Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/86131D8AEA5D11ED80641166C4F9AE02.roa
File:                     86131D8AEA5D11ED80641166C4F9AE02.roa (raw, json)
Hash identifier:          4zgXlz4lhWhr5EJp9fYE8JRkFNuqjMzkEZkN69QI13A=
Subject key identifier:   A1:02:E6:09:95:E1:79:F1:DC:AA:23:99:F8:49:B7:90:1B:31:F7:19
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       04D7
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/86131D8AEA5D11ED80641166C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 00:32:26 +0000
ROA not before:           Tue 03 Mar 2026 00:32:25 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     139321
IP address blocks:        2400:54a0:2050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 23:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: Mar  3 00:32:25 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a62c19-bd1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:a0:86:a1:0e:ef:c9:d2:38:c9:2f:62:70:
                    1f:bb:ed:c8:a9:2b:a9:e7:84:66:58:5f:52:1f:3c:
                    3d:eb:f0:81:0d:19:53:f9:00:2e:26:ed:41:3f:bb:
                    9c:97:ca:fa:d0:81:c6:f9:f8:1d:8f:54:40:2e:5d:
                    d8:a5:96:5b:41:22:a7:71:29:2f:e3:68:29:6e:ed:
                    de:51:6e:a3:a0:be:61:b4:cb:77:19:96:60:de:89:
                    dd:af:11:24:da:55:61:89:e9:09:6c:2d:5f:76:41:
                    c8:74:63:a2:b1:de:97:d8:b4:c5:17:4b:ca:ff:65:
                    fb:44:a9:d1:01:6d:d6:e0:46:cc:f6:a5:ce:a5:79:
                    a5:47:3a:d9:9b:03:8b:85:59:a3:5b:b8:c1:88:e1:
                    8c:2e:46:18:cd:68:f0:7a:e2:18:c4:63:72:a9:6c:
                    89:fc:3e:9c:95:42:45:6d:b4:20:10:cd:d1:ab:be:
                    76:54:19:79:57:4a:a7:60:eb:3f:5c:4e:fe:31:13:
                    3d:9f:d2:bd:fe:d2:86:60:51:47:ea:f3:41:76:31:
                    e4:5a:cd:ce:9c:85:7d:b3:b5:40:7d:81:33:bb:4b:
                    a9:c1:48:40:f8:f5:f3:b3:40:b9:4a:c2:6c:89:78:
                    08:c2:f0:dd:73:3a:98:e4:1b:16:cf:e2:9c:e5:95:
                    ae:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:02:E6:09:95:E1:79:F1:DC:AA:23:99:F8:49:B7:90:1B:31:F7:19
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/86131D8AEA5D11ED80641166C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:54a0:2050::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:ff:51:6d:5f:0b:3f:58:6a:31:08:46:e7:e9:d8:69:be:b0:
         43:f4:ad:c0:bd:c3:19:12:1f:86:80:99:56:31:3a:16:ba:59:
         2c:50:69:dd:04:af:e4:ac:05:36:6d:35:37:71:8b:43:c5:b7:
         bf:87:56:42:89:68:d0:b2:8e:e1:d2:d3:d0:05:cf:8c:92:36:
         2e:0b:c3:f2:11:bf:4f:0e:36:59:ab:3a:70:14:5e:19:96:8b:
         ed:36:e7:42:a9:80:5c:56:50:44:ff:40:50:8b:83:b2:7c:92:
         f6:68:56:5f:39:5d:b3:f5:d6:dc:ce:cb:0c:a0:78:00:86:8c:
         cd:70:c9:a8:10:d6:64:71:b4:07:96:46:1e:78:c0:d8:f0:6b:
         e8:78:3c:8d:b0:e1:3d:8b:a7:38:57:af:a7:05:3b:21:50:e8:
         23:7a:67:51:4c:cf:29:e4:86:8e:e4:cf:aa:63:2c:cc:3c:0e:
         0b:f5:66:e2:23:1b:2e:78:45:e0:58:e2:26:1c:0d:f1:5c:16:
         5a:bb:12:cc:e5:fb:3b:55:27:19:1a:2e:27:90:dd:6c:46:13:
         df:dc:b5:16:ed:ae:1b:4e:43:b1:c8:11:7f:7d:37:36:99:41:
         80:70:92:c0:8e:0d:58:fc:5d:30:b8:5a:0b:84:5f:c8:3f:8a:
         6f:66:cf:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 15:39:42 2026 by rpki-client