Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/C8171E8EC04D11F081466417C4F9AE02.roa
File:                     C8171E8EC04D11F081466417C4F9AE02.roa (raw, json)
Hash identifier:          F2rHWA0aG3jOYck+BArfetJHmQYT8RWz4zDyWgQQ0/Q=
Subject key identifier:   A3:56:FD:DA:AD:9D:E6:34:94:CA:C0:20:6B:42:69:94:B3:E5:47:2E
Certificate issuer:       /CN=A9112FE1/serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
Certificate serial:       E4
Authority key identifier: 3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/C8171E8EC04D11F081466417C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:14:17 +0000
ROA not before:           Fri 13 Feb 2026 06:25:42 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     149014
IP address blocks:        2404:de80:0:26::/64 maxlen: 64
                          2404:de80:c00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl
                          rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 06:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112FE1, serialNumber=3D1FCB7255C52503E10AE584B1189A15CF56074E
        Validity
            Not Before: Feb 13 06:25:42 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a481f9-06f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:aa:8b:57:97:29:c3:f1:7c:00:88:c8:0e:cb:
                    b2:85:25:84:e4:23:d0:15:5f:aa:30:69:1b:8f:77:
                    72:ab:e0:a9:63:e8:ec:e6:a6:3b:13:97:97:de:c9:
                    b3:b7:51:a8:5f:7f:5d:dd:a2:54:36:fa:8f:a8:99:
                    f8:87:8c:d4:0a:17:a3:2a:f7:4f:5d:3a:b2:47:31:
                    3d:db:0c:82:b7:cc:67:7d:da:df:2a:5c:80:0f:96:
                    b7:46:44:64:21:ca:b8:35:d1:88:79:50:9c:dc:1f:
                    10:24:4c:f1:6a:24:48:b6:26:dd:2e:21:12:04:7d:
                    3e:81:cd:41:7e:12:cf:d6:be:62:82:13:14:c7:ed:
                    5f:1c:a5:cc:ce:c0:96:6f:3a:6c:2d:c4:dc:18:bc:
                    7f:82:89:f2:aa:9f:ee:8b:51:b3:3e:f6:bf:6d:48:
                    74:24:29:5f:78:dc:ac:cb:83:6d:ce:2f:20:72:76:
                    6f:88:fd:cd:fe:b0:97:98:e5:3b:20:98:ac:6e:ac:
                    e0:f5:c8:0b:6a:0e:d1:15:6d:9a:f1:30:2f:e7:1a:
                    ee:74:d4:98:b4:c1:ea:c2:2e:dd:29:19:ed:73:58:
                    b2:14:2e:67:fc:8d:41:bd:a3:31:1f:16:04:0b:5c:
                    79:dd:e9:90:7a:21:a2:29:9b:17:ad:7a:b2:b1:c1:
                    71:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:56:FD:DA:AD:9D:E6:34:94:CA:C0:20:6B:42:69:94:B3:E5:47:2E
            X509v3 Authority Key Identifier:
                keyid:3D:1F:CB:72:55:C5:25:03:E1:0A:E5:84:B1:18:9A:15:CF:56:07:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/PR_LclXFJQPhCuWEsRiaFc9WB04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PR_LclXFJQPhCuWEsRiaFc9WB04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112FE1/C456102E09F111F08B44A325C4F9AE02/C8171E8EC04D11F081466417C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:de80:0:26::/64
                  2404:de80:c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         38:6f:a7:53:b0:62:9b:b3:58:6d:63:45:b2:5a:33:17:d2:89:
         9f:6e:f8:02:b0:4f:79:06:ab:c7:d3:1e:c2:0d:c5:22:fa:34:
         4a:09:9d:78:07:6a:2b:51:c8:37:16:0d:78:00:3f:d8:5c:f0:
         69:2c:40:d2:36:c0:86:b7:3e:8d:48:eb:77:b0:a6:b9:e7:0f:
         97:68:95:83:89:cd:88:c2:75:1c:09:21:a9:96:68:5d:9a:74:
         67:79:40:1b:cd:76:6e:be:9f:36:c2:17:f9:6c:de:64:1b:44:
         63:50:8e:2c:46:eb:27:fa:34:ff:d3:7b:fb:8c:86:b6:e3:3c:
         c0:9c:5c:8f:83:3b:16:9c:d6:15:a4:19:c8:24:bd:12:89:e9:
         a9:70:8c:a0:b3:4b:95:d5:fe:fb:d3:c3:ed:8f:aa:2e:db:da:
         a6:47:68:4e:1c:4d:ae:5e:a9:ab:30:a5:1c:7b:d4:21:e4:87:
         96:16:4e:0c:21:0d:40:45:76:37:7e:84:68:c1:af:77:29:49:
         45:d7:bd:c0:32:b4:fc:8b:cb:73:8d:cf:f9:a4:e4:1f:63:a9:
         2b:b8:17:61:87:13:79:1b:86:e7:cf:e9:39:0a:b2:e3:08:e4:
         ca:84:0e:d0:a3:06:30:97:86:7b:ca:8d:9a:05:bf:c9:8a:18:
         b3:53:c7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 09:56:27 2026 by rpki-client