Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/5FF0F14A5BE911F0BFE7BE3EC4F9AE02.roa
File:                     5FF0F14A5BE911F0BFE7BE3EC4F9AE02.roa (raw, json)
Hash identifier:          9J/jo+jCWsn913Xpfh7HW3oepiyUV90KXeyhRpM6XPc=
Subject key identifier:   B4:67:E8:0C:F2:83:00:04:1A:AB:5C:D0:42:91:55:6C:EA:02:B1:B3
Certificate issuer:       /CN=A91187C1/serialNumber=155AD6281E0550CB4FDD61D2F11769C2684A7001
Certificate serial:       82
Authority key identifier: 15:5A:D6:28:1E:05:50:CB:4F:DD:61:D2:F1:17:69:C2:68:4A:70:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/5FF0F14A5BE911F0BFE7BE3EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:09:35 +0000
ROA not before:           Tue 08 Jul 2025 10:50:34 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154005
IP address blocks:        2001:df5:ccc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl
                          rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187C1, serialNumber=155AD6281E0550CB4FDD61D2F11769C2684A7001
        Validity
            Not Before: Jul  8 10:50:34 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3e62e-c33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:54:d7:a3:f8:00:e5:59:ed:6a:2a:fc:34:1c:
                    a6:60:3f:8f:a9:ef:8f:27:15:40:ad:99:d9:7e:17:
                    4e:78:a9:0f:d8:06:5f:60:dd:54:45:34:52:5b:ec:
                    c6:f4:b2:cd:aa:32:09:f7:6f:d7:e5:b0:7d:a4:91:
                    48:d8:c1:d5:b3:ca:f4:f7:1b:a9:db:de:f4:4f:84:
                    71:df:b8:29:af:5b:a9:d7:86:0a:1a:76:b2:5f:70:
                    87:7e:24:e2:04:a8:70:77:e6:06:ed:2e:05:5a:1a:
                    08:c3:55:44:b9:d7:0c:35:24:a2:f2:b4:0e:ef:d4:
                    5c:d8:58:f4:a8:b8:0e:4e:43:bd:40:7e:9b:ad:64:
                    62:e8:68:2e:e5:94:f6:97:17:08:91:80:18:8c:02:
                    15:4b:fb:f2:7c:e2:21:af:3a:20:f1:80:ce:b1:1a:
                    a0:e0:cd:68:8c:03:4a:34:2d:8e:d5:8c:27:2e:bb:
                    55:e2:6a:12:be:d4:e6:b1:6c:38:d4:83:00:2b:fc:
                    97:ba:d5:b0:28:d3:c4:0e:6b:ec:1a:5a:44:18:66:
                    98:2d:43:72:99:5c:10:14:b3:58:55:9f:04:cc:08:
                    cf:cb:ba:4d:cb:f0:86:33:6c:e8:c0:df:c9:fc:ce:
                    01:3d:b1:37:32:be:a6:93:87:4a:62:09:49:93:9e:
                    1f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:67:E8:0C:F2:83:00:04:1A:AB:5C:D0:42:91:55:6C:EA:02:B1:B3
            X509v3 Authority Key Identifier:
                keyid:15:5A:D6:28:1E:05:50:CB:4F:DD:61:D2:F1:17:69:C2:68:4A:70:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/FVrWKB4FUMtP3WHS8RdpwmhKcAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FVrWKB4FUMtP3WHS8RdpwmhKcAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187C1/2F69233C570A11F0B538CF65C4F9AE02/5FF0F14A5BE911F0BFE7BE3EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:ccc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:1a:8f:24:10:d4:0a:17:b7:d8:a4:c4:0f:89:2f:9b:fd:ab:
         90:40:39:f7:55:af:24:a4:1d:b6:ef:1f:a9:4f:15:ee:6f:3f:
         42:ef:04:27:e7:ce:71:0b:b2:51:8f:73:e4:d6:f3:f9:e9:e3:
         5f:33:c4:95:5d:73:6e:d4:90:31:8c:a8:a4:16:11:94:59:b5:
         52:d2:ca:b4:de:ef:3f:d3:40:96:c2:d6:e5:9b:da:86:c0:c4:
         32:f2:4d:18:41:82:66:08:97:b1:77:bc:10:5d:9e:1f:d2:a3:
         5a:a5:32:7e:b1:86:2a:41:9a:4a:a7:6b:7d:67:08:a8:d3:28:
         96:16:38:7f:b9:b4:1a:9f:15:71:34:d3:ba:41:2f:20:2e:e9:
         9d:37:c9:c2:08:65:a4:e4:cd:63:af:a0:23:d5:79:f3:98:da:
         9a:60:4d:5d:c1:68:7d:d7:f1:93:a4:43:b1:fa:89:65:8c:1e:
         b4:93:46:6e:c0:69:9c:31:2d:dd:db:69:35:58:6d:ae:4e:66:
         d7:81:94:2b:e2:87:2f:98:67:de:cb:49:83:a6:79:4d:8f:b9:
         36:3f:00:c0:81:51:5b:6a:61:ef:96:7b:56:9c:e2:ae:e1:96:
         6c:61:a0:c3:1a:4b:cb:66:58:76:df:e8:75:bb:8c:cb:50:dc:
         69:29:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:04:20 2026 by rpki-client