Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7789A03E061D11F1B16329A6233D8C67.roa
File:                     7789A03E061D11F1B16329A6233D8C67.roa (raw, json)
Hash identifier:          EvtjyVjQsIEs5UfQV3mYriWVg5PDXdDdXnRkIdxSvf0=
Subject key identifier:   00:F7:E2:2E:20:F7:99:18:41:0A:08:F6:03:1E:2D:6F:0A:68:5F:BE
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6BB5
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7789A03E061D11F1B16329A6233D8C67.roa
Signing time:             Mon 02 Mar 2026 23:30:14 +0000
ROA not before:           Tue 10 Feb 2026 01:11:45 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150818
IP address blocks:        2400:d760::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27573 (0x6bb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Feb 10 01:11:45 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61d86-b8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c5:24:1d:b9:5b:d6:11:63:71:b1:c3:76:a2:
                    26:99:27:16:7a:f5:6b:17:f7:42:d5:df:45:db:6b:
                    5b:af:e8:a1:36:78:e6:bf:d1:ec:3e:29:49:2e:60:
                    76:00:c9:ac:c2:29:c8:d7:98:b0:90:47:c8:31:18:
                    3e:87:cb:53:0b:e5:0e:f8:8f:9f:45:07:df:ce:4d:
                    3d:c9:53:94:81:e4:09:83:38:5c:63:c1:11:a8:b6:
                    2f:6d:e7:80:67:55:c9:96:92:42:db:75:96:c2:14:
                    58:e4:77:48:ad:0e:d9:ac:3d:2b:40:64:06:b2:5a:
                    6e:98:4f:89:64:11:fb:32:6d:27:7d:93:f0:a5:22:
                    ba:9d:36:ec:93:06:82:ae:08:82:e0:8e:e5:62:fd:
                    ac:f5:5e:43:5c:6f:9f:3d:b2:80:f8:4d:fe:b6:96:
                    f4:48:9d:5e:b4:8c:36:9a:1d:4e:56:71:94:73:ee:
                    cc:74:3e:a6:aa:e9:b7:82:60:20:a8:e0:e3:36:eb:
                    c1:4e:c3:6b:8f:38:90:90:97:70:9d:ae:95:f0:42:
                    28:7d:33:8c:85:02:c0:16:1b:3d:28:70:c8:93:24:
                    b8:85:a5:be:6f:01:f5:35:01:27:5f:4d:ce:5e:ea:
                    9d:3a:94:72:66:14:d3:97:e8:f4:1e:27:54:77:e3:
                    a7:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F7:E2:2E:20:F7:99:18:41:0A:08:F6:03:1E:2D:6F:0A:68:5F:BE
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/7789A03E061D11F1B16329A6233D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d760::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:59:05:e5:2a:81:f4:19:d9:0c:67:1d:47:9e:02:a9:87:ab:
         cb:0c:de:d4:97:0a:b3:37:39:85:4d:d6:ed:88:89:60:63:09:
         d8:83:8e:f7:23:f6:03:fb:4f:eb:20:52:9d:b9:2f:90:47:13:
         c8:7c:f7:3f:ce:93:35:1b:27:34:cd:0f:06:c3:17:67:27:a0:
         a1:96:76:5a:1e:12:d0:fd:cc:23:85:3d:7d:58:1c:2f:47:2f:
         e2:85:f0:62:13:f9:45:a2:63:3e:86:20:6d:8e:80:a3:68:d7:
         83:dd:83:4a:38:6e:cc:b7:8d:82:c2:39:59:05:66:22:cd:62:
         5b:34:a8:98:c1:8d:1c:e2:fc:65:35:eb:0a:72:e1:e4:f4:39:
         4d:d4:21:cc:ae:87:0f:b0:3c:4b:1d:7e:af:4b:b7:c7:b4:c8:
         09:d1:bc:f4:fd:7c:00:6a:e8:e4:9a:bf:61:7a:5d:d9:99:f9:
         bd:72:28:02:12:83:80:57:23:db:da:d7:8d:34:b1:8f:4a:c0:
         5c:10:cd:7d:eb:03:bb:84:67:87:51:d1:14:98:dc:e6:2f:9f:
         ca:e6:72:19:ed:68:01:50:4d:09:35:60:1f:23:94:ce:0c:37:
         c5:ab:65:87:c4:8a:55:32:75:3e:f7:1f:45:fd:bf:02:b8:db:
         26:fe:bd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:42:15 2026 by rpki-client