Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/752774D616A111F0B2CDBC72C4F9AE02.roa
File:                     752774D616A111F0B2CDBC72C4F9AE02.roa (raw, json)
Hash identifier:          iGlUh9TWU4eF1gUngLKtyEqTN0brCSv48MjOIvg0+wA=
Subject key identifier:   C4:F9:FC:CE:11:FA:98:86:0A:19:20:5E:1A:C9:B8:AB:BD:FD:02:30
Certificate issuer:       /CN=A917092C/serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
Certificate serial:       0148
Authority key identifier: 81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/752774D616A111F0B2CDBC72C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:40:43 +0000
ROA not before:           Wed 09 Jul 2025 07:43:15 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     211691
IP address blocks:        2405:a280:ff00::/44 maxlen: 44
                          2405:a280:ff80::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl
                          rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 04:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917092C, serialNumber=817DD3802F26E57ECE8265CE8626FCBB9C64E9D4
        Validity
            Not Before: Jul  9 07:43:15 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5a16b-0e4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:59:4f:e1:cd:13:a8:bc:ff:cb:4b:a6:57:92:
                    70:98:bc:79:2e:74:c0:38:0b:50:f6:ff:be:ca:59:
                    39:00:69:d7:d8:3f:f8:b1:f6:c6:6b:c9:71:e4:b4:
                    27:87:8a:5b:7d:ae:d5:f9:89:6d:6a:54:e6:3e:b1:
                    e5:70:b6:8f:9c:7d:52:a9:55:33:ce:b7:bb:34:8c:
                    c6:cc:42:b2:66:eb:79:44:b1:e0:9c:b7:70:03:d5:
                    e8:56:f4:10:a0:8e:fe:6d:b5:68:da:c5:14:49:cd:
                    aa:9c:e7:6c:44:d7:90:e9:a7:97:d4:94:8b:ab:08:
                    45:c1:d5:fa:0e:05:9c:91:0c:39:d4:dd:01:b1:f0:
                    6c:2f:04:09:e0:1d:e9:0e:9d:09:a7:7a:e9:f7:4e:
                    39:34:a0:4a:05:cc:17:50:21:3a:71:45:db:8b:2a:
                    27:49:63:0f:27:f9:1f:90:0b:80:d4:47:15:b5:ba:
                    3c:b6:5b:e1:44:0b:b8:5a:28:74:f6:75:20:50:a3:
                    4b:0b:24:f8:30:5b:17:14:20:74:06:43:73:ed:fc:
                    88:2e:d8:a8:b5:16:c2:af:95:d8:40:35:d8:38:76:
                    3e:7b:62:56:46:64:18:89:99:eb:f1:9a:1c:23:89:
                    21:9f:91:07:74:90:ee:2d:b5:47:9f:87:25:36:8d:
                    b1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F9:FC:CE:11:FA:98:86:0A:19:20:5E:1A:C9:B8:AB:BD:FD:02:30
            X509v3 Authority Key Identifier:
                keyid:81:7D:D3:80:2F:26:E5:7E:CE:82:65:CE:86:26:FC:BB:9C:64:E9:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/gX3TgC8m5X7OgmXOhib8u5xk6dQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gX3TgC8m5X7OgmXOhib8u5xk6dQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917092C/E2C077DE776611EFB55ED279C4F9AE02/752774D616A111F0B2CDBC72C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:a280:ff00::/44
                  2405:a280:ff80::/44

    Signature Algorithm: sha256WithRSAEncryption
         3a:a2:98:07:85:06:8b:81:73:b5:39:b3:5d:7a:2a:a3:7d:0b:
         33:f5:84:2c:fe:1e:48:0d:3f:dd:90:da:3b:88:af:21:c9:f9:
         9d:6e:b1:2b:9f:d6:98:bd:d4:5b:d6:d0:60:58:4d:5b:f9:f2:
         95:8b:2f:17:40:c8:62:35:5d:46:43:a7:5e:37:98:99:39:fb:
         59:f1:09:5e:f7:b1:10:2d:1c:3d:df:a2:bf:b7:37:61:5c:60:
         8c:7c:ab:0a:0a:0b:3f:96:4b:22:0d:ed:04:72:be:81:b5:70:
         99:56:f6:3e:fc:8a:ba:ec:97:90:1d:d7:95:7c:27:9d:0a:b6:
         d0:45:15:ae:08:6d:f7:04:e8:67:d7:5a:12:e4:21:6c:12:a4:
         49:11:79:c6:92:7a:75:51:ac:7d:61:33:4e:ca:13:c8:3c:17:
         50:b6:54:0b:aa:96:96:ae:2f:94:31:ea:20:2f:b1:1d:07:7d:
         8f:0b:93:85:6d:ac:51:68:96:e2:9e:99:ec:3a:31:82:3e:75:
         23:3c:94:e8:be:39:f8:1c:21:c1:cc:5e:e9:1c:22:0d:2c:d2:
         95:62:9e:dd:b2:69:19:cd:f8:cd:65:ce:b5:15:9b:7f:85:cf:
         80:ec:8a:15:c5:a3:2e:4a:87:ed:12:58:48:92:c8:8a:cb:66:
         d8:47:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:00:27 2026 by rpki-client