Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa
File:                     2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa (raw, json)
Hash identifier:          p7r4O4Vf5Ep5mNiSsFV9jC3/scXjMoJzELj9zDheT2k=
Subject key identifier:   59:DD:99:AC:3F:6C:BD:C1:27:1E:D3:A8:0D:8B:0D:EF:E0:01:30:CD
Certificate issuer:       /CN=A917ED5C/serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
Certificate serial:       1024
Authority key identifier: 6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:29:24 +0000
ROA not before:           Thu 22 May 2025 20:06:32 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     134488
IP address blocks:        2406:840:e800::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl
                          rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 17:31:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4132 (0x1024)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ED5C, serialNumber=6FD2E1FE04EAFF9027CE5313150BE84DE11CA1A5
        Validity
            Not Before: May 22 20:06:32 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a49394-2e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:65:bb:25:04:4c:5b:14:90:8f:9a:1a:45:e6:
                    0d:d2:2a:b6:19:bb:65:f8:fa:e7:c3:db:00:79:19:
                    da:e3:b7:e7:9c:89:02:3d:f0:1b:9c:f1:b1:1b:00:
                    f7:9c:3b:eb:a0:52:1f:85:ac:d8:a3:70:06:09:46:
                    d0:14:ae:94:0f:d8:ff:79:c2:9b:0e:f3:c0:d2:18:
                    ea:b6:2f:3b:a7:7b:9d:54:33:4f:0d:27:b2:e0:50:
                    12:fb:79:d6:cf:0c:20:eb:a0:c2:19:ff:d0:77:d4:
                    05:93:26:64:86:af:cc:75:a7:50:6c:3d:67:1e:a7:
                    c1:ff:71:e3:54:f6:38:b2:9f:a0:75:e2:d7:64:b4:
                    76:db:59:7a:0e:5c:cb:2c:5f:9d:16:1f:2a:9a:b5:
                    8d:c5:46:36:02:43:77:0b:1f:69:34:16:63:ff:1c:
                    9d:c6:28:fd:bf:7b:d8:00:16:a8:fc:16:e4:79:68:
                    cf:a2:06:95:ca:ca:6f:9f:d1:02:6f:cb:9c:04:26:
                    3a:fa:82:7f:4d:ed:0c:e0:06:ae:43:6a:65:ee:e4:
                    b2:72:01:ea:2b:a7:da:c9:5c:8e:3c:62:04:3a:39:
                    5e:1a:5d:71:10:5a:7d:2f:fb:ad:d6:70:8e:9e:4d:
                    d7:fb:d8:9b:8b:51:fe:01:ca:6b:2f:5d:4d:04:73:
                    41:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:DD:99:AC:3F:6C:BD:C1:27:1E:D3:A8:0D:8B:0D:EF:E0:01:30:CD
            X509v3 Authority Key Identifier:
                keyid:6F:D2:E1:FE:04:EA:FF:90:27:CE:53:13:15:0B:E8:4D:E1:1C:A1:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b9Lh_gTq_5AnzlMTFQvoTeEcoaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ED5C/B56422D0860811EA92999571C4F9AE02/2AE459DC4A5B11EBB7B4BA18C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:840:e800::/44

