Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/357523A6CB1411F08DA0B25FC4F9AE02.roa
File:                     357523A6CB1411F08DA0B25FC4F9AE02.roa (raw, json)
Hash identifier:          HPrmPWZKTNrEQpqvXno/ycTGyKPtl5yRHQH8yuzYnug=
Subject key identifier:   0D:35:55:FB:5A:12:47:CF:2A:E8:08:94:4D:CC:0A:03:35:D1:D5:5D
Certificate issuer:       /CN=A9142187/serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF
Certificate serial:       48
Authority key identifier: 65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/357523A6CB1411F08DA0B25FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:00:02 +0000
ROA not before:           Wed 26 Nov 2025 22:06:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     139649
IP address blocks:        2402:3660::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl
                          rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 08:15:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142187, serialNumber=65A1D25AFB66A76E794A966FF33B6B060C7F80DF
        Validity
            Not Before: Nov 26 22:06:51 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a597e2-131a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:a6:68:1a:69:d3:98:0d:5d:f2:63:c5:46:
                    86:f5:00:02:ec:ea:c7:9f:dc:cc:b4:90:99:6e:78:
                    a9:66:5c:1a:ff:b3:25:34:27:06:80:9d:37:06:04:
                    7c:ff:1e:ea:c9:5d:de:9a:2c:be:df:fd:a2:3a:e2:
                    ef:b4:a1:93:50:40:e2:a1:29:c2:46:54:56:47:6b:
                    dc:08:bd:70:16:d7:ca:1f:58:de:ab:a4:dd:2f:f4:
                    09:d4:3b:c6:ad:4e:1e:10:45:3e:80:95:85:11:12:
                    fd:b5:c7:d2:5e:b4:11:55:7d:d8:f7:c9:01:d3:c0:
                    59:05:51:83:f5:b3:87:68:aa:58:03:16:24:ef:1b:
                    d4:17:ab:36:ee:3d:e6:d9:0a:d0:08:3a:97:66:f9:
                    f4:36:52:b8:82:54:d6:ea:0e:2b:e7:aa:cb:f9:c7:
                    79:a0:f4:41:7f:bf:a7:72:f4:78:88:49:5c:53:bd:
                    ce:b5:7c:3d:91:60:7f:0c:65:61:21:85:65:85:7b:
                    31:ad:ec:8a:7d:09:98:65:79:ec:53:87:02:70:df:
                    86:35:32:f9:cc:81:09:e3:fb:e1:43:f5:91:f0:2a:
                    37:c4:09:25:10:fb:01:97:57:23:53:52:43:00:04:
                    dc:d0:4d:76:e5:0c:2c:7f:87:88:2f:11:1d:af:16:
                    a9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:35:55:FB:5A:12:47:CF:2A:E8:08:94:4D:CC:0A:03:35:D1:D5:5D
            X509v3 Authority Key Identifier:
                keyid:65:A1:D2:5A:FB:66:A7:6E:79:4A:96:6F:F3:3B:6B:06:0C:7F:80:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/ZaHSWvtmp255SpZv8ztrBgx_gN8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZaHSWvtmp255SpZv8ztrBgx_gN8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142187/392C1826CA5911F0A73A846BC4F9AE02/357523A6CB1411F08DA0B25FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3660::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:d3:4a:63:6d:62:47:f1:3d:da:a7:c8:a8:6e:0b:e9:3a:d3:
         11:a2:e6:a1:83:2b:d8:6a:91:43:12:16:d8:ec:80:04:91:96:
         2d:d2:52:41:bd:e5:ac:80:2d:14:f5:7c:37:f6:2a:aa:e8:58:
         f9:97:63:99:13:90:c2:b7:93:ec:a3:d2:ad:d8:a9:b7:4d:74:
         39:e2:92:8f:dc:3a:f2:b8:7f:7e:8d:1a:27:d8:70:ec:10:6d:
         9d:ec:57:d8:f7:03:98:4a:84:84:5f:61:f6:f7:78:d4:fc:77:
         d9:1c:1f:c6:9d:95:3f:1d:3a:eb:9f:5c:3a:15:0a:30:2d:67:
         5d:08:fa:0b:d5:f2:76:d5:e9:f1:86:73:35:ba:71:ff:d1:26:
         d1:1d:78:a5:33:a6:53:d5:1c:08:f3:7d:83:ad:8b:44:1a:3d:
         d8:54:49:16:83:5f:df:a1:24:79:97:c5:58:b7:60:23:38:a3:
         13:8d:71:47:0e:73:e4:1b:05:51:cd:ee:84:35:f9:06:c0:f9:
         92:3a:3f:bc:44:9f:e8:c7:9d:10:e0:26:2c:5b:b2:a6:96:25:
         bd:45:c8:ee:36:58:fe:ed:74:06:d7:6e:99:ce:86:9e:82:06:
         1c:01:0f:52:3a:8e:d1:4f:1c:fa:1e:e4:32:1a:0c:c1:68:60:
         1b:ca:f9:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:15:00 2026 by rpki-client