Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/C00D9A3C71EE11EFA7DD021EC4F9AE02.roa
File:                     C00D9A3C71EE11EFA7DD021EC4F9AE02.roa (raw, json)
Hash identifier:          5n/vT2aN9VzYjANmFIq1/DcSFVdlgCzkvZzjJSAeg2Q=
Subject key identifier:   9E:1D:75:08:46:99:81:84:03:0C:79:F1:CB:E4:3A:1D:E6:27:00:4B
Certificate issuer:       /CN=A91625DB/serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
Certificate serial:       01C7
Authority key identifier: 7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/C00D9A3C71EE11EFA7DD021EC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:23:30 +0000
ROA not before:           Tue 23 Dec 2025 03:23:42 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     152176
IP address blocks:        2001:df3:3d40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl
                          rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91625DB, serialNumber=7BE230153CFF9001642DBC9B24F85D0CC282364E
        Validity
            Not Before: Dec 23 03:23:42 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a43dd2-5a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9c:1c:62:32:49:27:c3:77:ac:73:30:ed:14:
                    8a:96:87:1c:f5:4e:97:31:3b:38:00:3a:b8:fd:c4:
                    08:7e:fe:3b:be:eb:dc:7a:13:c4:10:37:50:75:a8:
                    95:ce:3e:01:ca:af:59:d0:b9:e0:c8:18:b8:4c:de:
                    4e:aa:81:ab:55:f7:17:5f:70:39:6a:93:14:5c:d3:
                    48:0f:5f:74:1f:01:c6:ec:7d:96:d7:e2:76:06:5c:
                    25:35:db:f0:e0:e0:41:94:47:bf:69:9b:58:d9:17:
                    bd:b0:6d:f3:4a:e8:ba:d6:ba:e9:b3:e6:2a:1f:a8:
                    35:67:ad:be:f2:a9:a6:39:a6:ea:c1:99:a9:94:88:
                    bf:a9:58:2e:c3:3c:21:29:fa:8f:ae:f4:67:bc:c2:
                    de:40:31:b6:ba:44:76:35:20:28:f1:e0:b3:c3:2e:
                    ad:72:22:97:0d:3f:36:02:96:82:dc:e8:37:e9:98:
                    33:c7:8a:b0:00:67:98:33:d1:23:6c:cf:2f:84:77:
                    74:72:2c:01:ee:c6:e2:33:fb:36:9d:c1:f2:08:96:
                    bf:5a:02:76:84:8e:a8:39:c3:9f:35:82:b6:a4:60:
                    f8:cd:2a:80:f8:77:d5:4b:60:61:c1:dd:3d:76:07:
                    5d:9b:cf:43:7f:f9:31:9d:4f:09:bd:3f:9e:51:36:
                    80:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1D:75:08:46:99:81:84:03:0C:79:F1:CB:E4:3A:1D:E6:27:00:4B
            X509v3 Authority Key Identifier:
                keyid:7B:E2:30:15:3C:FF:90:01:64:2D:BC:9B:24:F8:5D:0C:C2:82:36:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/e-IwFTz_kAFkLbybJPhdDMKCNk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-IwFTz_kAFkLbybJPhdDMKCNk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91625DB/11939D10906911EEB23D7425C4F9AE02/C00D9A3C71EE11EFA7DD021EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:3d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:b0:2e:fb:c6:27:91:e1:d7:f4:09:98:1a:a6:97:f5:dd:c3:
         7a:a6:d7:8a:cd:2d:6b:f7:89:ac:b4:38:d9:a2:77:9e:88:8f:
         ae:77:6c:b2:81:6c:18:f3:76:a8:df:a0:4f:b8:37:a8:bf:0b:
         87:76:e8:7c:77:19:6a:b9:49:9b:d5:3b:c0:51:56:d6:5f:77:
         0b:97:74:db:f7:e1:c0:11:55:13:34:97:ec:ad:ce:ca:dd:f3:
         33:c7:72:06:1a:3c:fe:91:a2:6a:4e:70:55:c9:f0:d9:eb:fe:
         87:13:2d:27:38:93:8d:5b:f5:02:71:9b:e8:2f:2a:a2:e4:85:
         c6:f2:70:14:26:e2:6b:f2:91:d1:35:a1:f8:f6:df:b9:d2:2f:
         3c:ce:56:27:ac:0b:99:98:f4:7e:e1:83:e0:b3:4e:ed:9b:39:
         d7:9c:02:02:b7:6c:c8:31:52:09:c7:44:cc:0f:59:69:4f:fd:
         96:7d:ed:0a:79:64:fa:1d:c6:96:91:09:7a:44:71:85:36:4c:
         f3:c0:40:bc:e8:93:3f:ac:cf:f8:16:07:94:4c:82:17:ab:e1:
         02:63:c6:c3:c0:27:80:12:17:90:a6:9d:a0:c2:bb:ed:9f:7e:
         aa:4b:ec:88:7b:dc:f8:29:87:93:cc:b8:f3:a9:85:5f:fc:88:
         87:35:b5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:55:54 2026 by rpki-client