Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/E98F15362B3811EF926F1555C4F9AE02.roa
File:                     E98F15362B3811EF926F1555C4F9AE02.roa (raw, json)
Hash identifier:          30oQaXhlRZXA31s2p1Ithopu8SY2+k35hcvw3Gcvbz0=
Subject key identifier:   2C:76:5A:88:48:9F:F1:77:AB:AC:86:DA:FE:12:F0:B4:23:0D:0F:9A
Certificate issuer:       /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial:       02A0
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/E98F15362B3811EF926F1555C4F9AE02.roa
Signing time:             Thu 23 Apr 2026 02:34:46 +0000
ROA not before:           Thu 23 Apr 2026 02:34:46 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     61112
IP address blocks:        2400:e3e0:6900::/40 maxlen: 48
                          2400:e3e0:f5a9::/48 maxlen: 48
                          2400:e3e0:f5aa::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
                          rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
        Validity
            Not Before: Apr 23 02:34:46 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e98546-24e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b9:1d:94:d4:52:fa:1a:48:24:47:ff:08:55:
                    dd:02:de:24:cb:c4:7a:52:f3:3c:8e:a5:03:a8:d8:
                    12:5f:93:29:0e:b3:fd:77:75:e3:d9:c2:f6:a1:88:
                    64:ed:d3:c5:fe:30:ef:51:4f:34:4d:4d:fd:8c:b3:
                    82:64:63:8c:76:b5:44:c6:39:ce:60:38:09:99:71:
                    9b:9c:43:2a:75:97:95:8e:4c:7e:e3:bf:9b:86:72:
                    43:7b:22:75:a0:61:43:33:87:0b:c9:50:fe:3c:dd:
                    74:bc:95:0d:9d:d8:73:38:73:a8:63:78:84:7b:fc:
                    0e:16:fa:d5:60:7f:ab:cc:c3:b4:cb:71:46:af:c6:
                    98:3b:3a:92:67:64:28:c5:d8:e8:d1:85:6e:b3:8b:
                    cc:b4:82:8e:48:91:df:db:8f:63:f3:b9:e7:4f:96:
                    02:e5:f0:b9:5b:eb:05:b3:59:a4:b2:98:1b:2f:78:
                    54:4f:9b:26:46:11:b6:dc:6c:a3:d0:dc:24:7f:82:
                    51:7a:f6:8c:89:d7:77:96:27:8a:f5:a7:2e:05:ec:
                    89:8d:fb:ac:7c:2b:bc:a3:e9:68:46:9f:fa:14:2f:
                    ff:17:7a:3f:cf:a1:b7:57:b4:5c:69:a9:2a:55:1a:
                    8b:56:fe:8c:fa:2d:b7:d8:26:ba:c4:22:00:1c:22:
                    7e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:76:5A:88:48:9F:F1:77:AB:AC:86:DA:FE:12:F0:B4:23:0D:0F:9A
            X509v3 Authority Key Identifier:
                keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/E98F15362B3811EF926F1555C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e3e0:6900::/40
                  2400:e3e0:f5a9::-2400:e3e0:f5aa:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         e0:b0:9e:5e:9b:2f:e4:77:79:98:7b:77:70:19:14:80:4f:84:
         7f:5a:1e:0c:27:96:24:50:ae:0a:fd:46:0f:d9:e8:c3:c3:e5:
         32:f7:09:d7:b9:61:b3:60:db:bf:df:28:9c:d2:a9:1d:61:e7:
         0d:d1:d4:63:cc:27:04:76:7d:31:7b:7a:fc:ef:7c:78:fa:d7:
         e4:58:69:53:05:56:c9:d1:d6:ad:37:6d:6d:25:76:d3:df:e1:
         f9:e0:e4:04:c5:6b:fe:63:b5:a8:81:da:e2:be:6d:f1:0d:cd:
         85:22:db:19:8a:53:3d:89:77:76:32:4a:a5:f4:09:4c:57:45:
         e9:3f:6e:70:6d:69:e2:6f:e6:f8:93:2b:56:9c:8c:f5:63:d3:
         b3:23:66:6a:98:2f:79:65:3c:bc:c8:55:89:c8:d6:d1:84:86:
         e7:ea:ac:ea:24:a7:dd:58:b8:0e:5b:b1:81:f1:8b:01:63:f9:
         a8:30:e9:2a:72:49:fb:82:92:24:45:49:9f:e0:99:2d:96:bb:
         18:27:46:ca:97:dd:c6:5b:1e:79:ca:39:59:ac:b2:e8:52:40:
         c5:66:90:d7:f5:f2:97:16:03:0d:56:48:b4:41:24:ad:bb:b7:
         3a:55:db:30:bc:da:74:13:0b:52:b0:ec:9b:54:9b:95:10:b9:
         6f:6a:2c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:09:07 2026 by rpki-client