Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/16D4DB82A40E11EEAAB83671C4F9AE02.roa
File:                     16D4DB82A40E11EEAAB83671C4F9AE02.roa (raw, json)
Hash identifier:          TmdQV6BLk1+cnWaAIkZhU3NcLcnZuchKRODSVZWLxDo=
Subject key identifier:   AC:15:C0:2D:96:8C:00:06:40:96:78:CC:91:F3:E6:FF:8C:52:F4:0F
Certificate issuer:       /CN=A918E4B7/serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
Certificate serial:       05B8
Authority key identifier: 0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/16D4DB82A40E11EEAAB83671C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:51:30 +0000
ROA not before:           Wed 03 Sep 2025 00:15:34 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     23734
IP address blocks:        2401:df40:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl
                          rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 22:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1464 (0x5b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E4B7, serialNumber=0AB6DD26515C53ECC5B0462B4C475D5A7E5A5537
        Validity
            Not Before: Sep  3 00:15:34 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a47ca2-2a85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:69:48:16:8e:e1:06:08:60:fb:32:5e:43:89:
                    a5:8c:52:14:b8:81:15:b3:32:9d:d3:5c:28:60:93:
                    c9:b4:a5:19:04:a6:c3:ba:1c:4d:d4:35:d2:7c:60:
                    51:35:73:d8:ec:11:b8:69:e0:2e:0c:fc:46:cf:92:
                    02:8d:44:8a:f3:7b:9a:45:dd:bd:c1:68:31:eb:68:
                    dd:44:d1:09:7f:7b:d0:d0:80:1e:15:71:15:c8:d0:
                    f9:62:cb:b8:16:34:f8:a7:ad:b8:60:24:9c:37:69:
                    b7:1d:b4:9e:5a:aa:74:13:54:14:96:64:4e:cf:ad:
                    fc:a6:72:54:75:d2:a2:ee:9a:b1:ca:6f:56:e8:9f:
                    4a:c0:82:df:6a:60:6c:96:cd:89:3a:db:4f:32:cc:
                    21:49:04:69:83:6b:71:cc:63:41:bd:2f:2c:60:75:
                    90:52:a6:e7:b2:2c:66:71:5a:dc:52:c1:3a:b8:0f:
                    77:55:1d:fc:6b:cf:a1:e1:97:eb:14:8c:d5:e3:e2:
                    73:3b:f0:ae:f3:fc:80:06:43:6a:27:a4:7c:4c:f8:
                    68:8e:62:81:af:04:4d:99:e9:85:23:9c:6e:f4:14:
                    83:4c:d0:70:e9:0c:29:0d:9f:95:1f:da:64:b9:bb:
                    60:10:a8:ab:03:45:7a:ba:a3:7f:d5:e3:85:f1:39:
                    da:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:15:C0:2D:96:8C:00:06:40:96:78:CC:91:F3:E6:FF:8C:52:F4:0F
            X509v3 Authority Key Identifier:
                keyid:0A:B6:DD:26:51:5C:53:EC:C5:B0:46:2B:4C:47:5D:5A:7E:5A:55:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/CrbdJlFcU-zFsEYrTEddWn5aVTc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CrbdJlFcU-zFsEYrTEddWn5aVTc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E4B7/EB312F021EAA11ECB756BF30C4F9AE02/16D4DB82A40E11EEAAB83671C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:df40:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         9e:41:41:f7:a6:92:e7:e7:43:78:db:bc:e1:98:17:3b:53:eb:
         9e:ca:4c:a0:17:8f:dc:af:c0:1d:ad:1d:91:5a:64:69:b7:be:
         31:4d:12:be:cb:64:23:1c:f2:de:ac:7a:46:1b:00:11:5e:df:
         bc:dd:7e:9a:9c:88:09:9b:4a:18:9d:41:dd:20:f8:e9:52:a6:
         2a:97:48:1d:a4:ac:b0:42:20:c3:03:1a:fd:3e:3b:f6:92:1c:
         4b:1b:32:47:3c:3c:de:39:80:f0:be:15:b8:b1:9f:d4:73:c3:
         99:cf:cd:f8:fb:2e:80:6f:16:be:1c:2a:1c:bf:4d:37:a6:c0:
         29:09:07:d6:4d:4f:b1:04:96:98:db:b4:14:93:27:56:76:45:
         f8:d8:35:ae:d3:a0:f9:09:65:e8:0a:7f:82:67:4a:db:e3:db:
         59:96:b0:3f:2f:0f:1f:87:ed:ef:2a:3d:9a:83:6d:27:4d:d7:
         09:1c:a9:ed:e2:cb:97:5d:a8:bf:76:ea:a2:29:dc:f6:61:b0:
         34:fe:3e:a4:34:15:79:d3:92:e3:d6:a9:41:d6:66:37:48:e0:
         3c:a3:93:0a:ff:87:61:8a:cc:2d:97:de:5c:80:85:3f:8c:ba:
         7d:f4:df:87:07:da:9d:63:f4:14:35:6d:13:00:3b:87:df:a5:
         45:d8:42:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 08:03:54 2026 by rpki-client