Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/D2DF3ACCE25911EF9C741573C4F9AE02.roa
File:                     D2DF3ACCE25911EF9C741573C4F9AE02.roa (raw, json)
Hash identifier:          LgL8C346kitmGLxxSvYEO1PPcjidWZKJe96IfT1AJbc=
Subject key identifier:   49:FD:AC:94:75:53:D5:28:50:8F:B6:69:F7:91:B2:63:57:CE:07:8D
Certificate issuer:       /CN=A91EE03B/serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
Certificate serial:       02AE
Authority key identifier: B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/D2DF3ACCE25911EF9C741573C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:30:55 +0000
ROA not before:           Thu 31 Jul 2025 04:10:52 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     53835
IP address blocks:        2401:b60:e100::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:28:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EE03B, serialNumber=B9E60CF179F4EACBDB9492BA5F7CACF45239CCF4
        Validity
            Not Before: Jul 31 04:10:52 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a485df-77b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:51:72:b5:4c:bd:bb:05:fe:94:84:1c:91:
                    c0:72:8a:b6:d6:ef:b1:28:f6:3e:b0:c3:b3:63:c4:
                    6f:ef:71:bf:7a:94:6d:17:31:9a:42:f6:32:78:ed:
                    61:de:06:c8:c3:0a:eb:17:46:ca:5d:6c:3c:8b:c3:
                    17:d0:99:a1:6d:90:b9:f5:ff:18:bf:40:df:ac:c2:
                    d6:d3:30:2e:ba:e3:34:fa:96:f8:e4:02:84:f9:de:
                    aa:fd:a3:8d:1a:22:62:d5:e0:1c:46:03:5f:61:66:
                    93:a6:3a:81:eb:c6:d6:db:fb:68:ad:b8:52:fd:c4:
                    fe:40:4b:86:a8:7b:cf:9a:fa:ee:01:80:8a:8a:0a:
                    e8:ed:e5:49:ee:21:da:2c:eb:d2:0e:d9:96:5e:e1:
                    c7:67:03:16:f0:89:8b:50:06:28:3d:57:56:6b:42:
                    6c:dc:d1:af:7d:3e:45:c5:61:c0:6a:e4:18:18:ba:
                    3b:56:ed:98:bd:97:68:5a:88:4c:20:4a:7c:c8:52:
                    1e:03:71:c0:ef:e2:08:cf:78:86:e5:bd:95:7d:63:
                    ba:01:22:20:d3:dd:e0:27:f8:c0:f3:25:46:2a:b1:
                    9d:4f:a1:f9:76:9e:3a:a3:16:4e:e9:39:d7:55:df:
                    74:36:ca:9e:ed:0b:c0:64:29:2e:5e:5c:9e:59:b4:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:FD:AC:94:75:53:D5:28:50:8F:B6:69:F7:91:B2:63:57:CE:07:8D
            X509v3 Authority Key Identifier:
                keyid:B9:E6:0C:F1:79:F4:EA:CB:DB:94:92:BA:5F:7C:AC:F4:52:39:CC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/ueYM8Xn06svblJK6X3ys9FI5zPQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ueYM8Xn06svblJK6X3ys9FI5zPQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EE03B/AF9671660B6E11EEB29BB170C4F9AE02/D2DF3ACCE25911EF9C741573C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b60:e100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:53:d0:3f:50:4c:99:ff:ba:42:1a:97:ef:05:88:e2:77:f9:
         43:34:00:8b:ce:88:13:3b:8f:1d:b9:cd:a8:85:13:2d:49:42:
         bb:17:3b:52:e7:22:b7:95:15:b9:a0:9f:db:35:9b:cf:74:ff:
         c2:00:51:d7:bd:e2:97:b1:db:2b:32:82:5e:fb:d1:b8:2e:2a:
         a8:46:52:b7:15:89:90:d1:03:15:7d:68:6a:12:11:d0:36:ee:
         60:6a:5c:50:85:30:e9:1d:13:30:3c:da:52:12:be:04:a8:f7:
         ee:20:ef:0e:cd:f6:f6:d6:6a:4e:7f:8c:f9:5e:a4:b5:e7:1d:
         55:c7:a4:6c:5d:8e:52:d0:91:ce:f6:6b:33:3c:8a:54:71:a6:
         db:ea:c4:29:ba:90:48:d6:dc:4b:b6:7f:c3:0f:f5:e0:0e:53:
         82:7b:5c:47:a3:c0:92:fd:1f:15:18:09:eb:86:a0:35:a0:53:
         71:f0:c8:bb:f7:c7:4b:07:6e:9a:ce:61:81:97:6d:39:68:0c:
         61:3b:45:9f:8d:b1:56:cf:fe:3b:e4:83:4c:2c:5c:2f:d9:ea:
         10:4c:34:8a:cc:68:56:a1:31:27:40:53:9a:db:ac:d2:cc:ba:
         ab:b0:f6:04:ce:9e:e6:42:95:01:3f:5f:e4:08:a4:64:9e:54:
         30:89:48:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 08:01:34 2026 by rpki-client