Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/5818925E826A11ECBF45DE23C4F9AE02.roa
File:                     5818925E826A11ECBF45DE23C4F9AE02.roa (raw, json)
Hash identifier:          FbU7ogZGnxwpy8uO7TQa4C+PC7rIoNaS0brHXrx8V3Q=
Subject key identifier:   79:AD:79:53:51:14:DB:24:5F:E7:C0:E6:9E:41:62:8F:5D:23:83:CD
Certificate issuer:       /CN=A917647E/serialNumber=FDD2507822183CE80759419D56540606A2486B4B
Certificate serial:       08D2
Authority key identifier: FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/5818925E826A11ECBF45DE23C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:05:36 +0000
ROA not before:           Fri 16 May 2025 21:19:19 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     17439
IP address blocks:        2400:ffc0::/47 maxlen: 48
                          2400:ffc0:13c::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl
                          rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:38:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2258 (0x8d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917647E, serialNumber=FDD2507822183CE80759419D56540606A2486B4B
        Validity
            Not Before: May 16 21:19:19 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a447af-ed5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:c4:21:18:2b:c6:54:93:d2:33:7d:ba:55:
                    0a:9f:0f:e2:41:17:07:5a:42:01:9f:a6:2f:f4:5f:
                    c1:15:be:05:82:07:b8:43:a3:46:4b:58:67:ec:59:
                    91:42:37:e4:20:7e:10:12:79:d7:d1:07:77:9a:fa:
                    25:b0:ab:90:aa:83:19:6e:47:7a:61:c7:bd:c3:85:
                    27:52:0d:35:1d:5f:03:5b:7f:39:3e:46:e4:87:8f:
                    07:5c:c5:31:3f:6d:0a:d1:a6:c6:9c:b2:c9:1b:56:
                    61:d1:85:36:ff:39:1b:e1:17:a7:16:a1:a3:58:aa:
                    75:7d:3f:2f:52:e4:20:79:aa:8d:cb:bb:95:6d:ed:
                    9a:b9:70:37:6a:52:70:94:44:86:ee:8d:12:eb:01:
                    74:2c:18:c8:35:8c:dc:bd:ca:1a:99:52:66:81:23:
                    3f:ee:14:3e:c2:29:d9:ec:6d:3e:59:9c:c2:de:a3:
                    02:33:4f:4c:c4:42:b2:ec:56:7f:6a:8e:60:54:74:
                    38:a6:9e:36:fc:91:c0:37:a3:ad:ee:0d:31:ef:2f:
                    c7:b3:f8:22:46:20:7e:f1:d4:0b:c0:96:35:a7:33:
                    8c:d9:7e:1d:ee:d5:fe:e0:d8:a8:26:4b:52:d7:78:
                    91:04:9f:5b:3d:4d:94:5a:36:38:1e:da:4a:5a:b6:
                    71:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AD:79:53:51:14:DB:24:5F:E7:C0:E6:9E:41:62:8F:5D:23:83:CD
            X509v3 Authority Key Identifier:
                keyid:FD:D2:50:78:22:18:3C:E8:07:59:41:9D:56:54:06:06:A2:48:6B:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/_dJQeCIYPOgHWUGdVlQGBqJIa0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dJQeCIYPOgHWUGdVlQGBqJIa0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917647E/0D10B804D63111EA9A5A583BC4F9AE02/5818925E826A11ECBF45DE23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:ffc0::/47
                  2400:ffc0:13c::/47

    Signature Algorithm: sha256WithRSAEncryption
         20:fe:2e:6c:6c:d3:db:d5:93:7b:c1:42:69:eb:2f:42:07:12:
         ff:4a:4f:7a:d2:22:fe:fd:df:e1:11:dc:5a:c3:87:07:04:1d:
         ed:be:02:7c:7f:c1:3d:bf:dc:49:35:45:03:95:6c:f9:e9:2d:
         5d:2c:d0:1e:9e:9e:0b:cb:7c:6d:25:01:68:b0:67:cc:a1:57:
         84:d9:68:ec:dd:d0:dd:4e:66:c8:3c:8a:c0:cf:53:c6:b0:a3:
         0d:31:da:41:87:4e:e2:16:66:39:06:5f:6f:06:e4:77:25:2d:
         42:0a:68:f1:c4:b0:7d:6f:70:ed:5d:85:de:46:bc:1a:8c:c1:
         d2:d2:b8:dc:74:55:9e:2a:25:4d:82:6f:eb:b0:28:8b:e5:1d:
         7b:81:b3:49:8e:98:0a:83:fe:1d:e3:64:c7:48:47:bb:bd:dd:
         d1:cc:f8:f8:1b:f3:f6:e3:bc:9d:2c:46:63:fd:92:16:d5:c4:
         d2:98:8b:a8:8a:f6:5a:a4:ea:e3:a5:b0:dc:51:4f:f6:aa:ac:
         30:69:16:3f:54:fb:fb:19:31:a2:4b:87:95:76:70:89:39:12:
         64:43:56:52:87:d1:cc:2a:6d:2a:4a:58:ed:c6:44:29:87:06:
         e3:85:81:34:45:8f:6f:ca:10:a3:ab:30:23:99:92:9b:65:ff:
         81:66:86:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:58 2026 by rpki-client