Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/536D7D82E23311F080CB84306D6F56BC.roa
File:                     536D7D82E23311F080CB84306D6F56BC.roa (raw, json)
Hash identifier:          FQMiKZ+saBep4mWBLea3jnerRyivW4npVo8kPrO6T0E=
Subject key identifier:   E5:FB:61:F8:47:25:0F:75:15:04:C2:77:2F:22:38:5B:63:FB:B3:18
Certificate issuer:       /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Certificate serial:       01BF
Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/536D7D82E23311F080CB84306D6F56BC.roa
Signing time:             Fri 03 Apr 2026 04:38:28 +0000
ROA not before:           Fri 03 Apr 2026 04:38:28 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     398395
IP address blocks:        2401:8360:f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
                          rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 447 (0x1bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
        Validity
            Not Before: Apr  3 04:38:28 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf4444-0fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:48:da:04:7d:5d:29:ac:07:e6:8c:0f:1e:d5:
                    d3:99:e7:95:d7:e9:65:58:d4:ec:09:85:95:c1:69:
                    52:5f:9f:3f:40:0e:b2:59:7a:d5:90:84:e9:e2:8b:
                    e8:e7:7a:e1:6e:5f:a1:11:e0:f1:64:a5:f2:68:a7:
                    23:3d:eb:84:c2:27:18:78:5a:db:fe:bf:c0:51:2a:
                    e3:b1:54:3b:f5:c6:a4:6a:42:67:c3:a3:9a:34:ae:
                    d1:e0:81:24:ae:d9:c1:c4:43:3d:67:a7:55:99:0e:
                    e4:ff:8f:e3:76:4f:ea:f1:f8:23:9d:ec:eb:5a:d1:
                    93:fd:f6:67:b0:9d:d4:dc:ac:77:4d:d3:24:fc:c6:
                    27:85:a0:57:2c:1f:61:34:da:43:6c:92:cf:45:c5:
                    34:a4:2f:4f:23:26:84:a2:4a:27:93:bf:28:f0:c1:
                    46:c4:3f:c1:f0:f5:36:eb:b3:d2:5f:6e:32:c9:94:
                    d7:49:92:45:ee:c7:b9:31:36:1d:74:37:e9:89:2c:
                    6f:fc:ea:f0:0c:8c:6f:c4:5c:37:85:60:1f:7c:82:
                    63:fd:d5:16:14:1a:e9:8b:1f:5f:93:8f:1d:d5:ae:
                    7d:0a:32:c0:03:0b:61:f0:8e:ba:b7:45:52:19:3b:
                    7d:01:d0:0e:19:83:b9:51:e3:42:56:85:80:29:ba:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:FB:61:F8:47:25:0F:75:15:04:C2:77:2F:22:38:5B:63:FB:B3:18
            X509v3 Authority Key Identifier:
                keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/536D7D82E23311F080CB84306D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8360:f::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:ab:79:dd:7e:3a:f4:f4:ea:ce:42:3a:d4:bd:b5:7c:a8:89:
         d8:4f:c3:07:2b:e4:b0:84:e2:74:6f:9f:e3:1c:b1:38:3f:34:
         9d:10:3c:ed:e2:72:75:99:6a:1c:8c:4e:84:2f:21:9a:dd:7e:
         09:b3:b8:e2:29:2b:8f:d1:75:e5:27:1a:00:33:de:d2:b0:c9:
         32:30:21:0c:ca:1b:8c:26:57:8c:a7:c0:af:f3:13:ae:f4:3f:
         ab:60:40:12:ed:0d:14:71:41:5d:f3:31:29:50:d5:9a:87:e9:
         fd:46:92:c2:b1:a1:f6:bf:ff:49:34:76:37:c8:93:b1:50:c7:
         81:c8:1b:b7:6d:15:d6:09:8c:57:29:e7:26:4b:e2:43:56:8e:
         6d:d1:03:e6:b1:ab:db:04:c0:52:28:83:3c:45:11:eb:33:05:
         2b:65:77:05:5f:10:66:3a:c1:d9:e9:88:75:4a:bc:60:fe:d0:
         38:bc:23:d6:2d:c1:c8:0e:e0:77:6b:72:0c:78:22:17:46:f7:
         49:0f:c5:27:d8:d5:83:a9:55:45:50:ce:f8:eb:29:a4:a8:06:
         1c:de:cf:9c:cd:06:95:64:28:a8:e5:69:3b:e4:cd:a1:2b:76:
         4d:83:3b:e0:85:c0:f2:b1:53:04:85:3a:25:0b:c4:08:87:a2:
         9d:ac:07:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:12 2026 by rpki-client