Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7345D30EA3F711F0B7D2CC77C4F9AE02.roa
File:                     7345D30EA3F711F0B7D2CC77C4F9AE02.roa (raw, json)
Hash identifier:          SHhEbqwmJhfq4dAkUEVhyRIDrjpX0ZY4uIjcf1dAOXA=
Subject key identifier:   30:A9:D4:97:A1:28:96:E4:9B:6C:E9:24:C0:6E:33:BA:F3:8A:BF:00
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6BD7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7345D30EA3F711F0B7D2CC77C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:31:03 +0000
ROA not before:           Wed 08 Oct 2025 03:32:43 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153023
IP address blocks:        2001:df4:7d40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27607 (0x6bd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  8 03:32:43 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61db6-97f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2b:9f:c9:9e:e8:8c:e5:bc:ef:14:3b:43:ee:
                    b3:a6:77:69:4f:cb:3f:36:34:2f:ea:79:92:aa:72:
                    05:ab:99:4f:fb:f7:ac:26:72:9c:0f:ca:a6:63:e2:
                    92:ff:26:7c:ba:c7:8f:41:6f:9a:34:0a:33:96:d0:
                    b6:38:3b:ff:a6:e5:fa:08:12:6f:90:3b:f7:56:f7:
                    0b:a4:b3:32:c6:38:19:c9:dd:86:f1:19:e1:98:b0:
                    a2:12:56:7a:f4:b1:d0:67:45:85:8f:65:9e:20:4d:
                    1c:9b:35:1e:7c:14:3a:30:4d:fe:cf:5b:cf:4e:ea:
                    75:49:e8:b2:41:7a:c5:f0:fa:1a:f1:f0:83:7a:2c:
                    d9:0b:12:31:c7:82:68:1f:a3:f1:a3:98:48:6e:4b:
                    a6:2a:fb:19:f1:52:0d:a9:62:c0:ba:61:f0:bb:b4:
                    28:bd:de:29:3c:13:6a:a2:22:54:50:65:fb:c3:5b:
                    da:21:d4:41:30:b3:d8:64:b6:69:5e:31:f8:03:1a:
                    b3:90:c4:46:68:46:69:27:a3:0f:9d:98:98:61:84:
                    58:3f:e6:22:be:54:92:b7:6f:1d:86:b4:b7:5f:85:
                    e9:50:5d:70:23:38:8b:d2:32:4d:11:47:bf:e8:e4:
                    5b:0c:bc:e5:e4:a9:d1:a2:a0:79:66:e7:89:47:6a:
                    77:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:A9:D4:97:A1:28:96:E4:9B:6C:E9:24:C0:6E:33:BA:F3:8A:BF:00
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7345D30EA3F711F0B7D2CC77C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:7d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:f7:f1:ef:c2:a5:ee:2c:15:c7:1e:7b:0e:c3:82:4e:29:e6:
         b7:ab:ef:a7:f9:c1:89:88:18:a9:fd:72:63:21:84:87:59:fc:
         cf:5c:72:e5:2a:c0:e8:4b:ac:c9:5d:4d:73:39:8c:c2:14:8b:
         53:57:12:d1:6d:63:6a:b2:26:36:fe:71:3a:cd:91:0d:6f:34:
         06:6c:f6:b4:1f:0b:33:da:fe:f2:c3:5f:f6:2a:19:f5:fb:29:
         df:38:94:b2:c1:87:6a:56:9f:bc:3f:9c:03:61:40:2c:ac:86:
         95:af:2d:3f:dc:f1:e3:42:f7:de:74:5f:62:0b:5f:ff:59:1a:
         8a:3d:d6:db:04:a5:0c:63:c0:03:4e:1e:6b:a3:e1:26:10:de:
         df:b5:b5:af:25:2e:96:7c:95:e4:3b:69:1f:37:e0:45:33:47:
         79:3b:8b:aa:dd:5d:24:87:f2:e3:42:6f:42:59:b5:19:b5:1e:
         aa:f9:58:7b:87:14:fa:72:a2:d8:d9:0c:e9:79:30:a7:72:fa:
         4d:e9:5e:8d:df:75:ba:d3:a7:ba:ba:5d:e5:0c:0b:7e:e1:6e:
         e8:61:2e:0c:ac:35:a7:12:b9:1b:e6:2d:6b:7f:75:f6:10:47:
         c6:87:03:5b:63:5a:4a:4d:8a:17:f8:2d:c3:36:9f:0c:76:29:
         28:e2:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:46:26 2026 by rpki-client