Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/5D463936C87611EDAC86AA74C4F9AE02.roa
File:                     5D463936C87611EDAC86AA74C4F9AE02.roa (raw, json)
Hash identifier:          /kMXD66YoOkbovGmviBSlp3XnJGvyJnVXCG8OoKDXuU=
Subject key identifier:   A9:A8:D8:2F:C6:49:2B:07:28:B4:61:F2:65:7A:03:5D:60:B3:3F:21
Certificate issuer:       /CN=A919BE9A/serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
Certificate serial:       029B
Authority key identifier: A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/5D463936C87611EDAC86AA74C4F9AE02.roa
Signing time:             Thu 23 Apr 2026 02:34:37 +0000
ROA not before:           Thu 23 Apr 2026 02:34:37 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     203472
IP address blocks:        2400:e3e0:f5a8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl
                          rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667 (0x29b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BE9A, serialNumber=A79B82887031441990B18D1A05F9E271E7E7B8E6
        Validity
            Not Before: Apr 23 02:34:37 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69e9853d-20c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:73:0a:70:1b:29:70:89:fa:67:eb:5d:e0:
                    e0:b2:6d:03:96:ed:24:af:fc:de:7e:ff:da:c6:09:
                    6f:88:ad:09:c1:58:a9:d8:86:cb:df:8f:e3:12:12:
                    8b:b9:6b:30:64:61:9f:3c:27:be:48:c5:38:64:e0:
                    ba:bc:bc:32:0a:fe:68:52:f3:fa:13:5e:85:b3:70:
                    4d:eb:53:77:45:75:b9:a1:5c:ec:bf:56:7c:d4:78:
                    05:ee:ac:4c:72:ef:11:f7:09:d6:8a:63:97:78:fa:
                    ce:6a:68:f3:49:67:23:f1:78:81:9c:4f:51:8d:c3:
                    33:2b:21:ad:03:75:17:94:1f:0b:d6:b8:43:28:b7:
                    b1:b9:ff:02:4c:99:3a:25:97:ae:64:c3:96:f3:c9:
                    78:e7:36:ef:1e:70:29:cb:c4:39:01:17:9f:86:f9:
                    e6:d5:6b:e0:a2:56:0d:b5:12:0e:35:5b:c2:04:77:
                    a5:97:3a:be:7b:fd:c6:74:ca:96:c1:e4:0b:71:0f:
                    11:b4:c2:34:1e:23:d7:d8:6f:50:c8:3a:e6:cf:f2:
                    ba:2c:a5:9d:ea:2f:62:2f:d2:45:c9:98:86:d4:ca:
                    d4:d5:df:07:98:60:a1:4a:b8:46:5e:32:5c:aa:14:
                    d2:35:5e:ab:1c:5c:d0:10:1f:53:49:7f:99:6c:85:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A8:D8:2F:C6:49:2B:07:28:B4:61:F2:65:7A:03:5D:60:B3:3F:21
            X509v3 Authority Key Identifier:
                keyid:A7:9B:82:88:70:31:44:19:90:B1:8D:1A:05:F9:E2:71:E7:E7:B8:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/p5uCiHAxRBmQsY0aBfnicefnuOY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p5uCiHAxRBmQsY0aBfnicefnuOY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BE9A/8FA1F56EB85E11ED8E6F4213C4F9AE02/5D463936C87611EDAC86AA74C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:e3e0:f5a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:9c:4e:75:f2:4c:a3:8b:c1:28:fb:45:6c:53:b3:5e:81:2d:
         81:68:23:5d:49:0b:6c:e5:b9:da:7a:43:c1:b2:4a:c7:bd:6a:
         b6:57:f0:22:9d:74:03:0e:d1:72:25:c6:8e:12:d9:71:ff:52:
         07:78:03:fa:b8:0a:c3:b2:92:d2:39:73:6f:bb:4b:f8:54:17:
         e6:56:dd:32:de:93:9c:b6:02:f6:b8:69:85:be:24:6d:82:0a:
         93:72:38:bc:9e:30:6c:0c:c5:9f:6c:db:62:66:db:22:76:88:
         c3:99:41:eb:16:6c:12:da:79:5e:25:49:ec:14:11:d8:48:47:
         6b:59:ec:f8:9a:68:6c:fc:45:a4:cf:5e:88:62:db:b6:78:67:
         c0:61:37:aa:6f:d5:6f:df:df:d9:1e:a7:91:eb:c9:60:db:62:
         fe:c2:4a:5d:7c:93:36:dc:17:15:f1:9d:b0:0a:2a:1f:a9:72:
         bf:df:9b:2e:81:37:11:cc:aa:9a:3c:26:f6:df:03:db:40:e0:
         0f:ab:b5:6b:f7:31:96:00:d0:36:c6:6e:d2:8b:4b:82:d5:40:
         96:66:af:f5:99:60:54:4a:20:6e:42:9d:ad:48:03:d6:f5:94:
         f7:0a:12:9c:63:9a:55:65:ca:cb:73:bc:11:04:ab:1b:f0:06:
         dd:0d:23:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:15:56 2026 by rpki-client