Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/275E04E80BB711F1A64B03C6263D8C67.roa
File:                     275E04E80BB711F1A64B03C6263D8C67.roa (raw, json)
Hash identifier:          9fFWODKU53GVq1qlZZ9LxoXAA6Tn5rDg6Hrhm4oZML0=
Subject key identifier:   04:FE:FB:06:67:A5:01:D0:4D:6A:EA:89:F0:CA:DF:1D:7F:B4:01:41
Certificate issuer:       /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF
Certificate serial:       49
Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/275E04E80BB711F1A64B03C6263D8C67.roa
Signing time:             Mon 02 Mar 2026 14:00:03 +0000
ROA not before:           Tue 17 Feb 2026 04:14:29 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     142205
IP address blocks:        2402:3660::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl
                          rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF
        Validity
            Not Before: Feb 17 04:14:29 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a597e3-d3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a6:7e:52:dd:db:96:da:85:90:7c:55:b0:f3:
                    33:b1:35:b0:b1:4b:09:a8:52:2d:d3:b5:52:ef:92:
                    80:02:f0:5a:b9:a1:ed:47:50:32:03:ae:81:be:26:
                    4e:56:d5:0a:25:64:bc:5c:5b:44:4b:c3:25:89:7a:
                    49:aa:4f:59:b9:5d:7f:c5:a1:27:f0:60:18:1d:2a:
                    fa:f6:ef:c1:05:ea:18:04:ff:fe:10:0d:f8:8d:dd:
                    30:0e:7d:00:f4:73:b6:ec:68:56:dd:6e:30:d7:f7:
                    2d:9b:a0:52:04:c7:38:4a:f3:ff:a2:de:19:fd:de:
                    e8:3a:c5:5c:67:a9:e4:68:32:e1:ef:c8:70:bb:40:
                    61:18:08:2b:0f:8e:33:b8:c7:17:97:8f:de:97:a6:
                    26:5f:98:44:19:6a:82:fa:6e:c0:be:10:31:3f:97:
                    7d:7f:a6:89:2c:4a:cd:fd:37:95:e0:f9:05:80:71:
                    72:e4:3b:7f:ca:8d:98:e8:07:54:91:f1:1f:f5:0b:
                    71:7d:d1:a4:3e:4c:e3:8c:42:a9:b5:94:44:c9:af:
                    a6:71:fc:42:ad:47:65:cf:33:e7:44:d0:31:11:86:
                    bc:45:e0:9f:63:a4:52:b8:09:98:22:8c:b4:80:47:
                    2c:a4:6a:50:1d:24:db:62:86:c7:a8:a1:02:c7:89:
                    a6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:FB:06:67:A5:01:D0:4D:6A:EA:89:F0:CA:DF:1D:7F:B4:01:41
            X509v3 Authority Key Identifier:
                keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/275E04E80BB711F1A64B03C6263D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3660::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:fb:78:7d:70:02:f0:d5:a8:37:79:7b:90:cc:18:9a:fe:bf:
         e5:9e:a6:36:38:01:50:bc:64:84:a7:5f:69:e3:b9:a8:9e:cd:
         03:84:cd:8e:be:83:89:fa:e2:91:e5:c4:5e:3c:0c:cf:a3:ef:
         c3:e3:61:d1:e5:b2:e3:82:6e:93:0a:fb:22:57:47:52:56:e3:
         59:a5:11:3a:c9:ce:68:78:52:d0:d6:a5:84:63:c6:f0:90:b6:
         6f:7a:14:39:87:3e:73:be:e6:52:01:ab:b5:b8:98:d7:76:71:
         56:2a:97:11:b6:9c:4a:24:e6:3f:f1:2c:ab:53:9f:88:17:2f:
         62:2d:97:75:14:72:7d:0b:32:fd:23:39:33:a6:fc:4d:20:33:
         5e:81:ef:56:a1:ac:72:60:67:4e:03:a3:54:56:7c:cc:8e:fe:
         61:6a:d7:6a:e7:40:6a:ba:35:29:e2:8f:6d:14:a3:6f:98:1f:
         c9:83:df:ef:b5:d0:4f:c2:b5:01:fb:d5:97:16:a6:d2:99:4c:
         ac:8c:1a:a9:b8:da:80:10:14:e2:b3:ef:9c:a1:b7:cb:71:03:
         90:e3:b5:15:d1:a0:2b:b3:0f:c7:a7:c9:c2:be:9d:de:ed:c3:
         89:5b:de:55:a0:4f:7d:99:09:fb:3b:bc:be:f0:7c:76:92:1b:
         a9:a7:d8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:51:50 2026 by rpki-client