Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/9005E6F417DC11EE959DE671C4F9AE02.roa
File:                     9005E6F417DC11EE959DE671C4F9AE02.roa (raw, json)
Hash identifier:          e3i2wusdoLzTSROJLMycuqmh4b9nxg7+8W+M3MY32nk=
Subject key identifier:   A5:D1:87:7E:79:7B:7F:F4:23:94:11:C6:7E:33:8E:75:AA:4B:FD:3C
Certificate issuer:       /CN=A911CA78/serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
Certificate serial:       0DC7
Authority key identifier: 40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/9005E6F417DC11EE959DE671C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:42:22 +0000
ROA not before:           Sun 02 Nov 2025 19:08:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     9986
IP address blocks:        45.116.244.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl
                          rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 18:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3527 (0xdc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CA78, serialNumber=40562C143A29CB19C70FFC9B99B60BBECD1D73B6
        Validity
            Not Before: Nov  2 19:08:22 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a4888d-ed43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:59:0f:ef:a3:49:10:40:be:5e:ae:aa:d0:
                    af:06:d2:40:e8:eb:4f:96:ad:cc:d1:bb:eb:e0:36:
                    2b:d0:c8:a8:8d:ce:55:e3:28:8b:d6:72:3f:a6:13:
                    c7:b3:ff:c0:0d:02:e1:d5:38:bd:5b:f1:95:c0:94:
                    5e:53:dc:cb:80:d4:c1:32:4c:9c:2c:92:35:c9:14:
                    8f:8d:4e:95:2a:aa:b1:6f:51:59:ad:cb:92:27:f6:
                    d3:79:85:cb:d7:05:8c:fa:79:5a:63:87:63:b2:76:
                    bd:05:19:56:57:e6:60:cb:6d:76:4e:60:31:e6:77:
                    3e:ca:d3:95:ee:b9:d4:a5:c2:3e:40:88:26:9f:e5:
                    46:43:70:d3:88:49:58:54:9e:69:67:41:c9:5c:31:
                    a0:fb:65:3a:80:d7:8f:27:21:23:15:a4:0b:5a:37:
                    05:9b:c9:92:fa:60:9e:ee:6f:5b:a3:61:af:1d:f7:
                    d7:e9:be:7e:8a:e6:0b:5d:f1:8c:e6:5e:8a:8a:94:
                    65:f3:bd:fe:51:3a:ca:07:57:8e:d6:ec:c5:e1:a4:
                    78:80:79:ca:25:05:7b:73:a4:39:c5:ba:be:b1:e5:
                    b4:5e:3d:b7:b8:9e:b2:98:33:90:26:43:f9:f6:53:
                    fe:b7:05:7d:d0:e8:cb:23:5b:bb:a9:2a:2d:64:9b:
                    00:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:D1:87:7E:79:7B:7F:F4:23:94:11:C6:7E:33:8E:75:AA:4B:FD:3C
            X509v3 Authority Key Identifier:
                keyid:40:56:2C:14:3A:29:CB:19:C7:0F:FC:9B:99:B6:0B:BE:CD:1D:73:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/QFYsFDopyxnHD_ybmbYLvs0dc7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QFYsFDopyxnHD_ybmbYLvs0dc7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CA78/BE8846D235D811EAA730EC46C4F9AE02/9005E6F417DC11EE959DE671C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.116.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:2f:3b:f7:fd:2b:ab:c8:89:c2:28:a5:cd:80:48:b1:2c:7f:
         84:9c:d9:8d:95:06:ce:b2:1a:b2:86:49:25:2b:cd:e6:ab:89:
         43:22:4e:82:fb:82:35:2c:35:e8:55:1a:d7:67:16:a7:1a:d5:
         df:ac:5c:92:60:0c:5a:b6:bc:2d:87:1a:ed:ce:6f:6f:6c:e1:
         46:39:bf:50:8b:d9:37:e4:38:f5:53:e7:c3:c2:30:1a:34:45:
         db:b3:dd:0d:80:9d:89:e7:3c:f2:50:0c:08:91:ec:8c:d5:2c:
         da:c9:3c:24:c2:4f:1a:82:e4:04:68:db:b7:95:80:e1:37:41:
         66:55:fe:83:e0:5e:b5:27:a2:95:40:c8:f1:3b:a4:8b:79:68:
         7d:1d:05:1d:a5:fe:fb:3f:ed:9b:a7:a7:08:4d:b9:0b:a5:86:
         aa:b3:d8:d4:78:09:52:70:3b:0e:5d:51:db:4e:b5:22:ca:2d:
         2e:de:e0:ae:47:21:78:08:71:c9:7b:03:41:c9:f4:9b:77:a0:
         71:12:d9:65:fb:57:05:45:77:96:55:b8:1d:c7:f9:af:4c:8d:
         27:8c:c9:3f:fb:8d:0c:5c:6c:d9:5b:42:c4:66:c5:17:87:01:
         33:7d:01:37:f9:6d:c8:c2:94:bd:67:20:23:27:0c:af:ce:87:
         f8:1e:27:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:31:12 2026 by rpki-client