Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/3A0E0B1CD47511EF91EA0832C4F9AE02.roa
File:                     3A0E0B1CD47511EF91EA0832C4F9AE02.roa (raw, json)
Hash identifier:          aCExDuGa6YujX3JL0arcNyOR8mwam9J29+GY2ZdNl4k=
Subject key identifier:   B1:CA:B1:FF:46:B9:66:23:70:8F:5F:C5:0E:AB:AC:35:D9:97:86:00
Certificate issuer:       /CN=A917C909/serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
Certificate serial:       ED
Authority key identifier: AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/3A0E0B1CD47511EF91EA0832C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:13:51 +0000
ROA not before:           Sat 31 Jan 2026 06:24:39 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     133458
IP address blocks:        2401:e260::/40 maxlen: 48
                          2401:e260:100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl
                          rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:17:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C909, serialNumber=AA0B782DB9932E22FDDEF0C3F75596EE0945E12D
        Validity
            Not Before: Jan 31 06:24:39 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a41f6f-f5ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:a9:24:aa:3a:dd:4a:fe:e8:55:26:5d:61:
                    d2:b3:63:ca:b2:7d:4f:83:a8:e0:05:45:ed:bb:a7:
                    4d:c6:07:93:02:93:16:de:66:37:64:cb:dd:7d:97:
                    1e:f3:84:9f:cb:ef:06:b4:06:0b:3c:2b:0d:b9:37:
                    f1:c6:3f:a5:01:d0:bd:79:df:76:c9:57:d0:02:ec:
                    9d:72:51:68:10:53:53:ea:95:26:a5:63:7f:08:28:
                    bb:93:58:ad:91:68:a3:22:ff:1f:42:78:ed:17:f0:
                    a0:9b:c1:51:26:b4:77:61:78:67:81:cd:04:63:ce:
                    1b:0d:76:dc:73:71:2c:1c:64:b7:f0:82:2e:55:d0:
                    c8:b7:35:e4:d8:a7:ca:f2:ba:1c:71:68:7d:ab:ce:
                    8f:f4:66:61:eb:d7:13:77:fb:63:21:43:4e:3f:65:
                    0d:39:39:29:28:c2:39:a3:e5:ac:7f:b6:70:c6:c5:
                    b0:61:4d:81:8b:a3:b0:ab:38:6a:ea:f7:4d:f9:ee:
                    f2:14:d6:52:c3:ed:86:45:43:0c:14:56:c1:06:eb:
                    22:b2:6e:e6:c6:4f:1d:6a:91:01:c9:48:d8:fa:bd:
                    5d:ef:d0:be:08:82:ea:fa:62:46:b2:d0:01:ff:1b:
                    16:69:b8:5f:ee:45:2a:4b:57:3f:d2:c4:10:6f:f3:
                    79:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CA:B1:FF:46:B9:66:23:70:8F:5F:C5:0E:AB:AC:35:D9:97:86:00
            X509v3 Authority Key Identifier:
                keyid:AA:0B:78:2D:B9:93:2E:22:FD:DE:F0:C3:F7:55:96:EE:09:45:E1:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/qgt4LbmTLiL93vDD91WW7glF4S0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qgt4LbmTLiL93vDD91WW7glF4S0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C909/07797FE4C0DC11EF9E871844C4F9AE02/3A0E0B1CD47511EF91EA0832C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e260::/39

    Signature Algorithm: sha256WithRSAEncryption
         05:7e:13:b9:c8:41:25:77:de:4d:16:00:7b:19:58:5b:cf:a9:
         d9:41:56:e6:99:d4:05:de:c8:4f:31:37:7d:5d:ae:6e:7f:3e:
         0b:8e:b3:b0:e3:a4:27:19:6c:74:73:40:17:da:15:d1:39:b4:
         58:c8:b6:2e:bf:29:47:f8:0c:cf:87:ac:f8:f2:5c:08:a8:b4:
         98:5a:79:8f:35:5f:a0:c7:3c:3b:38:96:41:a5:e1:33:e3:6f:
         b6:a5:e7:5e:1f:4d:e7:f6:ec:c1:3b:6a:86:b8:46:21:67:91:
         ec:55:7b:68:a5:a8:bb:11:e0:d4:c9:03:3a:25:44:7a:15:ed:
         2a:f1:56:e0:78:49:3a:d2:6e:4f:b4:d5:a0:de:50:87:41:db:
         11:49:db:3e:1d:e1:89:16:3c:d5:2b:17:40:78:51:56:ec:17:
         2e:e0:aa:55:83:5d:e7:0e:5b:b0:a0:d3:bb:e0:ec:b5:80:fc:
         b4:be:bd:6d:54:d7:4e:ca:14:60:a0:e2:72:ea:4d:7f:5d:71:
         9d:a2:96:d7:53:a0:10:b7:7b:e3:9a:4a:d8:9f:1a:46:9f:b9:
         ef:01:b0:ad:e9:eb:fd:93:ea:96:75:3a:8d:98:52:2d:5a:5e:
         31:5e:71:73:04:95:8c:a8:72:af:1c:58:84:c5:32:84:fb:25:
         9f:e6:4e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:47:53 2026 by rpki-client