Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/F179A39E0F0011F1AA61A6530E3D8C67.roa
File:                     F179A39E0F0011F1AA61A6530E3D8C67.roa (raw, json)
Hash identifier:          z5YNw9oqROxQNw3poTnbGicNOXVgbGeLROsEVEcC0k8=
Subject key identifier:   B4:7E:4A:89:19:8F:04:63:59:73:3E:DF:1F:4B:E3:ED:74:2A:96:CF
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       04DA
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/F179A39E0F0011F1AA61A6530E3D8C67.roa
Signing time:             Tue 03 Mar 2026 00:32:32 +0000
ROA not before:           Tue 03 Mar 2026 00:32:32 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     149573
IP address blocks:        2400:54a0:20b0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 10 Mar 2026 00:32:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1242 (0x4da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: Mar  3 00:32:32 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a62c20-8c20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:4f:b6:16:94:cf:ec:63:ef:4c:fd:f0:56:99:
                    29:25:77:b4:44:4f:6a:7c:f7:3e:1d:47:1a:92:c4:
                    5a:b2:62:91:a1:d0:cf:4c:7f:0d:e1:70:2e:52:8b:
                    19:80:22:e5:e8:3c:65:57:7f:32:05:9d:7e:41:f5:
                    83:3f:f8:53:79:34:a7:63:ae:af:0b:40:ec:88:3d:
                    70:33:e8:0f:b3:bd:18:ab:17:ea:cf:84:38:f9:c4:
                    e2:bf:66:26:3c:51:38:d5:67:14:de:8b:56:28:77:
                    1b:38:f3:d4:55:ef:7d:f9:6b:8a:45:6d:a8:fc:d5:
                    2f:3e:0c:27:c6:d1:3a:96:ac:3a:31:92:6e:f5:b3:
                    89:3a:a1:87:d5:ca:89:ac:ce:5f:88:d6:a4:f8:95:
                    41:4d:fb:3b:25:1a:0c:b5:45:94:8f:e7:27:41:bc:
                    79:35:0d:23:89:05:ab:43:77:eb:44:84:7b:ac:d9:
                    ff:8f:6a:59:7c:3e:b5:68:b0:91:e7:dd:7a:6b:b0:
                    a2:a5:a8:06:2e:90:97:7f:6a:a1:93:fc:cd:43:00:
                    83:23:f4:ba:16:1b:07:53:28:fa:dc:9c:92:dd:53:
                    40:6c:7c:fb:7b:8e:4a:3f:57:2f:f4:07:71:e7:50:
                    5d:31:ff:1f:de:b0:f3:7f:e1:38:e4:9e:c4:74:78:
                    ed:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7E:4A:89:19:8F:04:63:59:73:3E:DF:1F:4B:E3:ED:74:2A:96:CF
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/F179A39E0F0011F1AA61A6530E3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:54a0:20b0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:b3:50:b8:88:c4:e7:4f:3f:cc:45:e2:74:e4:c3:69:70:63:
         90:a5:07:c2:b9:0e:9c:44:d4:b0:5a:2b:e5:ba:57:91:1c:90:
         30:4e:af:4d:f1:f5:30:e6:d7:b2:b2:57:04:98:22:0e:6e:d4:
         ad:6f:9e:6f:8c:02:3f:17:98:35:c4:51:b9:de:28:32:00:e4:
         44:c3:41:ab:de:52:d1:67:58:ae:23:fd:89:11:f8:75:36:4d:
         6b:d4:3c:5b:fc:0b:24:6a:c2:78:d7:ab:42:f6:ba:4c:f6:f5:
         76:c9:1e:94:49:b7:22:24:b1:62:10:25:bc:1a:38:e4:c1:4e:
         3d:ba:2f:76:f6:50:af:fb:5d:08:38:e2:50:e1:f2:8d:bd:af:
         bb:62:3e:ef:f4:4e:65:1e:08:9f:17:e7:32:85:1d:8b:19:a3:
         78:43:d1:93:6e:16:22:5a:1a:98:3b:53:fc:6a:56:2d:05:69:
         20:d8:07:47:a0:97:b0:da:5e:8d:60:27:bd:77:27:43:20:eb:
         9c:ed:3a:32:0e:87:ec:93:8b:0b:85:41:16:96:11:92:47:f4:
         2a:27:5b:7b:06:78:b5:eb:c4:b9:1a:2f:39:a0:6d:d1:a7:bd:
         ac:63:83:ff:bf:bf:95:4b:69:70:16:4e:08:85:9e:6e:cf:8c:
         05:ab:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 19:30:46 2026 by rpki-client