Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/2B7E65BE16BA11F18FA4AADE273D8C67.roa
File:                     2B7E65BE16BA11F18FA4AADE273D8C67.roa (raw, json)
Hash identifier:          Csvh3aknzUiZw058pH657DMeS1NGl0VhZ3QwIZIsdTA=
Subject key identifier:   7E:03:D3:1B:00:28:F8:EA:88:FB:5A:9D:14:50:C5:9E:E1:7B:DD:CD
Certificate issuer:       /CN=A914145F/serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E
Certificate serial:       02
Authority key identifier: 40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/2B7E65BE16BA11F18FA4AADE273D8C67.roa
Signing time:             Tue 03 Mar 2026 04:33:48 +0000
ROA not before:           Tue 03 Mar 2026 04:33:47 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     150683
IP address blocks:        2001:df6:c6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl
                          rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 08:25:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914145F, serialNumber=40E9302B75C5EA1923EA7F6958E2AF410865AF8E
        Validity
            Not Before: Mar  3 04:33:47 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69a664ab-7bf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c1:e0:33:69:0a:84:b0:d8:c9:84:57:75:c9:
                    89:9f:73:b0:33:3f:e5:d9:5f:27:5a:93:3b:16:55:
                    20:a8:49:e8:bf:6b:78:e5:f1:c0:e1:35:b9:33:31:
                    5c:93:ca:73:47:0b:44:52:e8:2e:49:c2:7c:78:7d:
                    b1:7c:7d:83:11:4c:ba:94:47:d6:5c:c6:21:86:57:
                    9c:c8:3b:46:ee:e8:39:0c:7d:0a:60:70:32:b7:cd:
                    d3:9a:63:43:43:c7:a8:87:d7:ce:65:5c:a7:32:94:
                    1f:31:ef:d5:25:96:ab:43:64:1e:00:a0:4a:22:8b:
                    52:2e:04:e6:12:11:0f:8b:61:3e:c1:c4:37:58:5e:
                    6a:a3:8b:18:6b:7e:62:06:3c:64:a6:c5:d5:9d:de:
                    8b:ae:6f:f1:c3:f1:88:b7:90:47:d1:9d:7d:1a:cf:
                    f1:c5:c8:e0:04:9a:68:48:de:df:a3:8c:69:b3:ed:
                    36:7f:3e:6d:47:e0:c8:b3:fe:49:94:49:31:80:3e:
                    b5:93:e8:60:de:6d:e8:f3:df:cc:d6:fd:22:7f:d6:
                    f4:4a:d4:d1:e9:85:81:62:da:3c:1c:dc:8f:59:7e:
                    4e:7c:f4:09:1a:4c:f8:64:7d:6b:b1:d5:4a:90:24:
                    8d:c1:91:ce:be:00:b4:fb:b0:75:d9:e4:60:4e:4c:
                    2d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:03:D3:1B:00:28:F8:EA:88:FB:5A:9D:14:50:C5:9E:E1:7B:DD:CD
            X509v3 Authority Key Identifier:
                keyid:40:E9:30:2B:75:C5:EA:19:23:EA:7F:69:58:E2:AF:41:08:65:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/QOkwK3XF6hkj6n9pWOKvQQhlr44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QOkwK3XF6hkj6n9pWOKvQQhlr44.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914145F/975F1CB616B911F18B290B48273D8C67/2B7E65BE16BA11F18FA4AADE273D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:c6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:5d:60:87:55:59:b2:5b:80:45:61:bc:53:7a:c2:2e:af:77:
         4d:d2:fd:bc:16:67:6d:e4:56:f2:46:4f:b8:1a:eb:fa:ec:08:
         00:15:be:c4:df:5a:29:b1:44:51:7d:37:a8:d1:db:b8:df:1b:
         be:cb:45:49:49:44:90:09:f9:f2:d5:8d:98:ae:06:76:ff:fe:
         be:b3:19:86:99:3d:97:53:c3:b8:22:95:26:b1:7d:ee:47:09:
         fb:4f:1e:2e:b3:c1:bd:75:6a:3b:74:c8:f2:0d:23:e8:94:95:
         8f:b6:0a:7c:2b:63:6a:5e:18:a1:17:ba:a1:38:b0:1c:7a:40:
         58:47:c3:43:ea:d4:64:fe:93:57:45:c9:e6:89:c5:8a:ea:fc:
         74:b1:df:9c:05:86:0e:d9:83:16:69:29:6f:17:30:67:45:ca:
         56:ab:99:8a:7a:16:f7:6f:35:d8:d3:18:b6:e4:57:95:25:c5:
         51:33:dd:b1:ad:3b:6a:5b:18:45:84:64:c4:cf:60:cb:78:25:
         f4:63:1a:7e:21:41:20:f5:4e:46:1c:47:5e:4f:f4:5f:51:07:
         9c:34:2b:9e:50:25:13:23:6f:e5:73:cd:03:cc:07:a4:1e:81:
         d1:9b:3d:79:90:87:d3:71:4e:b8:7d:73:4c:58:fb:03:fa:09:
         4c:b1:db:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:49:55 2026 by rpki-client