Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/2E248E2CAD8511F08469DF53C4F9AE02.roa
File:                     2E248E2CAD8511F08469DF53C4F9AE02.roa (raw, json)
Hash identifier:          WTkCXMD4s9+pTdAVOc0KZG2ehtUBwPP4uPitEquEFeQ=
Subject key identifier:   3B:52:D2:A8:69:6A:B8:09:9D:20:93:37:FF:C5:B6:B8:00:7A:F9:68
Certificate issuer:       /CN=A91EABCB/serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
Certificate serial:       0725
Authority key identifier: 16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/2E248E2CAD8511F08469DF53C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:29:11 +0000
ROA not before:           Mon 02 Mar 2026 22:29:11 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     55201
IP address blocks:        2400:bac0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl
                          rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 21:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1829 (0x725)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EABCB, serialNumber=16B98842D861AEFE803040200C9AAA89560F2BCA
        Validity
            Not Before: Mar  2 22:29:11 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a60f36-7e05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:84:3e:29:6a:8d:1f:e8:0d:79:08:1c:cf:cc:
                    1c:53:48:d4:15:49:c9:74:2a:cd:bb:d2:7b:70:a9:
                    ea:15:7a:f7:ab:53:86:38:a8:95:a0:f6:75:7e:02:
                    74:8a:bc:48:df:cc:fd:72:7e:15:ee:50:49:1f:1c:
                    44:d9:0c:98:b4:75:d6:80:81:d7:f9:de:5d:00:63:
                    a2:fa:4a:7b:3e:88:8e:84:ab:33:25:b4:66:b1:73:
                    9a:77:3d:c8:4f:87:08:83:45:9f:bf:ff:fe:22:a2:
                    67:fc:75:ad:44:ac:c3:96:79:b6:86:a4:6c:6c:9d:
                    87:c2:ed:1c:1f:1f:41:02:4c:e3:69:f9:e7:ec:95:
                    62:10:f4:69:56:a5:a0:5d:22:61:26:ac:7a:f2:b6:
                    c2:d8:4a:b5:c7:78:6e:90:c6:ec:69:57:fd:ab:69:
                    94:5b:3c:31:ad:c4:78:a8:5a:13:17:0a:8b:01:aa:
                    2b:ae:7d:c8:3c:f4:23:9e:7b:02:12:4d:3d:ff:bf:
                    30:cd:90:4c:fd:53:5f:5e:32:8a:9f:03:29:57:d2:
                    82:6a:f9:e5:ed:2b:d2:b0:19:99:36:be:fd:6c:ae:
                    1b:ae:05:b1:7f:3f:12:27:58:ac:77:05:6f:4a:82:
                    56:19:ba:f6:97:56:5d:37:5e:1f:34:a1:4d:13:df:
                    4a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:52:D2:A8:69:6A:B8:09:9D:20:93:37:FF:C5:B6:B8:00:7A:F9:68
            X509v3 Authority Key Identifier:
                keyid:16:B9:88:42:D8:61:AE:FE:80:30:40:20:0C:9A:AA:89:56:0F:2B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/FrmIQthhrv6AMEAgDJqqiVYPK8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FrmIQthhrv6AMEAgDJqqiVYPK8o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EABCB/342FFF187A8611EB97AE5160C4F9AE02/2E248E2CAD8511F08469DF53C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:bac0::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:8b:37:52:d8:9d:b4:a6:c2:62:b2:32:d3:6c:2f:ef:b9:d2:
         a5:89:f0:ed:ce:c2:b1:e3:1b:bb:55:1d:f0:2e:28:bf:dd:dd:
         04:11:b8:3e:47:6f:e6:5a:ee:7d:a7:3a:54:7b:69:47:b1:7c:
         98:73:30:79:52:26:ec:ac:a1:87:5d:e6:59:fd:a8:cd:66:62:
         73:9a:10:23:5e:a0:a5:6d:e6:33:2b:1b:34:2d:f6:d2:71:41:
         a5:b4:f2:a3:96:87:53:e0:39:7f:ed:79:90:cf:71:94:2e:e9:
         54:fd:44:f1:53:da:19:21:a6:3d:1b:e0:8e:c1:f5:dc:2c:43:
         17:e2:b0:dc:9f:4d:33:01:03:8c:4d:c8:b0:1f:14:21:2b:0b:
         27:b6:1b:0e:24:40:2e:97:5b:81:3b:db:8b:43:75:49:51:5d:
         c8:b0:e0:ad:1a:7b:bf:88:be:52:44:a2:c8:f2:df:60:74:11:
         d8:33:b6:7b:38:1f:18:78:9b:e7:57:e4:a3:bb:7c:6c:11:8e:
         b6:f8:9e:29:67:66:34:3a:0a:1b:97:4a:70:4e:97:bb:8d:90:
         6a:db:82:b2:9b:36:e5:3c:37:33:1c:79:00:a8:2b:6c:5d:c8:
         b5:ff:de:9e:7e:51:6e:ba:fc:4c:0a:7f:89:ca:63:98:7e:d4:
         84:76:75:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 17:26:50 2026 by rpki-client