Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/5C9B073691CD11E7AD932563C4F9AE02.roa
File:                     5C9B073691CD11E7AD932563C4F9AE02.roa (raw, json)
Hash identifier:          ywt3dHYNiuHbaJVB62YniE7qoiCCSqHfA23fnnqywh8=
Subject key identifier:   1C:F3:7B:B1:93:A4:39:FF:15:81:CC:44:FB:CD:8F:ED:EB:9D:11:A8
Certificate issuer:       /CN=A916B6AA/serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
Certificate serial:       252F
Authority key identifier: 70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/5C9B073691CD11E7AD932563C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:53:30 +0000
ROA not before:           Fri 02 May 2025 16:23:22 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     2500
IP address blocks:        2001:200::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl
                          rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:10:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9519 (0x252f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B6AA, serialNumber=70B0F046D2F3A74396E82C79E8E3DACF260B39EE
        Validity
            Not Before: May  2 16:23:22 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a460fa-1463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:40:ae:e0:a0:94:ec:3e:45:c5:91:de:aa:53:
                    ad:ca:65:30:6e:ad:70:c0:a7:f4:6c:72:92:08:cb:
                    b8:31:f4:50:90:22:75:2b:c8:f2:c9:8b:5a:46:93:
                    97:47:00:6c:a5:b5:61:36:ab:a0:d5:42:a8:11:bf:
                    94:94:d7:23:b2:80:3d:5e:09:a9:11:23:8e:db:85:
                    1d:98:e2:0a:38:bf:7a:43:02:8c:27:61:99:e3:8d:
                    2d:69:6c:39:e5:57:f6:c1:ec:90:09:c6:00:4d:0f:
                    a0:ae:1c:e7:b4:18:05:ef:5b:35:ac:c4:6e:fb:60:
                    a8:00:fd:fb:2a:ac:a8:a9:78:e6:e2:07:f8:a5:41:
                    23:85:33:29:6c:a1:6d:24:43:63:71:3a:a9:bf:88:
                    64:7d:9f:1e:76:46:64:fe:a7:3c:44:e4:87:dd:ba:
                    de:57:d0:2c:ed:0d:56:b6:90:9f:a1:48:b4:24:1c:
                    d5:39:58:29:af:93:d7:f3:d2:88:be:79:0b:1a:7b:
                    3d:60:24:18:3b:de:ff:a3:5e:b9:a6:b2:fc:3f:ca:
                    b3:a3:1d:f9:b8:f6:b2:b6:e0:91:e1:0a:18:c9:b8:
                    a1:45:00:83:c7:d3:b4:fa:11:65:af:91:52:b7:b8:
                    88:83:c3:b4:e9:39:bc:d3:fc:ca:45:1f:1e:2a:87:
                    8a:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F3:7B:B1:93:A4:39:FF:15:81:CC:44:FB:CD:8F:ED:EB:9D:11:A8
            X509v3 Authority Key Identifier:
                keyid:70:B0:F0:46:D2:F3:A7:43:96:E8:2C:79:E8:E3:DA:CF:26:0B:39:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/cLDwRtLzp0OW6Cx56OPazyYLOe4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cLDwRtLzp0OW6Cx56OPazyYLOe4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B6AA/46C7F1724F1611E58D2A3327C4F9AE02/5C9B073691CD11E7AD932563C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:200::/32

    Signature Algorithm: sha256WithRSAEncryption
         6a:42:ab:32:f6:63:e5:1b:f1:e7:4f:50:c1:78:2c:35:3d:38:
         45:dd:40:84:79:03:13:26:48:59:89:4f:d7:b4:a2:20:cd:98:
         d6:68:e7:cf:d7:23:7d:8a:b2:c4:31:65:7d:24:3c:29:e6:6c:
         b7:d1:47:a4:da:81:74:52:c5:75:0f:e7:8b:b8:d4:38:59:1e:
         80:bd:db:88:dd:99:08:57:03:a4:19:8a:8b:22:53:19:70:a7:
         20:fd:d3:8c:73:18:67:96:6a:43:34:a4:cd:a9:09:f9:01:ff:
         82:73:84:c6:2d:2a:c0:41:ed:65:c4:f0:38:b3:2d:96:ab:eb:
         09:23:76:a4:82:e5:2a:00:9b:94:61:ae:0a:08:26:7b:7b:3d:
         33:af:c3:59:db:04:6f:84:f8:aa:b5:57:30:d7:b6:73:de:cb:
         a8:f0:2c:73:f4:dc:22:85:c0:79:1e:0a:0a:01:b2:81:c6:9e:
         ed:e0:7a:d3:13:ee:f0:73:04:45:65:f3:d3:89:45:be:36:cd:
         30:96:f2:2c:76:26:1c:2d:17:11:7d:49:a0:68:50:8f:4b:30:
         bf:60:a4:1c:7e:18:fa:be:ff:0e:b2:7a:4a:6f:8e:4b:99:8a:
         3f:b4:78:f6:1b:82:14:58:49:56:ed:b5:66:dc:de:33:05:b3:
         cd:3f:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:32 2026 by rpki-client