Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/42C6F6041E6F11EF898C1E38C4F9AE02.roa
File:                     42C6F6041E6F11EF898C1E38C4F9AE02.roa (raw, json)
Hash identifier:          3Wk8dYppZ9PYDGlWy8Aq6MWTQPzxpyguIWGe4yXyIMI=
Subject key identifier:   CF:D2:D1:69:F3:DA:25:95:81:3D:6D:17:8F:37:26:BB:BF:01:AC:99
Certificate issuer:       /CN=A91C31B7/serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
Certificate serial:       0155
Authority key identifier: A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/42C6F6041E6F11EF898C1E38C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:58:40 +0000
ROA not before:           Thu 21 Aug 2025 05:43:55 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152886
IP address blocks:        2001:df3:dbc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl
                          rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 04:45:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C31B7, serialNumber=A81D155CA404AE4145781AF05EB53A1219E2E065
        Validity
            Not Before: Aug 21 05:43:55 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a58980-4f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:57:50:aa:f4:5a:e9:c3:86:42:f2:2d:ff:78:
                    ce:d7:a9:c9:8c:64:da:54:c3:ed:07:ce:90:d7:2b:
                    df:06:3c:7b:28:7b:ec:98:47:a6:d7:25:20:47:39:
                    12:86:17:ea:74:5a:63:f5:4a:c4:26:68:30:2a:65:
                    95:1e:90:a4:86:12:2e:34:8a:5c:64:61:b2:69:7f:
                    99:7b:99:73:17:18:c8:06:bb:5f:1d:f0:f5:e9:4f:
                    b9:23:7d:7d:d5:26:f2:b9:6f:e4:e2:46:ab:9a:17:
                    92:54:ac:40:7b:24:da:09:80:25:2a:be:cc:89:61:
                    22:85:6c:1e:66:8a:92:02:48:51:c6:46:4a:8f:66:
                    3d:35:ab:13:4f:e3:3c:0f:05:e3:a1:f0:2e:02:11:
                    e7:12:47:54:09:5a:45:a2:2e:a3:fb:0b:ef:e6:88:
                    9b:2a:58:9c:33:8a:dc:24:5a:d7:f5:59:e4:0c:1f:
                    52:f6:e0:61:ad:46:8c:0b:63:7e:b7:2f:0f:2c:22:
                    80:b2:69:89:f2:a2:4b:80:43:0c:26:9a:c9:6d:fe:
                    eb:a2:a7:31:f9:10:e1:ad:aa:8f:42:8a:33:84:de:
                    08:86:1d:15:0d:5d:22:4a:0c:9f:ad:63:33:30:13:
                    d4:8a:fc:4c:b1:8c:fb:42:7a:1c:55:a8:13:12:5f:
                    d3:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:D2:D1:69:F3:DA:25:95:81:3D:6D:17:8F:37:26:BB:BF:01:AC:99
            X509v3 Authority Key Identifier:
                keyid:A8:1D:15:5C:A4:04:AE:41:45:78:1A:F0:5E:B5:3A:12:19:E2:E0:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/qB0VXKQErkFFeBrwXrU6Ehni4GU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qB0VXKQErkFFeBrwXrU6Ehni4GU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/FCC334CC1E6B11EFAC0E914EC4F9AE02/42C6F6041E6F11EF898C1E38C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:dbc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         4d:e1:d7:ff:4a:66:84:0e:80:b9:a0:cc:6e:60:a9:a1:c6:6c:
         be:ce:2c:83:e7:40:2b:9e:e8:86:ce:7a:af:87:c4:10:1e:f0:
         82:b3:e6:1f:bc:ba:aa:13:9c:fa:40:b2:30:00:d0:b6:00:43:
         ce:6d:b4:7e:dd:c7:3d:12:0b:de:b3:0b:a3:6f:ed:9e:68:f9:
         2b:dd:c7:92:19:50:b2:de:f4:1e:f1:46:10:43:02:b8:94:45:
         69:a4:82:1a:e3:ed:7d:0c:29:02:1d:81:75:32:31:77:66:16:
         42:fc:86:7c:c3:0f:bb:c2:2b:36:df:a4:72:3b:63:2d:f9:a9:
         4e:d3:e8:ce:0f:33:2a:2e:bf:f3:fd:61:b4:2f:9b:54:65:72:
         24:43:75:ed:b0:c5:d8:76:a7:88:ec:9a:9f:78:58:d8:f9:c2:
         09:82:fd:e8:06:41:e3:48:68:2a:2e:15:74:43:c2:9f:42:d6:
         8e:6a:6b:e3:bd:7d:04:9a:08:7c:90:15:ad:b3:0a:f8:7f:c3:
         37:7f:d3:bb:ae:fb:e4:78:d0:6e:76:28:d1:c6:e4:6f:ce:d9:
         80:0e:a7:c0:b4:3e:d4:5e:56:71:eb:1d:36:a0:ad:6f:21:41:
         73:1d:57:37:a2:8c:dc:f9:08:96:3b:ad:e5:65:dd:a7:aa:51:
         83:c3:34:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 13:14:45 2026 by rpki-client