Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/164F6E2079BF11EAB3ADD60FC4F9AE02.roa
File:                     164F6E2079BF11EAB3ADD60FC4F9AE02.roa (raw, json)
Hash identifier:          Ww0TTboh4t7XJh5yPzaTmih1SxJhA11Efd1I0MEuPiw=
Subject key identifier:   89:A9:67:6C:A2:F9:86:6E:6E:BA:4A:07:AB:39:C4:1C:64:E8:1D:E6
Certificate issuer:       /CN=A916BDA4/serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
Certificate serial:       19AC
Authority key identifier: 04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/164F6E2079BF11EAB3ADD60FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 21:25:41 +0000
ROA not before:           Fri 30 May 2025 17:39:57 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     18809
IP address blocks:        2400:cb00:90::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl
                          rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:18:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6572 (0x19ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916BDA4, serialNumber=04E6C9249EE348DCF764DF0B9A40D3E854066444
        Validity
            Not Before: May 30 17:39:57 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a4aed5-d3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:cd:50:34:bf:17:8f:ca:49:70:ef:e2:d9:
                    8c:97:2d:f3:23:87:22:bb:66:aa:ca:f0:cb:0f:3c:
                    a7:e2:e6:be:ab:3f:7b:09:f2:77:22:8a:a5:64:ca:
                    3d:04:c0:2d:f8:c7:3b:0b:10:d7:bf:a3:9c:59:8d:
                    ec:f4:83:c6:c5:50:6e:a7:fc:29:21:3a:3d:e3:da:
                    d5:e6:11:b2:1e:4e:33:13:18:be:7b:77:90:0e:5c:
                    3d:7c:ff:86:cc:f7:ea:e8:31:50:0f:14:2d:5f:7f:
                    1f:90:ea:db:17:22:34:5a:df:06:93:31:e4:e5:d4:
                    9b:e3:9f:4d:4e:3a:ad:aa:61:7d:12:2c:58:ae:75:
                    74:2c:ab:53:be:21:58:7e:1a:da:8b:73:13:8e:71:
                    d2:be:eb:0e:b9:bf:49:af:de:0c:dd:ff:d8:f3:bd:
                    25:e8:b1:e9:f3:80:e4:3b:37:3a:d7:61:50:a0:fc:
                    d6:01:dd:1d:df:e2:21:c5:0e:e6:66:9f:07:f9:db:
                    b8:ca:3a:9e:f2:b3:22:ff:63:1f:42:90:af:7d:df:
                    71:da:d5:92:0e:56:48:c4:99:e2:eb:02:4d:15:b7:
                    6e:ef:f6:b3:41:17:89:37:a3:a2:52:b7:f7:ba:78:
                    bb:8e:f4:a2:88:7b:f4:94:0b:b3:b3:c5:da:ca:3d:
                    86:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:A9:67:6C:A2:F9:86:6E:6E:BA:4A:07:AB:39:C4:1C:64:E8:1D:E6
            X509v3 Authority Key Identifier:
                keyid:04:E6:C9:24:9E:E3:48:DC:F7:64:DF:0B:9A:40:D3:E8:54:06:64:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BObJJJ7jSNz3ZN8LmkDT6FQGZEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916BDA4/1EC702BCF1A711E890F06650C4F9AE02/164F6E2079BF11EAB3ADD60FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:cb00:90::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:15:6a:09:2c:73:18:a0:97:af:73:17:37:d9:48:53:22:73:
         f4:bf:c3:df:43:79:fe:30:2b:0e:06:30:15:37:7d:ce:e8:55:
         a5:00:5f:d0:9e:60:8c:ef:b3:9b:45:f0:de:f5:ff:ae:ad:ae:
         ba:34:fe:24:15:e6:34:a3:51:3a:06:34:41:b9:3a:e1:88:55:
         29:f4:65:c1:c4:46:70:ac:a9:be:82:cf:b3:47:17:76:b2:b1:
         d9:53:66:8f:49:84:ee:60:56:4d:57:dc:f2:62:f1:ec:04:64:
         a7:b9:9e:25:b1:e8:f2:8f:8c:71:45:da:79:40:92:1e:3b:b4:
         13:37:67:bb:dc:df:a5:3f:cf:4e:6c:11:f3:0b:ab:95:c0:5d:
         77:80:bd:5a:52:07:01:d8:bd:09:71:4a:36:ba:3f:e1:b8:e0:
         9b:c4:df:46:a8:d4:11:09:6c:16:68:53:67:73:c7:6b:4f:1c:
         27:8a:66:de:1e:13:50:da:5c:7e:0b:1b:e7:9b:94:88:7b:87:
         65:9d:c5:b9:bb:c6:5e:11:a6:81:ac:aa:b4:0f:b4:32:38:8a:
         6c:bc:b4:65:76:7b:43:29:2a:2d:46:b3:3f:75:0d:7b:8c:cf:
         93:01:b9:0d:e2:1c:cd:47:a8:70:29:44:67:d6:3f:12:31:e3:
         d6:e5:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:43 2026 by rpki-client