Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E1ADA4BC062B11F08449516EC4F9AE02.roa
File:                     E1ADA4BC062B11F08449516EC4F9AE02.roa (raw, json)
Hash identifier:          ABbCRm4169Zmlom/mbAM7SPDMmE+tdeoPLo48LZrXpg=
Subject key identifier:   2A:B7:B4:9B:1C:0A:C4:2A:AB:2F:D1:AB:CC:9C:21:1B:C1:E5:C3:B9
Certificate issuer:       /CN=A9187465/serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
Certificate serial:       1707
Authority key identifier: 88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E1ADA4BC062B11F08449516EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:25:27 +0000
ROA not before:           Tue 30 Sep 2025 17:15:11 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     134963
IP address blocks:        2401:8680:4000::/40 maxlen: 48
                          2401:8680:4100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl
                          rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 18:27:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5895 (0x1707)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187465, serialNumber=880E6B4DCD6CEC53C8D03D740C88E9773B047B19
        Validity
            Not Before: Sep 30 17:15:11 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a46877-33c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:85:01:1e:92:72:8a:59:ec:ad:ce:c9:3a:
                    24:ec:9f:08:ec:c4:41:d5:87:5d:d0:82:88:b7:57:
                    70:a6:e0:82:84:9f:6a:f4:5b:85:8c:c9:cb:ad:71:
                    0f:54:bd:57:c0:ca:82:51:c8:06:86:3e:23:b5:39:
                    61:7d:83:39:06:da:6c:38:5f:8e:ec:7c:d0:a1:0e:
                    dd:9c:05:17:49:c6:a2:ad:7c:d9:3d:d4:0e:66:34:
                    b4:2f:3f:5a:51:6b:69:16:d1:38:4c:dd:4b:d2:67:
                    fe:33:bd:e4:b7:7b:e4:0f:93:86:6b:9e:3d:0d:95:
                    c8:a4:b9:15:48:2d:78:46:a6:10:c2:02:cd:a9:cd:
                    43:a1:62:f4:f2:4b:4d:3a:8a:70:35:fb:72:91:9b:
                    b0:bb:f1:cb:81:73:a8:8e:26:29:06:6b:08:a5:28:
                    04:79:d8:c8:b6:aa:0b:dd:52:3a:24:99:17:e7:b8:
                    1c:d9:c1:a7:98:19:3d:64:d0:e4:dc:33:2d:df:60:
                    cd:ed:f7:d3:17:ac:41:58:7e:32:05:59:b9:b0:38:
                    99:2e:87:94:8f:be:8e:95:b4:43:28:6f:95:4b:52:
                    4a:f7:f5:bb:5a:4c:31:65:70:95:38:60:87:2c:58:
                    74:62:e7:4e:f1:85:c4:6e:6f:6f:49:2a:b0:7b:f3:
                    c8:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B7:B4:9B:1C:0A:C4:2A:AB:2F:D1:AB:CC:9C:21:1B:C1:E5:C3:B9
            X509v3 Authority Key Identifier:
                keyid:88:0E:6B:4D:CD:6C:EC:53:C8:D0:3D:74:0C:88:E9:77:3B:04:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/iA5rTc1s7FPI0D10DIjpdzsEexk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iA5rTc1s7FPI0D10DIjpdzsEexk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187465/B1AFB6FA0A5311E8AC7BEE2EC4F9AE02/E1ADA4BC062B11F08449516EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8680:4000::/39

    Signature Algorithm: sha256WithRSAEncryption
         44:98:0f:4d:7f:f4:51:cf:a0:bb:05:37:f7:a4:12:e6:6a:44:
         da:1e:16:be:d3:d5:19:39:8a:18:49:50:40:19:96:08:2a:9d:
         bf:25:a5:ee:5d:4d:67:3a:df:81:ef:d9:94:24:5d:b5:5b:12:
         2e:8b:84:68:02:b3:02:e8:98:b1:10:2a:00:9d:b6:33:a0:3d:
         9e:c0:91:5c:98:4e:fd:b3:ff:f2:43:6b:35:29:12:fa:15:be:
         46:fe:f7:a5:88:43:8c:f8:7b:b2:9d:9c:e0:12:bb:94:a8:e9:
         b6:64:b7:d5:0d:7e:af:42:a0:8d:47:8d:77:da:9c:69:01:b1:
         b8:30:47:d4:f6:dd:b0:51:ce:44:7e:e9:5c:52:e7:27:f4:77:
         4c:45:08:49:1d:35:cb:40:a9:99:ea:72:47:81:6f:bf:15:34:
         59:4a:40:b1:31:77:5e:84:39:58:21:e1:17:fd:36:8e:28:b8:
         2e:d1:42:20:e6:39:99:f7:90:e0:91:cd:9b:1a:66:54:59:e0:
         19:cf:50:d0:ad:32:71:40:77:b9:f4:d0:71:64:a0:05:40:90:
         fd:8c:8f:e5:0f:b7:34:95:8c:aa:39:60:12:98:fa:d1:1a:e0:
         cb:fe:25:bd:72:6d:35:2b:24:44:f4:81:a0:c6:43:2c:23:2d:
         4b:e6:b6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:11:13 2026 by rpki-client