Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa
File:                     9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa (raw, json)
Hash identifier:          zli8UWvhlCj/6OfJgReWS/J0Zy5c1SeMbcyJruIVEGs=
Subject key identifier:   F7:76:7F:CB:76:2D:E6:08:9E:A2:99:7D:5B:8E:33:44:04:04:E5:28
Certificate issuer:       /CN=A919318C/serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442
Certificate serial:       89
Authority key identifier: BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:33:25 +0000
ROA not before:           Fri 09 Jan 2026 06:25:15 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     135060
IP address blocks:        2001:df5:df40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl
                          rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919318C, serialNumber=BE4301E2A40B4F6A47E185A6757D9A6E8D7C7442
        Validity
            Not Before: Jan  9 06:25:15 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a44025-0135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2a:15:85:2a:cb:65:4c:1e:dc:dd:5b:00:f7:
                    01:45:10:ad:2d:6f:a7:3a:41:76:e8:1d:e8:b1:18:
                    30:54:c7:11:7c:05:68:7b:7e:c9:f9:9d:ef:8c:2a:
                    88:76:9a:9e:01:f6:c6:7b:56:4d:81:55:91:16:97:
                    1c:d4:7e:88:12:17:fb:e4:40:c1:93:7b:ec:91:ad:
                    17:ff:06:42:1c:0e:d0:41:90:69:ad:1f:20:a1:6e:
                    23:31:15:6e:6b:e9:01:65:eb:56:ae:1a:67:89:3c:
                    cd:25:56:a0:b5:2f:6d:5a:12:c4:54:a1:d2:1c:d7:
                    d9:a6:a7:bd:78:a6:8e:9f:2e:fa:86:54:79:6b:77:
                    3e:29:b8:38:af:06:1f:60:95:bb:45:86:89:38:d5:
                    04:a8:4c:1c:9f:d1:33:a6:16:db:5f:4c:7f:ce:39:
                    37:21:7f:2d:06:a1:80:67:8d:07:1c:86:fe:ab:28:
                    65:98:fc:06:23:20:cd:81:7f:27:01:6b:06:3f:74:
                    b7:11:2f:6e:71:82:3c:f1:d4:c0:38:bc:09:fd:63:
                    24:ed:d8:af:21:57:5e:74:c9:fa:db:0c:86:d2:0c:
                    0a:70:11:26:ec:7a:ab:45:c8:45:ad:81:38:cb:73:
                    78:cd:4d:53:82:d5:14:8d:95:c9:b1:76:63:f3:ee:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:76:7F:CB:76:2D:E6:08:9E:A2:99:7D:5B:8E:33:44:04:04:E5:28
            X509v3 Authority Key Identifier:
                keyid:BE:43:01:E2:A4:0B:4F:6A:47:E1:85:A6:75:7D:9A:6E:8D:7C:74:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/vkMB4qQLT2pH4YWmdX2abo18dEI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vkMB4qQLT2pH4YWmdX2abo18dEI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919318C/CE9B09EE615411F0BB50FA37C4F9AE02/9FB4CD9462DB11F0B8A4FE59C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:df40::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:ae:41:5a:30:53:47:e8:df:19:20:43:47:53:03:a5:f6:00:
         db:78:6a:89:44:2a:43:a4:d0:55:fd:4c:57:3d:ef:30:84:09:
         ae:5b:6d:b0:e4:fd:97:21:8f:29:fb:f7:74:0e:5e:9e:79:a5:
         e4:4c:f1:be:e4:be:d3:1b:9f:7a:a6:95:14:99:09:b7:a5:08:
         63:14:e6:e6:c5:32:f9:69:a4:a3:fb:49:db:bb:c7:2c:2d:73:
         8b:ba:7d:b8:71:60:cb:fc:c4:69:f7:48:85:34:0b:d4:e5:94:
         30:99:f7:c2:19:df:77:30:a4:1c:e8:55:b8:bd:12:18:df:eb:
         c5:8a:fd:16:88:a5:d4:b0:64:3d:c2:a7:24:77:92:9f:1b:0f:
         b2:23:59:35:23:97:98:aa:da:26:74:3d:78:c5:98:e6:7f:d0:
         df:dd:7d:b0:a1:a2:2a:e6:5e:5d:d5:1d:01:a5:4c:ce:fa:8a:
         ac:c1:92:15:c0:ab:df:11:18:75:43:b4:a6:89:25:c1:34:7e:
         54:cd:8f:74:de:cc:cc:e5:f3:53:13:79:f9:e3:7b:1c:f8:12:
         e6:5b:b8:c5:fc:41:79:f9:8f:c1:9f:95:6b:39:af:9f:2d:16:
         b3:90:b4:41:de:a7:f7:ab:e2:9f:a5:0e:63:77:3a:b7:70:63:
         7c:d4:5f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:40:08 2026 by rpki-client