Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/0DFFB0D2989111EEB7938523C4F9AE02.roa
File:                     0DFFB0D2989111EEB7938523C4F9AE02.roa (raw, json)
Hash identifier:          ARuPA5StUqswZMj5Q2BXw5Z0iKJJC2awoPAkKPCdInM=
Subject key identifier:   CF:03:43:72:17:9B:B3:DB:2B:F7:D1:13:07:DC:1F:51:34:92:6B:1F
Certificate issuer:       /CN=A9144261/serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
Certificate serial:       01B6
Authority key identifier: CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/0DFFB0D2989111EEB7938523C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:05:57 +0000
ROA not before:           Tue 27 Jan 2026 03:22:43 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     9664
IP address blocks:        2001:df3:3fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl
                          rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:17:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144261, serialNumber=CD89A8268EB11E330FBD44C048720D1325C5A60B
        Validity
            Not Before: Jan 27 03:22:43 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a439b5-54c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b8:15:b2:38:75:92:1c:ce:9f:12:f0:35:f9:
                    90:ae:86:e4:d4:4e:a2:32:71:a4:53:f1:ec:de:2a:
                    c5:33:5d:f4:43:a1:79:ab:85:b1:cc:2a:f6:f7:3e:
                    14:10:1c:19:cc:a9:2f:6f:93:71:15:69:f1:9f:14:
                    a2:dd:66:f3:3a:b7:79:91:40:ef:f2:92:3a:74:38:
                    8c:6c:01:71:b8:ca:38:ff:9b:1b:b0:6b:e9:c6:8a:
                    44:8d:37:a0:c9:0d:b5:1b:75:09:b0:00:72:bd:68:
                    b8:ab:84:ae:c3:da:f8:9c:cc:eb:2d:dd:06:d6:bb:
                    6d:45:80:9e:68:f2:24:41:27:f7:75:b0:02:5e:e1:
                    0c:de:52:4c:65:e7:b8:8f:bf:10:5a:fc:12:34:b0:
                    43:60:7b:17:c0:da:af:e2:21:cd:9b:16:c4:a2:a0:
                    87:85:78:1f:c9:aa:a5:bc:c1:f7:e8:2c:f1:27:69:
                    ad:78:bd:28:23:dc:6c:ad:e6:f3:a9:fd:a8:83:81:
                    9d:fa:43:1e:31:8d:3d:3a:6d:5a:a0:37:8b:28:cb:
                    a3:71:eb:d3:81:c7:cc:9a:25:2a:7e:44:96:ac:ea:
                    f8:c7:1d:3e:92:92:11:d5:b4:02:6f:a8:dc:50:c2:
                    82:f7:ab:16:a0:cb:84:b9:e7:c9:3e:e1:4c:c5:91:
                    33:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:03:43:72:17:9B:B3:DB:2B:F7:D1:13:07:DC:1F:51:34:92:6B:1F
            X509v3 Authority Key Identifier:
                keyid:CD:89:A8:26:8E:B1:1E:33:0F:BD:44:C0:48:72:0D:13:25:C5:A6:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/zYmoJo6xHjMPvUTASHINEyXFpgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zYmoJo6xHjMPvUTASHINEyXFpgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144261/D065BC4C934211EEA8C15478C4F9AE02/0DFFB0D2989111EEB7938523C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:3fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:15:c1:76:88:a3:12:84:5c:f7:f2:f8:cf:c0:44:28:b8:62:
         cf:6b:7c:d8:ae:10:16:90:e3:f1:10:0e:b7:4b:21:0e:8b:1a:
         e2:bd:8b:33:35:74:43:d8:dd:0d:73:5f:2e:8e:13:4d:9a:12:
         85:fc:02:9f:b6:e3:60:89:05:16:9f:9e:f4:3d:f4:54:4a:37:
         85:07:3e:fd:ba:cc:69:8a:fd:5a:18:27:5d:b8:99:bd:72:54:
         70:e5:43:8d:b4:5a:8d:c7:7f:db:47:0a:ff:2b:e0:37:d1:c0:
         11:d1:b3:a2:3f:ab:0c:cd:9f:50:9b:22:05:20:37:a9:98:bd:
         5a:74:db:dc:a7:77:f2:0c:5d:5e:6b:02:e8:90:b4:e4:7d:29:
         7a:c7:d2:76:e3:2a:3a:ec:e7:b4:8f:42:76:35:63:e7:55:25:
         fa:68:cf:f6:0e:30:45:a7:25:c1:d5:57:ab:22:b2:85:8f:b6:
         3b:01:53:ed:f4:d7:1d:80:a3:0e:a1:15:12:a8:8c:9e:b1:80:
         6b:dd:dd:fd:4a:97:c1:db:3f:a2:c8:5b:9b:ec:2e:ee:c5:2b:
         06:82:71:aa:bb:73:21:ce:2a:65:ad:27:97:a4:48:63:bc:ac:
         79:6e:65:53:e2:60:b5:ee:6b:a0:53:fe:c9:d7:31:39:ee:2f:
         f4:c6:2b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:48:17 2026 by rpki-client