Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A912278E/2DB3AC083D2111F198D441CE95833773/3F1EB69E3D2211F181FD191E96833773.roa
File:                     3F1EB69E3D2211F181FD191E96833773.roa (raw, json)
Hash identifier:          fXmO8Tkn2lEnHpU28nM1cdYnRXbg8CqXPIgECtNRoS4=
Subject key identifier:   EA:F7:33:87:BB:34:74:A6:BE:37:29:CA:3D:D3:8B:73:F8:95:4D:69
Certificate issuer:       /CN=A912278E/serialNumber=8F93AA18944AC3AAA34F808E4D8F374D3B743B4E
Certificate serial:       02
Authority key identifier: 8F:93:AA:18:94:4A:C3:AA:A3:4F:80:8E:4D:8F:37:4D:3B:74:3B:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5OqGJRKw6qjT4COTY83TTt0O04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912278E/2DB3AC083D2111F198D441CE95833773/3F1EB69E3D2211F181FD191E96833773.roa
Signing time:             Tue 21 Apr 2026 01:34:32 +0000
ROA not before:           Tue 21 Apr 2026 01:34:32 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     141167
IP address blocks:        2001:df7:7380::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912278E/2DB3AC083D2111F198D441CE95833773/j5OqGJRKw6qjT4COTY83TTt0O04.crl
                          rsync://rpki.apnic.net/member_repository/A912278E/2DB3AC083D2111F198D441CE95833773/j5OqGJRKw6qjT4COTY83TTt0O04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5OqGJRKw6qjT4COTY83TTt0O04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 09:13:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912278E, serialNumber=8F93AA18944AC3AAA34F808E4D8F374D3B743B4E
        Validity
            Not Before: Apr 21 01:34:32 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69e6d428-1e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:83:5e:f9:9e:a9:1a:0f:1a:ce:c1:f6:a1:fd:
                    d9:19:79:4a:98:b3:35:79:25:0b:61:b8:b4:e1:d6:
                    b2:4c:4a:83:6e:38:bb:b3:ca:03:88:d2:2e:5c:04:
                    f7:3b:d9:91:2f:7e:23:53:4d:00:30:9d:48:f2:37:
                    2c:05:0c:05:ec:e5:c0:ad:36:fc:1f:1d:ea:1f:0c:
                    3a:5b:84:42:40:4b:bc:dc:6c:c2:9c:eb:9e:14:e2:
                    4b:a2:3f:6b:72:36:d6:d8:b8:80:a3:49:c0:39:8b:
                    ac:68:ae:a2:7c:5b:cb:db:58:13:e3:91:e5:92:3a:
                    30:04:2e:18:ad:01:7f:c1:d1:7c:e6:3d:db:5a:10:
                    f5:b8:e2:53:ac:29:1b:3b:27:42:46:09:41:70:8c:
                    31:2a:fb:cc:d6:03:67:4b:cb:fe:58:42:f9:65:3b:
                    1b:be:03:06:ae:b6:a4:9b:59:f1:62:26:22:b5:c0:
                    96:4d:a5:c6:36:d9:71:90:70:66:5e:ec:40:d4:54:
                    01:8e:41:00:b7:0a:9a:11:2e:be:96:a0:03:e1:7e:
                    83:c5:3b:5b:50:ca:68:56:14:a9:06:47:57:e6:bc:
                    cf:25:1a:f9:c0:a6:de:a9:d3:59:a3:e0:8d:17:44:
                    3c:3f:61:04:09:71:3c:29:69:8c:3c:91:ce:91:f7:
                    87:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F7:33:87:BB:34:74:A6:BE:37:29:CA:3D:D3:8B:73:F8:95:4D:69
            X509v3 Authority Key Identifier:
                keyid:8F:93:AA:18:94:4A:C3:AA:A3:4F:80:8E:4D:8F:37:4D:3B:74:3B:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912278E/2DB3AC083D2111F198D441CE95833773/j5OqGJRKw6qjT4COTY83TTt0O04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5OqGJRKw6qjT4COTY83TTt0O04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912278E/2DB3AC083D2111F198D441CE95833773/3F1EB69E3D2211F181FD191E96833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:7380::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:44:8d:0e:f7:4f:e7:33:d2:02:32:99:b6:17:5f:74:2f:a4:
         57:6f:ee:de:3e:93:35:5c:bc:97:e0:b9:d0:cf:98:6c:e6:d6:
         e8:35:36:5c:f1:2a:c7:a6:d4:1a:ef:ba:4a:17:d2:f7:c5:3c:
         fa:65:92:11:3f:6d:db:3a:99:92:50:5d:40:0b:62:0b:dc:5d:
         5e:92:3e:39:2f:d6:b8:6c:d7:9d:e7:cd:97:dd:de:69:5b:96:
         18:e2:4b:58:4c:73:0f:22:6d:86:16:33:29:9b:83:78:67:47:
         31:45:23:34:92:85:f7:3d:73:59:53:9a:69:32:41:93:13:f9:
         ee:17:bf:b0:8b:a5:92:90:0f:a7:80:16:4e:cf:5f:07:a1:8d:
         14:93:69:c6:b3:9e:4e:47:b7:72:7a:05:70:7b:e3:0e:ab:22:
         26:77:4d:df:a4:a7:88:a1:a4:3d:3b:bf:66:49:35:35:23:8d:
         aa:b1:a8:e4:cd:d0:23:07:27:48:7e:9b:7e:2e:07:79:6d:ce:
         10:92:ae:e8:01:aa:78:0b:62:dd:39:e5:6b:e8:8a:0a:6d:05:
         03:fe:1a:61:c8:11:fa:85:e4:5c:b6:de:bb:12:51:41:77:44:
         81:09:1a:62:73:1e:c0:48:06:53:02:bc:0d:52:a7:77:76:df:
         42:42:3c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:27:59 2026 by rpki-client