Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/4C2B8F143BAD11F08B837C50C4F9AE02.roa
File:                     4C2B8F143BAD11F08B837C50C4F9AE02.roa (raw, json)
Hash identifier:          M42F29+lHWSZmf5X/47K8ifG1ySfiTbA4ZzoyOCU96w=
Subject key identifier:   01:59:4B:2F:09:02:EC:23:61:20:6B:EF:2C:C5:59:A8:C8:5A:11:CC
Certificate issuer:       /CN=A918EF87/serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
Certificate serial:       91
Authority key identifier: 0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/4C2B8F143BAD11F08B837C50C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:06:39 +0000
ROA not before:           Wed 28 May 2025 10:19:54 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     132475
IP address blocks:        2001:df5:9440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl
                          rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:47:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EF87, serialNumber=0B6CD127D04EEC3E8EE4183919414FD7EF39D924
        Validity
            Not Before: May 28 10:19:54 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e57f-cd55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c9:cd:46:7c:7d:34:21:6e:25:60:bf:ff:47:
                    a4:22:fd:37:5c:dc:31:11:54:bf:62:f7:47:bd:80:
                    94:49:bb:80:2f:14:77:99:db:8c:a0:a0:07:bb:6c:
                    e2:97:60:fd:cd:68:ac:fa:97:43:3c:f6:3a:38:ec:
                    a8:57:23:3d:53:b7:ef:ee:4d:13:da:70:11:a7:c9:
                    cb:20:dc:d2:1f:a1:7e:5d:c6:8e:e9:c0:0b:e2:f1:
                    1f:0d:68:e8:76:31:68:56:19:30:2f:34:c2:f9:f1:
                    6b:67:32:af:58:b5:dc:4e:2b:cd:85:eb:fa:f3:fd:
                    e8:10:02:59:3d:42:ff:2f:bd:fc:8b:ad:c4:6c:2c:
                    bd:e3:2a:fe:2b:6e:cf:8d:3d:09:e2:e2:99:ca:e3:
                    35:43:5b:b1:7b:ed:22:fa:74:14:f4:6c:4e:56:bd:
                    5d:fc:b6:12:94:47:8f:ce:bf:c7:49:c0:75:ed:e2:
                    2a:53:f0:33:91:3c:2e:92:ed:e1:a8:62:a0:ea:06:
                    e6:e9:c6:cc:9b:3e:23:4f:15:39:c5:b0:0c:97:ed:
                    bf:32:f7:3f:89:ee:5c:9e:65:b8:da:f1:a4:dc:93:
                    96:ca:12:ee:91:56:8b:18:57:41:b0:71:3c:2c:1c:
                    3d:2a:f4:0b:d6:3c:cc:26:8b:89:a5:02:4f:e3:ca:
                    22:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:59:4B:2F:09:02:EC:23:61:20:6B:EF:2C:C5:59:A8:C8:5A:11:CC
            X509v3 Authority Key Identifier:
