Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/07E3560E707B11F08CCE202CC4F9AE02.roa
File:                     07E3560E707B11F08CCE202CC4F9AE02.roa (raw, json)
Hash identifier:          klXNMXNqSdM++sZAtm0XufM5YCvlgc2bscmlbXAfnhE=
Subject key identifier:   20:8C:9D:A5:3C:54:27:33:DB:6E:13:D8:8E:0D:68:17:5E:D6:29:47
Certificate issuer:       /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial:       DC
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/07E3560E707B11F08CCE202CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:14:56 +0000
ROA not before:           Tue 05 Aug 2025 07:57:09 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     55201
IP address blocks:        2402:1da0::/48 maxlen: 48
                          2402:1da0:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
                          rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 06:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
        Validity
            Not Before: Aug  5 07:57:09 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a59b60-a40c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c3:dd:11:d9:bf:45:d3:65:b0:82:f4:35:a7:
                    94:3b:04:8e:3c:31:6a:60:84:7e:09:65:6d:23:06:
                    e6:e3:a7:50:56:d3:f9:54:fc:c0:9c:f5:6c:11:a5:
                    f3:f1:0e:4f:26:4e:01:57:02:f2:51:ee:79:cc:b8:
                    80:06:6c:10:52:8c:16:93:3b:28:f2:70:82:df:24:
                    9c:06:70:df:cf:3b:92:15:b0:5c:6a:9e:37:17:7c:
                    e3:f6:d5:ff:5a:93:7a:a3:8f:8f:40:27:7c:99:24:
                    f1:63:3b:fe:e3:a7:ee:1b:6f:c6:49:cd:88:b4:6f:
                    27:9f:64:86:70:85:74:93:4f:69:8c:70:fd:71:40:
                    60:64:66:64:70:fc:d9:81:90:55:8f:26:a4:ed:fb:
                    56:e3:e4:26:43:4b:5c:6b:2c:01:f6:39:91:6e:62:
                    15:93:18:a6:8a:73:b2:03:34:78:51:d2:8c:8a:16:
                    1e:91:93:32:b5:0b:38:32:09:16:22:d4:08:65:16:
                    05:bd:12:00:a9:74:36:37:e2:62:b0:68:3f:9d:88:
                    73:72:ed:08:e9:4f:10:28:2a:17:05:6c:db:4d:fa:
                    4d:e7:c5:4a:d2:38:4b:e7:15:f6:98:e6:8e:4e:d0:
                    17:db:f9:8d:c7:a8:99:0e:f9:03:8d:09:22:34:28:
                    e7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8C:9D:A5:3C:54:27:33:DB:6E:13:D8:8E:0D:68:17:5E:D6:29:47
            X509v3 Authority Key Identifier:
                keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/07E3560E707B11F08CCE202CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1da0::/47

    Signature Algorithm: sha256WithRSAEncryption
         19:f9:29:bb:f6:4b:15:37:04:9d:ce:b2:60:d1:ab:9f:ba:f8:
         ca:de:a8:c3:fa:16:96:4a:4e:3f:a6:fc:19:3c:0a:e2:d3:27:
         42:8b:f3:73:78:45:5a:a5:34:2a:e2:16:ee:dd:d0:85:f2:12:
         29:d5:1b:48:e3:d8:19:68:7e:74:1e:6e:b4:a7:a0:ff:59:8b:
         89:5d:ee:e7:00:ba:9c:be:5a:66:d0:89:0c:20:ae:c0:9f:ae:
         b2:d3:2f:cb:75:60:d6:09:43:e3:22:aa:a4:f0:15:da:fa:58:
         74:59:c8:49:aa:eb:ed:94:e2:4e:f4:53:dd:72:47:fe:41:67:
         a8:ea:62:08:4a:12:a6:55:15:9e:0b:48:9f:da:86:75:3a:b1:
         4a:21:9d:30:e0:38:28:28:b7:c5:2a:cf:ef:ca:f5:64:ff:42:
         41:cb:7e:cb:b1:78:f8:66:2c:12:3c:b0:93:00:e9:38:37:77:
         37:62:52:bf:6f:d8:11:88:04:3a:6d:ab:7b:a7:c2:70:fd:b4:
         65:a5:44:91:b6:28:ce:e2:cf:34:1d:8b:82:91:49:83:92:d9:
         30:5f:ff:c6:36:c1:49:ce:8a:6b:54:9c:82:a4:a7:e7:29:13:
         02:b0:48:a9:7b:a4:90:a9:71:ab:d0:79:fd:09:59:9c:dd:e2:
         0b:a4:44:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:27:01 2026 by rpki-client