Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/A5D75708E07111ED9601E941C4F9AE02.roa
File:                     A5D75708E07111ED9601E941C4F9AE02.roa (raw, json)
Hash identifier:          g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=
Subject key identifier:   55:4A:8C:3E:8F:17:AF:FC:B0:08:7E:4F:22:90:13:39:E8:81:B6:B2
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       04D4
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/A5D75708E07111ED9601E941C4F9AE02.roa
Signing time:             Fri 03 Apr 2026 00:31:32 +0000
ROA not before:           Fri 03 Apr 2026 00:31:32 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     151192
IP address blocks:        2400:58a0:1400::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:59:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1236 (0x4d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: Apr  3 00:31:32 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf0a64-aa4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:45:62:74:57:5f:46:14:13:54:6c:7c:62:1e:
                    90:4c:fe:a4:23:ae:13:52:d7:1a:fa:9f:dc:8f:86:
                    3e:ed:32:fa:4f:ad:85:77:09:72:89:a4:29:b1:7f:
                    c9:1a:6d:78:ee:18:4e:e4:b2:98:e3:26:91:d0:7a:
                    6e:5a:74:57:65:9a:48:f7:7a:81:d3:b2:72:c4:86:
                    22:cc:b9:09:b5:ad:7e:b0:32:bc:de:19:a8:58:34:
                    83:9b:1c:8c:15:c0:92:38:86:31:18:a3:a8:94:56:
                    d4:43:48:c1:62:ea:6c:a4:94:2a:fa:38:97:fa:28:
                    a0:2c:68:49:37:4f:41:77:4a:f2:38:ba:1d:fa:c7:
                    ae:cf:11:91:38:36:2a:63:89:80:8b:9f:08:fc:42:
                    d3:39:50:83:1a:46:67:a8:82:ae:50:bf:51:77:2b:
                    48:25:d7:07:9f:30:6b:46:1d:a2:3e:57:a2:a4:0a:
                    77:26:f6:93:6f:1d:58:a4:5b:92:5a:d0:cb:71:6e:
                    ed:27:6f:b5:65:b5:f9:f9:84:c7:ca:90:5f:4f:e6:
                    2d:13:4e:5d:44:53:8b:d1:6b:b4:ee:32:a2:8c:72:
                    90:bd:e7:19:67:0f:d0:6a:1b:2b:44:99:5d:ea:6e:
                    37:b7:7e:2f:31:62:f1:bc:1f:ab:d2:37:c2:32:59:
                    21:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4A:8C:3E:8F:17:AF:FC:B0:08:7E:4F:22:90:13:39:E8:81:B6:B2
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/A5D75708E07111ED9601E941C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:58a0:1400::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:f4:49:9e:fc:40:f8:69:87:bf:46:81:52:c8:91:6b:dc:9b:
         78:83:01:51:d3:25:ad:8b:c0:d5:73:5f:37:3e:ed:f2:f6:f9:
         ff:fc:97:01:f1:7b:00:6c:32:c7:7b:0d:e8:02:5e:d7:35:81:
         a7:b1:16:02:dd:51:01:0e:cc:6c:6a:9e:a7:bf:98:21:c0:e9:
         d6:ac:ff:f4:9a:1f:fa:2d:96:ea:a7:fe:b0:1d:82:06:6a:37:
         15:9e:25:1c:52:2b:db:2e:15:33:77:f5:95:61:a7:94:f1:2b:
         1a:6d:d5:ab:d3:cb:ae:26:1e:fb:1d:18:78:f1:4d:20:76:8e:
         c6:4e:98:3a:c3:c9:bc:ee:4c:7b:81:6e:15:ff:78:f0:a1:9a:
         1b:c9:44:b3:fc:fd:7a:7f:82:6e:bc:97:a7:b4:de:f2:18:8c:
         f3:ac:05:a2:ec:bb:6d:f5:0c:64:ce:c2:77:87:ff:a8:15:d3:
         5e:de:83:3f:2f:ef:84:3d:74:22:35:fd:da:51:48:a8:68:0f:
         6d:73:ab:a4:ba:d5:8a:5f:dc:2e:93:b1:c1:98:76:9a:95:30:
         02:c6:ca:39:c7:80:4d:fe:c4:ec:df:62:13:7b:1a:e8:ef:8c:
         43:8c:8c:e0:a6:13:b7:c2:84:3d:87:76:65:52:4f:e5:38:f6:
         a6:88:a1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:35:38 2026 by rpki-client