Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/A1F2E73A19D511EF85D48428C4F9AE02.roa
File:                     A1F2E73A19D511EF85D48428C4F9AE02.roa (raw, json)
Hash identifier:          Tp9AbDgfK/vxHv0T8EocR+zLaLvDS9XrhEaYG7pj/74=
Subject key identifier:   4C:6A:D8:7D:F2:FB:76:B4:CE:7E:8C:48:11:8C:E4:68:95:E6:B8:A7
Certificate issuer:       /CN=A9149F48/serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
Certificate serial:       0748
Authority key identifier: 00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/A1F2E73A19D511EF85D48428C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:12:11 +0000
ROA not before:           Thu 26 Feb 2026 22:18:43 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     141726
IP address blocks:        2407:1d40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl
                          rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 21:38:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1864 (0x748)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149F48, serialNumber=000B3B4F88957CDD6D37DFF613138D6F54A85B79
        Validity
            Not Before: Feb 26 22:18:43 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a4655b-85a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:81:10:8e:c2:07:e2:8b:e1:b9:77:64:55:c0:
                    d5:cd:0e:85:a4:76:a9:39:ab:fa:50:f1:95:f3:2d:
                    59:bd:eb:1e:e7:a6:b3:15:89:2b:b2:b1:dd:45:88:
                    b6:c1:9c:4e:3b:d6:a9:a9:e5:33:65:c3:10:81:ed:
                    12:c0:27:2f:59:e8:4e:ee:93:36:e7:2f:bb:b0:14:
                    ea:b5:59:1b:67:25:41:ba:b0:84:f3:69:33:82:f4:
                    0d:88:0d:63:42:41:b1:72:f6:7c:69:47:3f:04:a4:
                    14:5a:a5:da:6f:86:73:cb:ec:af:f0:c6:01:a9:47:
                    c3:87:51:e0:a0:11:a2:af:ab:e2:d2:eb:42:b8:86:
                    1a:32:22:36:7b:3d:2c:1d:56:41:4a:3f:42:70:78:
                    fe:83:ed:31:a6:53:48:d3:40:03:de:e3:04:9c:1b:
                    fd:65:a6:49:b2:60:41:51:41:c9:48:3a:26:27:dd:
                    2b:49:22:8d:e8:ad:6b:aa:b1:60:01:79:d2:b2:65:
                    42:40:40:da:1a:e6:21:f9:6d:2d:4b:16:0d:85:a0:
                    de:02:37:45:47:c2:e0:b9:33:cb:52:8a:2d:eb:6c:
                    5e:91:1b:de:c8:9d:bf:94:f5:ab:c8:aa:1b:85:24:
                    3c:c7:b8:38:cd:06:17:45:ca:e4:7e:0d:cb:bb:62:
                    95:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6A:D8:7D:F2:FB:76:B4:CE:7E:8C:48:11:8C:E4:68:95:E6:B8:A7
            X509v3 Authority Key Identifier:
                keyid:00:0B:3B:4F:88:95:7C:DD:6D:37:DF:F6:13:13:8D:6F:54:A8:5B:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/AAs7T4iVfN1tN9_2ExONb1SoW3k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAs7T4iVfN1tN9_2ExONb1SoW3k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149F48/D9EF99C06D6311EB9DF81949C4F9AE02/A1F2E73A19D511EF85D48428C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:1d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:36:15:1e:47:e1:a4:03:cd:8c:5a:2a:73:b2:f7:a1:39:94:
         cf:7b:f3:22:9b:71:1a:c0:66:4f:76:38:d5:ab:6f:ce:ca:8c:
         aa:6a:32:51:9a:12:ff:2f:e0:b4:28:29:e1:d6:a9:ba:a8:42:
         c5:12:2a:23:c5:31:cb:6c:65:8d:a2:75:0b:04:9f:42:0d:49:
         48:3c:53:62:fd:b9:25:dc:de:aa:57:cd:22:cb:a0:4b:8d:91:
         0e:c1:d3:f4:2d:ae:02:03:00:b8:ce:ad:d3:d2:fe:0a:a8:3e:
         59:de:72:68:e8:f6:09:36:68:27:00:10:0d:d9:a5:ef:4b:00:
         d6:dd:6f:5a:63:01:6a:92:99:96:05:59:e5:5f:fa:bc:49:dd:
         23:2b:4f:bb:4e:cc:a6:74:f4:00:99:d2:1a:00:a2:b0:df:ff:
         7c:a9:7d:e6:1a:40:51:70:38:e6:bd:39:88:8f:64:a0:88:f8:
         7a:df:49:7d:27:25:b7:f1:bc:42:fa:6f:bc:65:3c:ac:bb:00:
         e3:8c:a1:cd:ce:ca:0e:1c:1c:ee:d9:9e:24:d0:68:47:d9:da:
         db:b1:43:cb:5c:33:86:b4:65:28:f9:93:9f:e6:c7:82:08:e2:
         e0:24:47:28:ad:1b:88:a1:30:f7:0b:f6:4a:1d:9a:45:4b:56:
         cf:42:6c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:08:50 2026 by rpki-client