Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82EC4B80EB4D11EE811A330FC4F9AE02.roa
File:                     82EC4B80EB4D11EE811A330FC4F9AE02.roa (raw, json)
Hash identifier:          0m5wD+itAU5V7ee82xSkTkCN/fzWynUFUlO3DwADLHc=
Subject key identifier:   F4:35:6E:BE:AC:26:91:FE:AF:89:77:9D:A5:F2:76:8F:91:CE:2D:70
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E92
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82EC4B80EB4D11EE811A330FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:18:48 +0000
ROA not before:           Thu 28 Aug 2025 14:55:50 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151884
IP address blocks:        2001:df3:4cc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24210 (0x5e92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:50 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60cc8-b585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:46:31:f6:0c:b0:0f:f5:85:34:86:e3:78:96:
                    9a:bf:09:3f:53:7b:59:af:96:f4:8d:b2:15:40:7a:
                    c3:75:d1:fb:dc:01:c9:bc:2b:7a:cb:30:ad:b3:d4:
                    6a:12:0d:ac:bf:2c:79:55:80:82:3d:85:aa:24:ea:
                    41:03:5c:77:32:cc:e0:6e:7f:85:7e:f8:ac:a1:0a:
                    ed:8e:ca:86:c1:da:bd:1f:5d:4a:1e:29:fa:5c:56:
                    c0:83:fd:d9:77:84:4f:5a:32:27:e2:c5:cf:d0:db:
                    c8:dc:2c:fa:ee:a3:de:16:d9:8f:e2:a7:25:07:c4:
                    2f:78:c4:64:e3:e5:d4:e4:85:ce:d9:29:58:fa:d2:
                    d8:19:fd:f3:9a:4e:e2:35:35:48:db:42:d9:8e:0b:
                    77:78:2c:17:b5:90:c1:e1:56:9f:e7:dc:d2:8d:9b:
                    d8:8c:91:ce:21:f5:11:a0:78:6a:8c:b1:f5:ea:8d:
                    38:78:87:24:db:f1:da:76:ff:9a:4e:15:2f:6a:c6:
                    59:e9:e0:6a:e7:a6:b0:75:a8:88:87:60:26:91:df:
                    ac:d2:f2:27:0b:6d:5f:b4:63:39:d8:c4:be:e6:90:
                    ac:6f:8a:6c:6b:70:11:53:28:27:fb:8c:99:83:8a:
                    e2:e8:c5:39:13:13:d1:b6:49:47:f6:d7:62:41:20:
                    85:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:35:6E:BE:AC:26:91:FE:AF:89:77:9D:A5:F2:76:8F:91:CE:2D:70
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/82EC4B80EB4D11EE811A330FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:4cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:74:05:97:db:57:87:d6:da:6e:92:68:5f:c0:f3:ab:dc:82:
         a9:a2:6e:ed:cf:3b:13:bf:be:0f:63:ee:84:f1:d8:b5:5c:12:
         b2:77:81:f6:ee:af:48:42:83:d0:d3:42:e7:b7:37:ed:ef:b5:
         7b:9d:60:40:d7:77:df:f9:a3:a0:7b:97:88:6b:d2:e6:46:85:
         36:b4:4f:5e:db:4b:3f:29:90:de:05:0e:dd:47:3b:2b:39:ab:
         23:74:80:a9:76:e1:df:05:e3:53:36:0f:df:f6:a7:6a:8a:a5:
         1c:09:bf:48:3c:b5:41:9e:25:07:0a:2b:15:9c:e4:c3:b8:21:
         8c:1c:5b:14:fb:ba:bf:8d:80:d6:9c:e8:45:db:93:b2:7e:bb:
         14:67:f9:14:98:91:2b:12:c6:31:2c:0a:c0:22:04:11:ad:32:
         00:a7:70:51:18:5f:71:d8:13:9b:8b:8e:f7:7d:18:95:61:6b:
         75:f8:1e:5a:45:9d:ae:2e:84:c6:a1:0b:d9:0a:a9:df:dd:77:
         bb:4e:66:9a:2b:81:79:86:a1:cf:12:6c:89:0c:b2:60:c8:a6:
         23:e5:29:61:6c:82:ee:c1:d1:66:c2:05:fa:0d:18:82:d9:61:
         4a:6e:a2:bf:48:d5:86:8e:b0:f9:f5:44:26:de:f6:bb:26:2a:
         4d:c0:f5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:58 2026 by rpki-client