crl
                          rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:35:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA14, serialNumber=BB1E8A03E698F9287BFC64253FBFC63745E8823A
        Validity
            Not Before: Feb  4 23:09:09 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3d099-9a62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:71:9f:ce:f6:8e:d9:23:cc:c3:1d:05:f1:49:
                    d0:73:f2:db:d5:69:7c:fc:8b:5b:29:7f:b9:94:40:
                    65:a1:dd:7d:30:f7:8a:4f:38:79:60:cb:95:7b:f2:
                    79:80:9f:bc:96:35:4d:70:98:40:40:6f:22:f2:98:
                    35:b4:ad:72:bd:34:f6:e4:88:e3:fd:7f:07:35:4c:
                    25:95:f2:cc:4f:61:d2:43:d2:f8:86:94:ea:54:3d:
                    72:21:65:7a:20:6e:ed:3b:08:3f:93:71:0f:9a:99:
                    fb:e0:e9:d9:4c:f9:00:13:0f:75:1f:40:2c:a8:6f:
                    54:88:a4:51:d8:4c:cc:58:47:e8:4e:f4:f9:3d:91:
                    4c:f1:3d:1c:21:2c:f1:20:f8:28:4f:76:5f:17:d2:
                    00:63:2b:20:b8:6a:83:a8:01:32:6d:61:d8:02:46:
                    cd:37:73:ec:a1:a1:30:ac:a1:34:7e:9f:9e:b7:d4:
                    9c:93:18:fb:4d:03:69:ce:02:bc:2f:37:fc:3a:c3:
                    4a:dc:90:e4:01:29:86:79:34:e9:b8:2e:cf:82:67:
                    60:95:d5:98:99:71:14:c0:4d:3d:2c:58:ab:a9:b2:
                    89:cb:19:bf:a0:45:db:5a:3e:c1:79:20:69:df:25:
                    15:e1:f4:1f:c8:2d:6b:4b:5b:27:1d:7b:b4:11:fe:
                    ce:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:15:FA:F5:7E:6A:34:EB:8E:9B:CC:13:05:04:7C:6E:33:9F:C8:5E
            X509v3 Authority Key Identifier:
                keyid:BB:1E:8A:03:E6:98:F9:28:7B:FC:64:25:3F:BF:C6:37:45:E8:82:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ux6KA-aY-Sh7_GQlP7_GN0Xogjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA14/BB543620021D11F1AB56282F496F56BC/82755B58021E11F1B34B19A3496F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4c20::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:24:e5:e3:48:b4:92:e5:40:76:4f:33:9e:06:e5:2e:29:b3:
         09:4c:90:ff:6f:95:ec:62:8f:ad:6f:3c:87:23:40:37:3f:af:
         a5:56:13:4c:8b:1f:cf:79:a4:6b:e6:8e:c4:f3:68:cd:cf:3c:
         bb:ab:eb:a2:dd:04:d9:28:65:37:8a:f4:09:0a:6a:ef:52:ed:
         38:58:6e:f8:47:bd:ff:ec:32:2e:68:e6:01:97:d5:14:52:ff:
         fb:9c:0d:1c:85:70:14:55:ce:19:fe:f3:08:d2:db:4f:67:aa:
         de:d9:57:e1:28:1e:e2:3f:b4:31:6d:d3:ff:34:54:af:41:ec:
         82:57:fb:4d:21:9b:d7:cf:5b:df:b0:82:28:58:ea:85:24:ab:
         8f:ea:cc:e3:ea:bc:db:a7:dd:bd:d4:32:dd:14:40:27:6e:c5:
         a5:69:75:91:01:79:c8:66:de:f3:2f:15:54:77:7a:30:71:92:
         69:10:d2:b7:a2:f8:19:4b:36:af:d6:76:c5:c2:0d:06:52:b5:
         db:19:61:e5:94:c0:e4:1b:08:9b:ab:b9:aa:4a:da:f5:43:4f:
         d7:ea:a1:c5:8c:f4:8d:92:71:89:96:ef:89:fc:f3:cd:07:c9:
         9c:bc:b2:95:aa:df:3a:a0:28:43:59:8b:a8:1d:3b:7d:45:c3:
         e5:aa:70:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:44:02 2026 by rpki-client