Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/27023558912A11F09F7D4044C4F9AE02.roa
File:                     27023558912A11F09F7D4044C4F9AE02.roa (raw, json)
Hash identifier:          OMLVMbADMiWDue7ZTRWxAOooyihp025Pd2cOw63qWcY=
Subject key identifier:   B7:45:51:C2:A8:90:51:FC:69:74:E3:B0:74:92:AF:1B:EC:61:E2:B0
Certificate issuer:       /CN=A919DB2F/serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
Certificate serial:       05C6
Authority key identifier: F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/27023558912A11F09F7D4044C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:13:20 +0000
ROA not before:           Fri 19 Sep 2025 00:06:08 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     132707
IP address blocks:        2400:8da0:eb00::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl
                          rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 27 Mar 2026 22:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1478 (0x5c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919DB2F, serialNumber=F9C3638059F864E84AE3BF50DAAC079C68463EA7
        Validity
            Not Before: Sep 19 00:06:08 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a473b0-a68c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b7:e0:ec:f6:e8:db:22:ba:65:68:60:42:38:
                    b9:f3:2a:3b:83:ad:56:68:7c:a8:f2:1c:0e:fb:5a:
                    b5:0d:97:81:22:57:c6:d5:10:a5:93:93:11:08:03:
                    fd:e1:54:ab:26:40:32:20:30:e2:4c:37:bc:a9:41:
                    7f:b7:1d:ef:55:13:ef:db:dc:67:d4:ae:7a:64:a0:
                    df:92:0d:26:d8:fb:ea:10:2e:b3:3f:e3:21:51:40:
                    81:a5:16:36:df:c8:38:ce:41:52:4c:fc:83:2b:0e:
                    1e:07:af:3c:aa:12:cd:89:9e:45:77:28:87:cb:1f:
                    76:e3:b0:67:a1:fa:a6:29:82:32:b4:cb:ca:b8:04:
                    46:7c:f1:18:41:c8:1e:d6:d3:9c:1e:37:84:2b:c3:
                    6c:6f:91:a4:41:ae:f4:aa:df:b2:ff:65:f9:1a:e5:
                    d1:30:ad:5e:fc:bb:30:77:96:9d:44:d0:36:f8:06:
                    56:a9:bf:36:f0:d2:72:ee:32:07:69:9a:cd:92:41:
                    22:76:09:b8:95:4b:6b:8c:96:b8:cd:0c:c9:4f:76:
                    c3:76:02:ff:13:8f:8c:af:0f:64:82:55:9e:73:d7:
                    ae:e5:76:6c:8c:c1:b7:3d:da:ea:c6:80:73:24:30:
                    a2:75:6e:a1:0e:0e:a6:38:97:e0:1c:37:47:1e:f1:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:45:51:C2:A8:90:51:FC:69:74:E3:B0:74:92:AF:1B:EC:61:E2:B0
            X509v3 Authority Key Identifier:
