Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/04DF866C3F0611F1B36B08F4C9833773.roa
File:                     04DF866C3F0611F1B36B08F4C9833773.roa (raw, json)
Hash identifier:          ox5XcIpV2S9UAzm7R4v0XD8a/1yL0AoCYGD4B4pq/A8=
Subject key identifier:   E5:C8:76:2E:49:08:30:E9:8E:48:EA:38:BF:2E:D0:D8:DE:CE:38:AB
Certificate issuer:       /CN=A915BC71/serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8
Certificate serial:       08
Authority key identifier: 85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/04DF866C3F0611F1B36B08F4C9833773.roa
Signing time:             Thu 23 Apr 2026 11:21:07 +0000
ROA not before:           Thu 23 Apr 2026 11:21:07 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138926
IP address blocks:        2402:5a60::/32 maxlen: 32
                          2402:5a60:33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl
                          rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 09:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BC71, serialNumber=8512E969956ACB7D3E760ED986E1BEEA3F8AC0F8
        Validity
            Not Before: Apr 23 11:21:07 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69ea00a3-1179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f6:39:b8:60:9c:28:b1:42:20:0b:d2:58:c4:
                    c2:cc:76:cd:e7:a3:bf:f6:c7:ac:e1:5f:53:36:79:
                    92:5b:5f:89:86:19:aa:fa:26:56:f5:cf:53:5a:b5:
                    cc:23:b5:4d:e9:f0:b2:ef:94:7f:b2:17:ba:e9:a2:
                    13:fd:f6:7a:55:5f:4c:98:17:c1:74:fc:a6:a1:65:
                    5f:93:5f:c0:09:7b:7a:3b:76:99:90:e5:15:ad:d7:
                    27:bf:01:07:c3:a0:6d:2e:9e:bf:57:0a:49:b1:dd:
                    96:0f:c1:7e:f4:6f:65:9d:d1:51:2f:db:7b:8e:bb:
                    d1:15:c8:27:8f:0a:5d:44:fa:70:97:23:cb:0b:05:
                    92:70:dd:3a:31:27:1e:20:09:c9:90:8d:f2:10:f8:
                    e4:7f:0a:ea:99:0c:13:15:ee:08:5f:a4:ba:c9:ef:
                    77:8f:1e:9b:30:49:79:a1:2a:d8:47:85:69:96:60:
                    e1:96:a3:40:25:d7:cc:e1:7d:e5:8c:e0:4b:e5:df:
                    33:f5:56:d1:e5:74:bd:37:65:fc:be:c9:e9:7b:42:
                    1b:30:da:f1:a4:fa:c6:10:37:34:52:1e:28:98:3b:
                    3d:22:66:94:47:51:16:b5:07:6b:37:b3:23:f8:8a:
                    3c:8b:7c:d9:22:9c:47:3b:62:53:2a:4a:8f:41:fb:
                    0d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:C8:76:2E:49:08:30:E9:8E:48:EA:38:BF:2E:D0:D8:DE:CE:38:AB
            X509v3 Authority Key Identifier:
                keyid:85:12:E9:69:95:6A:CB:7D:3E:76:0E:D9:86:E1:BE:EA:3F:8A:C0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/hRLpaZVqy30-dg7ZhuG-6j-KwPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hRLpaZVqy30-dg7ZhuG-6j-KwPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BC71/91BE2BC03F0511F1BE3FC0C2C9833773/04DF866C3F0611F1B36B08F4C9833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5a60::/32

    Signature Algorithm: sha256WithRSAEncryption
         5d:bd:08:e9:09:1b:ae:39:e5:a4:38:46:f7:f7:0d:25:5a:d2:
         b9:53:10:0d:7c:e2:9f:e9:67:e3:7d:d4:be:33:a5:c8:d6:47:
         36:e5:dc:0d:f7:bb:05:2a:f6:45:55:55:05:e1:25:c3:b8:00:
         a8:5b:b9:65:53:1a:3b:b1:75:e7:4a:43:4a:80:5c:8d:97:9a:
         68:e6:be:3f:4a:9d:81:49:37:47:ac:7f:f9:bc:81:9e:82:df:
         16:97:c3:05:da:b4:c0:c8:73:c7:10:56:b7:84:01:f8:1e:35:
         bb:be:dc:9c:2f:96:7a:28:97:bc:9d:66:f9:7e:a6:67:4c:51:
         24:d5:bb:ef:d5:ce:c1:98:66:f6:5a:69:4f:ce:1d:08:f9:9d:
         f9:21:28:ce:95:16:72:07:dc:f8:1c:ec:87:fe:6e:83:7f:7d:
         5b:13:bb:17:0e:19:04:8e:46:04:aa:b2:e2:6b:36:48:4b:4c:
         37:dc:8b:67:2a:1d:4f:26:ff:df:08:13:86:73:01:3d:79:bb:
         eb:d8:15:de:c8:9f:42:29:5a:12:c9:1c:50:c1:6c:2b:82:8b:
         be:23:49:b8:a5:ee:1b:ef:03:12:e0:9d:71:79:fc:bd:68:5d:
         c6:0f:23:38:05:19:5c:45:d7:a5:15:ad:14:5d:35:e9:68:5c:
         7f:ef:86:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 16:42:12 2026 by rpki-client