Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/077331D0564511F09ED8993AC4F9AE02.roa
File:                     077331D0564511F09ED8993AC4F9AE02.roa (raw, json)
Hash identifier:          /u1670IvK6H8KEgihUXET5kmQXxA4scZrjWQTU2eOVQ=
Subject key identifier:   90:D2:59:C8:30:3E:8A:D5:88:5C:E3:72:44:9A:60:8D:EC:00:DB:C4
Certificate issuer:       /CN=A91B13FE/serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78
Certificate serial:       82
Authority key identifier: AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/077331D0564511F09ED8993AC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:34:44 +0000
ROA not before:           Tue 01 Jul 2025 06:31:33 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154006
IP address blocks:        2001:df5:cd40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl
                          rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 07:17:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13FE, serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78
        Validity
            Not Before: Jul  1 06:31:33 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a591f4-a353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e9:ab:7d:a9:cd:e2:c2:57:4d:2f:af:44:9e:
                    39:cb:0e:3a:b8:96:c5:95:96:be:f2:74:93:1b:55:
                    97:18:ec:ca:20:78:85:ed:b0:2b:56:6e:4c:17:fc:
                    85:7c:6a:42:5b:ed:46:61:28:93:51:28:b1:3e:b1:
                    97:d3:d8:f3:2b:bd:25:80:ca:cf:0b:65:7f:81:d1:
                    c7:66:5b:86:a5:03:af:64:45:bf:9b:41:e4:ee:f2:
                    bd:32:ea:a4:fc:b4:54:55:45:b5:b7:02:a5:fb:d5:
                    8f:eb:cd:7e:9f:17:b0:99:05:3a:98:02:42:f0:a6:
                    d3:03:01:14:ce:5c:c1:61:59:af:35:70:3c:ff:44:
                    96:a4:bd:17:ff:90:37:51:a7:c6:58:3f:19:03:a0:
                    09:d5:80:76:fa:b5:a5:4c:24:9e:da:0b:38:b3:9c:
                    db:ab:f4:36:96:97:03:27:c9:e4:a0:75:fd:b3:e2:
                    35:f9:18:56:a1:a0:91:1e:be:ac:be:7d:40:7e:11:
                    b4:27:0a:0e:1a:f6:b1:11:32:fb:c6:a2:ed:49:07:
                    2f:a2:5e:7f:31:16:e6:a8:d3:3b:67:d8:d1:5e:7a:
                    01:d5:97:e6:f6:b2:39:59:16:64:d8:7f:37:ca:c2:
                    8d:86:e9:67:9e:46:46:45:ce:6c:5f:15:05:6b:92:
                    85:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:D2:59:C8:30:3E:8A:D5:88:5C:E3:72:44:9A:60:8D:EC:00:DB:C4
            X509v3 Authority Key Identifier:
                keyid:AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/077331D0564511F09ED8993AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:cd40::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:d6:b6:e6:01:25:63:2d:29:4f:22:5e:58:dd:b3:04:46:1f:
         e6:ba:82:f0:1a:75:67:17:cc:d9:f3:90:0c:3b:9f:ac:8e:77:
         72:86:28:22:c0:93:28:5d:b4:51:3d:37:0f:6b:f8:87:99:bd:
         13:e3:cf:67:5c:f0:28:7b:78:e3:d1:b2:7d:1a:86:9b:65:cc:
         41:04:a9:49:16:8e:ee:69:56:c2:fd:18:03:30:a8:c6:74:7c:
         3d:4e:82:17:d8:9d:76:d6:4b:47:0e:b7:a7:0a:04:86:cc:62:
         e3:28:d4:a2:b8:62:26:4f:40:79:26:24:38:22:5b:ef:04:de:
         3d:9f:65:88:54:5c:d5:2e:25:1f:bb:f7:89:c6:96:7c:a9:53:
         27:af:29:a6:06:dd:80:f6:b0:e0:b6:4d:20:8c:32:43:0b:7a:
         9a:07:c3:08:12:57:ff:f7:b7:65:e6:98:fa:ce:d7:a4:1e:86:
         bb:f7:8f:21:b5:06:97:f7:cd:a3:32:52:d9:b9:50:23:65:4c:
         17:b7:33:5e:ed:82:37:81:b8:f1:97:41:2c:a8:b2:8a:2f:27:
         a3:b3:54:21:8e:28:2b:be:8a:09:2b:95:58:65:a0:d4:a8:6f:
         67:4d:f2:e1:0a:16:76:69:6a:7a:cb:7e:05:fe:db:8a:56:9a:
         b6:2c:4a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:15:59 2026 by rpki-client