Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa
File:                     34D5ED1210F511EEBCE2A81EC4F9AE02.roa (raw, json)
Hash identifier:          GzoC5uTWCiyav9k4HtLbNzyni4nvBdiQvhcLFHI5dZ0=
Subject key identifier:   AE:62:3F:2C:DD:9B:9B:59:A1:23:DF:A1:34:4E:0B:F7:D6:8F:DF:1F
Certificate issuer:       /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial:       029C
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa
Signing time:             Thu 23 Apr 2026 02:34:39 +0000
ROA not before:           Thu 23 Apr 2026 02:34:38 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     204174
IP address blocks:        2400:e3e0:100::/40 maxlen: 48
                          2400:e3e0:f00::/40 maxlen: 48
                          2400:e3e0:f5d9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
                          rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 668 (0x29c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
        Validity
            Not Before: Apr 23 02:34:38 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e9853e-d57b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:b0:db:d3:95:e9:54:36:3b:24:bf:e2:0a:
                    04:b8:9d:c1:03:a4:cc:13:5c:cd:a4:6e:e4:3b:29:
                    8f:ba:b6:fc:af:0c:6f:b6:1f:e2:5b:0a:b7:3e:da:
                    54:4b:b6:ed:37:59:96:f5:38:c4:6c:5c:f8:0f:1f:
                    c8:c7:96:fe:a2:04:5c:bd:3d:26:85:9c:5b:b7:bb:
                    1c:7f:0e:44:ba:74:9d:4d:43:f8:8b:1a:09:90:56:
                    8a:47:fe:35:f1:06:6b:5c:2d:61:40:89:8e:ab:d0:
                    8e:57:4f:0d:2f:9f:01:f3:e3:fe:18:35:3c:b6:be:
                    02:c8:8e:69:17:6f:1f:ac:b0:dc:69:ad:dd:44:87:
                    4a:3f:78:fa:76:2f:54:23:46:84:d7:66:23:89:10:
                    f5:ac:a2:f2:bf:6d:3e:9b:10:67:0c:60:bc:d4:a3:
                    33:4d:16:68:5c:d5:ff:ed:b7:e9:29:d4:c2:07:89:
                    23:a7:82:89:e2:21:47:1f:b0:2d:38:f9:32:a6:a0:
                    92:b3:ac:f7:aa:fb:e5:3a:0b:19:bd:e1:54:eb:e8:
                    4f:98:d2:67:0b:ec:ef:d2:74:d0:26:f3:ba:3f:1d:
                    c5:b7:88:57:75:3f:4e:e7:1e:0e:48:b0:78:ce:ec:
                    86:28:82:15:fd:48:42:5f:7c:51:ac:b3:d1:df:fd:
                    b6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:62:3F:2C:DD:9B:9B:59:A1:23:DF:A1:34:4E:0B:F7:D6:8F:DF:1F
            X509v3 Authority Key Identifier:
                keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/34D5ED1210F511EEBCE2A81EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e3e0:100::/40
                  2400:e3e0:f00::/40
                  2400:e3e0:f5d9::/48

    Signature Algorithm: sha256WithRSAEncryption
         0f:4b:be:1e:9f:c1:9d:5b:3d:6a:19:7e:95:2d:f2:c4:3c:8f:
         22:c9:1e:97:0f:7a:f5:52:35:c1:70:3e:27:13:6b:c0:7e:14:
         b6:2f:90:6d:b5:13:4f:e0:41:aa:34:69:f9:1d:3f:80:95:74:
         34:d3:60:3d:73:22:04:68:57:52:e3:0c:aa:e2:9e:94:78:8c:
         45:69:7b:dd:43:77:3d:25:0c:e8:57:43:aa:02:01:d5:c9:68:
         75:fb:0d:70:fe:bc:5e:95:72:f4:b2:7d:7b:f6:5b:c0:f1:85:
         b8:04:33:32:45:fe:b1:b7:25:00:75:92:4e:73:f1:0b:51:c0:
         f9:87:18:60:bc:e6:4f:26:7f:00:5f:97:f4:d6:65:53:69:76:
         e5:29:a6:2b:f3:32:c6:0a:47:ef:90:12:99:2b:a5:ed:7e:a3:
         e1:a2:f5:30:b7:4a:66:5b:0c:28:d7:ed:80:40:65:bd:1a:4a:
         ec:7e:fb:89:72:c1:2e:66:65:03:a3:1e:2c:44:ab:04:8c:b6:
         93:a9:cd:01:17:41:91:d1:a2:e1:72:f1:e9:e8:ef:6c:4b:98:
         9f:d8:95:a0:99:6b:12:2c:ca:c2:dc:a2:08:dd:51:75:f9:da:
         1c:73:9a:28:bf:3d:4c:66:9d:66:78:05:3d:dd:1e:1f:aa:12:
         d6:57:32:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:15:58 2026 by rpki-client