                keyid:F9:C3:63:80:59:F8:64:E8:4A:E3:BF:50:DA:AC:07:9C:68:46:3E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/-cNjgFn4ZOhK479Q2qwHnGhGPqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-cNjgFn4ZOhK479Q2qwHnGhGPqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB2F/EF59CEC40ADA11EC95F5F678C4F9AE02/27023558912A11F09F7D4044C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8da0:eb00::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:20:8e:60:12:e6:9c:46:f3:8b:61:61:a1:de:d6:3b:9f:b5:
         2e:0c:fa:49:fc:96:15:d1:e4:84:7f:3b:ac:81:64:27:64:62:
         4b:80:c2:51:80:22:b5:23:96:fd:cd:44:3a:76:5b:d9:df:cf:
         95:0b:5e:b9:17:1a:6e:ad:ca:6f:fc:3a:34:60:f3:80:b8:3c:
         4d:f2:76:51:43:ad:b2:b6:71:02:6d:ad:b1:9e:c3:75:26:15:
         a5:bf:1d:41:f1:f8:33:5e:f7:67:ba:25:54:43:17:21:cb:e2:
         e5:71:3a:b5:10:29:76:a6:c0:0b:f1:06:d9:e1:53:13:a7:35:
         2b:0b:40:c0:e2:e9:15:ec:6f:88:37:e7:e9:e2:08:a6:47:f3:
         91:ef:c4:5a:34:45:5a:20:10:30:60:0f:37:7f:31:56:12:5c:
         2a:32:4f:a2:e9:ff:42:7d:c0:19:a3:ec:57:d9:a0:80:0b:a1:
         2b:39:37:a2:c3:e9:03:c6:c9:11:17:b0:d5:42:ee:b6:a1:2a:
         58:b4:46:48:b7:34:7f:0e:43:21:5e:74:7f:ad:90:c0:62:7f:
         a1:c5:ec:a5:da:7b:f9:e6:ae:16:9c:48:d6:52:a1:60:41:b9:
         ab:d5:b1:c3:e1:00:4e:9a:e7:cf:1d:1c:ec:43:0b:5b:a4:26:
         4a:a3:b2:52
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OURCMkYxMTAvBgNVBAUTKEY5QzM2MzgwNTlGODY0RTg0QUUzQkY1MERBQUMwNzlD
Njg0NjNFQTcwHhcNMjUwOTE5MDAwNjA4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0NzNiMC1hNjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyLfg7Pbo2yK6ZWhgQji58yo7g61WaHyo8hwO+1q1DZeBIlfG1RClk5MRCAP9
4VSrJkAyIDDiTDe8qUF/tx3vVRPv29xn1K56ZKDfkg0m2PvqEC6zP+MhUUCBpRY2
38g4zkFSTPyDKw4eB688qhLNiZ5FdyiHyx9247BnofqmKYIytMvKuARGfPEYQcge
1tOcHjeEK8Nsb5GkQa70qt+y/2X5GuXRMK1e/Lswd5adRNA2+AZWqb828NJy7jIH
aZrNkkEidgm4lUtrjJa4zQzJT3bDdgL/E4+Mrw9kglWec9eu5XZsjMG3PdrqxoBz
JDCidW6hDg6mOJfgHDdHHvGybwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFLdFUcKo
kFH8aXTjsHSSrxvsYeKwMB8GA1UdIwQYMBaAFPnDY4BZ+GToSuO/UNqsB5xoRj6n
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5REIyRi9FRjU5Q0VDNDBB
REExMUVDOTVGNUY2NzhDNEY5QUUwMi8tY05qZ0ZuNFpPaEs0NzlRMnF3SG5HaEdQ
cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy1jTmpnRm40Wk9oSzQ3OVEycXdIbkdoR1BxYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
OURCMkYvRUY1OUNFQzQwQURBMTFFQzk1RjVGNjc4QzRGOUFFMDIvMjcwMjM1NTg5
MTJBMTFGMDlGN0Q0MDQ0QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcEJACNoOsAMA0GCSqGSIb3DQEBCwUAA4IBAQBcII5gEuacRvOLYWGh
3tY7n7UuDPpJ/JYV0eSEfzusgWQnZGJLgMJRgCK1I5b9zUQ6dlvZ38+VC165Fxpu
rcpv/Do0YPOAuDxN8nZRQ62ytnECba2xnsN1JhWlvx1B8fgzXvdnuiVUQxchy+Ll
cTq1ECl2psAL8QbZ4VMTpzUrC0DA4ukV7G+IN+fp4gimR/OR78RaNEVaIBAwYA83
fzFWElwqMk+i6f9CfcAZo+xX2aCAC6ErOTeiw+kDxskRF7DVQu62oSpYtEZItzR/
DkMhXnR/rZDAYn+hxeyl2nv55q4WnEjWUqFgQbmr1bHD4QBOmufPHRzsQwtbpCZK
o7JS
-----END CERTIFICATE-----
Generated at Sat Mar 21 23:04:38 2026 by rpki-client