Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/279A9510AB7811F09488DF65C4F9AE02.roa
File:                     279A9510AB7811F09488DF65C4F9AE02.roa (raw, json)
Hash identifier:          VDEG9uYnA0JBamRc9RQkM6uHkD5VN9k7K1KLwiRD5oI=
Subject key identifier:   15:75:A3:16:67:F0:AD:0E:24:AD:C5:93:E4:44:28:FE:F8:65:55:67
Certificate issuer:       /CN=A915FDD9/serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
Certificate serial:       E2
Authority key identifier: 03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/279A9510AB7811F09488DF65C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:19:11 +0000
ROA not before:           Sat 07 Feb 2026 06:25:01 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     146943
IP address blocks:        2001:df4:f0c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl
                          rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:32:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915FDD9, serialNumber=03788EE2BAE4D805EBCDCA6618E2EC1A18A5C4E2
        Validity
            Not Before: Feb  7 06:25:01 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a466ff-94aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8d:8b:56:01:a5:7b:06:44:f5:c4:a4:8f:4d:
                    76:a6:1c:aa:59:7a:28:57:b3:83:77:33:e4:7c:a3:
                    ac:c6:2e:f5:be:b4:01:74:5d:75:db:cf:1f:fc:f7:
                    14:6b:4e:b8:53:c6:e9:5a:68:02:2b:42:eb:06:98:
                    0a:7c:e4:fc:1f:cf:f8:0b:f0:29:39:22:07:e1:b4:
                    e6:37:18:5f:0d:72:b3:9e:8e:ab:ae:f0:e8:07:1f:
                    c8:f4:66:0b:30:e3:23:36:35:5c:f2:a2:f1:88:67:
                    64:e4:d0:e4:1f:fa:71:1d:7f:81:41:6b:55:5d:16:
                    b2:a1:bc:0b:d6:28:d6:42:8b:7f:df:4a:f3:81:84:
                    e7:2a:cb:3a:08:fd:ef:4d:4c:ee:ec:ab:4d:be:24:
                    ef:d4:73:e0:26:fa:26:bc:05:35:01:34:bd:59:da:
                    42:f5:83:ac:64:fe:2c:09:6d:d8:0d:ff:f0:ab:72:
                    ed:70:fb:fb:af:52:c9:05:f7:03:85:de:02:68:61:
                    67:e9:26:11:b9:aa:a0:19:03:5b:e1:e4:33:ca:df:
                    9e:c1:c8:da:59:eb:41:da:d6:69:d9:9b:f2:de:74:
                    80:a0:14:43:ff:1d:1e:e0:4e:46:8d:fb:64:f6:6a:
                    1a:0f:ad:f7:33:22:b3:0e:7d:06:2d:01:c6:d9:86:
                    fc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:75:A3:16:67:F0:AD:0E:24:AD:C5:93:E4:44:28:FE:F8:65:55:67
            X509v3 Authority Key Identifier:
                keyid:03:78:8E:E2:BA:E4:D8:05:EB:CD:CA:66:18:E2:EC:1A:18:A5:C4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/A3iO4rrk2AXrzcpmGOLsGhilxOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A3iO4rrk2AXrzcpmGOLsGhilxOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FDD9/BE7CAC12D6DE11EFB0474E1BC4F9AE02/279A9510AB7811F09488DF65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:f0c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:43:7a:4a:b4:86:08:87:e2:78:fd:ef:55:eb:32:e1:17:a7:
         71:e3:0b:b8:a6:c4:b1:6a:33:d5:c8:2a:6c:1e:10:27:76:04:
         e3:b0:a7:d5:79:1d:3a:15:d8:86:f4:b8:6a:d3:6b:eb:3c:9a:
         55:eb:c9:bc:0a:7f:c6:ca:a8:e5:34:20:c0:40:f6:7d:47:9a:
         5f:b3:e7:6f:4e:a1:4f:05:85:48:89:49:bb:e4:6d:35:89:99:
         e0:d2:56:e1:6c:23:50:a0:e5:12:dd:50:22:7c:54:b7:29:6c:
         30:90:44:3d:7a:82:55:ce:5e:0b:a6:95:d4:5c:7b:d1:57:7f:
         46:14:cd:57:6b:3e:19:98:8e:5f:24:bb:b6:4e:b9:37:8c:95:
         ef:ef:d5:de:47:26:73:0b:34:73:8b:1c:c5:99:92:43:53:e4:
         46:76:8f:d3:6e:16:54:c2:4e:c3:20:72:1a:df:0d:50:cf:d1:
         ac:ca:47:19:5d:fd:74:49:81:c0:f9:4c:fd:5d:0c:90:ec:42:
         8f:6f:82:04:d1:8f:23:15:99:29:c6:61:63:db:06:1f:55:50:
         a2:e0:56:f0:34:25:bf:08:39:b5:70:bf:8b:36:ac:54:bb:e1:
         18:08:95:09:10:86:e0:15:99:cb:e0:40:7c:58:82:7f:cb:17:
         73:8f:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:22:34 2026 by rpki-client