Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/616435103F3E11EE81024074C4F9AE02.roa
File:                     616435103F3E11EE81024074C4F9AE02.roa (raw, json)
Hash identifier:          msBrQrJGaF4tHZK8O9DA/XN9/HkcmaZOVLwtg+AqPEM=
Subject key identifier:   FA:D4:C3:B4:A5:E5:06:24:89:49:D9:92:6B:02:39:95:E0:26:29:99
Certificate issuer:       /CN=A91FDAD4/serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
Certificate serial:       04D1
Authority key identifier: 54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/616435103F3E11EE81024074C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:30:29 +0000
ROA not before:           Thu 12 Feb 2026 23:20:13 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     9312
IP address blocks:        2400:8d60:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl
                          rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 23:42:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233 (0x4d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDAD4, serialNumber=5430A414AA05B6731DC2D64A70C619C669346A0E
        Validity
            Not Before: Feb 12 23:20:13 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a477b5-e109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1c:e5:7a:ea:3d:31:34:49:74:c6:00:27:8f:
                    57:f1:a4:b6:d9:68:1b:df:26:a7:e0:1e:55:b6:2b:
                    7e:03:d7:0d:83:5c:a5:12:ec:c8:c8:47:88:e0:05:
                    85:d3:52:62:dc:30:ff:bc:d1:46:99:ea:02:f8:fc:
                    2d:71:fb:c8:66:4c:5b:21:51:85:e8:78:d3:58:c6:
                    18:f2:c3:78:d3:91:a9:cd:78:df:23:e9:c8:6c:fd:
                    12:92:f0:51:03:42:da:ac:73:e5:a3:43:bd:1a:c7:
                    89:a9:d9:b3:e0:c1:a5:6e:4a:c4:d6:ef:14:41:f9:
                    1a:0e:eb:18:eb:d3:f9:4b:88:bf:e3:5e:0a:cb:cc:
                    89:d9:14:58:10:b3:be:1b:78:7b:82:3a:09:50:19:
                    3e:58:ed:54:5f:26:c1:d4:0f:00:0d:22:b2:a7:98:
                    9f:92:fa:76:06:2c:61:54:f5:6d:bb:b1:58:b1:1e:
                    58:18:22:5f:9f:4a:d8:7d:c1:11:75:72:68:77:73:
                    c8:82:05:8f:fc:41:19:ec:c4:9a:ef:cd:90:93:9a:
                    a3:7d:ca:22:71:23:d9:df:5e:50:7e:a8:1e:b8:6a:
                    1f:f3:dd:3d:b0:a7:26:0c:ad:3f:9b:a5:f8:bb:42:
                    69:10:51:ba:88:bb:68:7a:b4:08:2b:c1:67:55:1a:
                    40:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D4:C3:B4:A5:E5:06:24:89:49:D9:92:6B:02:39:95:E0:26:29:99
            X509v3 Authority Key Identifier:
                keyid:54:30:A4:14:AA:05:B6:73:1D:C2:D6:4A:70:C6:19:C6:69:34:6A:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/VDCkFKoFtnMdwtZKcMYZxmk0ag4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VDCkFKoFtnMdwtZKcMYZxmk0ag4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDAD4/C423183077B511ECA5BCE05FC4F9AE02/616435103F3E11EE81024074C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:8d60:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:29:b9:ff:d6:07:84:64:1c:20:10:9d:3c:8c:f7:1d:1a:9d:
         5c:ab:f2:0a:54:f2:f6:c9:3f:a7:55:6c:e3:f1:c8:ff:5c:8e:
         e2:5d:55:e6:47:2f:7b:0a:8f:69:cf:83:09:d2:76:6c:f5:1e:
         d8:40:01:56:6e:3f:d3:e5:dc:49:9c:59:84:f1:aa:3e:f9:1a:
         e5:1f:fa:22:a1:ca:87:fd:c0:da:a4:42:af:ee:68:68:5c:3b:
         08:07:d6:eb:bd:1a:f0:90:d1:28:a0:f5:7d:61:c1:fe:31:8c:
         bc:66:0c:7b:8e:58:07:0b:88:09:a7:3a:d4:f4:c1:34:01:e1:
         2b:c9:a9:c7:48:84:b9:09:98:58:91:d9:42:28:6d:a7:11:28:
         5a:8c:4b:37:c3:0d:e5:4a:53:1e:6e:89:c3:7b:c4:03:11:41:
         12:2b:f1:dc:0e:9e:26:68:ed:34:5b:ef:69:53:1c:72:65:f1:
         bc:3f:24:de:2a:ad:0b:66:26:89:b8:f6:64:e7:93:ed:bd:6b:
         72:1e:b7:db:1f:e9:48:80:96:a6:c1:05:e1:1a:c9:dd:a1:bc:
         cd:79:6b:4f:73:31:11:0a:25:6c:e2:48:64:de:c1:ad:81:0f:
         ac:aa:18:4f:c8:31:9e:08:32:40:81:9b:a5:b5:6a:1f:fc:6c:
         cc:d9:9a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 08:52:18 2026 by rpki-client