Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/C352565AC6E011EF87D90241C4F9AE02.roa
File:                     C352565AC6E011EF87D90241C4F9AE02.roa (raw, json)
Hash identifier:          6JnWBHrw4ffDiGiVWAOckF4qnqqFhoHfVR3johcA4II=
Subject key identifier:   CC:2C:31:DA:FF:EB:B6:BF:DC:5C:4C:F5:13:E9:D5:87:36:1D:02:E2
Certificate issuer:       /CN=A91A192D/serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
Certificate serial:       01F5
Authority key identifier: A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/C352565AC6E011EF87D90241C4F9AE02.roa
Signing time:             Tue 31 Mar 2026 04:36:21 +0000
ROA not before:           Tue 31 Mar 2026 04:36:21 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     152300
IP address blocks:        2001:df3:5240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl
                          rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A192D, serialNumber=A81D0D61F7B730DDB742CC48ADD88A04D46FD024
        Validity
            Not Before: Mar 31 04:36:21 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69cb4f45-1de1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:58:5f:1c:84:b0:70:84:0a:e3:48:f1:a5:d5:
                    69:f9:86:63:4a:0d:a1:9e:06:30:b7:8c:cd:2e:10:
                    56:c3:02:0b:a6:aa:7c:91:a5:94:4c:93:fa:30:07:
                    26:e0:77:6c:69:87:69:5c:93:84:6a:37:85:9e:9a:
                    11:f1:ec:f2:4f:6a:d6:37:8b:2c:30:e8:96:68:9d:
                    e3:e1:a5:08:e2:45:3d:ed:1b:73:20:47:b7:c6:0d:
                    94:67:8b:3b:25:61:3a:07:a0:84:a3:01:6e:b0:b4:
                    24:c2:36:12:25:77:29:d7:6c:45:36:0a:7d:a5:93:
                    d2:06:26:6a:d1:70:c7:8b:c9:ea:e1:ae:9f:83:70:
                    85:71:d6:7d:f0:32:e6:39:80:67:b0:9a:5a:95:ec:
                    11:73:04:69:18:f6:0d:6a:69:40:17:13:93:47:cb:
                    c1:e8:53:19:40:20:4f:ec:f6:98:4f:bf:85:a5:2e:
                    f6:fd:07:45:18:06:56:81:4d:c7:a8:1f:a9:98:1a:
                    e1:d1:4b:0c:c5:73:38:9f:c7:e6:dc:25:af:e4:27:
                    8d:e7:91:77:d0:50:46:ce:8d:11:b9:da:0e:f1:6c:
                    81:fc:19:b1:8f:9b:27:3f:d7:49:3a:e3:f0:dd:01:
                    6e:36:8f:c0:20:86:c1:94:e9:9f:7a:87:6f:84:cb:
                    3d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:2C:31:DA:FF:EB:B6:BF:DC:5C:4C:F5:13:E9:D5:87:36:1D:02:E2
            X509v3 Authority Key Identifier:
                keyid:A8:1D:0D:61:F7:B7:30:DD:B7:42:CC:48:AD:D8:8A:04:D4:6F:D0:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/qB0NYfe3MN23QsxIrdiKBNRv0CQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0NYfe3MN23QsxIrdiKBNRv0CQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A192D/CC67D252A4BC11EE9E5A5D72C4F9AE02/C352565AC6E011EF87D90241C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:5240::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:63:1c:dc:16:67:34:c6:2a:58:e0:7b:73:eb:4a:5a:71:c0:
         bc:ae:16:df:84:25:04:29:bd:8e:63:1b:15:64:85:98:dc:e5:
         cd:a5:4d:db:12:0b:fa:ef:87:ed:5e:c6:74:08:ce:15:19:69:
         c6:ef:5f:a4:66:c8:16:68:07:bc:b0:a5:f1:b0:8a:d1:ab:c1:
         34:d5:31:12:01:d3:2a:82:6a:7c:12:e2:06:d5:a9:dc:d9:97:
         72:9c:73:93:bd:33:a5:c6:df:90:a5:a0:3c:e5:05:5a:52:bb:
         c0:4b:a9:23:7d:0d:3a:e2:c4:25:3d:4f:4a:6b:36:d5:be:6d:
         fb:8e:05:c5:dc:bc:24:b3:2c:60:fc:0c:93:d6:10:9e:8b:25:
         3d:df:ba:3b:ec:ac:78:30:6a:6d:6e:0c:8e:af:62:cf:bd:33:
         86:ec:da:8c:9c:99:80:0e:77:92:1d:5d:03:24:fe:07:c7:e6:
         80:b4:46:c2:00:da:fb:1a:bd:6b:34:43:e7:f6:9c:4b:6f:6b:
         4b:fc:6b:92:96:62:3f:13:02:50:14:5d:60:a1:e0:fd:f2:1a:
         91:3c:58:aa:c1:59:17:04:df:fa:ac:f6:10:4a:97:0e:c1:77:
         63:96:a1:1a:a4:d9:a6:1b:f3:2e:f4:f9:94:d2:49:d2:08:99:
         26:9d:3d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:25:15 2026 by rpki-client