Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/38D25300639D11EFB668775FC4F9AE02.roa
File:                     38D25300639D11EFB668775FC4F9AE02.roa (raw, json)
Hash identifier:          Qj2e8JFy3G1Ijnc1ybFXUNaXhlpo6NRhbWYoFliMA3w=
Subject key identifier:   0B:90:55:38:96:95:E9:84:FF:68:84:CB:8B:95:26:37:B4:D6:13:3B
Certificate issuer:       /CN=A91CA735/serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
Certificate serial:       0150
Authority key identifier: 53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/38D25300639D11EFB668775FC4F9AE02.roa
Signing time:             Wed 13 May 2026 05:34:02 +0000
ROA not before:           Wed 13 May 2026 05:34:02 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     135102
IP address blocks:        2401:9ce0::/44 maxlen: 48
                          2401:9ce0:10::/44 maxlen: 48
                          2401:9ce0:20::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl
                          rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 336 (0x150)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA735, serialNumber=537B1BA1C01B48634738AA1159AE2B95590DDD91
        Validity
            Not Before: May 13 05:34:02 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a040d4a-a333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1a:d1:09:c5:7c:9e:3b:e6:f0:54:ee:5f:68:
                    c0:8c:78:1e:6b:87:0c:f7:96:49:b1:af:5e:ad:38:
                    a4:6d:11:b8:06:af:2d:bc:8b:41:0c:b7:1d:93:4a:
                    0c:4f:99:df:0a:f9:77:8b:5d:a7:cd:c7:07:ef:96:
                    e3:18:22:2c:78:20:4e:6d:b9:47:a5:d6:07:bb:1f:
                    c8:84:83:95:b2:e7:03:3e:1b:49:ae:73:0f:18:f4:
                    35:6c:a8:cf:72:88:b7:ac:a2:1a:9b:f2:a1:e6:b7:
                    fc:8e:45:38:6a:3e:ea:89:96:80:ec:61:03:35:4c:
                    b5:fe:d7:e4:8c:22:6b:cb:ae:fe:6c:28:6f:68:be:
                    be:20:69:fb:e6:1a:fa:c8:dd:8f:58:21:81:18:e8:
                    88:0d:91:52:d2:7f:ee:55:7d:9b:59:e3:6d:f7:57:
                    7b:71:a5:ce:91:4c:d8:9d:b5:01:d8:c3:7c:b4:2f:
                    bd:fa:b7:db:e8:f8:35:7d:85:c6:63:40:2c:27:ce:
                    81:28:af:01:17:93:1d:04:1c:49:0f:8a:5a:58:9d:
                    0f:b3:7c:24:1d:cb:57:12:5b:cb:e8:c9:b4:b7:4f:
                    ad:9c:cc:f8:e9:31:1a:2c:31:69:7c:47:10:71:51:
                    22:b4:86:d1:68:6c:d7:fc:17:1a:12:77:9d:df:98:
                    98:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:90:55:38:96:95:E9:84:FF:68:84:CB:8B:95:26:37:B4:D6:13:3B
            X509v3 Authority Key Identifier:
                keyid:53:7B:1B:A1:C0:1B:48:63:47:38:AA:11:59:AE:2B:95:59:0D:DD:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/U3sbocAbSGNHOKoRWa4rlVkN3ZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U3sbocAbSGNHOKoRWa4rlVkN3ZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA735/D0E9B1EE639B11EF9B4D2A5DC4F9AE02/38D25300639D11EFB668775FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:9ce0::-2401:9ce0:2f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         56:2a:5b:15:f7:2e:36:63:ef:d6:16:4c:68:8a:a0:9e:7b:5b:
         8e:9f:df:6c:25:22:fe:9f:0b:17:01:1c:0b:93:7c:c2:22:53:
         73:f2:d0:f1:d1:bf:e5:1b:cb:e8:a0:e5:42:bb:e8:ab:ff:a4:
         a3:2b:5f:bb:d5:31:90:0c:e1:1e:3b:d7:ad:31:6d:2b:1c:ec:
         ba:52:fd:45:64:fc:b8:a2:30:26:bd:14:21:95:52:30:47:ba:
         7e:fc:4d:0c:4b:9e:b9:74:1e:46:4e:38:6e:93:ca:e1:37:ce:
         75:85:01:a0:aa:b2:26:04:25:9a:79:08:7a:b0:18:20:3d:90:
         71:50:fe:22:29:a3:e8:6e:a2:61:ea:de:86:5f:99:31:31:97:
         1b:bf:e9:3c:80:e0:69:dc:79:f5:19:86:45:17:8d:c5:f4:09:
         95:10:98:2e:f7:3e:aa:ec:2d:45:58:90:92:3f:7b:8a:17:0f:
         60:7c:dc:24:9d:c6:b3:b6:4a:d9:82:42:da:50:e3:10:ea:b8:
         86:73:4d:61:35:74:9e:89:44:af:3e:15:dc:15:e7:65:41:f2:
         cc:87:48:a1:2e:fc:0e:92:6a:ee:cc:3b:8a:6a:98:15:c4:23:
         ed:5e:80:9c:6b:10:3f:fe:47:fb:e3:96:37:1f:07:b7:8c:5b:
         d4:79:4d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:01:31 2026 by rpki-client