Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/8F8FBABCDF1511F0B37EABD4606F56BC.roa
File:                     8F8FBABCDF1511F0B37EABD4606F56BC.roa (raw, json)
Hash identifier:          PwN2gSK20w/Pz7qRbG5vVVSpGtOH+yYiveWXPy/+Clg=
Subject key identifier:   5F:89:00:FE:61:04:D8:D1:44:E2:60:57:CA:ED:45:83:BF:5F:3C:8F
Certificate issuer:       /CN=A919FBF3/serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
Certificate serial:       2F
Authority key identifier: B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/8F8FBABCDF1511F0B37EABD4606F56BC.roa
Signing time:             Sun 01 Mar 2026 05:54:24 +0000
ROA not before:           Mon 22 Dec 2025 09:06:54 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154418
IP address blocks:        2402:3ea0:4000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl
                          rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:09:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FBF3, serialNumber=B913347E6B9D77A91BB07482AE45CD74116B022D
        Validity
            Not Before: Dec 22 09:06:54 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a3d48f-e964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a8:52:86:d5:b4:29:f1:53:65:fa:4d:90:c1:
                    98:04:dc:7a:5f:8a:39:ce:f2:a1:18:a3:a9:7d:7b:
                    f5:6b:81:b8:e5:cf:bb:55:06:05:59:a7:13:31:ea:
                    ed:0e:4f:f8:a0:02:9e:73:76:18:b5:26:dd:b0:86:
                    1f:06:b8:d2:f9:e1:9e:70:bf:86:d5:65:da:98:8b:
                    ea:50:23:77:94:f6:01:8a:19:ad:c2:48:3e:f9:56:
                    48:15:9e:d5:be:51:a2:95:54:7d:2d:81:c6:6b:d5:
                    60:49:fd:f6:71:35:1c:c6:bf:62:a8:d7:93:b1:36:
                    e1:49:37:2f:f2:2a:a4:db:fd:16:94:69:bd:28:ba:
                    bc:3f:d2:11:7a:aa:0c:1f:09:39:c1:46:d7:e3:2b:
                    a3:bd:88:1e:cc:c8:56:4a:4b:28:01:43:4d:c3:89:
                    5f:96:6b:7f:cd:43:df:3a:6d:a5:42:9e:ff:ec:5e:
                    4c:69:e1:1e:11:ee:89:ba:e1:de:ba:aa:95:d8:70:
                    23:b2:3c:d6:25:92:88:67:a6:d1:d4:74:d6:a0:c4:
                    de:de:8d:5c:63:96:10:a5:6f:77:de:f6:9e:7b:23:
                    74:97:58:c4:50:e4:f9:4b:6c:8d:f9:68:fd:a5:ac:
                    ee:f7:5d:36:43:a1:a3:b8:ca:bb:60:3a:5b:6f:7c:
                    47:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:89:00:FE:61:04:D8:D1:44:E2:60:57:CA:ED:45:83:BF:5F:3C:8F
            X509v3 Authority Key Identifier:
                keyid:B9:13:34:7E:6B:9D:77:A9:1B:B0:74:82:AE:45:CD:74:11:6B:02:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/uRM0fmudd6kbsHSCrkXNdBFrAi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRM0fmudd6kbsHSCrkXNdBFrAi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FBF3/EE629694D66011F0B2A54B950BB43E13/8F8FBABCDF1511F0B37EABD4606F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3ea0:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         54:9a:65:fa:34:23:8a:a3:10:70:a9:bc:f3:2d:45:3c:ae:b4:
         f3:35:f7:7f:5c:da:fe:86:a2:e1:ed:17:ae:02:4c:bc:80:94:
         2b:f8:9e:02:12:57:ab:b9:90:2b:de:da:45:d3:8a:b5:b3:04:
         f4:bc:c0:79:86:00:0f:b3:e7:4d:98:a1:17:f7:b1:47:69:00:
         bd:72:33:22:e6:90:0c:4c:f3:b0:96:cd:50:22:9b:6b:93:64:
         ff:9b:11:34:5a:ff:53:a3:ae:b2:ea:e5:9e:90:73:cb:64:49:
         4c:19:13:be:57:28:37:8e:58:06:79:65:3b:c7:04:d9:03:0a:
         98:30:28:b6:1e:78:0f:a0:ce:e2:c6:ed:c4:87:12:b9:5f:d3:
         74:a0:30:95:a9:49:5d:21:b0:5b:88:b9:e3:ff:29:ba:4b:1e:
         f6:cd:d3:b2:95:9c:83:10:5f:c2:01:35:d5:d0:e1:c8:ec:f9:
         0d:23:80:12:89:e1:98:ba:97:81:d4:0a:0e:6b:af:19:9b:9b:
         33:77:73:d2:4e:e9:09:11:f3:6e:d1:ad:af:0c:a3:c0:fb:6d:
         b3:af:f0:f3:f7:b6:6a:2b:a1:8a:bb:32:be:95:57:53:8a:c7:
         cc:ab:41:50:5e:af:32:76:65:6f:fe:37:cf:06:73:2e:ce:10:
         09:f9:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:08:30 2026 by rpki-client