Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/F526E31C122011F1ACA5537B1D3D8C67.roa
File:                     F526E31C122011F1ACA5537B1D3D8C67.roa (raw, json)
Hash identifier:          enStohQFnFb+r0zk+PqrIbAeF36NZLUhIXYRdDD2ymg=
Subject key identifier:   28:A3:1B:3C:BB:B0:B6:4B:40:7C:A8:B2:D5:73:1F:D9:81:EE:44:D6
Certificate issuer:       /CN=A9175648/serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
Certificate serial:       0155
Authority key identifier: 2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/F526E31C122011F1ACA5537B1D3D8C67.roa
Signing time:             Sun 01 Mar 2026 18:05:28 +0000
ROA not before:           Wed 25 Feb 2026 08:06:59 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     141385
IP address blocks:        2001:df5:c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl
                          rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:49:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9175648, serialNumber=2C1C07D151271969E13E1CFD161B1F60770E290D
        Validity
            Not Before: Feb 25 08:06:59 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a47fe8-1126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:11:54:e8:40:a1:f0:1d:8b:b5:76:ce:68:1e:
                    1f:a9:dd:f3:de:01:5b:f2:7c:ad:f1:52:68:2b:9e:
                    1b:8c:00:47:10:51:a4:ad:d6:70:64:47:38:5a:e7:
                    3f:0b:ef:8e:55:74:ca:04:53:5c:eb:09:e6:73:2a:
                    a7:15:10:46:0e:fa:ef:f8:b5:91:b5:f5:ee:c5:c9:
                    1f:28:c2:a6:75:51:10:ec:90:f8:c7:85:9f:84:a5:
                    21:63:bb:21:f3:a4:0a:88:8b:02:40:22:9c:b7:fd:
                    73:13:e7:de:02:b7:d7:7d:8d:23:fa:3d:38:4d:5d:
                    ef:e1:8a:cd:98:8d:39:57:a8:a3:a6:2e:8d:d3:a5:
                    22:1b:85:2a:b1:9e:bd:72:2c:b9:89:95:0d:52:29:
                    ec:49:d7:55:59:fc:f6:1d:30:48:7f:60:c9:ee:fe:
                    8f:12:d2:91:78:2f:e4:67:fd:28:40:73:e0:68:29:
                    69:bf:2e:8e:c9:a7:b5:81:3e:60:e7:70:a5:63:9b:
                    bd:ca:9b:f7:ca:f0:42:28:02:0d:2e:c5:15:96:4e:
                    dc:d4:0c:97:3f:e5:1a:6e:a4:e3:1c:22:c5:63:3f:
                    7d:09:29:33:47:27:d8:45:32:96:4f:13:99:20:f9:
                    59:b7:52:5a:c8:af:fa:d3:0d:3a:89:56:e0:69:53:
                    ba:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A3:1B:3C:BB:B0:B6:4B:40:7C:A8:B2:D5:73:1F:D9:81:EE:44:D6
            X509v3 Authority Key Identifier:
                keyid:2C:1C:07:D1:51:27:19:69:E1:3E:1C:FD:16:1B:1F:60:77:0E:29:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBwH0VEnGWnhPhz9FhsfYHcOKQ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175648/218F268ADC9E11EF8B62DD5FC4F9AE02/F526E31C122011F1ACA5537B1D3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3e:9d:13:d4:2d:5e:7d:94:ee:2f:8a:78:51:41:2d:be:c3:be:
         04:e2:06:0f:d3:12:a2:31:f7:45:8e:1f:b4:74:96:17:a2:a8:
         79:fa:f0:74:7a:2a:8f:6e:86:11:15:73:2a:9d:4b:c8:7c:25:
         e1:20:a0:01:99:25:4f:cc:79:09:f4:56:c2:94:4a:97:b7:eb:
         05:4f:a0:75:d8:7c:16:2f:d1:16:9c:fa:62:83:47:24:6a:e8:
         c3:de:7b:6d:d9:25:e4:1b:05:a1:e3:7e:af:b2:a1:33:36:5e:
         67:ae:09:80:6e:72:af:e7:24:61:8c:07:93:92:49:fa:50:bf:
         e7:c8:f5:b4:28:25:5d:36:9a:18:56:d3:72:55:7a:d0:0f:68:
         55:74:93:48:7b:ad:26:ac:94:e0:79:ee:56:2f:44:f4:2e:51:
         3f:59:20:65:ae:27:b9:a3:57:6c:6e:d5:ec:46:8e:bf:1b:85:
         88:bb:0a:85:5e:c5:6f:23:30:58:eb:83:5e:10:37:34:a5:17:
         95:44:2f:cb:01:e0:df:17:12:9a:b0:6f:75:48:05:c1:70:16:
         16:9f:21:36:63:4b:75:09:df:ac:98:6d:19:82:a3:89:dc:06:
         07:7a:ae:7c:ec:4b:de:6e:ea:71:cd:f0:dd:1c:55:0d:61:1c:
         57:8d:e5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:31:37 2026 by rpki-client