Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/A0375A56964511EF9481CA74C4F9AE02.roa
File:                     A0375A56964511EF9481CA74C4F9AE02.roa (raw, json)
Hash identifier:          V1Y812+sYis/0a3PYa9dyEh6eO9hK34IzoCS2daAero=
Subject key identifier:   13:5F:9B:63:8F:C8:7F:9A:36:BB:0F:F7:D5:18:DA:C2:46:6E:08:F2
Certificate issuer:       /CN=A91C7B15/serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
Certificate serial:       1510
Authority key identifier: AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/A0375A56964511EF9481CA74C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:45:20 +0000
ROA not before:           Wed 16 Apr 2025 16:55:24 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     47365
IP address blocks:        2402:7340:4::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl
                          rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:37:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5392 (0x1510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7B15, serialNumber=AFB08D6F7E97785B6F31171EF82E31BB1D06E2E3
        Validity
            Not Before: Apr 16 16:55:24 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a442f0-1019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:fc:c8:24:4e:b3:c8:e9:6c:d3:c8:de:ec:fc:
                    33:31:79:be:10:f6:95:67:f6:0c:3d:55:7a:15:66:
                    8d:76:df:6b:4a:b1:03:d0:10:ea:67:8c:61:12:86:
                    e9:14:1f:b3:2c:a7:07:e3:47:e3:b3:d9:99:4d:8f:
                    c5:83:07:79:94:bc:86:a7:91:8e:6a:b1:d7:c7:fc:
                    26:55:52:bd:85:37:b0:2d:4b:0b:a9:d6:cb:83:fd:
                    22:bc:63:d9:43:5e:74:f9:5b:06:d9:90:ac:76:e6:
                    bb:67:71:f6:b1:7d:98:b6:ca:3f:ac:f5:c4:8b:84:
                    fd:43:75:78:d2:ad:f6:c0:62:91:fa:6f:74:7a:c8:
                    a9:60:ba:e9:2e:0b:84:9a:00:92:92:88:39:d6:77:
                    58:26:6c:cf:61:b4:0c:8e:2c:57:b1:37:3b:2d:c2:
                    a5:c4:ec:8c:ac:57:d8:b1:a8:4e:27:37:54:37:44:
                    41:9f:c9:01:fe:bc:95:bd:16:65:ee:a6:f9:7f:9d:
                    48:8c:f1:1d:51:f8:3f:c2:b1:fe:1a:63:8d:16:88:
                    c8:59:1c:6e:90:47:33:47:83:96:33:b6:5c:78:17:
                    06:a0:0e:88:3a:91:93:c3:d9:27:1a:6c:30:1e:6a:
                    13:9c:df:ef:54:f8:41:17:26:7b:09:b1:2d:e5:40:
                    77:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:5F:9B:63:8F:C8:7F:9A:36:BB:0F:F7:D5:18:DA:C2:46:6E:08:F2
            X509v3 Authority Key Identifier:
                keyid:AF:B0:8D:6F:7E:97:78:5B:6F:31:17:1E:F8:2E:31:BB:1D:06:E2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/r7CNb36XeFtvMRce-C4xux0G4uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7CNb36XeFtvMRce-C4xux0G4uM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B15/FAF6FD7871E611E8996E2E64C4F9AE02/A0375A56964511EF9481CA74C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7340:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:76:54:29:65:0a:a8:21:ae:70:97:36:79:9b:76:6b:10:26:
         9e:db:84:1b:a5:a7:fb:9e:b4:86:d9:3f:39:5f:26:7f:a3:a2:
         8b:20:97:80:84:84:03:e8:ea:de:99:db:14:7a:ad:b5:b1:38:
         ed:b2:90:00:76:1f:9c:9a:bb:c5:7e:4a:ac:6c:40:b5:aa:52:
         51:53:2f:27:c1:d9:4b:56:b2:3e:30:94:f0:5f:b8:d8:1f:4a:
         f4:14:46:10:fd:da:7d:91:5d:86:aa:bd:5a:fc:0c:d7:76:fb:
         0b:8c:16:dd:ed:15:2a:2e:4a:6e:67:64:8f:26:f3:2e:82:8a:
         e5:43:4d:b6:e6:70:28:65:0d:eb:cf:b9:88:f9:a7:1a:3c:01:
         90:82:ac:8a:9a:a3:18:e2:60:72:98:82:b9:66:a1:e2:3b:12:
         78:9b:ed:41:7d:2e:29:36:9b:fb:61:08:e8:f1:41:07:c8:ea:
         2e:fd:66:d1:9f:19:04:dc:2d:75:4a:fe:d9:5c:9f:1f:44:e5:
         49:6f:b7:62:6f:69:9f:44:52:f3:00:12:28:aa:ea:65:e4:a4:
         13:0e:d5:8b:98:9e:63:4f:c8:0f:5b:6a:cc:ce:49:10:4d:f0:
         80:6a:a4:5c:fd:c2:6a:bb:3f:32:84:6a:df:43:0d:d7:e7:52:
         46:71:6c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:02:17 2026 by rpki-client