Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/AC038F18740611F0B304387CC4F9AE02.roa
File:                     AC038F18740611F0B304387CC4F9AE02.roa (raw, json)
Hash identifier:          bY/B4JU6Y1TEwNQXXEFLMC1cB/ayUFqxvBrD5wkPK/g=
Subject key identifier:   59:8E:6E:B9:4C:EA:04:E9:A0:06:36:1A:F7:AA:1C:3A:DF:17:01:DC
Certificate issuer:       /CN=A918549C/serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
Certificate serial:       014F
Authority key identifier: 52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/AC038F18740611F0B304387CC4F9AE02.roa
Signing time:             Tue 03 Mar 2026 05:46:21 +0000
ROA not before:           Tue 03 Mar 2026 05:46:21 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153952
IP address blocks:        2001:df3:7540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl
                          rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:38:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918549C, serialNumber=52EDFEDFEA1535C13EE8A00E55FC7D51446D67D4
        Validity
            Not Before: Mar  3 05:46:21 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a675ac-b6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7c:5b:60:97:86:f7:4d:8d:71:2c:07:1f:5b:
                    84:cb:59:8f:7c:57:9e:15:fd:74:97:68:9c:8a:e7:
                    a0:b6:c5:65:44:65:21:e3:8a:64:1a:ed:f9:10:85:
                    25:e7:8c:a6:9b:6f:0e:4b:72:6b:98:53:09:e3:0f:
                    0d:28:47:06:5a:96:b7:26:9d:a5:ff:b1:a9:88:e6:
                    d3:5a:2a:20:bd:e5:c1:95:a5:83:b8:d6:46:d6:06:
                    4e:25:e6:5d:cb:78:7f:6f:e2:b3:ed:cc:06:9a:5f:
                    03:96:d0:89:8e:2f:47:92:a3:42:60:0d:f4:bc:20:
                    fc:29:06:4f:61:96:d0:43:ee:6a:68:41:d1:b2:3c:
                    1c:51:2c:c2:f5:40:5a:37:2a:6a:a2:32:a4:d0:97:
                    58:fc:e1:2d:ca:0a:ca:15:2a:c9:5e:4b:e3:86:33:
                    8b:c7:21:16:ac:fe:74:3c:32:f8:5c:93:4d:fb:f0:
                    6b:83:8e:66:ef:c2:33:e6:d1:5d:b4:fa:f8:9a:88:
                    f0:91:eb:a5:1e:f6:c5:15:64:b0:e9:2c:5f:9b:38:
                    2f:d9:f7:7d:4a:52:95:ac:cb:18:6e:d4:3a:36:43:
                    16:b9:f9:fe:20:f3:84:89:39:d6:80:21:a1:14:c1:
                    13:3c:50:39:38:b1:08:c7:e4:d4:78:11:3e:3b:d1:
                    2b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:8E:6E:B9:4C:EA:04:E9:A0:06:36:1A:F7:AA:1C:3A:DF:17:01:DC
            X509v3 Authority Key Identifier:
