Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0C26620F6D911EEAAB0053FC4F9AE02.roa
File:                     F0C26620F6D911EEAAB0053FC4F9AE02.roa (raw, json)
Hash identifier:          ed9dx+ua0QCeGXyzDN9LnnCkIwOtw4tBYXdkc60lWTw=
Subject key identifier:   BB:31:71:8C:09:01:50:E5:DC:3C:DB:B3:13:E8:8A:E8:D0:0E:29:E6
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5E98
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0C26620F6D911EEAAB0053FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:18:54 +0000
ROA not before:           Thu 28 Aug 2025 14:55:54 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151917
IP address blocks:        2401:8f20::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24216 (0x5e98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:55:54 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60cce-7a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2e:33:a3:54:aa:4e:74:7c:51:ec:0b:50:ab:
                    46:0b:2f:4c:20:83:20:0e:88:ce:4e:0e:9b:e3:5f:
                    ab:cc:96:fa:e5:be:fe:b3:de:dc:59:c6:4e:34:82:
                    7c:50:e6:95:2a:b4:50:ce:69:94:45:32:93:bd:a2:
                    5d:b4:5a:5f:5e:af:eb:e8:52:91:1c:4b:13:75:be:
                    8c:01:e3:6f:70:08:aa:bb:1f:c3:8e:cc:a1:81:b9:
                    58:93:e5:56:86:87:1a:fb:f5:d1:68:e9:26:da:aa:
                    87:ec:ad:c7:33:3d:6c:02:6f:6f:be:a5:40:78:1d:
                    07:24:5f:d9:43:14:6e:aa:bd:6d:71:37:01:36:51:
                    41:9d:9a:fa:0d:10:cf:29:4a:b9:1d:a0:4d:d9:ea:
                    b8:62:8c:8e:48:18:bd:2b:e6:15:39:a8:0a:ac:12:
                    96:2c:03:18:f4:c0:44:04:ef:9c:1c:8e:f5:1c:df:
                    81:0c:6b:dc:39:a2:14:29:51:53:db:b2:b4:03:9c:
                    af:7b:3e:5b:ee:8e:00:42:0a:ce:bf:af:7e:b1:ff:
                    69:72:00:26:32:92:c2:57:1a:7c:2c:0e:e9:99:3f:
                    1a:cb:cf:be:5b:a8:97:af:ed:7d:b8:84:0f:fc:a2:
                    3e:b2:66:84:90:7d:de:41:6e:98:d1:4c:dc:aa:a6:
                    ba:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:31:71:8C:09:01:50:E5:DC:3C:DB:B3:13:E8:8A:E8:D0:0E:29:E6
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/F0C26620F6D911EEAAB0053FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:8f20::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:e4:5e:8a:7f:e9:0b:3f:a8:bf:c7:3f:fa:0e:ce:f9:d0:33:
         06:78:69:be:74:d3:1c:8d:59:fa:3e:b9:4d:5d:98:90:07:5e:
         49:c3:1e:a6:39:1c:4d:55:b1:fe:48:c1:1b:bd:de:c8:48:e4:
         09:94:12:c2:20:f6:f9:47:2f:f5:eb:a7:66:5b:ce:7e:d7:03:
         26:f4:d0:27:40:c1:ab:a0:25:c6:32:09:5b:8a:46:af:31:7b:
         41:42:a4:c6:e2:93:a7:61:ff:a9:fa:96:b9:6c:8d:2a:61:ec:
         e3:e6:89:d5:2f:0f:b0:56:f4:3b:04:87:cb:aa:60:4e:56:9e:
         32:b1:9d:41:ea:0b:e1:0f:8a:4e:a6:ac:8d:a7:43:15:2c:4e:
         09:92:d8:5a:8a:84:56:37:cf:76:82:5a:83:03:82:69:28:51:
         9f:f9:a4:2b:c4:8a:3a:f2:a4:c4:0f:bd:36:17:cb:40:fa:93:
         a6:c5:3b:d7:6b:3e:92:0d:8b:99:28:0e:b3:48:b9:f5:f1:be:
         c3:fa:f6:43:c2:c6:99:04:14:3d:0b:bd:29:ad:fe:63:08:2f:
         3d:88:06:a9:05:9e:aa:cd:ed:2a:28:3f:6a:fc:dc:6b:f8:15:
         55:c2:ba:15:8b:bb:e0:c9:d8:6c:88:93:fd:c0:f1:41:4b:7d:
         51:23:1e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:43:48 2026 by rpki-client