Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/3B69BCFAF53A11EF907A433EC4F9AE02.roa
File:                     3B69BCFAF53A11EF907A433EC4F9AE02.roa (raw, json)
Hash identifier:          Xqw+x7r7bC27aVdNoYea8uBLYJxQdLwBzYjKVZNCTmg=
Subject key identifier:   51:AE:E4:C5:F6:DB:3B:80:D0:E2:8F:50:AA:A6:82:B8:4E:5E:18:6E
Certificate issuer:       /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
Certificate serial:       E0
Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/3B69BCFAF53A11EF907A433EC4F9AE02.roa
Signing time:             Fri 03 Apr 2026 06:41:46 +0000
ROA not before:           Fri 03 Apr 2026 06:41:46 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153622
IP address blocks:        2001:df5:1dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 06:08:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 224 (0xe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
        Validity
            Not Before: Apr  3 06:41:46 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cf612a-2d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:66:69:c3:dd:62:eb:f8:1f:0b:55:7c:50:9c:
                    b5:e8:4b:25:1a:b0:d2:35:17:6b:3e:6a:06:a9:1b:
                    2f:4f:68:5f:6b:a6:98:52:a4:21:1a:93:f2:ef:e6:
                    68:33:ae:44:53:e4:e7:05:50:45:a7:59:4d:05:8d:
                    42:6d:34:17:44:db:a5:ec:8c:d0:02:7c:d3:82:5a:
                    82:a8:34:7f:e0:cc:d2:c7:46:ba:6a:b8:16:56:0d:
                    4f:64:b3:8c:77:7f:45:02:09:13:b3:a0:5b:dd:57:
                    0c:ac:53:a4:d6:9d:a7:1a:44:0c:f0:5e:b2:dc:ba:
                    7f:5f:67:f3:50:24:19:0a:be:54:8e:f0:3c:d6:6a:
                    8d:fc:f3:fa:db:48:47:32:c7:10:0d:e4:cc:61:58:
                    71:2f:20:90:f4:bd:59:f4:27:21:9b:f8:c0:46:67:
                    d7:d3:dc:75:e5:c1:25:37:a4:c7:4c:ee:b0:19:1d:
                    3f:12:f1:46:d8:72:ec:ec:bb:06:d3:4a:dc:04:7d:
                    99:21:ef:0f:85:08:00:80:23:55:63:b0:4c:fc:23:
                    21:4b:5f:84:e5:26:42:9f:71:b6:e9:2f:42:44:5c:
                    6c:b0:5b:4a:a8:ec:30:bd:23:c0:30:3a:0d:66:33:
                    fd:6d:c5:bb:27:63:3e:2b:d8:64:68:05:71:bf:ae:
                    59:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:AE:E4:C5:F6:DB:3B:80:D0:E2:8F:50:AA:A6:82:B8:4E:5E:18:6E
            X509v3 Authority Key Identifier:
                keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/3B69BCFAF53A11EF907A433EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:1dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:9a:7a:43:3a:7a:6a:a3:89:21:ab:c0:54:6e:c5:8b:7a:f8:
         b9:d9:63:d5:50:92:10:5b:af:b5:72:0b:75:ce:3a:f5:b4:5c:
         c5:da:95:52:6f:03:bb:43:c5:ae:1f:2a:b7:88:f7:78:fa:a0:
         a4:6f:a5:e1:0e:88:09:fd:d7:83:72:11:c2:cf:e5:ea:a4:db:
         24:f6:df:fc:1d:47:09:e5:37:c6:1d:35:53:0e:18:f7:bf:e5:
         e6:2c:bc:5a:c7:d4:37:d1:17:a7:d5:cc:ba:91:6f:af:25:1a:
         9d:42:40:6d:c8:84:fc:f4:07:90:90:45:ac:64:9b:de:9a:18:
         46:8f:ec:f8:69:83:56:19:4f:74:b0:18:3a:88:60:21:44:22:
         54:a5:6e:ed:f8:d5:47:02:5e:12:d5:af:02:70:f5:08:cb:02:
         0f:9c:61:4b:0c:34:53:54:0e:33:a4:d3:8d:03:a0:87:db:23:
         7c:8c:c2:cb:33:4f:65:0e:75:1e:5c:58:61:5d:d3:83:92:60:
         f3:f7:44:7c:de:91:40:de:27:e4:a7:b8:72:ad:16:94:62:16:
         f0:21:ac:8a:d4:b1:96:a3:c8:e2:55:58:56:2d:16:9c:9a:3d:
         f1:63:c3:31:40:89:c4:8a:30:4b:f8:90:e8:5e:7b:db:9a:ce:
         84:36:32:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 14:51:26 2026 by rpki-client