Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/F8CCE69E4AC211F1A90B2018BE833773.roa
File:                     F8CCE69E4AC211F1A90B2018BE833773.roa (raw, json)
Hash identifier:          4DxKCaJ8CY4O65jnGvaV5LdvnddW1zHd+lBcbMqPaYI=
Subject key identifier:   16:0C:02:FF:42:34:35:5A:DF:0D:D1:A2:41:A9:21:85:8B:1C:1D:1C
Certificate issuer:       /CN=A919E9A8/serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF
Certificate serial:       2C
Authority key identifier: 93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/F8CCE69E4AC211F1A90B2018BE833773.roa
Signing time:             Wed 13 May 2026 05:26:25 +0000
ROA not before:           Wed 13 May 2026 05:26:25 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     154665
IP address blocks:        2402:5c20:1000::/48 maxlen: 48
                          2402:5c20:1001::/48 maxlen: 48
                          2402:5c20:1002::/48 maxlen: 48
                          2402:5c20:1003::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl
                          rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 09:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E9A8, serialNumber=93BB32AF94525C182E77F2D8D4E9697F0C55F3BF
        Validity
            Not Before: May 13 05:26:25 2026 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=6a040b81-b45f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:8e:12:92:1d:42:68:ec:26:11:51:17:2c:
                    22:1e:10:d1:13:50:1d:d8:b6:d3:5b:23:8c:bc:8c:
                    29:8c:60:56:69:60:44:e0:a9:9a:c1:b5:a4:cb:f7:
                    4d:6e:9e:ef:3c:cb:f0:95:d7:92:96:7a:f8:08:d5:
                    63:f8:1b:4c:42:cf:0e:96:a7:89:31:7d:b2:93:3e:
                    72:1b:98:88:03:e8:9b:a5:24:7b:a8:c3:58:44:bf:
                    db:8b:32:aa:a9:18:ea:bf:2b:f0:74:50:3f:4c:d3:
                    e5:a3:e3:a0:36:51:18:b2:6c:12:1a:b0:1c:d4:a2:
                    07:cd:d6:b3:07:22:c0:f8:e5:78:66:1b:ff:dc:1e:
                    f2:68:40:ea:75:b6:74:e6:ab:11:a7:d6:03:6a:64:
                    15:2a:01:37:c8:26:02:9b:47:d0:bb:69:5b:7e:13:
                    1c:4b:7d:2f:ca:0a:80:27:cb:6d:58:cd:1e:80:0e:
                    40:c0:5a:94:fa:43:64:e8:34:9b:cd:d7:0c:07:30:
                    12:f2:80:cc:49:ac:3a:60:fd:6d:0d:97:73:8a:a3:
                    7e:22:5f:b3:6c:2e:3e:d5:41:3c:a1:b2:06:b5:26:
                    70:49:5c:48:6e:ad:3b:d9:8a:86:8b:43:6f:03:6b:
                    84:60:e4:31:e4:5e:dd:e8:8d:7c:ef:5d:47:c1:8f:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0C:02:FF:42:34:35:5A:DF:0D:D1:A2:41:A9:21:85:8B:1C:1D:1C
            X509v3 Authority Key Identifier:
                keyid:93:BB:32:AF:94:52:5C:18:2E:77:F2:D8:D4:E9:69:7F:0C:55:F3:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/k7syr5RSXBgud_LY1OlpfwxV878.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k7syr5RSXBgud_LY1OlpfwxV878.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E9A8/DCC09066267011F18937980EAD833773/F8CCE69E4AC211F1A90B2018BE833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5c20:1000::/46

    Signature Algorithm: sha256WithRSAEncryption
         62:95:d6:2c:34:7a:df:a8:54:53:a2:6e:ef:d2:ab:db:8e:f7:
         a2:f5:13:71:44:e3:97:24:fc:e3:b2:8c:6a:2a:d9:4d:dc:ce:
         98:5d:19:de:dd:e8:bc:fb:76:ca:1d:d6:4b:57:00:61:bc:8c:
         fa:31:9d:79:1e:0b:bf:5e:11:d3:de:ca:6f:61:ea:f5:59:e1:
         6e:ef:86:f7:4f:8b:14:e1:1b:89:11:e0:35:52:34:39:ae:4f:
         d1:dd:d4:cc:41:c1:a0:cf:7b:0e:c3:fa:8a:e6:14:50:bc:5b:
         c6:3c:62:43:2a:61:f2:07:f8:8b:e8:c8:14:63:62:f6:16:b9:
         d8:d9:2c:a2:f9:ed:7d:dc:9d:fa:c6:73:10:64:d2:8c:ef:8b:
         6d:a0:00:a2:57:32:1f:22:10:28:7e:69:52:64:be:c4:6d:97:
         ca:22:0a:e2:4f:05:4e:83:d7:ae:64:8d:68:67:bb:91:01:dd:
         d1:20:37:17:aa:36:db:67:b9:3f:f3:a2:9a:c1:e3:e0:2e:70:
         45:da:cf:93:19:4b:fc:31:20:a1:cb:89:fd:0a:16:d4:34:b4:
         3c:e9:9d:7b:7e:5b:4e:b3:e5:58:dc:0c:66:06:e9:e3:43:99:
         28:fd:25:fc:e0:c3:08:e6:b9:71:70:c4:a8:3d:22:90:d8:ff:
         3c:95:d9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:37:08 2026 by rpki-client