    Signature Algorithm: sha256WithRSAEncryption
         47:4e:3e:28:54:c3:d6:5d:e3:6e:a3:78:41:97:9e:25:06:05:
         d5:42:df:4f:3e:b5:f8:a8:6c:51:cf:50:df:c7:93:4a:47:f5:
         58:e6:f0:10:77:6b:9e:4d:fa:42:c0:c8:c4:ba:d4:e4:8a:87:
         cd:13:ce:ed:61:30:2c:77:53:d7:b0:79:7c:73:e9:b1:3d:87:
         c6:87:63:c2:b4:bc:5e:87:ef:a5:af:0a:a8:e5:e5:eb:ea:f6:
         fb:c4:2d:e2:40:99:a1:34:60:de:23:15:fe:4f:7a:5d:2d:18:
         49:ac:8f:f6:12:4e:be:3e:00:22:72:5c:71:08:df:d5:d2:8c:
         27:54:e6:fa:98:c5:a4:20:36:b1:9a:b5:15:09:cf:b1:c6:ca:
         3a:9d:4f:e8:9e:e3:54:c1:a5:60:6a:62:d6:cf:47:32:af:17:
         5a:3b:22:03:19:fb:3c:d5:6c:40:86:4e:2a:33:94:90:bd:9b:
         7c:16:28:db:ef:10:2e:f1:ac:3b:d8:39:fe:df:dc:45:99:01:
         a5:f8:0e:2a:0d:b8:b3:17:a2:12:60:66:8b:c7:f4:aa:fb:c4:
         e7:de:7d:11:1b:36:fc:cf:cc:cb:ad:d7:7b:ac:18:75:81:6e:
         e6:4f:f2:49:cf:77:ff:0a:b3:8e:32:09:2b:f6:0a:c0:a9:a8:
         9c:fd:37:87
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICECQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0VENUMxMTAvBgNVBAUTKDZGRDJFMUZFMDRFQUZGOTAyN0NFNTMxMzE1MEJFODRE
RTExQ0ExQTUwHhcNMjUwNTIyMjAwNjMyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTM5NC0yZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAumW7JQRMWxSQj5oaReYN0iq2Gbtl+Prnw9sAeRna47fnnIkCPfAbnPGxGwD3
nDvroFIfhazYo3AGCUbQFK6UD9j/ecKbDvPA0hjqti87p3udVDNPDSey4FAS+3nW
zwwg66DCGf/Qd9QFkyZkhq/MdadQbD1nHqfB/3HjVPY4sp+gdeLXZLR221l6DlzL
LF+dFh8qmrWNxUY2AkN3Cx9pNBZj/xydxij9v3vYABao/BbkeWjPogaVyspvn9EC
b8ucBCY6+oJ/Te0M4AauQ2pl7uSycgHqK6fayVyOPGIEOjleGl1xEFp9L/ut1nCO
nk3X+9ibi1H+AcprL11NBHNBYwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFFndmaw/
bL3BJx7TqA2LDe/gATDNMB8GA1UdIwQYMBaAFG/S4f4E6v+QJ85TExUL6E3hHKGl
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RUQ1Qy9CNTY0MjJEMDg2
MDgxMUVBOTI5OTk1NzFDNEY5QUUwMi9iOUxoX2dUcV81QW56bE1URlF2b1RlRWNv
YVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2I5TGhfZ1RxXzVBbnpsTVRGUXZvVGVFY29hVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
N0VENUMvQjU2NDIyRDA4NjA4MTFFQTkyOTk5NTcxQzRGOUFFMDIvMkFFNDU5REM0
QTVCMTFFQkI3QjRCQTE4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJAYIQOgAMA0GCSqGSIb3DQEBCwUAA4IBAQBHTj4oVMPWXeNuo3hB
l54lBgXVQt9PPrX4qGxRz1Dfx5NKR/VY5vAQd2ueTfpCwMjEutTkiofNE87tYTAs
d1PXsHl8c+mxPYfGh2PCtLxeh++lrwqo5eXr6vb7xC3iQJmhNGDeIxX+T3pdLRhJ
rI/2Ek6+PgAiclxxCN/V0ownVOb6mMWkIDaxmrUVCc+xxso6nU/onuNUwaVgamLW
z0cyrxdaOyIDGfs81WxAhk4qM5SQvZt8Fijb7xAu8aw72Dn+39xFmQGl+A4qDbiz
F6ISYGaLx/Sq+8Tn3n0RGzb8z8zLrdd7rBh1gW7mT/JJz3f/CrOOMgkr9grAqaic
/TeH
-----END CERTIFICATE-----
Generated at Sat Mar 7 02:26:15 2026 by rpki-client