Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/355D028E4AB511EF87AB161BC4F9AE02.roa
File:                     355D028E4AB511EF87AB161BC4F9AE02.roa (raw, json)
Hash identifier:          incWxp/q6BP850yo088lkaixNWDs/U8YF9i7d8gnByc=
Subject key identifier:   CE:42:4D:B1:B3:63:60:BE:82:F8:24:66:E7:69:EA:C0:27:EE:DF:E6
Certificate issuer:       /CN=A9190D72/serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
Certificate serial:       01A5
Authority key identifier: 1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/355D028E4AB511EF87AB161BC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:40:11 +0000
ROA not before:           Thu 27 Mar 2025 05:11:48 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     136557
IP address blocks:        2401:8360:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl
                          rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 03:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 421 (0x1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190D72, serialNumber=1EB9AE8BF5959FE8BF2EB82B923B717EFF3106C5
        Validity
            Not Before: Mar 27 05:11:48 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a5933b-b7bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ac:1f:90:43:9d:02:28:df:0e:53:8b:6d:89:
                    b8:1a:b1:86:3e:f8:db:b9:73:85:fe:67:a2:21:53:
                    88:1d:26:79:0c:4f:b5:ac:c2:fd:6f:25:77:b4:05:
                    c3:4f:87:e5:94:5e:c2:ba:0b:fa:a4:60:08:05:b3:
                    ec:ab:35:b5:4d:6d:66:72:47:2a:33:94:95:cc:26:
                    15:a9:4c:c1:f5:8d:30:07:ac:58:6a:27:d8:7a:0d:
                    a1:bd:8a:2c:47:d5:1f:7f:11:bc:21:ae:4a:47:5f:
                    7b:5f:a5:ba:a4:37:e1:42:5b:08:ac:61:9e:5e:44:
                    5e:fd:71:6d:d7:1d:6e:11:b7:8e:d5:bc:2d:59:c3:
                    d0:9b:01:ea:e1:51:7a:e4:ad:f2:43:02:12:c9:28:
                    20:57:49:53:11:09:10:ac:b6:f0:50:35:a2:7d:de:
                    09:ee:a9:4a:0e:68:7d:ae:09:f7:03:25:75:37:98:
                    60:ca:5e:7f:2e:6a:59:f0:dc:01:48:3c:f1:a9:0a:
                    3a:ba:26:aa:43:18:28:a5:9b:54:9a:f9:47:f4:fa:
                    7f:e5:7f:0c:69:eb:65:8e:22:5d:fe:51:00:31:a1:
                    16:7c:38:00:af:e7:10:88:ad:e3:34:de:b7:98:c0:
                    e7:14:99:d7:4e:02:32:66:11:c0:63:9c:64:dc:94:
                    0f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:42:4D:B1:B3:63:60:BE:82:F8:24:66:E7:69:EA:C0:27:EE:DF:E6
            X509v3 Authority Key Identifier:
                keyid:1E:B9:AE:8B:F5:95:9F:E8:BF:2E:B8:2B:92:3B:71:7E:FF:31:06:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hrmui_WVn-i_Lrgrkjtxfv8xBsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190D72/8B25AD04D22B11EEBC145343C4F9AE02/355D028E4AB511EF87AB161BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8360:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         ac:f7:f9:c7:5e:04:d3:77:98:c7:1c:a5:5f:c5:f1:dc:0c:bd:
         e4:63:51:46:57:09:79:76:85:07:ea:00:f6:f3:8e:e6:13:8a:
         2e:d1:bb:10:c6:22:47:86:98:ca:3e:0a:8d:a5:09:64:30:bc:
         0c:fb:3e:bf:ab:21:6a:80:4b:c6:f9:03:94:5e:22:d0:82:c0:
         e3:fc:61:13:49:0d:43:4e:18:87:3c:0f:4d:d8:22:15:35:a4:
         53:88:33:ca:eb:e2:fe:76:87:e7:2d:ba:50:fa:61:d4:54:a9:
         da:e2:ec:d6:52:8b:d3:f3:32:69:59:90:f9:7e:26:51:f2:13:
         4d:0a:83:8d:28:8d:b9:46:44:ba:1f:47:4a:41:08:80:9c:3b:
         71:9f:26:25:b4:b2:ff:10:d9:94:a2:34:2a:47:7a:ca:0c:2f:
         5c:1e:ef:cb:97:f3:c9:25:3d:e0:12:9c:74:c5:47:34:ac:ee:
         8c:e3:e5:a1:44:98:c8:37:c7:f5:09:5f:d1:b7:fc:b5:d6:ca:
         5e:20:aa:b5:7f:47:43:a7:ac:4d:5b:61:9c:33:08:55:ec:c2:
         42:32:c5:7a:a2:09:5f:02:8b:c0:b1:12:ea:3f:b8:4a:f8:d8:
         69:e6:94:ff:78:2a:19:95:94:cd:11:25:d1:b7:3e:ae:fc:22:
         bc:96:67:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:29:56 2026 by rpki-client