Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/BACC6D0A4F7411F0A8124536C4F9AE02.roa
File:                     BACC6D0A4F7411F0A8124536C4F9AE02.roa (raw, json)
Hash identifier:          /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=
Subject key identifier:   E0:63:85:0A:2B:39:93:B1:E2:EF:9B:21:F2:94:15:CB:51:59:9C:B1
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       0274
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/BACC6D0A4F7411F0A8124536C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:53:11 +0000
ROA not before:           Mon 03 Nov 2025 03:48:08 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     26445
IP address blocks:        2402:be0:fff0::/46 maxlen: 48
                          2402:be0:fffc::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Mar 2026 02:35:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 628 (0x274)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
        Validity
            Not Before: Nov  3 03:48:08 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a47d07-407d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0b:a4:88:58:89:c8:6b:48:d6:71:a1:94:7e:
                    80:dc:8f:7d:b8:f3:16:b2:11:f7:ef:eb:bc:50:a3:
                    82:9d:98:51:e5:ad:52:b5:50:38:f5:c1:83:9a:78:
                    c5:bd:16:9b:56:08:51:6b:65:31:2b:b8:06:f9:3b:
                    bb:ec:4d:f1:c9:97:70:05:3e:11:ee:8e:fa:82:70:
                    e8:54:f6:fb:ce:ab:a5:3e:d0:de:ba:3b:5d:ba:19:
                    d1:0d:11:36:44:10:ab:39:50:f5:84:5e:01:15:52:
                    39:96:2c:db:63:1a:2e:fc:c4:f4:52:0e:74:31:28:
                    41:74:18:7c:c2:d5:92:75:0e:28:0d:fa:e1:c4:3f:
                    13:41:0b:72:58:d1:f6:58:d9:ad:6b:83:5b:5f:e2:
                    41:17:bd:ef:af:90:33:0b:57:85:e3:d4:b0:79:69:
                    f3:62:8c:4b:9f:d5:cf:dc:7a:49:7c:5b:bf:ba:91:
                    8a:5f:6e:06:12:cf:b7:45:68:10:a7:c5:be:ea:91:
                    f0:df:b7:9d:ab:79:9e:76:90:d1:20:68:4c:86:88:
                    a7:1a:69:a2:65:2c:db:82:05:d0:a9:a5:cb:ba:8e:
                    29:6d:45:a0:60:12:85:06:90:21:c5:ff:59:c6:3a:
                    44:c0:70:36:62:2e:7d:59:56:c2:19:01:e4:d5:f0:
                    38:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:63:85:0A:2B:39:93:B1:E2:EF:9B:21:F2:94:15:CB:51:59:9C:B1
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/BACC6D0A4F7411F0A8124536C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:be0:fff0::/46
                  2402:be0:fffc::/46

    Signature Algorithm: sha256WithRSAEncryption
         96:7e:27:b5:b5:ed:2f:31:4b:e6:a6:b1:ea:5a:79:e6:ed:71:
         cf:ee:ee:5d:90:5b:4b:da:01:71:d1:77:be:7c:c4:07:09:fa:
         fa:8a:a6:11:ca:58:9f:b7:9e:54:40:4c:d9:f4:e5:8d:9c:f1:
         35:e2:49:ad:da:59:fa:bd:f8:18:fd:11:60:b7:84:1a:21:31:
         82:3b:22:c9:f2:0e:ee:19:f5:02:35:3f:b2:c9:85:15:a7:55:
         4e:b7:9f:60:02:58:12:2f:25:3a:6d:78:b2:f2:81:dd:0d:ad:
         b4:77:a7:7f:1a:ea:77:6e:96:d0:f1:6c:01:c8:31:1e:69:00:
         fb:07:2f:b0:11:c0:1a:86:9e:b3:3b:be:da:33:2e:36:49:73:
         9b:3a:cc:7f:5a:9a:c2:35:eb:61:9a:11:9d:9d:46:12:e8:d9:
         22:2b:ab:93:60:34:b9:6f:0f:57:19:7a:33:0d:da:6b:c9:cc:
         23:51:47:95:fd:47:5f:32:3d:1a:d6:6f:f6:fc:62:ac:5b:4e:
         d2:db:2b:af:a3:b6:a4:e6:ee:71:b7:51:9b:98:4f:be:3d:ce:
         81:6f:66:54:cb:65:5b:cb:fe:fd:a0:ab:34:bf:dd:d7:34:56:
         a8:ca:b9:2c:a6:9c:f5:f5:5a:2d:c7:28:66:31:1a:26:8c:88:
         4d:f8:ba:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 00:14:07 2026 by rpki-client