Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/2B46EF64951211F0A6C6AF5AC4F9AE02.roa
File:                     2B46EF64951211F0A6C6AF5AC4F9AE02.roa (raw, json)
Hash identifier:          c7Rbo+oNT+V1uajSdDgXAF7Hq3CeSaeGd4C51hV9pYE=
Subject key identifier:   E6:CA:33:5A:98:23:9F:1A:C6:DF:E9:BE:74:5C:29:85:22:A4:99:33
Certificate issuer:       /CN=A91F58C9/serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
Certificate serial:       045C
Authority key identifier: 19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/2B46EF64951211F0A6C6AF5AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:31:00 +0000
ROA not before:           Wed 31 Dec 2025 00:19:49 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     7594
IP address blocks:        2400:16e0:36::/48 maxlen: 48
                          2400:16e0:36:3000::64/128 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl
                          rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 19 Mar 2026 23:47:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1116 (0x45c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F58C9, serialNumber=192977DDAA095B4077EE0D76238463F1B6F40AEE
        Validity
            Not Before: Dec 31 00:19:49 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a477d4-0dea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:1e:de:68:71:9f:24:f5:d0:55:18:f2:b9:
                    98:42:38:37:4d:1a:c9:2c:39:63:e8:81:0e:82:34:
                    cd:59:70:6a:61:a8:5f:2f:d0:86:85:c5:6b:35:60:
                    ad:43:f1:7a:b6:e3:d5:a4:79:a1:8d:9a:61:27:ce:
                    1e:89:70:bd:d9:bf:4b:13:6a:a0:a1:0c:a0:09:b5:
                    07:53:cb:b3:08:98:9e:6e:88:1e:fe:aa:6d:b8:5e:
                    f9:9f:ee:40:f9:db:7d:30:83:15:74:c4:ab:62:18:
                    dc:db:05:e6:c7:d2:80:e8:57:77:af:4f:e9:bb:0b:
                    3e:5b:a1:ec:a2:d2:24:0b:6a:b5:5b:cc:42:24:6b:
                    19:61:52:b3:1c:55:a5:f2:37:31:ff:11:e1:8b:1f:
                    a8:f6:d3:a6:16:18:ec:2f:86:8a:fa:3c:52:51:95:
                    fe:29:d7:ec:7b:85:2f:d2:eb:15:46:7d:89:aa:70:
                    67:96:49:79:1d:98:07:09:8b:bd:7d:06:7e:6a:16:
                    50:a3:ec:a9:64:cd:85:52:f9:be:18:8d:60:51:06:
                    d7:db:03:dd:15:8e:44:34:ac:0a:cb:19:bc:d8:bf:
                    33:51:c9:d0:05:97:dc:04:37:c0:40:5a:64:6c:e8:
                    72:6e:39:cb:96:b6:42:50:56:ac:cd:67:f2:4d:f7:
                    29:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CA:33:5A:98:23:9F:1A:C6:DF:E9:BE:74:5C:29:85:22:A4:99:33
            X509v3 Authority Key Identifier:
                keyid:19:29:77:DD:AA:09:5B:40:77:EE:0D:76:23:84:63:F1:B6:F4:0A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/GSl33aoJW0B37g12I4Rj8bb0Cu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GSl33aoJW0B37g12I4Rj8bb0Cu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F58C9/40E0C0EE936C11ECBDC11A20C4F9AE02/2B46EF64951211F0A6C6AF5AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:16e0:36::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:b5:04:aa:f1:10:ee:40:a6:a2:8e:3e:8b:bd:58:38:82:3b:
         eb:4b:cd:47:a8:7f:6e:73:bf:a4:9f:20:fe:93:a5:a7:be:a3:
         d6:3b:da:11:29:83:ac:4b:9c:6c:1d:24:f3:ef:df:0d:32:41:
         39:4a:65:1b:6a:d1:2d:91:14:1b:b3:9b:06:c3:7c:a6:1a:77:
         7f:e2:84:dd:2d:c7:f4:7c:43:dc:4b:bd:5e:4f:88:b4:91:64:
         72:e1:6d:db:43:96:64:3d:9c:5d:2c:da:b2:42:6b:65:ea:be:
         f8:f9:39:10:a9:4b:fb:88:0e:05:98:3e:44:1a:10:cd:25:0e:
         7a:c7:10:7b:5e:36:4f:86:be:5f:74:11:79:a8:f9:38:db:fc:
         8c:df:3a:b9:e3:58:67:db:45:02:01:a5:91:07:0c:b3:ef:f8:
         c1:f7:e3:ca:56:6d:69:7f:06:41:fc:59:93:83:ad:af:d5:64:
         50:f4:44:8d:bf:1b:36:de:9f:3c:20:31:ef:03:da:dd:92:5c:
         a4:33:8d:7e:85:f0:23:e1:6a:6e:d3:af:ca:6e:39:1d:93:6f:
         03:d6:84:1c:b6:6f:ad:88:1c:65:5d:7c:43:ea:8d:c7:2e:dd:
         7b:35:cf:a7:7d:a9:a6:c8:6c:1c:56:72:5c:86:ce:c8:ee:85:
         18:36:31:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 07:11:13 2026 by rpki-client