Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/ED8B1602A0D711EFB982AD62C4F9AE02.roa
File:                     ED8B1602A0D711EFB982AD62C4F9AE02.roa (raw, json)
Hash identifier:          4XQqYwr9ZnxSQLoK6YzNihejRaWxbBfvhwjsYEHNOoQ=
Subject key identifier:   E7:3C:B6:E3:94:92:63:AE:E5:55:C8:A0:0C:E0:08:27:0D:36:46:01
Certificate issuer:       /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial:       05B9
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/ED8B1602A0D711EFB982AD62C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:51:31 +0000
ROA not before:           Wed 03 Sep 2025 00:15:36 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     38001
IP address blocks:        2401:df40:2::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
                          rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 22:59:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1465 (0x5b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
        Validity
            Not Before: Sep  3 00:15:36 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a47ca3-c62c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b7:bc:f5:2c:14:f6:0c:d3:73:df:81:2c:45:
                    b3:22:2d:fd:32:de:e5:12:c3:d4:3e:59:a5:c2:52:
                    88:47:ea:b4:6e:33:e0:ae:6a:e0:be:5c:c8:17:b4:
                    2d:00:17:7b:6e:06:10:88:12:bc:f1:df:a5:98:ab:
                    5e:2b:92:3e:d1:99:cf:18:22:ed:4f:42:97:95:85:
                    c5:46:52:b9:81:53:9b:85:a5:93:fd:fa:4c:25:12:
                    a8:90:c0:c0:96:f2:48:c4:1d:54:5d:b1:4d:2a:06:
                    e7:50:73:ef:fa:15:bf:26:88:3c:63:a9:be:01:fc:
                    ad:d0:79:52:81:54:1c:c7:28:1f:e6:d9:d7:15:f7:
                    ec:5b:92:70:fa:7b:8c:c7:23:8b:23:07:66:80:81:
                    2b:39:b0:14:9c:4b:b0:37:51:3b:db:6c:13:8d:8d:
                    23:74:2c:78:a1:4e:a3:ed:f5:28:6b:92:4e:91:c7:
                    25:75:09:64:ea:a1:90:62:ae:30:02:4c:4a:ec:95:
                    3c:82:db:b9:ba:96:c3:54:f2:cd:3b:1c:b3:22:a0:
                    ce:35:29:64:7e:8b:d9:ad:d8:9a:2e:0e:41:77:f0:
                    86:3d:80:84:a0:05:29:9b:46:03:73:52:b2:93:07:
                    56:79:10:d2:f8:ba:42:44:ae:b6:74:7d:7c:7b:27:
                    24:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:3C:B6:E3:94:92:63:AE:E5:55:C8:A0:0C:E0:08:27:0D:36:46:01
            X509v3 Authority Key Identifier:
                keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/ED8B1602A0D711EFB982AD62C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:df40:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:15:b8:54:74:b7:71:e7:59:b2:64:8e:0c:a4:64:d1:33:4e:
         c9:99:29:30:83:55:fe:07:c6:c1:59:41:8f:65:91:73:3f:7c:
         09:da:3f:5d:0a:42:7c:af:85:2c:05:1b:1c:36:ff:0b:c5:bf:
         86:bd:d4:bb:fe:ee:99:c0:d4:4b:3f:16:7c:b5:cf:3d:19:54:
         90:73:3a:e5:7d:a1:8b:c3:44:ac:18:3a:b6:69:02:ad:89:53:
         31:e4:ee:46:f1:f7:c3:db:15:24:73:ec:ce:c1:c9:6a:d1:2b:
         50:b2:1e:9a:ba:ce:e4:da:95:ec:ce:12:25:48:32:15:23:8e:
         b9:b4:c1:61:5a:e3:45:37:c6:00:f4:1e:e2:53:62:da:5d:d5:
         f3:a5:c8:af:88:55:d0:7d:bb:53:f7:00:f2:08:ef:67:1b:5c:
         fd:7b:e5:d1:b5:f6:5e:9a:4e:02:b6:33:00:9e:1a:46:91:3e:
         5a:af:f7:da:ce:ee:ed:03:51:2e:ba:94:5a:da:df:b9:43:48:
         3d:c6:c1:8a:48:b6:16:84:82:03:dc:1c:60:1d:8a:0e:20:a9:
         31:d3:5b:03:13:ef:4a:00:71:17:7d:ef:f8:69:9e:b6:2e:c9:
         7f:8d:5c:d4:cb:dc:19:d3:c2:09:8a:3b:5e:24:4d:3d:0d:5b:
         6b:3c:9f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:14:10 2026 by rpki-client