Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3322FCF6B8B611F09EE22E11C4F9AE02.roa
File:                     3322FCF6B8B611F09EE22E11C4F9AE02.roa (raw, json)
Hash identifier:          vPw7xATzv0O2yNoJH3ofUOV61xAOAH8pdJ0rodOC4Lw=
Subject key identifier:   03:5C:CB:41:3B:F7:10:98:E2:53:94:81:17:5E:C8:A8:C2:9A:2C:6E
Certificate issuer:       /CN=A917A84A/serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
Certificate serial:       1DE9
Authority key identifier: 8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3322FCF6B8B611F09EE22E11C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:06:24 +0000
ROA not before:           Mon 03 Nov 2025 13:08:33 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     141450
IP address blocks:        2406:d00:160::/48 maxlen: 48
                          2406:d00:161::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl
                          rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 16:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7657 (0x1de9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A84A, serialNumber=8A1A10EB8FBA45C2152CA8956F432F9A8139603A
        Validity
            Not Before: Nov  3 13:08:33 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a48020-d103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0f:9a:30:bd:4f:20:ab:d1:7e:f5:98:c1:c0:
                    bf:51:7c:97:d2:85:88:66:03:60:20:d9:48:50:16:
                    b2:37:90:c4:e8:4e:3f:0e:56:d6:3b:cd:e6:f1:ea:
                    5b:1b:11:5c:98:58:4a:92:99:f0:e9:b1:fb:59:cb:
                    cc:d1:d1:f3:34:3f:99:e3:fb:cd:a8:5a:9b:95:6f:
                    cc:86:cd:12:a4:1e:af:6e:f2:a7:6c:f8:99:16:04:
                    54:dc:e9:02:b8:de:87:49:ab:d4:4d:ff:30:a9:50:
                    2a:22:66:65:ae:96:30:f8:ae:ce:3e:75:09:8e:18:
                    30:bf:82:1d:20:db:0b:e3:6c:10:5f:fd:2c:c8:64:
                    81:66:17:bb:37:54:c0:ef:c2:08:bf:a2:65:0d:f5:
                    02:4d:87:e3:3e:44:9c:c5:27:c9:47:8f:87:ad:7c:
                    ec:d7:8f:b0:cb:e2:99:54:f9:68:9f:82:bd:73:95:
                    4a:35:ab:87:8f:c1:4a:a1:a1:d4:93:9d:dc:eb:b2:
                    c1:38:60:08:e6:ec:52:f2:0a:00:de:cc:d0:9e:73:
                    0f:42:52:8d:22:10:4c:6e:8c:5f:b8:27:2b:3c:8f:
                    5b:1e:c7:25:45:60:e2:47:ec:b2:4d:92:ec:4c:d1:
                    4d:98:c5:cc:81:8b:b3:f3:bb:a1:71:d6:79:1c:3d:
                    ef:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5C:CB:41:3B:F7:10:98:E2:53:94:81:17:5E:C8:A8:C2:9A:2C:6E
            X509v3 Authority Key Identifier:
                keyid:8A:1A:10:EB:8F:BA:45:C2:15:2C:A8:95:6F:43:2F:9A:81:39:60:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/ihoQ64-6RcIVLKiVb0MvmoE5YDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihoQ64-6RcIVLKiVb0MvmoE5YDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A84A/1805191AE1EF11E69D36501BC4F9AE02/3322FCF6B8B611F09EE22E11C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:d00:160::/47

    Signature Algorithm: sha256WithRSAEncryption
         82:99:6f:d2:40:c3:ce:af:0c:7a:57:da:ca:2a:65:f7:01:b4:
         81:5a:d2:4e:96:ce:ab:fb:cd:48:8e:7b:8e:f5:3e:b5:4c:ce:
         23:46:13:85:ac:48:13:72:89:01:08:8f:cf:4b:7b:09:43:d3:
         53:86:6c:5b:fa:53:60:c2:f2:1f:cd:e3:82:64:f0:c5:3f:2a:
         b4:fd:64:96:7b:02:50:a6:d2:8b:08:f4:87:d4:15:e8:b7:89:
         57:12:22:b7:23:34:51:68:cf:ac:d0:5d:d5:18:de:9f:37:35:
         66:9f:e5:4c:70:85:aa:24:99:fd:be:e9:b5:55:c8:75:8c:c3:
         8a:d3:b4:68:65:76:e7:7d:a6:c6:1e:68:36:98:33:13:cb:21:
         fc:1b:85:66:97:c9:f9:00:26:0f:f2:0d:6d:19:eb:dc:44:e5:
         03:83:c9:33:b5:0d:59:3b:5a:2f:ba:73:ee:24:ae:77:09:30:
         dd:69:22:d7:6f:54:39:95:d7:e5:0c:72:35:e5:17:d2:45:4b:
         49:c3:ab:e2:e0:bb:6c:8a:59:f9:26:35:5f:3c:aa:75:6c:3d:
         00:10:a3:26:ef:26:a5:89:7e:2e:c2:51:5d:72:f4:de:05:94:
         db:1a:3f:ba:a9:59:fa:de:cd:c3:65:f1:91:ac:7f:df:c2:bd:
         3e:c2:a1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 03:49:12 2026 by rpki-client