Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/F78ED0BAEBC911F0BD3A2F28686F56BC.roa
File:                     F78ED0BAEBC911F0BD3A2F28686F56BC.roa (raw, json)
Hash identifier:          mYlmgGrl1cpOVwk/yfFMWaMRlu5qvK9L3PPljtxzekI=
Subject key identifier:   2E:C9:88:D0:5D:03:B7:05:76:91:D9:21:71:94:BA:5D:37:AC:F8:D3
Certificate issuer:       /CN=A918B909/serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
Certificate serial:       21
Authority key identifier: 6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/F78ED0BAEBC911F0BD3A2F28686F56BC.roa
Signing time:             Sun 01 Mar 2026 05:47:15 +0000
ROA not before:           Wed 07 Jan 2026 13:08:32 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142175
IP address blocks:        2402:4620::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl
                          rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B909, serialNumber=6E96EAFC8FCEA1A7FF31ECDE0A5066D7B1C3C47A
        Validity
            Not Before: Jan  7 13:08:32 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d2e3-77e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7c:4b:48:c0:fd:96:01:07:82:0f:4e:47:47:
                    a9:6a:58:d4:c5:6f:0d:be:f0:34:88:08:4b:03:6a:
                    cc:88:73:30:b6:90:f8:ba:1c:a0:40:97:aa:ca:0b:
                    68:ce:51:b3:64:78:e7:2c:60:49:20:df:d1:cc:63:
                    22:94:ab:a4:ea:26:cf:26:c8:1f:ef:c0:23:a3:5a:
                    91:8b:e4:4d:c1:f1:40:b4:cf:20:8c:59:ee:71:80:
                    e3:ba:ed:b0:63:bd:6c:dd:fc:81:92:0c:84:47:e0:
                    d3:ec:ad:da:ab:df:38:b4:9d:e7:2b:fb:fb:d6:46:
                    b2:ed:ed:7c:ca:59:7f:f2:58:e0:54:ce:a4:e5:46:
                    fa:62:d2:8b:15:33:8c:9f:cc:e0:e0:7a:b5:04:cd:
                    09:ab:59:5b:f3:1a:34:ac:c9:04:a7:70:d8:3e:97:
                    b0:44:06:f7:cb:0d:2e:2e:cd:21:0c:46:24:48:83:
                    c7:15:c3:02:72:25:c5:6d:2e:13:a2:23:f6:cb:23:
                    b7:01:81:92:28:86:3f:9b:14:7e:87:fa:34:86:0b:
                    42:db:97:81:e2:49:be:69:0d:e5:91:5a:cc:fb:32:
                    89:15:85:a4:6d:26:27:f1:fc:f0:a5:56:ab:e4:ba:
                    df:a8:04:21:28:c8:d0:74:47:09:70:78:27:1f:da:
                    3e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C9:88:D0:5D:03:B7:05:76:91:D9:21:71:94:BA:5D:37:AC:F8:D3
            X509v3 Authority Key Identifier:
                keyid:6E:96:EA:FC:8F:CE:A1:A7:FF:31:EC:DE:0A:50:66:D7:B1:C3:C4:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/bpbq_I_Ooaf_MezeClBm17HDxHo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bpbq_I_Ooaf_MezeClBm17HDxHo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B909/64CA7B08EBC911F0936EDB83676F56BC/F78ED0BAEBC911F0BD3A2F28686F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:4620::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:cd:2f:fb:8d:1e:14:da:48:5e:6a:3a:5e:0c:c9:37:e1:dc:
         d0:20:48:da:bb:2e:3c:67:d1:b3:70:c9:34:07:c9:72:1a:75:
         de:cc:10:8b:22:b4:3f:72:b3:c9:40:2e:c8:60:39:91:af:b0:
         c6:b7:d6:8e:7e:b8:8c:b7:be:75:5d:65:a2:41:81:6e:51:1e:
         b5:a4:c7:40:0f:5d:2d:79:a9:bd:de:53:fd:33:e5:d6:3d:ea:
         8a:34:d1:ad:df:0f:af:f3:83:cc:59:d6:51:7d:f2:8a:39:ae:
         74:42:08:2d:72:92:b3:01:80:4c:af:dd:1f:37:c6:9a:55:cd:
         69:fe:88:9d:21:5c:6f:05:eb:7f:c6:51:6c:e5:32:3b:5f:2a:
         6e:ca:83:aa:26:28:fb:c5:c0:04:90:ed:12:cd:cb:83:0d:b0:
         0a:13:e5:6a:ca:fe:b1:80:1c:6d:ed:df:00:5c:cf:60:fe:ef:
         01:51:93:89:e5:b7:a2:a0:09:94:f9:7b:57:65:b9:ba:39:1f:
         cb:46:0d:1a:f6:2a:b7:53:ca:34:e9:2b:71:4f:7c:86:4a:1a:
         0a:80:d2:b0:a7:40:ae:db:b8:03:a4:b4:59:d1:4d:2d:4e:80:
         b6:c5:1f:cf:88:5c:7e:0b:ad:d3:c1:72:19:cc:14:01:4a:03:
         a5:ce:1e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:42:33 2026 by rpki-client