Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/87C9E3FE3F6D11F0951BB23CC4F9AE02.roa
File:                     87C9E3FE3F6D11F0951BB23CC4F9AE02.roa (raw, json)
Hash identifier:          Ro1WYvBGHNUPbIY7IvUqpCvewp4A9RwhtkxBRjwWeZc=
Subject key identifier:   32:F9:FE:58:A3:56:38:F1:53:20:36:DB:A7:EC:11:19:1C:0F:0C:00
Certificate issuer:       /CN=A91104D1/serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
Certificate serial:       115E
Authority key identifier: 18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/87C9E3FE3F6D11F0951BB23CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:20:55 +0000
ROA not before:           Sat 20 Dec 2025 17:15:21 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     775
IP address blocks:        2001:fd8:29f8::/46 maxlen: 46
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl
                          rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4446 (0x115e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91104D1, serialNumber=18EF43278D46331E9AAF0FD772A73280D13AAA52
        Validity
            Not Before: Dec 20 17:15:21 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a47577-fcf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:4d:cd:ae:7d:13:6f:8a:32:5c:7b:ed:91:
                    1c:ab:53:37:bd:da:72:66:7a:8b:96:d1:3f:0e:5e:
                    f3:be:5a:f4:35:4b:4c:5b:7e:3f:1f:13:87:c9:1f:
                    4f:30:0f:11:30:59:d6:34:4c:f1:c6:28:3d:ae:88:
                    83:ff:90:ad:68:1b:8d:5d:9f:8a:a7:53:49:07:4c:
                    9d:7e:eb:4a:97:6c:f9:32:61:f3:ce:8f:f2:c3:4e:
                    1e:e1:37:85:e3:71:f8:26:e6:ee:46:bf:62:72:97:
                    9c:03:93:97:86:57:48:cd:ca:aa:cd:25:18:bd:27:
                    10:55:38:d0:72:15:d9:b8:a6:e7:ac:db:a0:0e:d8:
                    e6:d0:c8:62:db:09:08:56:3b:95:53:ed:04:0a:cd:
                    1b:11:eb:ad:91:d5:47:57:99:d1:c7:60:c9:33:55:
                    84:df:02:aa:0e:e7:de:a4:4f:a2:1a:28:fa:78:4a:
                    7e:c2:94:57:bf:b3:bd:09:61:ee:e1:95:bb:c0:dc:
                    57:c3:48:f5:88:42:25:43:6e:77:7f:b1:3f:b2:b8:
                    ab:da:0b:5a:ab:98:01:17:9c:c6:01:08:3e:ec:ff:
                    f6:de:c8:e5:ac:68:36:38:91:4f:cf:b3:18:0a:27:
                    13:af:ac:fa:84:89:c1:f8:7c:a4:82:d1:84:c8:fa:
                    47:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F9:FE:58:A3:56:38:F1:53:20:36:DB:A7:EC:11:19:1C:0F:0C:00
            X509v3 Authority Key Identifier:
                keyid:18:EF:43:27:8D:46:33:1E:9A:AF:0F:D7:72:A7:32:80:D1:3A:AA:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/GO9DJ41GMx6arw_XcqcygNE6qlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/GO9DJ41GMx6arw_XcqcygNE6qlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91104D1/EF0958EE445E11E992924D87C4F9AE02/87C9E3FE3F6D11F0951BB23CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:fd8:29f8::/46

    Signature Algorithm: sha256WithRSAEncryption
         bf:89:2f:ea:3e:02:a8:25:d9:a3:8e:54:4a:a0:2b:1f:24:5f:
         48:3a:2a:e5:09:f5:4b:75:d0:0a:74:99:bc:58:39:e6:f4:64:
         66:2b:5c:a6:04:dd:02:75:91:8a:4a:65:c4:43:18:39:21:70:
         9c:cb:0c:17:08:f9:bc:d9:2c:bc:f6:36:d7:16:1f:cd:4b:39:
         82:13:23:91:fe:18:fe:ba:13:dd:9a:18:71:a0:b5:93:eb:81:
         69:4f:71:af:6d:1f:59:c0:e4:2b:ca:7e:2e:24:5a:1e:7d:f0:
         12:c1:8c:70:6b:bd:bc:72:c9:5a:3e:e6:44:e1:95:a0:5d:ee:
         61:aa:0e:61:35:b7:3c:36:ab:17:98:94:2e:58:e0:ef:59:25:
         c3:c6:7a:67:3c:a1:49:48:ad:66:2e:d6:f5:2f:fa:52:6a:a0:
         fb:9b:bc:2a:38:8a:90:49:ae:ab:e0:12:f0:e1:38:d3:44:c6:
         0f:ff:29:08:ca:65:e0:c7:fe:36:eb:07:02:aa:79:f7:52:01:
         fe:f3:88:ce:e6:04:6f:a5:a7:8c:c2:0d:24:ae:71:ca:c5:70:
         ea:4a:e1:0a:5a:ab:38:b2:99:63:97:e8:a4:7a:ae:10:be:a7:
         6b:28:5f:ae:6c:c0:da:56:dc:ab:b7:c6:f7:bc:ca:99:51:14:
         d8:b2:8b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:14:51 2026 by rpki-client