Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa
File:                     6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (raw, json)
Hash identifier:          IxMPHfcO4FMJHXeamW9Ntxik/OpowXLrenedL/WZ9v0=
Subject key identifier:   33:C9:E7:6B:52:8B:C5:16:69:C8:1E:BE:8B:55:39:DA:DE:B2:39:D6
Certificate issuer:       /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
Certificate serial:       0BE3
Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:22:20 +0000
ROA not before:           Sun 02 Nov 2025 19:08:52 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     15412
IP address blocks:        45.125.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl
                          rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:52:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3043 (0xbe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5
        Validity
            Not Before: Nov  2 19:08:52 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a483dc-7371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:44:12:79:61:2e:95:6d:38:35:b2:9b:a7:49:
                    32:06:38:b6:fc:b3:91:f6:ea:eb:91:ba:18:25:95:
                    e8:4b:3d:5a:35:91:51:81:73:78:99:34:be:a0:25:
                    1c:8c:ad:22:b3:04:ca:f8:30:cd:a1:82:a3:40:be:
                    ee:83:65:d0:7f:9c:ae:d3:64:2d:07:26:a6:e8:77:
                    a2:3f:1e:17:a6:07:2b:f5:cf:02:94:95:ba:75:5b:
                    e6:0d:c3:20:d6:4c:2c:96:96:b7:09:43:c3:b7:e2:
                    29:10:06:93:d9:86:a6:6c:8a:60:a4:98:30:9a:b0:
                    61:32:6c:71:aa:be:4e:77:26:f0:27:7c:4b:9d:10:
                    8b:1a:59:2a:a1:96:fc:7a:2e:2b:e4:83:2b:35:bc:
                    31:44:bd:e7:ce:10:ae:9f:4f:07:f3:fe:82:2e:95:
                    1c:39:9a:13:f3:ab:25:0d:f8:b2:f2:00:12:8b:c6:
                    6a:ff:28:dd:cf:b2:d9:f3:b5:39:e8:31:d1:65:b5:
                    cd:8e:23:93:09:07:d9:eb:14:54:b4:79:28:de:23:
                    05:44:62:c7:25:59:ce:32:77:5a:d5:62:3e:29:b6:
                    7d:bd:69:83:6b:66:85:49:0f:94:b5:b9:81:31:92:
                    01:66:81:59:4a:7a:18:c8:5a:47:50:45:90:4c:a2:
                    d9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:C9:E7:6B:52:8B:C5:16:69:C8:1E:BE:8B:55:39:DA:DE:B2:39:D6
            X509v3 Authority Key Identifier:
                keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.125.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:da:df:19:df:7e:1b:e1:e3:5f:5a:2e:91:50:63:8d:f3:72:
         f7:40:41:60:33:98:c2:ee:38:4a:96:57:01:82:d7:c4:20:e8:
         9a:ee:02:16:f5:fa:1d:f0:21:6f:01:0d:c2:98:81:11:7a:1f:
         68:d1:15:b7:ea:4a:60:cb:29:44:da:f9:e2:d4:88:cc:43:12:
         b4:a3:8b:c2:82:d3:23:62:94:6c:5c:d2:08:38:9e:5d:80:47:
         75:ff:6b:8b:42:9c:f3:c4:1a:91:5a:39:92:30:5d:fd:f5:f1:
         7e:22:74:eb:7a:df:2b:8b:fe:bb:8f:67:86:6b:33:47:56:2f:
         6a:97:98:92:16:60:e1:b9:36:ca:55:be:1b:5c:4d:9f:b3:39:
         ed:bf:0f:d5:83:0c:bf:a6:34:74:f1:f0:a1:6a:10:5a:5d:e0:
         0f:40:cb:8e:0e:fc:62:58:86:99:16:cf:1a:c9:2d:91:3b:ea:
         4a:6a:b3:fe:b6:38:d9:26:9e:ba:9d:47:1d:6f:58:b4:81:95:
         f0:59:86:ec:15:69:a6:e3:aa:51:37:cb:03:26:71:31:ed:51:
         ea:e3:69:a4:c7:50:f6:1d:8b:10:88:82:18:09:cc:f2:a4:98:
         5e:32:20:5c:d8:a1:6c:f5:fb:08:da:1e:11:cb:fb:29:11:56:
         3e:e8:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:35:05 2026 by rpki-client