Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/D65EFE0A91F711F087341C45C4F9AE02.roa
File:                     D65EFE0A91F711F087341C45C4F9AE02.roa (raw, json)
Hash identifier:          bwshEspn5Rm/jzWxQl5mOhNxhC2TqkN15wojbaQFT3A=
Subject key identifier:   E0:95:1E:58:D7:DB:C4:51:3F:8B:35:EE:48:EE:A8:79:88:1C:86:B7
Certificate issuer:       /CN=A9131C4B/serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
Certificate serial:       57
Authority key identifier: 5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/D65EFE0A91F711F087341C45C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:55:29 +0000
ROA not before:           Mon 15 Sep 2025 05:50:09 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     153929
IP address blocks:        2402:ea0::/40 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl
                          rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:11:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131C4B, serialNumber=5BF00014734AD1B565B1086D12FFCAB590CCB8BB
        Validity
            Not Before: Sep 15 05:50:09 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a588c1-9c29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:56:f8:4b:fb:75:8a:d1:5a:05:2e:44:90:0c:
                    7f:e3:86:2f:14:b0:3b:bf:73:39:68:e9:53:13:92:
                    a2:88:47:52:e9:a5:f6:a1:f6:96:69:ea:aa:ca:27:
                    65:a0:9b:37:a5:72:6a:41:4d:a0:e0:c0:4a:13:07:
                    57:39:f2:1a:90:e8:67:ab:d3:25:d8:8e:79:3f:81:
                    f4:4a:2f:77:db:99:5a:b5:89:fb:66:39:8a:26:01:
                    bc:f4:27:37:5a:5a:0a:49:0c:80:03:c7:d6:9f:0d:
                    2f:36:af:a5:d7:a3:b6:59:68:a7:8e:ff:37:13:7b:
                    b0:0f:30:58:36:25:93:e5:a1:43:9a:9a:64:02:c1:
                    f2:2a:ca:40:d9:ad:e1:2d:ff:88:1c:94:e4:78:fd:
                    09:88:82:43:41:bc:7f:e1:0a:8c:d1:8b:7b:8f:fa:
                    c7:6e:82:1f:26:9b:b3:ba:91:29:58:7a:9c:41:4a:
                    ae:58:f1:bb:10:0f:30:d4:a0:5c:2c:48:ca:59:55:
                    5f:6f:53:76:a3:21:f3:e2:71:fe:b8:cc:18:8d:48:
                    96:f0:5e:aa:76:44:7b:2d:c7:b8:b6:4a:3b:8a:c0:
                    60:88:38:26:a5:c8:4c:ff:5e:1b:38:7e:1e:ce:ed:
                    9d:80:f9:a9:81:e6:fd:5f:75:aa:80:30:67:2a:7d:
                    84:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:95:1E:58:D7:DB:C4:51:3F:8B:35:EE:48:EE:A8:79:88:1C:86:B7
            X509v3 Authority Key Identifier:
                keyid:5B:F0:00:14:73:4A:D1:B5:65:B1:08:6D:12:FF:CA:B5:90:CC:B8:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/W_AAFHNK0bVlsQhtEv_KtZDMuLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W_AAFHNK0bVlsQhtEv_KtZDMuLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131C4B/1400662A91F511F08834EB1AC4F9AE02/D65EFE0A91F711F087341C45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:ea0::/40

    Signature Algorithm: sha256WithRSAEncryption
         65:b6:61:12:71:38:86:56:24:db:84:f3:84:50:c6:99:d7:aa:
         58:a2:71:67:00:2a:3c:9d:c8:f0:5b:e7:c7:03:3c:ba:18:eb:
         a8:e4:58:c6:04:94:00:e5:77:59:c1:33:48:11:3c:cc:d2:e3:
         da:50:1e:09:70:f1:e1:32:06:e4:21:54:78:cb:d2:5e:59:af:
         f1:dc:97:31:2b:14:96:80:5f:4e:ad:4a:a2:13:89:ab:09:98:
         41:df:80:74:f4:c8:90:e6:73:46:58:a7:9d:34:dc:db:93:e1:
         42:ae:6d:3b:a2:a4:7e:10:98:e6:0d:8f:aa:0e:b1:b4:12:62:
         3c:58:c7:4d:05:c1:25:66:e0:68:b2:f4:ef:72:dc:be:76:b9:
         20:33:8c:fc:09:1c:82:7b:84:c3:79:d1:d9:32:c1:85:ee:b2:
         cf:ba:74:83:bc:d5:e0:de:b5:43:3e:58:44:27:5c:7a:f8:12:
         3b:ba:a0:3f:a9:3e:ea:42:07:f5:15:4d:02:96:d0:ba:35:d8:
         50:91:d4:92:c7:b4:31:52:29:48:ba:31:7f:44:0f:72:9d:2b:
         aa:c0:1e:10:dc:09:0d:57:c9:10:ec:6c:a1:71:76:12:e3:ed:
         13:1c:8d:df:af:63:14:d7:cd:0d:21:d1:b4:5e:35:0a:9f:b8:
         d0:db:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:25:57 2026 by rpki-client