Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/305C2134666211EFB1D51134C4F9AE02.roa
File:                     305C2134666211EFB1D51134C4F9AE02.roa (raw, json)
Hash identifier:          NBiw0PfzwCZiFFdzuEah9Xt74JYMXPJbIVgjm8WBWcs=
Subject key identifier:   74:D6:12:C0:D7:1A:62:AB:1D:EA:76:7E:52:27:29:D9:0F:88:DD:FD
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       02A8
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/305C2134666211EFB1D51134C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:30:50 +0000
ROA not before:           Thu 31 Jul 2025 04:10:46 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     215050
IP address blocks:        2401:b60:fffd::/48 maxlen: 48
                          2401:b60:fffe::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 12 Mar 2026 02:14:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 680 (0x2a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Jul 31 04:10:46 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a485da-f550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:56:7c:ff:e7:64:d1:89:0c:85:af:72:14:a4:
                    56:db:b5:73:9f:cf:04:7b:25:df:f9:bf:1f:c2:93:
                    11:56:fb:88:fd:2a:02:ab:ba:63:b6:ce:42:f6:6f:
                    97:27:1b:8a:b1:a5:c8:0b:cb:34:66:9a:a1:d3:d6:
                    fb:ef:e9:f9:5a:ef:d8:23:a1:66:94:28:11:21:6d:
                    0e:2f:7a:66:bc:66:1b:06:93:97:aa:5d:66:e5:bc:
                    24:2c:1d:4a:53:91:d4:3a:45:9e:c5:a7:66:09:ff:
                    bc:74:47:cc:eb:7a:30:2c:c6:df:5a:6f:95:f0:3c:
                    dd:71:d8:32:f7:52:cc:ea:c2:ef:59:b1:e5:cd:b9:
                    f3:f7:ed:dd:53:56:fc:d7:91:eb:c9:81:f3:0b:46:
                    da:29:f8:e5:3f:88:89:d2:db:07:00:79:02:84:7a:
                    50:6b:80:ce:de:d8:1e:11:19:69:24:30:ed:15:5b:
                    32:16:a2:98:dc:79:cd:cf:7f:d0:58:00:2e:07:d2:
                    a3:f5:8a:f6:47:b4:f2:38:af:74:43:b7:94:6c:b0:
                    1b:1c:30:b0:49:e1:80:52:60:3a:31:19:a5:0d:14:
                    f8:55:ca:ff:1c:a9:f0:02:9b:78:65:ae:7e:cf:91:
                    f8:d2:e3:dc:7b:81:bf:26:f9:3b:ed:fc:2b:c5:51:
                    6e:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D6:12:C0:D7:1A:62:AB:1D:EA:76:7E:52:27:29:D9:0F:88:DD:FD
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/305C2134666211EFB1D51134C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b60:fffd::-2401:b60:fffe:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         54:c0:2f:80:ed:1c:b9:1e:d0:58:c2:92:5b:d7:c8:86:ef:f2:
         0e:1d:2a:39:3c:5f:8c:ed:28:b3:be:2e:a5:3e:7f:df:68:93:
         c6:f5:e8:8f:e2:0b:22:90:32:58:38:17:b9:0b:ed:d5:8f:a0:
         86:90:2e:ea:6c:cb:74:0e:47:9f:69:0c:e9:2b:9b:84:a5:09:
         83:c9:19:16:6d:9f:b8:15:d7:5a:6d:d1:8a:c0:2d:f8:a3:9b:
         ee:99:48:0e:52:68:72:61:20:24:24:b7:d5:11:12:44:d7:12:
         3c:dd:6a:e7:e5:8f:85:b6:71:f2:bd:14:5f:fb:d3:86:8e:5f:
         8a:d1:82:e0:4a:59:66:d5:df:6c:af:9c:e7:c8:eb:09:2e:13:
         2f:c4:5e:75:58:9b:5e:60:ac:0c:b5:b0:d0:47:11:3a:b5:1a:
         ec:84:14:63:9c:67:b0:95:cf:40:9e:50:97:04:b2:22:91:6f:
         8c:b4:c8:e9:16:4a:eb:63:68:5e:19:10:02:dd:34:55:2d:d6:
         ba:16:f3:86:ea:ec:2b:9a:12:22:49:12:e8:ce:d9:78:6f:46:
         3a:3b:12:fe:21:a7:9c:3e:9c:4b:28:cf:94:1d:bd:81:83:dc:
         d4:bf:91:c6:c3:c3:7a:b5:14:a0:85:3d:de:df:08:49:d3:6f:
         2e:a6:5b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 04:48:58 2026 by rpki-client