Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/C2C37E56153A11EF9E378A14C4F9AE02.roa
File:                     C2C37E56153A11EF9E378A14C4F9AE02.roa (raw, json)
Hash identifier:          DCEbqUc1yheRBTgF9eKK2YLM6+N73DDKwX1+nfluYt8=
Subject key identifier:   50:95:21:45:3A:AA:51:8B:E7:6D:F2:39:E5:C7:A3:0A:31:35:C1:EB
Certificate issuer:       /CN=A911710E/serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
Certificate serial:       0227
Authority key identifier: CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/C2C37E56153A11EF9E378A14C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:09:53 +0000
ROA not before:           Tue 03 Jun 2025 04:01:31 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     201217
IP address blocks:        2401:5a0:ff10::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl
                          rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:23:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 551 (0x227)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911710E, serialNumber=CD1841B6C5BEF7C4782E67F663F3C19746199383
        Validity
            Not Before: Jun  3 04:01:31 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a59a31-ec95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:15:1d:4f:07:2c:d0:11:a4:c0:7a:1e:71:0e:
                    83:75:16:15:03:cf:c1:8f:e0:d0:6b:54:36:e8:58:
                    d1:ea:ec:ef:bf:d5:27:1e:36:10:61:5e:e3:30:8d:
                    18:14:7e:ee:35:26:0c:0e:43:73:20:2b:3a:7f:a0:
                    c9:d6:50:1b:28:e5:0e:93:01:1b:ec:12:22:81:68:
                    f1:ae:82:4d:5e:8d:e6:de:ae:ff:64:0e:60:da:31:
                    a4:79:c2:cc:dc:8f:59:f6:91:96:f0:ce:54:ef:60:
                    f0:29:a4:95:bd:f4:5b:fe:e5:2c:9e:bc:2d:8c:42:
                    82:ab:ef:6a:af:47:a5:1c:e9:97:55:76:c7:c3:84:
                    4c:ee:9e:d2:26:70:66:07:e2:09:0e:ee:ca:a8:0d:
                    96:ec:85:c7:f9:ed:db:1f:56:dd:ab:42:4b:f2:95:
                    df:98:78:78:20:93:b1:a5:ae:6b:95:f9:03:df:47:
                    48:2e:14:f7:73:73:63:4c:30:91:73:24:e8:b6:7b:
                    d0:80:79:26:d5:dd:1b:79:ef:3e:e6:4e:f2:3e:32:
                    35:7e:65:71:74:76:17:76:79:95:0b:bc:b0:9c:5b:
                    bd:78:3e:9c:0a:6f:2e:4b:36:cd:e8:fa:86:5a:fa:
                    a6:40:19:22:60:fa:25:fc:f5:32:1a:53:36:bf:8b:
                    c3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:95:21:45:3A:AA:51:8B:E7:6D:F2:39:E5:C7:A3:0A:31:35:C1:EB
            X509v3 Authority Key Identifier:
                keyid:CD:18:41:B6:C5:BE:F7:C4:78:2E:67:F6:63:F3:C1:97:46:19:93:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zRhBtsW-98R4Lmf2Y_PBl0YZk4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911710E/C93E178A01B511EE89F6EB78C4F9AE02/C2C37E56153A11EF9E378A14C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5a0:ff10::/44

    Signature Algorithm: sha256WithRSAEncryption
         cd:2b:b9:0c:1c:6f:59:d9:9d:a4:dd:1d:ef:86:72:61:33:7a:
         ea:60:cd:01:92:85:b3:bf:26:64:ac:d8:bf:e2:2f:42:b9:12:
         c8:34:0d:cf:28:99:7b:b5:52:f0:54:7a:e7:5f:60:45:dc:f2:
         84:85:c0:41:88:3f:70:ce:5e:4e:21:9b:29:5e:ed:5b:dd:66:
         ea:9d:83:13:98:c3:da:db:d6:b8:7b:fa:22:95:7b:fa:2e:3c:
         50:99:f4:6d:32:d3:5e:28:8b:38:e2:92:61:f4:fb:b2:48:d8:
         67:79:84:bd:37:e2:2b:40:b9:ca:f0:b8:ff:30:ec:3e:84:db:
         0e:85:e4:de:dd:f8:02:70:db:fe:3c:46:4e:70:67:ed:6a:cc:
         82:2d:35:3e:16:49:b1:ac:5d:6c:48:ed:dd:f4:ca:c7:6a:e6:
         6c:7f:16:c9:a7:a7:2f:8e:09:bb:5a:69:49:ed:5d:d8:ee:d4:
         57:2a:dc:eb:de:cd:42:8e:8d:71:68:73:49:f8:f2:ad:96:50:
         63:8a:c5:04:37:4f:ce:01:58:49:9d:b1:ed:7e:d4:d3:3e:46:
         2d:0b:0e:12:43:68:45:1f:48:c7:e3:dc:75:29:65:9a:d2:af:
         41:75:40:cf:d5:d7:30:18:3b:f4:8e:3c:97:57:85:36:ee:22:
         6b:28:c4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 10:43:14 2026 by rpki-client