                keyid:0B:6C:D1:27:D0:4E:EC:3E:8E:E4:18:39:19:41:4F:D7:EF:39:D9:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C2zRJ9BO7D6O5Bg5GUFP1-852SQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EF87/3CBE39A238B311F091418086C4F9AE02/4C2B8F143BAD11F08B837C50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:9440::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:55:86:d9:ec:10:b6:e8:66:4d:e9:8b:c1:1b:a2:c7:7f:78:
         b0:b7:17:69:8c:b9:42:37:6d:d7:68:ad:2c:d8:16:1a:07:72:
         a2:39:fb:47:e7:73:d4:2a:1b:8f:4f:71:97:ec:71:de:90:75:
         65:06:d9:37:dd:d0:a5:dd:c2:c5:ce:7b:e9:5c:33:47:8c:14:
         d7:65:d6:c3:84:3a:dc:7a:7e:9f:b9:16:98:4b:94:0b:da:8c:
         80:e3:ac:4f:55:dc:dc:e1:39:2f:fd:7a:d7:53:79:bb:60:a0:
         a1:ef:30:c4:59:d2:91:28:28:26:bc:ea:4d:1f:80:9c:06:25:
         dd:01:23:4b:0a:56:88:7b:65:87:93:f2:72:44:21:20:93:2d:
         00:bb:0d:05:c2:94:a9:5e:1a:e2:b5:91:e4:fc:82:d1:0b:87:
         7e:8c:bb:ca:7f:bf:a2:09:70:f9:61:3d:d0:c5:9f:18:d5:73:
         f6:15:5f:3e:fb:29:f2:ba:af:9b:4f:02:86:47:30:98:33:09:
         01:6e:cc:34:f2:48:d0:50:80:12:49:70:8a:cc:11:30:52:2b:
         77:16:f6:e1:17:26:10:a8:c2:2a:c9:59:1a:73:90:90:d8:06:
         e3:67:bc:f0:ac:3f:d3:f1:f1:c3:e5:76:e8:19:dd:77:ff:ba:
         ee:62:7c:d7
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVGODcxMTAvBgNVBAUTKDBCNkNEMTI3RDA0RUVDM0U4RUU0MTgzOTE5NDE0RkQ3
RUYzOUQ5MjQwHhcNMjUwNTI4MTAxOTU0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzZTU3Zi1jZDU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA58nNRnx9NCFuJWC//0ekIv03XNwxEVS/YvdHvYCUSbuALxR3mduMoKAHu2zi
l2D9zWis+pdDPPY6OOyoVyM9U7fv7k0T2nARp8nLINzSH6F+XcaO6cAL4vEfDWjo
djFoVhkwLzTC+fFrZzKvWLXcTivNhev68/3oEAJZPUL/L738i63EbCy94yr+K27P
jT0J4uKZyuM1Q1uxe+0i+nQU9GxOVr1d/LYSlEePzr/HScB17eIqU/AzkTwuku3h
qGKg6gbm6cbMmz4jTxU5xbAMl+2/Mvc/ie5cnmW42vGk3JOWyhLukVaLGFdBsHE8
LBw9KvQL1jzMJouJpQJP48oifwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFAFZSy8J
AuwjYSBr7yzFWajIWhHMMB8GA1UdIwQYMBaAFAts0SfQTuw+juQYORlBT9fvOdkk
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUY4Ny8zQ0JFMzlBMjM4
QjMxMUYwOTE0MTgwODZDNEY5QUUwMi9DMnpSSjlCTzdENk81Qmc1R1VGUDEtODUy
U1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0MyelJKOUJPN0Q2TzVCZzVHVUZQMS04NTJTUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OEVGODcvM0NCRTM5QTIzOEIzMTFGMDkxNDE4MDg2QzRGOUFFMDIvNEMyQjhGMTQz
QkFEMTFGMDhCODM3QzUwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9ZRAMA0GCSqGSIb3DQEBCwUAA4IBAQBtVYbZ7BC26GZN6YvB
G6LHf3iwtxdpjLlCN23XaK0s2BYaB3KiOftH53PUKhuPT3GX7HHekHVlBtk33dCl
3cLFznvpXDNHjBTXZdbDhDrcen6fuRaYS5QL2oyA46xPVdzc4Tkv/XrXU3m7YKCh
7zDEWdKRKCgmvOpNH4CcBiXdASNLClaIe2WHk/JyRCEgky0Auw0FwpSpXhritZHk
/ILRC4d+jLvKf7+iCXD5YT3QxZ8Y1XP2FV8++ynyuq+bTwKGRzCYMwkBbsw08kjQ
UIASSXCKzBEwUit3FvbhFyYQqMIqyVkac5CQ2AbjZ7zwrD/T8fHD5XboGd13/7ru
YnzX
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:26 2026 by rpki-client