Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/627CDAE66FE011EF937A9931C4F9AE02.roa
File:                     627CDAE66FE011EF937A9931C4F9AE02.roa (raw, json)
Hash identifier:          dSrnz3WIJN23ToDXz4zdL4ydSKCxj7R6eit3Fvj9Yck=
Subject key identifier:   2A:40:C9:02:B9:5B:C0:73:BB:C5:7D:8F:2F:52:4F:FC:B4:5C:77:78
Certificate issuer:       /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial:       0146
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/627CDAE66FE011EF937A9931C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:41:37 +0000
ROA not before:           Tue 25 Mar 2025 05:42:59 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     141153
IP address blocks:        2001:df3:7540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 12:41:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
        Validity
            Not Before: Mar 25 05:42:59 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a58581-04ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:49:af:1c:4c:9c:b1:db:57:6c:fa:43:a3:1c:
                    ca:fd:28:c2:de:b1:80:91:2a:a9:d6:72:bc:55:5f:
                    05:6c:dc:f7:ea:9a:54:98:5c:5c:f6:e8:38:2d:43:
                    47:fe:33:ef:2f:01:fe:88:fb:e4:a4:c7:27:e3:e6:
                    da:ac:0b:70:42:a9:ed:7e:fa:79:45:90:68:7c:a4:
                    c3:b0:78:30:c5:90:cd:5b:bd:cb:68:b6:40:bc:99:
                    7c:40:51:b2:97:6b:cb:9a:bb:17:05:e8:1b:55:72:
                    32:cf:0a:69:25:36:6f:0b:e2:6d:bf:fb:ae:3d:b2:
                    ac:06:43:ec:eb:20:cd:18:e8:14:d7:b3:95:ef:6f:
                    0f:8e:9d:12:36:a3:3e:4b:d8:42:9c:97:86:fd:54:
                    80:b7:ed:91:ff:38:88:38:36:86:b6:eb:fd:30:34:
                    05:fe:b2:bf:b3:4a:f5:28:e4:31:ac:47:f0:64:20:
                    15:2d:9e:d6:5a:ae:91:44:3a:89:7f:70:1a:14:10:
                    e0:5e:fd:10:c2:0e:75:27:bf:7b:18:a2:3b:ea:dc:
                    6c:c9:c4:39:25:62:0b:dd:e7:20:51:8e:66:96:e1:
                    53:89:7d:4f:08:5e:cb:62:2b:76:af:53:0e:89:19:
                    0c:18:04:ff:75:57:51:95:5f:2d:af:1c:73:7b:1e:
                    12:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:40:C9:02:B9:5B:C0:73:BB:C5:7D:8F:2F:52:4F:FC:B4:5C:77:78
            X509v3 Authority Key Identifier:
                keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/627CDAE66FE011EF937A9931C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:7540::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:e6:9e:7e:c1:c3:0a:ea:a3:6b:7d:bb:95:b9:98:46:e1:f6:
         ec:98:3b:8f:52:83:a1:5e:93:61:25:2a:bc:39:d2:fa:02:32:
         8e:b3:f6:b3:b1:01:2b:80:73:cc:7d:cd:8b:15:9f:a2:70:18:
         a3:35:2c:39:91:fd:39:c2:9a:4d:34:3c:04:18:a6:a1:8e:a2:
         b0:cf:6a:ff:21:36:89:02:94:df:dd:cf:3e:e3:15:8c:34:65:
         50:de:01:48:bf:72:da:60:94:17:8c:b4:80:0d:40:33:29:62:
         a4:81:d2:6c:61:35:c1:8e:1a:de:53:9a:72:47:53:6b:d3:71:
         cb:c1:5b:73:6b:67:ba:0f:bb:79:d7:1b:48:0f:ca:2c:3e:58:
         cc:e0:39:e9:de:39:0b:2d:14:4a:77:b7:50:0c:c2:93:5b:84:
         d5:e3:d1:7b:5a:e3:20:2b:93:55:09:99:e3:a3:65:28:e4:b1:
         20:c6:6d:73:95:ce:c1:53:8a:37:87:ea:22:71:05:d2:52:b2:
         ad:47:9f:13:c1:4d:87:2d:6b:a6:e7:63:15:b3:54:18:e8:da:
         91:cb:23:b8:27:de:7e:39:f2:18:31:8d:cc:5f:49:c5:4c:e3:
         7b:4f:d4:af:2b:d6:58:6d:f9:d0:b6:23:0c:58:8a:41:86:0a:
         33:5a:23:b0
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU0OUMxMTAvBgNVBAUTKDUyRURGRURGRUExNTM1QzEzRUU4QTAwRTU1RkM3RDUx
NDQ2RDY3RDQwHhcNMjUwMzI1MDU0MjU5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1ODU4MS0wNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk0mvHEycsdtXbPpDoxzK/SjC3rGAkSqp1nK8VV8FbNz36ppUmFxc9ug4LUNH
/jPvLwH+iPvkpMcn4+barAtwQqntfvp5RZBofKTDsHgwxZDNW73LaLZAvJl8QFGy
l2vLmrsXBegbVXIyzwppJTZvC+Jtv/uuPbKsBkPs6yDNGOgU17OV728Pjp0SNqM+
S9hCnJeG/VSAt+2R/ziIODaGtuv9MDQF/rK/s0r1KOQxrEfwZCAVLZ7WWq6RRDqJ
f3AaFBDgXv0Qwg51J797GKI76txsycQ5JWIL3ecgUY5mluFTiX1PCF7LYit2r1MO
iRkMGAT/dVdRlV8trxxzex4SnQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFCpAyQK5
W8Bzu8V9jy9ST/y0XHd4MB8GA1UdIwQYMBaAFFLt/t/qFTXBPuigDlX8fVFEbWfU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9FNkFCMkNERTRB
MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9VdTMtMy1vVk5jRS02S0FPVmZ4OVVVUnRa
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V1My0zLW9WTmNFLTZLQU9WZng5VVVSdFo5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODU0OUMvRTZBQjJDREU0QTMxMTFFRkI3QkJENTFDQzRGOUFFMDIvNjI3Q0RBRTY2
RkUwMTFFRjkzN0E5OTMxQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN83VAMA0GCSqGSIb3DQEBCwUAA4IBAQBV5p5+wcMK6qNrfbuV
uZhG4fbsmDuPUoOhXpNhJSq8OdL6AjKOs/azsQErgHPMfc2LFZ+icBijNSw5kf05
wppNNDwEGKahjqKwz2r/ITaJApTf3c8+4xWMNGVQ3gFIv3LaYJQXjLSADUAzKWKk
gdJsYTXBjhreU5pyR1Nr03HLwVtza2e6D7t51xtID8osPljM4Dnp3jkLLRRKd7dQ
DMKTW4TV49F7WuMgK5NVCZnjo2Uo5LEgxm1zlc7BU4o3h+oicQXSUrKtR58TwU2H
LWum52MVs1QY6NqRyyO4J95+OfIYMY3MX0nFTON7T9SvK9ZYbfnQtiMMWIpBhgoz
WiOw
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:30:10 2026 by rpki-client