Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/C1F74E665C1611F0B0B40A35C4F9AE02.roa
File:                     C1F74E665C1611F0B0B40A35C4F9AE02.roa (raw, json)
Hash identifier:          dYDuZ7M5yMWQRcBPSr0VcCiPxqS8dzHnJCBLX4BfiW4=
Subject key identifier:   14:AB:29:79:1E:7E:D9:66:AE:B4:6C:8D:16:05:B0:83:9E:D2:11:A5
Certificate issuer:       /CN=A91A29DA/serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
Certificate serial:       0177
Authority key identifier: 16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/C1F74E665C1611F0B0B40A35C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:06:39 +0000
ROA not before:           Tue 08 Jul 2025 16:15:26 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     152605
IP address blocks:        2402:7e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl
                          rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Mar 2026 03:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29DA, serialNumber=16D14AA5134D4112464D7992DBF1C452F7FA29A0
        Validity
            Not Before: Jul  8 16:15:26 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a5996f-ea0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:8c:91:24:65:04:a2:8d:88:14:b9:76:2f:ca:
                    31:6d:0c:1f:92:b8:89:ac:ab:6e:82:18:de:8c:68:
                    3e:16:5c:0b:13:92:8d:d5:96:88:05:b2:e6:ac:42:
                    92:f7:f9:09:78:da:cd:99:2a:38:da:34:2e:9d:79:
                    e8:70:a3:11:6e:76:78:0e:dd:72:f4:e6:46:ef:39:
                    51:b5:69:79:b5:16:24:64:72:c9:4b:d3:30:94:a7:
                    18:b6:84:f8:d4:ce:7e:1b:63:31:94:c1:6f:52:bd:
                    ac:73:b2:30:47:7b:62:f8:e2:94:b6:5e:cd:44:55:
                    80:f9:b7:ad:85:28:f7:ab:30:a5:4a:83:c7:9c:61:
                    8d:fa:ba:91:3d:91:39:5a:01:a9:e6:60:a2:1f:19:
                    83:fd:7d:73:5d:b5:9d:9b:81:5c:92:8a:ed:3a:7e:
                    10:af:16:ec:65:80:bb:3b:d0:3c:da:5e:0b:5e:5d:
                    f7:b7:7a:98:f3:59:f2:5b:80:75:30:fd:e9:6d:fc:
                    2c:34:c3:0d:b6:0a:95:89:1e:da:43:77:be:f1:4d:
                    fc:1c:15:47:fa:75:0e:f8:42:79:b2:d0:af:cc:53:
                    7b:6e:bf:a9:1e:b7:8b:45:0b:6c:59:b0:d5:13:c4:
                    dd:7b:6b:ea:26:78:ea:bd:ec:73:35:fb:68:fb:eb:
                    98:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:AB:29:79:1E:7E:D9:66:AE:B4:6C:8D:16:05:B0:83:9E:D2:11:A5
            X509v3 Authority Key Identifier:
                keyid:16:D1:4A:A5:13:4D:41:12:46:4D:79:92:DB:F1:C4:52:F7:FA:29:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/FtFKpRNNQRJGTXmS2_HEUvf6KaA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FtFKpRNNQRJGTXmS2_HEUvf6KaA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29DA/3E624BAEDA5411EE827CA57DC4F9AE02/C1F74E665C1611F0B0B40A35C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:7e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:8b:a6:f5:de:c0:aa:3d:54:83:70:4f:e1:28:82:8b:99:6a:
         06:c7:b8:13:1f:54:a3:81:de:a9:36:62:b7:f9:d9:58:8f:a1:
         07:cf:28:72:05:84:67:6e:74:d9:ad:7c:db:7b:5c:be:db:a3:
         06:d9:67:e2:99:d1:97:49:bc:67:4e:e6:7c:4b:31:d5:9d:d2:
         bf:c0:34:2a:eb:84:82:7c:58:88:18:00:74:ec:0f:b7:bf:ad:
         9b:4a:71:6e:46:6b:9a:94:60:ad:b0:a3:cd:32:9f:15:ec:af:
         f5:86:69:53:7c:26:26:f8:ab:38:1f:6e:62:91:87:22:4a:fa:
         a9:e4:fa:86:78:80:55:1a:5c:d4:cf:3e:7b:fe:19:e9:ce:5f:
         80:4e:ad:5a:49:21:1b:c2:56:fe:c8:cf:99:02:fe:e3:16:25:
         a2:77:43:10:fc:9d:e6:b4:87:e5:65:60:70:a7:d3:2f:15:fd:
         90:0a:5a:eb:c3:43:51:1f:89:34:ab:96:1f:d6:f8:b5:c9:9f:
         54:79:73:86:9a:8d:09:51:b6:46:26:ce:65:bb:fe:c3:df:2f:
         a4:4d:91:3d:90:62:9e:6d:47:3b:46:ab:f1:d9:4e:c3:82:53:
         be:3d:45:a1:45:31:6f:8f:88:f0:4c:69:d7:a5:d7:0f:b1:ac:
         99:5f:d7:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 06:20:14 2026 by rpki-client