Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5D313B1C31DA11EEBE28A546C4F9AE02.roa
File:                     5D313B1C31DA11EEBE28A546C4F9AE02.roa (raw, json)
Hash identifier:          0AY62NK98rk5TGBieSIptVBTxWIVtw7dVGDsaIJvGI8=
Subject key identifier:   D6:A5:E9:F7:48:50:90:EC:49:26:FF:A5:8F:66:42:E2:1E:E9:BA:0B
Certificate issuer:       /CN=A9148AC0/serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
Certificate serial:       01FA
Authority key identifier: 76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5D313B1C31DA11EEBE28A546C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:42:58 +0000
ROA not before:           Wed 05 Nov 2025 03:47:40 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     55891
IP address blocks:        2405:4cc1:100::/40 maxlen: 40
                          2405:4cc1:200::/40 maxlen: 40
                          2405:4cc1:300::/40 maxlen: 40
                          2405:4cc1:500::/40 maxlen: 40
                          2405:4cc1:600::/40 maxlen: 40
                          2405:4cc1:700::/40 maxlen: 40
                          2405:4cc1:800::/40 maxlen: 40
                          2405:4cc1:900::/40 maxlen: 40
                          2405:4cc1:b00::/40 maxlen: 40
                          2405:4cc1:1000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl
                          rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 506 (0x1fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9148AC0, serialNumber=766857BA3F7C728B680525AC41FA7CE2A1F0092D
        Validity
            Not Before: Nov  5 03:47:40 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a585d2-28e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:93:39:6a:f4:b1:28:dc:8e:4a:d5:0a:80:
                    25:68:ce:27:e4:81:56:2e:21:99:c7:07:bd:89:24:
                    b3:c5:7e:e3:72:ce:ec:be:6b:bd:a0:94:09:4b:9f:
                    be:60:1b:a8:91:6f:cc:f2:75:cc:47:03:a7:9f:c3:
                    1b:19:ff:50:8e:11:82:a3:fb:e2:5b:68:79:a0:dc:
                    8c:7f:15:5d:7c:8b:74:a5:85:a8:57:26:b7:1c:85:
                    5e:d5:af:52:48:5c:18:a5:ff:01:e6:5f:e5:b8:98:
                    52:bf:24:90:8f:19:5c:a9:80:2e:76:20:ec:b4:fd:
                    77:41:4c:eb:12:28:28:1b:f5:b1:94:f5:69:07:bf:
                    73:06:67:70:0c:3d:6c:e2:44:31:18:95:a6:2a:3d:
                    6b:4f:46:4d:f8:a2:25:8e:d0:f7:98:5f:81:a0:f8:
                    26:05:7c:83:07:58:3b:b1:dc:57:12:75:ba:56:41:
                    ea:72:e0:ce:38:46:74:44:10:63:0a:64:f7:b7:a7:
                    3a:b5:84:1c:61:4f:a8:da:86:72:09:ea:43:14:00:
                    11:1c:d9:bd:61:79:85:83:c2:d4:3e:dd:84:57:92:
                    2c:4a:ce:27:87:ca:41:54:09:cb:09:60:f4:fc:53:
                    f3:8e:4b:34:5c:06:30:f1:75:23:5c:4c:9d:d6:7c:
                    ad:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A5:E9:F7:48:50:90:EC:49:26:FF:A5:8F:66:42:E2:1E:E9:BA:0B
            X509v3 Authority Key Identifier:
                keyid:76:68:57:BA:3F:7C:72:8B:68:05:25:AC:41:FA:7C:E2:A1:F0:09:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/dmhXuj98cotoBSWsQfp84qHwCS0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dmhXuj98cotoBSWsQfp84qHwCS0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9148AC0/E4ED539431D811EE83006A41C4F9AE02/5D313B1C31DA11EEBE28A546C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:4cc1:100::-2405:4cc1:3ff:ffff:ffff:ffff:ffff:ffff
                  2405:4cc1:500::-2405:4cc1:9ff:ffff:ffff:ffff:ffff:ffff
                  2405:4cc1:b00::/40
                  2405:4cc1:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:70:0b:4d:c7:6f:ce:aa:a8:81:02:ac:f0:2f:ef:cc:02:38:
         bf:51:b4:c6:a5:a7:39:ff:95:39:ad:2a:8f:8f:93:b6:58:69:
         06:0f:d6:f4:33:30:d2:66:5c:f3:ef:bb:e3:b8:d0:06:ef:7c:
         48:97:96:5b:ef:fb:2c:06:73:22:69:f8:5f:92:7d:ae:59:03:
         83:ff:7b:2e:a4:f4:b1:b5:71:b1:b4:85:fc:2c:5d:c9:71:e4:
         23:89:6a:33:4c:db:2d:81:a1:0b:87:1f:d5:ae:f3:b0:f9:3e:
         18:f3:0c:00:ae:f3:38:ff:7e:16:07:9e:d4:7a:0f:67:f4:ae:
         cb:c7:a0:a5:36:8e:ea:9e:b1:d5:5b:32:15:08:79:b9:2f:54:
         aa:c8:c0:5b:a8:de:39:d5:a7:93:0a:25:21:5b:59:35:6f:99:
         3e:e5:5d:e6:95:d5:10:f7:32:a5:d1:56:b2:67:05:0b:01:d0:
         c7:fe:80:17:7c:c0:bf:59:ab:70:b8:93:42:b6:de:d7:b7:80:
         1d:89:26:f2:c2:d6:fe:ce:e5:68:bf:5f:e5:90:b7:b2:e4:fe:
         66:df:59:4f:a4:c7:f0:b1:cd:e0:95:a3:2b:b1:8a:40:e2:f6:
         0a:74:6b:ec:f3:a5:04:df:dd:3d:85:5b:d1:6d:36:d5:81:bc:
         25:23:95:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:56:52 2026 by rpki-client