Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa
File:                     443241A0321B11EA83044473C4F9AE02.roa (raw, json)
Hash identifier:          eY1w/uSuvZhy6UuNvgp5Bv6SKcJvF5lGQVhVkfevuMY=
Subject key identifier:   4C:3B:F4:50:1C:61:CC:FB:1C:F4:3F:5D:35:5F:A4:85:6F:DF:1E:94
Certificate issuer:       /CN=A91771E3/serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
Certificate serial:       13DA
Authority key identifier: 15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa
Signing time:             Wed 28 Jan 2026 17:14:23 +0000
ROA not before:           Wed 28 Jan 2026 17:14:23 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     24474
IP address blocks:        2001:dd8:24::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl
                          rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 16:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5082 (0x13da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91771E3, serialNumber=1596C4BBE732DA85CB83E8A770873EA3413701A5
        Validity
            Not Before: Jan 28 17:14:23 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=697a43ef-6eb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:56:31:b7:3c:e1:f6:9f:a2:5b:16:24:13:8d:
                    62:c0:b0:d5:fc:8d:4f:13:c9:c1:09:33:d5:76:7b:
                    de:36:ef:54:ea:2a:ec:9e:4a:3a:95:d5:74:cf:2d:
                    74:92:84:1c:58:9b:3c:07:ce:4f:76:85:4c:cc:87:
                    eb:ae:63:5a:13:61:2b:e8:12:17:82:86:e4:3c:f1:
                    25:f6:75:92:af:20:7f:3e:49:ca:7c:cf:26:47:02:
                    92:55:e4:6f:78:6e:ae:3d:f4:45:49:f2:d1:8c:de:
                    bf:91:04:bb:57:a8:d7:20:99:0b:34:70:21:e5:e6:
                    e8:c8:22:29:fb:df:ec:52:65:e1:59:b3:b3:39:9f:
                    e6:fc:ff:74:e7:ac:e8:98:64:50:a6:e6:41:34:36:
                    f2:64:9b:9d:57:09:0b:59:67:62:ac:95:90:ab:7c:
                    22:49:ee:1b:08:67:06:2f:fd:5c:0c:53:8c:84:52:
                    18:0a:3b:ca:83:ec:72:41:7a:0b:87:60:c0:87:2f:
                    f5:a9:b4:11:bd:df:10:35:6c:8d:8d:a1:b0:b6:48:
                    90:48:f8:67:37:b9:3b:fb:36:b9:bb:b0:8e:6e:3d:
                    ef:81:22:fa:e1:aa:dd:e1:bc:8c:75:78:ee:f2:76:
                    fb:04:49:5c:e3:01:e6:82:04:95:9e:fc:88:0d:e8:
                    4d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3B:F4:50:1C:61:CC:FB:1C:F4:3F:5D:35:5F:A4:85:6F:DF:1E:94
            X509v3 Authority Key Identifier:
                keyid:15:96:C4:BB:E7:32:DA:85:CB:83:E8:A7:70:87:3E:A3:41:37:01:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/FZbEu-cy2oXLg-incIc-o0E3AaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FZbEu-cy2oXLg-incIc-o0E3AaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91771E3/9383E646AD6511E8ACBD0D6AC4F9AE02/443241A0321B11EA83044473C4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:dd8:24::/47

    Signature Algorithm: sha256WithRSAEncryption
         55:a2:ec:f6:be:b6:de:46:9e:07:b0:b7:75:7a:00:c5:dd:7c:
         21:1e:54:76:c4:c4:f2:1a:8b:28:86:d9:29:80:bf:a3:c3:40:
         13:a2:88:34:97:ab:93:a6:ff:bd:ef:b8:7a:c9:d3:71:02:9b:
         30:f6:7c:71:5d:52:9a:f8:43:35:34:c9:c4:e7:15:5f:ee:d9:
         08:17:9c:77:a4:94:91:b1:55:cc:69:61:6e:78:7c:d8:cd:75:
         a6:51:4d:a1:18:59:44:d8:b0:8c:e5:dc:0a:e1:ce:16:45:1a:
         9e:d3:63:80:49:e8:83:bc:ba:f7:e6:34:bc:ac:ad:b8:cb:15:
         26:9a:59:b6:24:4b:99:cb:8f:e0:5c:0f:95:fc:be:06:1e:58:
         3b:b0:6f:5c:c5:a6:01:00:a0:2e:47:83:16:07:49:11:0c:b7:
         4e:c4:5f:4d:e9:c7:98:f4:2d:2f:e5:e7:ab:63:79:ef:36:4d:
         40:64:e6:a9:de:ac:13:e8:87:a0:ad:be:b1:25:66:39:45:2f:
         29:0e:9d:e5:63:1a:95:b1:50:9b:9d:20:fc:df:77:b1:a1:6e:
         9c:6e:28:6c:22:78:d2:5e:6a:bf:86:81:43:06:b6:ba:12:dc:
         4c:10:e7:9e:da:cb:d4:32:f0:38:57:a4:b0:68:38:d3:d5:53:
         7f:1f:34:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 01:39:54 2026 by rpki-client