                keyid:52:ED:FE:DF:EA:15:35:C1:3E:E8:A0:0E:55:FC:7D:51:44:6D:67:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uu3-3-oVNcE-6KAOVfx9UURtZ9Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918549C/E6AB2CDE4A3111EFB7BBD51CC4F9AE02/AC038F18740611F0B304387CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:7540::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:f8:0b:59:1e:78:1a:5f:7d:86:f3:0a:b1:3e:db:0a:e9:33:
         35:32:6d:01:ea:0c:44:45:63:38:7b:7e:43:ff:53:68:ec:42:
         02:03:19:9a:89:fb:c4:ab:da:d9:20:92:5c:dc:ea:95:df:5e:
         c6:eb:03:c8:b5:76:3a:c7:00:b5:1c:0f:e3:e2:23:1a:23:d4:
         5d:2d:a5:3c:de:bd:77:23:70:f0:a2:3f:e2:c8:55:ba:81:d3:
         e0:bb:89:73:5c:fa:02:1d:74:67:a0:71:75:71:bf:17:48:fe:
         c4:c4:fe:63:f6:11:24:46:12:0e:08:58:c9:04:5e:10:d3:93:
         8a:19:91:de:1b:98:d7:ee:af:e1:eb:46:f6:7a:bd:97:8e:bc:
         2a:eb:b6:8e:1d:30:1f:39:d5:be:3a:17:4c:55:c7:bb:a6:27:
         ef:02:12:0d:34:a7:2a:a9:e4:4e:f1:9b:6e:41:05:6d:07:8c:
         0c:56:08:21:38:18:f4:cd:fb:d1:48:20:cd:2e:51:19:bb:4a:
         b0:f5:e5:da:97:35:fd:d3:d9:e0:a9:ca:41:19:95:0c:1d:d4:
         7b:36:1b:31:bc:e0:ba:4e:57:3c:4b:51:dd:be:7d:d2:f2:e4:
         97:c0:a3:d9:88:9f:36:c7:eb:44:08:a4:30:65:b9:9e:c0:3f:
         94:fd:af:7d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODU0OUMxMTAvBgNVBAUTKDUyRURGRURGRUExNTM1QzEzRUU4QTAwRTU1RkM3RDUx
NDQ2RDY3RDQwHhcNMjYwMzAzMDU0NjIxWhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2NzVhYy1iNmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHxbYJeG902NcSwHH1uEy1mPfFeeFf10l2iciuegtsVlRGUh44pkGu35EIUl
54ymm28OS3JrmFMJ4w8NKEcGWpa3Jp2l/7GpiObTWiogveXBlaWDuNZG1gZOJeZd
y3h/b+Kz7cwGml8DltCJji9HkqNCYA30vCD8KQZPYZbQQ+5qaEHRsjwcUSzC9UBa
NypqojKk0JdY/OEtygrKFSrJXkvjhjOLxyEWrP50PDL4XJNN+/Brg45m78Iz5tFd
tPr4mojwkeulHvbFFWSw6Sxfmzgv2fd9SlKVrMsYbtQ6NkMWufn+IPOEiTnWgCGh
FMETPFA5OLEIx+TUeBE+O9ErhwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFmObrlM
6gTpoAY2GveqHDrfFwHcMB8GA1UdIwQYMBaAFFLt/t/qFTXBPuigDlX8fVFEbWfU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ5Qy9FNkFCMkNERTRB
MzExMUVGQjdCQkQ1MUNDNEY5QUUwMi9VdTMtMy1vVk5jRS02S0FPVmZ4OVVVUnRa
OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1V1My0zLW9WTmNFLTZLQU9WZng5VVVSdFo5US5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
ODU0OUMvRTZBQjJDREU0QTMxMTFFRkI3QkJENTFDQzRGOUFFMDIvQUMwMzhGMTg3
NDA2MTFGMEIzMDQzODdDQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN83VAMA0GCSqGSIb3DQEBCwUAA4IBAQAn+AtZHngaX32G8wqx
PtsK6TM1Mm0B6gxERWM4e35D/1No7EICAxmaifvEq9rZIJJc3OqV317G6wPItXY6
xwC1HA/j4iMaI9RdLaU83r13I3Dwoj/iyFW6gdPgu4lzXPoCHXRnoHF1cb8XSP7E
xP5j9hEkRhIOCFjJBF4Q05OKGZHeG5jX7q/h60b2er2Xjrwq67aOHTAfOdW+OhdM
Vce7pifvAhINNKcqqeRO8ZtuQQVtB4wMVgghOBj0zfvRSCDNLlEZu0qw9eXalzX9
09ngqcpBGZUMHdR7NhsxvOC6Tlc8S1Hdvn3S8uSXwKPZiJ82x+tECKQwZbmewD+U
/a99
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:28:56 2026 by rpki-client