Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/45395E28C8F411F0A2F04129C4F9AE02.roa
File:                     45395E28C8F411F0A2F04129C4F9AE02.roa (raw, json)
Hash identifier:          D2Zdr1KjCtW0v7SwktRTkUb9mkJrYGEuJhxB/QmO9bg=
Subject key identifier:   B0:83:2D:04:F4:24:C7:53:A4:97:CA:BC:64:7C:ED:7C:F8:7C:BB:EE
Certificate issuer:       /CN=A919B59F/serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
Certificate serial:       34
Authority key identifier: FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/45395E28C8F411F0A2F04129C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 05:58:32 +0000
ROA not before:           Mon 24 Nov 2025 05:13:11 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     139773
IP address blocks:        2001:df6:5ac0::/48 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl
                          rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919B59F, serialNumber=FB858EFBAE93C3892D949BDC41FC446A8EBCEE1B
        Validity
            Not Before: Nov 24 05:13:11 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a3d587-5b51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9d:2b:b0:1d:00:ae:a3:91:b1:95:75:ca:b7:
                    ed:82:74:66:15:bc:d9:60:9f:ed:e3:ce:be:17:41:
                    8d:a7:ba:19:40:d5:fd:32:79:bc:b2:e7:75:47:85:
                    a1:c9:e6:d3:a5:f5:a6:aa:53:f0:df:7f:29:bb:e6:
                    bb:b3:0b:2a:33:84:66:c8:27:fe:56:21:89:c6:b9:
                    e2:42:cc:82:76:e3:84:98:50:2d:6a:b6:7d:61:05:
                    38:9c:95:bb:22:79:65:f1:ec:d8:f0:3a:d2:c3:d3:
                    ec:ed:a2:e2:07:45:40:9d:ca:4d:25:bf:15:c6:8e:
                    e6:0c:93:8d:8e:0d:75:45:a3:04:4c:c2:a9:b4:1c:
                    0f:7d:2b:b4:10:0b:3e:91:ba:fb:f8:30:ee:86:62:
                    86:16:29:d8:1d:b2:a2:44:f5:1b:46:12:46:4e:99:
                    54:0d:1b:02:8f:e3:51:72:dd:fc:6e:65:f7:c0:7c:
                    d7:a7:2b:d6:03:0c:8b:37:d3:4e:a0:0f:97:7e:99:
                    ec:21:2f:c2:86:e4:d4:5e:c7:45:e7:7b:f6:87:f7:
                    a0:27:6c:08:50:26:81:db:e2:67:ec:9b:6d:6d:95:
                    3a:db:f1:ad:b1:71:9a:dc:6e:fb:db:1c:79:cd:c9:
                    a4:fb:b7:be:69:74:45:16:08:da:f9:a8:1e:06:cb:
                    4a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:83:2D:04:F4:24:C7:53:A4:97:CA:BC:64:7C:ED:7C:F8:7C:BB:EE
            X509v3 Authority Key Identifier:
                keyid:FB:85:8E:FB:AE:93:C3:89:2D:94:9B:DC:41:FC:44:6A:8E:BC:EE:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/-4WO-66Tw4ktlJvcQfxEao687hs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-4WO-66Tw4ktlJvcQfxEao687hs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B59F/51134F3AC8F211F0BCF1D877C4F9AE02/45395E28C8F411F0A2F04129C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:5ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:6c:aa:f7:70:70:30:33:b5:f8:4b:75:a1:a6:6a:59:ab:42:
         e8:08:50:12:e0:06:0e:c6:d8:02:79:0f:88:3c:cc:82:cb:18:
         a4:59:b5:ef:5f:11:77:1b:f4:60:10:77:9c:55:3c:74:94:4d:
         85:1b:6b:32:1f:97:5f:f0:7c:d7:2f:c8:cf:15:7d:a5:fe:18:
         07:ed:b3:35:98:dc:cd:98:2f:7d:bc:9e:ed:d8:d6:ed:f1:90:
         03:0a:f6:f0:65:0d:ed:69:5e:6d:6e:31:e2:a1:e1:2c:73:bd:
         c8:5c:81:6c:5c:f9:f0:1a:69:c6:7c:a8:f7:0b:4c:d7:e8:5d:
         e1:b1:a2:63:94:98:e4:01:e6:ff:90:87:8e:1e:53:36:f3:e7:
         95:a2:41:f6:b8:70:a0:f6:59:06:22:a4:94:02:51:bf:86:4d:
         d0:b4:54:d1:be:8c:e9:3f:f2:0d:25:bc:d3:d6:11:d8:95:a5:
         6b:95:37:d5:1e:47:39:1b:97:54:f3:85:f4:4e:32:6a:cc:50:
         9e:de:41:ee:9a:6e:48:08:01:af:fa:8a:a7:94:e8:ac:78:d4:
         7a:bc:29:02:45:af:3d:8c:ac:01:bf:fc:78:37:9d:f7:5d:70:
         3d:c8:f1:10:a7:41:88:e6:5b:c7:86:71:a7:a2:b5:35:e0:fe:
         a6:40:6b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:03:09 2026 by rpki-client