Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/27A1A5A2174911EC896AD61BC4F9AE02.roa
File:                     27A1A5A2174911EC896AD61BC4F9AE02.roa (raw, json)
Hash identifier:          zUix48EdQq0BIeEP+F00ihYlfB76GvYk5qHGU11xzgo=
Subject key identifier:   7D:AD:1D:67:53:D2:6C:7C:9F:50:61:E3:87:D6:E5:5A:E6:F9:87:E2
Certificate issuer:       /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
Certificate serial:       0691
Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/27A1A5A2174911EC896AD61BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:37:12 +0000
ROA not before:           Sun 03 Aug 2025 00:06:27 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     17719
IP address blocks:        2405:9000:80::/48 maxlen: 48
                          2405:9000:90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl
                          rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB
        Validity
            Not Before: Aug  3 00:06:27 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48758-57df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c6:9d:83:5d:a4:d3:34:fd:83:48:3b:fd:59:
                    88:63:72:03:e1:9f:a3:90:1b:ca:ed:7d:f5:0f:1f:
                    c4:25:f0:c0:a5:3e:2c:0a:c7:0d:c8:ae:e6:43:62:
                    2c:de:2d:f2:80:c2:08:37:df:4c:40:19:d0:38:a6:
                    f2:2a:fc:22:36:2e:d1:c5:55:16:72:72:a1:b4:99:
                    19:ac:30:c2:06:9e:46:ad:43:42:62:0a:76:7c:f6:
                    79:78:ae:f2:57:d3:fe:55:c9:bd:5f:ca:17:1a:4e:
                    38:23:6c:b2:b3:5e:d0:ea:8c:31:ac:44:f9:ac:56:
                    26:96:74:1a:00:46:ed:5c:2f:b8:85:31:e5:9f:22:
                    a5:6d:9a:11:61:1a:75:89:ac:6a:9a:fb:4c:db:78:
                    1a:70:20:c3:7b:c8:56:60:30:92:fc:bc:40:2c:72:
                    78:c3:50:a6:73:74:10:a6:6d:96:87:57:3a:84:4e:
                    51:9e:b4:64:5b:aa:06:77:bf:1d:d1:79:fe:6f:ab:
                    41:66:5b:cb:ff:b4:db:34:d2:b3:4f:25:0d:a8:23:
                    88:c2:a9:54:a9:03:11:ad:93:0e:54:bd:c9:c5:16:
                    52:3d:f0:1f:1b:2b:37:9e:39:6a:ef:6d:95:69:5a:
                    71:b2:04:ed:59:5e:e4:15:90:8c:5b:6d:73:08:c3:
                    49:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:AD:1D:67:53:D2:6C:7C:9F:50:61:E3:87:D6:E5:5A:E6:F9:87:E2
            X509v3 Authority Key Identifier:
                keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/27A1A5A2174911EC896AD61BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:9000:80::/48
                  2405:9000:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:df:87:2a:92:d9:61:30:2f:ac:a2:97:e8:d5:c3:43:99:13:
         f6:7d:d6:76:5c:25:72:cf:f1:35:50:98:eb:84:2c:33:1d:ca:
         d9:1e:03:cd:b4:11:d1:4d:8b:01:27:af:87:10:88:f7:58:59:
         a0:29:f0:66:76:90:ea:53:16:c9:31:ec:48:b7:19:d5:28:c4:
         32:7d:10:36:4e:af:49:f0:c2:d7:6c:fd:95:e2:5d:1c:cc:12:
         d2:17:99:54:bf:88:24:f3:11:82:78:64:e8:af:b2:ce:0c:d9:
         8f:ae:9e:fb:67:18:a5:00:eb:3a:f4:19:76:6d:77:1a:24:c2:
         67:f2:48:2e:47:c9:e7:6f:eb:53:4c:a0:05:c6:5c:e9:a0:68:
         8a:31:0e:ce:5f:7f:fa:1c:9d:38:a7:2e:40:1a:89:fd:f4:a2:
         ff:10:52:0d:c7:3a:43:14:01:0a:ac:ec:24:d6:c7:7a:ca:67:
         9b:09:5f:a6:4a:a0:17:5b:4a:56:c8:09:dd:ef:aa:3f:31:a3:
         ea:5a:e9:0e:c9:79:82:15:73:dc:b1:a8:68:f1:3e:80:6a:d7:
         5f:2e:e8:08:dc:f2:65:ff:a8:e3:d0:68:76:48:42:7a:a9:c7:
         dd:18:56:8a:ae:15:a5:6d:04:ec:a9:e6:b1:74:3f:66:4f:86:
         3c:11:a9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:36:47 2026 by rpki-client