Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/8A1624CEE29211F0A7536C41456F56BC.roa
File:                     8A1624CEE29211F0A7536C41456F56BC.roa (raw, json)
Hash identifier:          8wnCI5N573pkzZtHUtb6fStu9xHz76SfS/f/10QACGo=
Subject key identifier:   14:82:58:94:1E:35:08:03:40:D2:E6:2F:B3:43:C3:4F:9A:A6:34:C3
Certificate issuer:       /CN=A911BD6E/serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
Certificate serial:       28
Authority key identifier: 69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/8A1624CEE29211F0A7536C41456F56BC.roa
Signing time:             Mon 02 Mar 2026 12:36:15 +0000
ROA not before:           Fri 26 Dec 2025 19:39:06 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154456
IP address blocks:        2001:df6:8040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl
                          rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BD6E, serialNumber=69AE35CDCE637EB645EB5065EDE12D58E7599236
        Validity
            Not Before: Dec 26 19:39:06 2025 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a5843f-71ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:01:65:e6:76:9e:c0:b1:bf:9d:55:84:8d:d3:
                    bb:cf:6c:fd:68:d8:34:d8:71:2f:14:f9:41:65:f5:
                    86:cf:a5:23:3a:4b:05:d4:e9:22:34:b1:be:69:7f:
                    9a:a0:e7:f1:5c:fd:60:0e:15:7f:da:c5:1f:66:69:
                    4f:87:cf:5d:2a:f5:47:7f:20:44:82:e2:61:1f:7d:
                    26:89:93:ae:f4:99:b0:8b:0b:a2:c2:b2:c5:55:3f:
                    ea:b4:02:05:34:a3:69:8a:38:60:76:48:73:10:7b:
                    99:13:df:43:f3:c9:8a:7c:78:24:a2:9c:02:94:2f:
                    22:72:39:e2:e4:8b:3f:a0:69:66:de:02:77:1f:ea:
                    3b:c9:a7:01:8b:06:4c:45:5a:f3:03:83:8f:90:0a:
                    6f:65:d7:40:2a:a0:1e:55:6f:dc:d2:63:f2:c3:bf:
                    cc:02:b7:7e:fc:e0:e9:88:db:9c:41:35:23:03:0c:
                    9f:fb:d3:92:1e:3e:21:cc:10:d3:81:22:dd:bb:08:
                    be:dd:22:94:44:a2:3a:13:c8:8f:74:88:5e:71:d2:
                    99:56:ab:53:89:1d:dc:22:34:3b:06:34:f1:15:01:
                    6e:f1:24:25:65:cb:f4:21:cd:0a:6e:2c:3a:b2:64:
                    88:7c:0f:04:de:e8:26:e3:9c:ca:31:2d:dc:02:d3:
                    16:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:82:58:94:1E:35:08:03:40:D2:E6:2F:B3:43:C3:4F:9A:A6:34:C3
            X509v3 Authority Key Identifier:
                keyid:69:AE:35:CD:CE:63:7E:B6:45:EB:50:65:ED:E1:2D:58:E7:59:92:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/aa41zc5jfrZF61Bl7eEtWOdZkjY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aa41zc5jfrZF61Bl7eEtWOdZkjY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BD6E/BF4F247AE29111F096E27D11456F56BC/8A1624CEE29211F0A7536C41456F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:8040::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:07:87:16:d6:39:f9:44:01:d7:4c:40:6b:0a:ab:af:94:9d:
         c3:26:63:85:ba:de:c3:3d:bf:ff:32:8d:56:a7:4e:68:c3:6a:
         2f:9c:55:c7:f1:4f:11:65:45:30:f1:b2:82:aa:ac:5a:bd:55:
         62:c8:72:cf:00:4a:d0:da:b6:86:ba:14:df:d4:b9:b0:8f:e9:
         d9:7f:15:c8:87:1f:45:7d:6c:35:f6:00:06:21:2e:92:b4:e2:
         a7:10:0b:6f:ba:86:78:2a:6e:93:7a:06:39:44:64:66:b6:e4:
         0b:5d:03:fb:ff:f0:cc:81:71:ab:46:be:39:46:95:13:2c:a1:
         55:16:ba:3f:b8:75:f2:db:5d:e1:b2:93:6b:5d:be:d7:9d:cf:
         25:2b:38:48:7a:57:6d:b0:8b:60:8d:1f:ba:b8:eb:e7:85:e7:
         c7:d9:81:92:21:b8:10:cf:55:87:ae:65:a3:7e:d6:bb:9e:ce:
         f7:5d:9e:8c:4c:ea:89:06:1f:93:2e:32:f2:d1:18:c0:05:b9:
         99:bd:f3:22:b8:00:08:e0:06:45:b3:37:8b:3d:40:2b:03:b7:
         e6:e5:f5:66:a6:e2:f6:77:ea:93:28:54:4f:a6:8d:69:9c:ed:
         49:69:81:ed:23:16:1e:9e:d5:8d:d7:b7:8d:d2:f6:b8:a2:e5:
         48:b4:31:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:28:07 2026 by rpki-client