Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa
File:                     44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (raw, json)
Hash identifier:          1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=
Subject key identifier:   74:B5:69:0C:61:52:B4:C6:AC:1F:86:71:EB:B1:7F:B3:E0:C2:76:31
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       04D7
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa
Signing time:             Fri 03 Apr 2026 00:31:38 +0000
ROA not before:           Fri 03 Apr 2026 00:31:38 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     204185
IP address blocks:        2400:58a0:e000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: Apr  3 00:31:38 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf0a6a-3cca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ad:70:fa:42:66:22:d5:1e:cf:d4:19:0a:e8:
                    22:6e:f9:00:ef:05:f9:77:e2:48:60:c7:52:b2:81:
                    8e:8f:b2:d2:be:3f:97:fd:94:e6:a5:b0:cd:92:8e:
                    8e:b8:e5:f0:f9:fd:8f:3b:30:8d:16:37:3b:f9:14:
                    0f:9a:0b:fa:f1:c4:6a:5c:ee:0e:8a:4c:40:99:dd:
                    26:a2:bd:9e:29:7f:b9:1f:44:68:00:a6:66:6d:bf:
                    71:08:56:3e:b3:62:ab:f1:a4:f1:07:c3:63:4b:b2:
                    14:07:f1:22:13:47:ce:3f:57:2d:40:aa:ab:71:44:
                    8f:11:7d:7d:58:33:b5:15:97:6d:9a:06:ee:a8:50:
                    77:0a:11:1a:8c:63:03:22:f9:3e:54:f3:8f:25:43:
                    09:13:40:9f:ad:d8:05:40:d2:fb:5c:ab:e9:d9:8a:
                    eb:7b:21:bb:fa:39:b1:ae:27:80:f4:aa:d8:06:b5:
                    82:ab:f3:23:2a:86:5e:3d:7a:5e:82:cc:0e:4f:69:
                    c1:e3:7b:8c:79:eb:67:6f:14:9d:dc:50:e7:b7:3a:
                    68:1a:cb:fc:8b:84:70:06:a5:7d:ab:29:98:23:c8:
                    f0:8d:ba:80:63:64:b9:73:b3:54:25:ca:a1:ee:75:
                    b8:ed:92:2e:b1:87:31:3a:1b:63:ea:9b:d7:43:44:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B5:69:0C:61:52:B4:C6:AC:1F:86:71:EB:B1:7F:B3:E0:C2:76:31
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:58a0:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         14:3a:3e:27:3b:12:51:a1:71:84:a9:d0:e1:14:c9:14:84:a3:
         ad:c5:f8:1d:89:31:df:86:54:e1:0c:3f:13:7c:91:a3:c4:50:
         ab:12:ec:4f:77:4d:c9:ad:14:07:cc:73:8b:2e:f9:22:9b:bc:
         0e:74:59:83:87:43:fe:e5:6c:1c:33:f4:a0:87:0c:53:01:40:
         56:a1:b7:b5:1d:8e:1a:55:94:ac:79:c4:46:2a:6a:f6:21:7e:
         4b:0d:a9:1a:56:3b:a2:3d:54:ab:c0:d9:b1:cc:75:37:cb:67:
         47:df:de:e5:35:c0:29:a5:9e:e6:b6:e0:00:ea:61:69:88:f7:
         3c:ef:d1:95:42:e0:ad:88:b0:28:94:76:51:25:b1:3b:56:10:
         8e:b8:ea:f6:e2:56:ea:46:6e:0d:ab:c5:35:bc:e6:e0:6a:53:
         ef:e4:d7:b4:2d:f6:8c:55:e5:7b:c8:9a:f5:11:8e:45:3f:f1:
         7e:69:6d:0e:48:0f:c0:59:67:51:74:ec:c0:63:7f:eb:7a:72:
         3c:24:1d:75:98:84:22:41:d7:b4:04:60:cd:5f:0c:b8:2a:07:
         84:9e:39:8d:49:43:e3:68:c5:c3:9c:e3:19:0e:9e:49:bd:cb:
         f2:b0:11:18:b9:7f:b7:48:ca:43:5f:f8:1e:dc:2e:f5:aa:85:
         68:6f:62:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:48 2026 by rpki-client