Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/99AB65EEDA2C11EFAC53882EC4F9AE02.roa
File:                     99AB65EEDA2C11EFAC53882EC4F9AE02.roa (raw, json)
Hash identifier:          XuBY8r+m0nn8vqkTh0uM6kdpQk4Jsat9oInYlsF5zpo=
Subject key identifier:   A1:AB:87:8E:2B:FF:88:C3:E7:A6:03:7B:BF:D2:74:9C:1D:6B:8E:90
Certificate issuer:       /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Certificate serial:       E2
Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/99AB65EEDA2C11EFAC53882EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:16:17 +0000
ROA not before:           Wed 18 Feb 2026 04:49:30 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     14618
IP address blocks:        2401:c2e0::/40 maxlen: 48
                          2401:c2e0:c000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
                          rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:48:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
        Validity
            Not Before: Feb 18 04:49:30 2026 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a47461-ab3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1e:ee:82:9f:78:9e:fe:32:fb:62:32:bf:46:
                    44:91:12:00:47:c6:c1:8d:e2:f4:61:cf:45:3e:59:
                    32:3c:e6:4d:39:c1:cc:84:d9:72:41:ec:41:34:08:
                    b3:84:02:02:99:5e:6d:ec:c8:59:fe:d9:f7:5f:7b:
                    2d:49:83:9c:ff:4a:49:0e:18:4d:14:35:10:ea:d5:
                    df:55:76:38:c1:12:6a:70:8c:ec:0d:06:95:16:d9:
                    cd:0d:95:6a:b6:33:30:46:d7:71:11:e2:bd:48:17:
                    7d:e4:43:4f:4c:9b:9d:ac:51:42:03:2e:da:bc:d7:
                    0d:db:21:cc:f3:75:51:a1:7f:29:1a:a0:62:b0:67:
                    f9:1a:c3:2a:73:ef:36:8b:98:5f:fb:f4:a0:34:16:
                    b5:d7:c6:b2:b0:9a:71:83:0b:5e:16:27:a0:99:60:
                    d5:eb:c3:80:96:5c:45:ea:7d:af:a6:9d:64:8c:91:
                    ad:be:28:f6:8a:80:14:19:5c:0a:c7:61:45:fb:21:
                    11:ab:5e:9c:37:57:9d:fa:ad:8b:b7:4f:9f:66:f7:
                    f3:29:84:9e:9a:a1:b8:07:ac:49:22:9f:66:c8:f2:
                    5a:1f:c4:fc:bb:1a:41:f3:d6:38:cd:07:b7:22:dd:
                    a8:1c:63:1e:c8:22:53:79:38:ea:21:5b:58:d3:e2:
                    e5:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AB:87:8E:2B:FF:88:C3:E7:A6:03:7B:BF:D2:74:9C:1D:6B:8E:90
            X509v3 Authority Key Identifier:
                keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/99AB65EEDA2C11EFAC53882EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:c2e0::/40
                  2401:c2e0:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         40:01:32:94:41:65:0e:75:af:01:d7:c5:8f:8f:96:16:29:79:
         17:ef:87:3a:a6:7e:36:6b:b8:e4:7d:99:bf:26:b5:5d:ed:57:
         c4:18:a4:81:d3:04:ac:ec:a5:50:0d:6d:5f:1e:5b:81:6f:bf:
         5d:1c:99:d8:a2:82:1c:23:07:7c:25:ba:3b:c1:09:ec:da:0d:
         68:ae:15:7c:87:b8:d2:63:18:89:1b:e6:9c:df:58:fc:ab:4b:
         bd:a0:70:57:8b:64:bb:a3:60:e8:a0:df:a7:56:53:ac:2c:52:
         04:da:2c:83:0c:df:85:50:0d:af:49:e9:02:fa:cd:aa:f7:4b:
         67:9a:b2:4a:9d:9b:2d:32:d8:7c:61:6b:da:c9:e9:6a:36:56:
         a2:1b:b2:fa:06:ef:3c:37:3a:c1:17:c0:98:a5:d9:a8:cf:46:
         80:51:4e:fd:ce:ac:6f:97:dd:5f:3d:2d:91:b5:34:e0:ec:11:
         59:45:49:bf:43:45:e7:ca:53:8d:8b:2b:07:16:a9:00:88:5b:
         24:5d:f7:30:dd:6b:6d:f9:ab:6d:37:be:a8:75:79:08:3c:13:
         c5:69:79:33:07:06:21:33:6b:93:56:8c:f0:08:65:b4:76:97:
         be:34:c0:05:bb:89:1c:bd:de:10:0b:ac:e8:91:3e:c9:d9:20:
         e5:9e:9c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:54:49 2026 by rpki-client