Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/6E68E3C8A05811F0B1978E4CC4F9AE02.roa
File:                     6E68E3C8A05811F0B1978E4CC4F9AE02.roa (raw, json)
Hash identifier:          9K2yHY3cC0TpaFtr7jfkB9fOAstfaPSMynVcuXnbnP0=
Subject key identifier:   F3:A4:63:2C:8A:97:62:3A:85:6E:8A:3B:8E:C2:24:95:53:72:6C:C9
Certificate issuer:       /CN=A919F026/serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
Certificate serial:       DE
Authority key identifier: BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/6E68E3C8A05811F0B1978E4CC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:14:58 +0000
ROA not before:           Fri 03 Oct 2025 12:56:52 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     400342
IP address blocks:        2402:1da0:ff00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl
                          rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 06:13:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F026, serialNumber=BD79AC7640C955C435C8CF55C291F122B70E2F99
        Validity
            Not Before: Oct  3 12:56:52 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a59b62-5960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1b:81:28:e9:b1:70:b4:2f:19:d1:67:d8:33:
                    d2:86:46:dd:f0:b3:76:40:fc:b0:26:6d:b7:98:af:
                    50:39:2d:c5:1f:04:fd:cc:58:e0:e3:d1:48:cd:2a:
                    cd:9c:54:67:08:7b:e8:4f:2c:15:8a:13:66:bb:0e:
                    5d:de:91:f3:59:e4:88:39:8c:20:a2:f9:57:6b:f8:
                    fb:ad:dd:c6:9d:4f:4d:4a:d9:4d:5f:47:61:aa:f5:
                    cd:5d:ab:82:d4:ca:de:cd:9b:d5:99:a8:9e:c1:f4:
                    d7:2f:15:9e:a8:05:87:46:02:99:c7:88:79:e1:40:
                    29:2b:94:7e:2f:5c:d3:df:9d:39:d3:32:85:df:d2:
                    d0:4f:db:68:0d:8b:64:a5:fb:47:28:e2:db:bd:b1:
                    ee:72:c5:75:22:1c:38:f5:f4:ab:f0:af:e1:7e:56:
                    f0:b0:19:47:2c:d1:41:7c:c3:fc:7b:76:5d:6a:e0:
                    3d:a5:2a:c0:ac:c7:88:52:a7:fb:3a:b4:6f:c7:d3:
                    98:6f:64:89:11:7a:63:70:df:1d:e0:a6:45:09:6a:
                    33:07:c6:58:5a:65:cf:4a:8a:d1:aa:67:1c:67:e7:
                    b9:3a:78:f7:19:3d:8c:a8:68:03:2f:eb:bf:f3:60:
                    f8:13:13:d9:ae:33:ad:1c:3f:57:be:9b:08:ba:83:
                    43:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A4:63:2C:8A:97:62:3A:85:6E:8A:3B:8E:C2:24:95:53:72:6C:C9
            X509v3 Authority Key Identifier:
                keyid:BD:79:AC:76:40:C9:55:C4:35:C8:CF:55:C2:91:F1:22:B7:0E:2F:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vXmsdkDJVcQ1yM9VwpHxIrcOL5k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F026/3BAAAC44FB2811EF959FC774C4F9AE02/6E68E3C8A05811F0B1978E4CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:1da0:ff00::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:88:af:32:e9:d7:d4:43:b1:c9:69:83:e4:d1:ef:32:73:80:
         ee:bb:1a:4d:99:6a:d0:ff:8c:b4:df:ae:96:85:7f:7d:ee:f2:
         e3:19:d2:69:11:7a:be:71:11:0d:7c:7f:b9:c8:76:3e:0f:02:
         18:13:db:f8:90:68:09:27:e2:a3:9f:0c:6c:ea:56:1b:3e:71:
         93:61:68:89:d3:3a:99:0e:07:7a:b9:67:97:e0:97:6c:0b:c6:
         e5:59:63:58:73:05:3f:58:c7:52:e2:b8:2b:d7:f5:43:f4:82:
         23:5f:c0:63:f6:7e:a3:e6:ea:2d:39:51:f1:db:e6:b3:91:f1:
         b8:34:44:0e:da:49:9c:e2:15:73:b9:08:15:14:19:47:27:44:
         13:15:93:af:55:40:c2:a1:c4:b8:ba:ec:10:8d:ee:68:98:fa:
         66:f1:b1:17:d1:37:a8:9a:3e:53:b7:fa:bb:d9:c1:d9:29:32:
         3c:ba:8a:e8:bf:64:d3:14:f1:2d:c0:cc:ac:04:36:c9:a0:d6:
         12:38:36:58:77:ca:92:f9:5a:a2:d7:5b:da:8b:9e:72:1f:02:
         a1:6d:da:75:ee:53:e4:55:57:09:4e:4f:0c:03:b5:01:3c:a1:
         b9:93:e6:b4:bd:3e:ed:9c:d2:0d:fc:60:d7:d6:b2:fa:8c:3a:
         c8:05:5b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 16:12:05 2026 by rpki-client