Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/5F652B164A0311EC84EFD42FC4F9AE02.roa
File:                     5F652B164A0311EC84EFD42FC4F9AE02.roa (raw, json)
Hash identifier:          PUTT+fnSdjrAY+7iudZIcc7XalYBXt6JylgKlAJor4E=
Subject key identifier:   B4:82:23:B3:46:B8:1B:DE:EF:80:3B:13:42:1A:CB:2A:53:09:5B:13
Certificate issuer:       /CN=A91128E3/serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
Certificate serial:       05EE
Authority key identifier: 71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/5F652B164A0311EC84EFD42FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:13:12 +0000
ROA not before:           Fri 15 Aug 2025 00:05:28 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     38323
IP address blocks:        2001:df7:1480::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl
                          rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 22:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1518 (0x5ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91128E3, serialNumber=71C1E8E054049ACFD9AA2193AF1D48C6D1D025E1
        Validity
            Not Before: Aug 15 00:05:28 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a473a8-a284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:14:3a:d8:b1:50:11:56:58:a7:32:c5:03:
                    ed:74:a2:f8:e4:86:d8:04:f8:4a:4b:ba:d8:2f:9a:
                    13:b6:ca:e2:4d:51:1d:99:2a:7c:99:22:2e:4f:2c:
                    c0:8c:d0:70:7c:e5:6e:09:84:c2:08:66:3c:2a:ce:
                    55:7f:73:82:9a:ed:ca:29:91:1b:0d:c6:89:47:92:
                    1b:9d:ff:91:6b:f4:df:cb:e6:b9:c3:f8:dc:e9:37:
                    71:2b:1a:9c:58:ce:c8:5b:02:72:28:62:7b:de:a2:
                    b7:87:95:2d:5f:e7:99:fd:f6:66:7e:57:84:78:ff:
                    aa:dd:1d:93:74:17:ac:ef:61:b3:fc:f6:d4:5e:9f:
                    cb:b9:b6:0b:38:39:43:b9:c8:e9:0d:0c:fe:6c:a6:
                    38:9a:b0:10:73:ae:2f:57:ac:41:2d:5d:ee:03:d4:
                    f7:fd:8d:9c:34:92:94:9e:35:4c:4c:d0:cf:51:8e:
                    44:bc:bc:7d:e6:fe:d8:8e:2b:73:b0:81:11:74:09:
                    ba:28:81:df:54:b4:85:28:f3:f5:bf:78:8a:98:9c:
                    21:45:73:c4:1c:2c:3c:60:c9:8a:42:3d:27:da:34:
                    1c:4e:49:01:f7:e9:7c:48:3f:29:2b:09:35:6d:bd:
                    17:65:8a:33:bf:8d:bc:cf:12:e9:60:dc:81:1a:13:
                    6f:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:82:23:B3:46:B8:1B:DE:EF:80:3B:13:42:1A:CB:2A:53:09:5B:13
            X509v3 Authority Key Identifier:
                keyid:71:C1:E8:E0:54:04:9A:CF:D9:AA:21:93:AF:1D:48:C6:D1:D0:25:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/ccHo4FQEms_ZqiGTrx1IxtHQJeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ccHo4FQEms_ZqiGTrx1IxtHQJeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128E3/5393C0EE002611ECA4061614C4F9AE02/5F652B164A0311EC84EFD42FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:1480::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:0e:b7:eb:94:4e:8a:28:0e:f6:18:8a:52:7c:b0:68:0a:7e:
         86:28:b0:11:ab:e5:20:2b:06:5e:8f:9f:c5:4b:f4:26:d1:1e:
         e5:48:18:d9:b2:64:1c:68:5d:74:94:75:ae:fd:17:1f:47:14:
         b7:ad:2a:17:c4:b6:1d:3b:8c:78:9a:96:1b:64:4e:75:c0:a3:
         8e:34:6b:ea:97:68:c6:c5:b6:4d:fb:9e:2f:af:84:de:c4:8d:
         53:13:f7:31:05:84:31:05:15:58:a3:1f:54:d1:18:57:73:65:
         28:78:63:17:16:d6:07:a7:68:41:31:4d:d3:76:ba:fb:6e:a4:
         d8:65:8a:6f:af:0f:ba:84:e8:1d:0d:b7:72:6e:c7:6e:0f:81:
         6c:7b:3f:fc:52:a2:7c:16:6d:9d:7c:7b:1f:c5:33:97:dd:ad:
         f8:b4:7a:5f:29:f0:83:5c:52:f5:08:2e:eb:2b:c2:e9:21:fe:
         af:f5:73:d9:00:1c:c2:ec:4c:6a:43:0f:d4:21:03:28:74:31:
         bd:fa:0a:1d:0f:d1:de:fe:6c:9b:bc:bf:79:b6:d2:66:ef:17:
         a9:bd:38:6c:73:37:c7:47:69:42:6b:16:dc:dd:58:f9:94:76:
         f6:19:8c:87:dc:98:0d:17:2d:e2:4f:4b:e5:67:3e:cd:6f:ee:
         5c:71:2f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 13:34:58 2026 by rpki-client