Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/07E3560E707B11F08CCE202CC4F9AE02.roa
File:                     07E3560E707B11F08CCE202CC4F9AE02.roa (raw, json)
Hash identifier:          qfuU9QdlAgNGEyETXyG5+zUSOsPh9QDRT3yT/b7upmM=
Subject key identifier:   E7:28:37:BB:2C:B5:EE:1F:7C:0D:84:A7:2F:EA:D4:6A:EF:1E:EE:19
Certificate issuer:       /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial:       EF
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/07E3560E707B11F08CCE202CC4F9AE02.roa
Signing time:             Sat 21 Mar 2026 06:43:14 +0000
ROA not before:           Sat 21 Mar 2026 06:43:14 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     55201
IP address blocks:        2402:1da0::/48 maxlen: 48
                          2402:1da0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
                          rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:05:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
        Validity
            Not Before: Mar 21 06:43:14 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69be3e02-d2b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:84:23:64:b5:76:17:47:ba:37:55:28:4d:aa:
                    7b:3d:7e:37:2a:45:2a:56:d1:2b:33:a8:2a:55:15:
                    e4:17:8c:9b:3c:b3:9b:4c:85:84:27:3b:1c:29:e3:
                    07:6c:08:a5:13:47:49:55:1b:da:47:82:f8:ee:5b:
                    b1:a5:7b:0e:03:8f:e2:f5:e3:73:84:8e:0e:79:4f:
                    97:64:19:ec:68:1c:9b:d0:ef:79:bd:71:c2:99:4b:
                    8d:12:73:32:e3:38:83:5b:35:36:99:fb:2e:ee:8b:
                    95:c3:e8:c6:46:55:6a:00:37:85:0a:91:c4:4d:88:
                    ba:1a:aa:46:0e:6f:c3:5b:35:64:0f:22:f7:85:2e:
                    5d:68:41:5f:8d:ad:0c:cb:ba:cd:40:41:c3:20:89:
                    e7:b3:a3:1f:ab:cc:a0:91:e4:65:61:98:2f:9b:20:
                    2a:33:4b:6e:cf:7a:67:fc:d4:5b:b9:9e:4b:ee:2f:
                    f4:5d:42:fc:68:ce:c0:b2:bf:92:a3:99:b3:36:6e:
                    9d:66:c9:e2:b9:81:69:79:a2:42:73:78:d9:f5:c7:
                    c0:56:87:36:2c:b8:78:5b:6a:f0:8c:bd:42:f2:7b:
                    32:56:f3:de:25:70:22:34:c1:79:8e:1a:21:d5:42:
                    99:eb:e6:f2:0e:ec:7f:80:08:8a:b2:3a:fd:af:56:
                    d4:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:28:37:BB:2C:B5:EE:1F:7C:0D:84:A7:2F:EA:D4:6A:EF:1E:EE:19
            X509v3 Authority Key Identifier:
                keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/07E3560E707B11F08CCE202CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1da0::/47

    Signature Algorithm: sha256WithRSAEncryption
         68:72:89:0d:2e:c9:8d:ab:df:46:10:4b:ad:3c:b9:1c:eb:97:
         45:8a:e1:81:f1:3d:14:59:33:4e:39:08:f2:64:c3:1b:18:b2:
         59:cf:3b:91:78:62:50:50:c2:c4:af:4d:b3:c7:11:6b:84:09:
         f4:86:e6:9e:3a:96:d2:c6:7a:af:b4:44:99:2e:17:97:2e:3c:
         31:a2:99:f0:0e:4f:bc:fe:da:5e:a0:32:a4:38:1f:ff:22:f2:
         b6:7d:d4:54:d8:2b:55:c3:f3:9e:6a:be:7a:13:54:62:a0:58:
         1c:d8:90:e3:0d:1c:c2:c7:b9:38:2c:97:56:9b:87:be:b5:a5:
         d8:b0:c2:0d:c3:23:b0:5f:b3:0b:c7:65:d9:6e:ae:b1:f3:ef:
         ca:83:69:94:d4:98:85:85:38:43:44:0f:16:54:8d:16:85:38:
         98:4f:41:8b:68:41:7e:ac:e3:f7:59:1b:0c:7a:0d:a3:4b:b1:
         e6:d7:43:bc:8d:89:b7:9b:43:81:15:d1:3d:bb:06:9f:7e:8e:
         a2:31:3a:1a:43:21:a9:d9:cc:51:ba:2c:38:19:a6:be:b0:46:
         d6:a8:91:a4:c3:83:e8:0e:78:b4:79:3b:cf:40:4d:b5:29:5f:
         a7:46:40:c3:a1:22:a5:ff:2a:c8:98:ad:ef:08:e6:58:04:aa:
         12:0b:b5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:46:02 2026 by rpki-client