Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EFDD3C4641511EF92F73520C4F9AE02.roa
File:                     5EFDD3C4641511EF92F73520C4F9AE02.roa (raw, json)
Hash identifier:          W4ULJycIk/ivAqTVPQ26fx/t+ZMfC8ltzFuq7SF30CQ=
Subject key identifier:   BE:D9:74:33:D9:9D:CA:89:B1:83:0F:E5:6E:7C:E7:E0:01:24:B7:29
Certificate issuer:       /CN=A9165739/serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
Certificate serial:       09E2
Authority key identifier: 0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EFDD3C4641511EF92F73520C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:45:35 +0000
ROA not before:           Tue 06 Jan 2026 20:16:23 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     38818
IP address blocks:        49.0.128.0/19 maxlen: 19
                          49.0.168.0/21 maxlen: 21
                          49.0.176.0/22 maxlen: 22
                          203.34.37.0/24 maxlen: 24
                          203.174.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl
                          rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2530 (0x9e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9165739, serialNumber=0A696F633677CC7FA5DC7D5BB299D39830FBE942
        Validity
            Not Before: Jan  6 20:16:23 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a46d2f-6496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:0f:dd:7f:f8:ef:f9:bb:4c:08:c8:37:55:51:
                    7c:a1:65:c9:d7:1b:55:eb:89:07:2f:b9:56:a0:38:
                    11:79:c6:41:fc:ef:87:d7:bf:89:d4:f8:ac:22:d5:
                    73:5f:c6:6d:c3:01:a4:54:44:7e:d2:53:6f:44:45:
                    69:ab:4b:f5:b7:32:30:86:41:c9:c1:49:6e:ad:c1:
                    a8:6d:9a:45:4e:b1:41:55:b0:eb:7d:46:f9:1f:6f:
                    a1:24:b6:18:06:59:ad:a3:1f:51:c0:43:5c:1e:8b:
                    9c:41:83:51:07:33:46:3a:32:30:35:b1:5e:9c:a3:
                    01:04:34:51:60:83:1b:6d:b1:18:3d:78:44:3a:5c:
                    fb:53:3c:a6:fc:14:e9:c9:d6:f4:c2:0a:e9:50:d3:
                    9b:6d:cb:3f:16:4b:a6:d8:3f:35:e0:60:86:71:4d:
                    74:0e:67:e0:d5:2c:c8:5b:5c:65:c1:7e:97:43:0f:
                    92:ab:cc:26:78:bd:9e:a7:38:c5:76:31:84:c6:17:
                    9f:7f:08:10:32:8a:df:49:84:48:31:14:7a:0c:8e:
                    d2:43:a8:83:ff:6c:29:34:ed:3b:32:04:ff:17:08:
                    82:d7:05:95:f9:4d:3b:eb:f0:9a:7f:19:00:2e:4a:
                    5d:a6:44:d7:9d:91:bb:32:bc:b2:4f:e4:18:dd:52:
                    c6:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D9:74:33:D9:9D:CA:89:B1:83:0F:E5:6E:7C:E7:E0:01:24:B7:29
            X509v3 Authority Key Identifier:
                keyid:0A:69:6F:63:36:77:CC:7F:A5:DC:7D:5B:B2:99:D3:98:30:FB:E9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/CmlvYzZ3zH-l3H1bspnTmDD76UI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CmlvYzZ3zH-l3H1bspnTmDD76UI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165739/6BA03288AC5511EAA8159E5CC4F9AE02/5EFDD3C4641511EF92F73520C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.0.128.0/19
                  49.0.168.0-49.0.179.255
                  203.34.37.0/24
                  203.174.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:cd:58:de:8f:89:ef:f7:77:72:29:c0:64:80:cc:fb:f9:06:
         61:42:44:77:4d:01:77:28:cc:55:a5:b8:d2:0a:70:a0:a5:ef:
         22:e1:04:4c:e0:16:13:0e:11:dd:55:2d:bf:e7:ef:cd:00:10:
         57:35:f3:5a:06:a7:a8:c0:cb:0e:dc:ff:5a:56:d8:56:d2:ae:
         a2:a2:bc:fc:89:c5:32:51:32:39:35:f8:1c:34:70:c0:63:60:
         6e:88:7f:18:16:4c:a3:b7:a5:2a:b5:50:0a:bf:59:e0:f0:0a:
         bb:df:c3:25:f0:70:2b:61:5d:3f:a6:c1:1c:a8:76:c0:cc:67:
         9d:9f:0a:ae:f1:fc:54:cc:ad:d9:34:fc:d8:64:2c:98:01:3c:
         8b:98:0e:88:25:7d:34:52:75:7b:f2:a2:41:bb:0b:0a:db:bd:
         ea:ff:f0:bf:6d:78:12:08:3b:32:8c:bd:15:b2:34:72:9e:25:
         d9:83:7a:d6:00:19:00:8d:f7:21:42:b8:3e:26:a6:05:99:23:
         4e:ad:57:c0:e2:35:80:5f:97:30:aa:22:6f:39:6e:36:0c:10:
         ba:46:d1:80:74:c5:a0:31:38:f5:87:60:3f:aa:70:a1:45:92:
         23:e0:68:61:f7:de:f3:d2:69:8d:96:53:58:6f:11:32:d3:56:
         4f:f4:f9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:03:51 2026 by rpki-client