Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/B2E4A482E4D611EDB15EDE36C4F9AE02.roa
File:                     B2E4A482E4D611EDB15EDE36C4F9AE02.roa (raw, json)
Hash identifier:          VFVTymwrp8V+E6BLs3C4Cm25rAuqTUZ0SRrvUpgChQk=
Subject key identifier:   23:3B:37:F5:96:44:38:CB:9E:78:57:89:AF:1E:49:4E:73:A9:1D:B5
Certificate issuer:       /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Certificate serial:       140A
Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/B2E4A482E4D611EDB15EDE36C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:59:59 +0000
ROA not before:           Sat 04 Oct 2025 17:15:59 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     138938
IP address blocks:        2403:b4c0:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
                          rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:48:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5130 (0x140a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
        Validity
            Not Before: Oct  4 17:15:59 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a4708f-bb04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:06:00:27:63:dd:e0:c0:cf:56:9e:ab:c9:
                    0b:77:39:cc:3f:33:34:25:b0:73:ee:e3:8b:26:3e:
                    d0:64:27:44:d4:8f:32:fd:e4:86:26:4f:d7:b5:70:
                    53:cc:9a:b4:c1:7b:9a:f1:4c:22:b5:87:0f:bf:3a:
                    32:62:c1:9d:3b:5c:88:87:ec:2b:51:66:64:be:af:
                    71:41:d6:a1:55:15:e1:0f:fc:25:9a:48:98:2e:fc:
                    fa:9a:87:4c:cf:eb:69:01:5b:d5:22:cf:ad:8f:82:
                    a5:d5:49:bf:83:e3:93:60:5f:98:ac:a2:96:dc:b1:
                    f0:b5:a3:88:29:8f:2a:21:21:15:90:c2:e4:c1:23:
                    5d:a1:fd:ed:ea:28:2b:0f:39:e1:a5:23:6c:b5:b2:
                    5f:ef:90:96:03:34:ef:e6:bb:ed:23:43:b5:92:d7:
                    eb:2e:11:d9:a7:80:e7:4c:5e:6f:d4:4a:32:b9:d2:
                    c8:6a:af:fe:e5:11:df:72:87:75:52:49:2c:c9:3a:
                    f5:b7:81:af:6d:2e:be:b5:46:b6:9f:20:77:f5:cb:
                    7d:b1:34:79:f3:61:a4:65:99:3a:fb:35:5a:62:d6:
                    94:90:fc:55:24:16:c4:ed:03:65:d6:e3:4f:8f:3a:
                    80:46:26:d8:72:1c:58:52:32:ee:c4:5e:8b:ab:1f:
                    f1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3B:37:F5:96:44:38:CB:9E:78:57:89:AF:1E:49:4E:73:A9:1D:B5
            X509v3 Authority Key Identifier:
                keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/B2E4A482E4D611EDB15EDE36C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:b4c0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         60:7a:6b:82:50:80:fe:d6:cb:07:1e:40:3b:2e:2e:99:b6:0e:
         a7:04:0d:72:6b:21:76:42:4e:d4:38:48:f9:91:2a:f7:3d:60:
         24:56:dc:e8:b8:4a:b5:53:41:ad:ab:12:0d:28:f5:11:00:39:
         b5:e1:db:10:38:9b:57:c4:e5:42:d8:cc:61:04:32:ea:f4:01:
         6c:95:11:95:5f:25:6b:7b:e2:39:fe:c8:5b:72:c7:b0:4b:21:
         0d:19:1e:31:b4:20:68:b9:f8:c2:37:7a:53:ce:23:7d:46:8c:
         38:f8:f1:5a:4d:c7:dc:2d:41:66:bc:9f:68:f3:9f:46:ae:1b:
         44:4f:f7:2b:9c:18:41:5a:fa:6a:d8:6a:53:84:e9:d6:4f:71:
         f5:8b:cd:7f:63:73:2a:6c:d2:2f:56:c8:ae:ef:ec:89:ed:9f:
         a0:30:76:e9:21:03:be:54:d8:3d:8f:86:40:40:4b:71:7e:62:
         8f:6f:c9:23:d5:d4:fb:57:d1:45:ab:eb:1b:92:c9:ac:59:b7:
         e3:f0:cb:51:7a:30:39:60:9c:42:5e:ed:57:94:37:e1:58:87:
         b9:5c:8c:57:e2:73:ff:e1:99:9a:90:13:88:93:23:b8:35:d3:
         87:c4:bc:c4:04:ec:70:d1:7b:3b:7f:54:d1:fc:84:fa:15:61:
         45:a5:9e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:18:12 2026 by rpki-client