Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/3BE03ECC7D4D11EE93D62E30C4F9AE02.roa
File:                     3BE03ECC7D4D11EE93D62E30C4F9AE02.roa (raw, json)
Hash identifier:          HisRiW5EWGfUY7tpMgN5Z0zrlCM3EcURz9NoUEQR3wA=
Subject key identifier:   72:0E:51:64:C0:1C:EF:DE:62:52:0E:7F:51:4E:B6:15:31:85:30:A4
Certificate issuer:       /CN=A917B0F6/serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
Certificate serial:       01C0
Authority key identifier: C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/3BE03ECC7D4D11EE93D62E30C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:01:12 +0000
ROA not before:           Thu 19 Jun 2025 04:02:43 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:dec:4000::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl
                          rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 03:37:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 448 (0x1c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B0F6, serialNumber=C0AEF7077F52622567179ACE56AD5EE8CD64604E
        Validity
            Not Before: Jun 19 04:02:43 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a41c77-6bc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:35:98:21:b2:ba:e6:39:f1:d5:31:3a:d1:
                    d5:02:56:64:16:a6:75:02:96:72:76:48:08:e8:ed:
                    ca:fd:c9:af:af:49:fc:8d:14:0a:ba:00:71:f9:c9:
                    3d:56:0b:db:42:13:5e:89:29:d9:26:51:b8:3e:f9:
                    01:d1:52:f2:c5:08:bd:48:ac:22:6d:1b:d8:a0:1f:
                    74:77:2d:25:81:1f:02:a1:b3:23:09:1f:3d:e4:06:
                    8d:1c:1c:8d:06:f5:37:79:eb:7a:52:ea:e9:c6:46:
                    03:c2:19:e9:16:af:d7:35:e7:5d:87:be:e5:e0:e8:
                    30:c6:57:9c:8c:b2:1d:5d:39:d4:ef:4d:7a:99:45:
                    a1:4b:55:cb:1c:19:37:5b:ec:53:b9:ed:52:48:c0:
                    d0:e2:c6:56:6b:ed:26:98:26:69:8d:c1:12:65:46:
                    80:fc:0b:63:0f:3e:ea:fd:5f:f9:64:d2:c4:22:66:
                    49:59:10:b3:80:e5:fe:89:87:79:9f:be:2c:2a:f2:
                    cd:5b:22:3e:74:e9:9a:f3:fa:46:f1:13:e8:2b:e0:
                    9e:ec:20:92:84:f1:82:4d:e1:49:f3:35:59:2f:e2:
                    fe:eb:d1:ba:b8:69:05:41:71:c9:f2:b4:d3:13:cb:
                    ff:fb:38:5a:ea:fe:89:94:bf:0b:c3:24:64:24:6a:
                    e0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:0E:51:64:C0:1C:EF:DE:62:52:0E:7F:51:4E:B6:15:31:85:30:A4
            X509v3 Authority Key Identifier:
                keyid:C0:AE:F7:07:7F:52:62:25:67:17:9A:CE:56:AD:5E:E8:CD:64:60:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/wK73B39SYiVnF5rOVq1e6M1kYE4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wK73B39SYiVnF5rOVq1e6M1kYE4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B0F6/FEE05BEC7CAC11EE8A28846FC4F9AE02/3BE03ECC7D4D11EE93D62E30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:dec:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:e6:28:2d:ee:44:88:80:6c:27:50:f3:bf:7f:ff:e2:f4:a3:
         3c:93:bb:43:9f:4a:d0:55:11:cd:a0:fd:bd:98:b1:ce:2f:2b:
         d2:06:2a:8f:9b:3d:ac:17:27:5a:f2:d1:99:8a:f5:b5:82:69:
         01:12:3f:10:35:87:a6:b8:be:eb:0f:86:c1:79:32:ac:53:73:
         31:23:20:f9:dc:c7:b7:fa:99:5b:b3:3a:11:40:aa:8b:fa:b8:
         3a:e7:9c:ac:29:e7:5c:c8:9d:b8:df:cd:95:4d:12:40:b4:2d:
         69:37:59:76:c6:bb:51:72:8e:d2:67:73:e8:33:49:8a:17:dd:
         92:09:c4:e4:7c:08:97:30:9f:9d:92:57:b0:ae:c3:f8:df:a9:
         75:2e:ad:58:1e:6d:fb:7a:f9:6a:f2:e1:14:55:ef:ce:c5:11:
         e7:b3:b1:b1:32:50:d2:d7:43:dd:29:ae:25:99:76:da:4b:cb:
         d9:99:d4:c9:0a:68:b7:c6:f9:83:bd:97:22:11:8d:7b:15:0d:
         7d:38:a8:7f:06:3d:ba:7a:43:8e:3e:99:ba:b4:48:12:d9:9d:
         64:2e:64:d5:27:da:2d:52:6b:17:db:5e:93:19:13:e2:0e:59:
         f4:ed:7e:36:4a:61:c1:cd:50:60:c9:3a:6f:8f:41:67:92:23:
         87:63:af:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 18:21:42 2026 by rpki-client