Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/20F76E36056911F187C42801313D8C67.roa
File:                     20F76E36056911F187C42801313D8C67.roa (raw, json)
Hash identifier:          Se4FSt1iM9MDo+gX2SyfdFL5Hm8kZKb/ZKJR41JulNA=
Subject key identifier:   FB:46:D9:2D:14:32:30:32:F3:59:B4:A8:4B:B2:D9:82:F0:B3:2F:84
Certificate issuer:       /CN=A916E1C6/serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244
Certificate serial:       2D
Authority key identifier: F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/20F76E36056911F187C42801313D8C67.roa
Signing time:             Sun 01 Mar 2026 05:53:54 +0000
ROA not before:           Mon 09 Feb 2026 03:40:51 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     133014
IP address blocks:        2001:df0:41f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl
                          rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916E1C6, serialNumber=F13DF5DDFDBC0901BFC047412088DA3493A0F244
        Validity
            Not Before: Feb  9 03:40:51 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a3d471-a69d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:40:49:69:6e:79:57:5d:47:81:64:8b:b7:a2:
                    51:ac:20:fa:b2:a4:3b:85:c0:54:5c:39:ab:8d:f6:
                    5b:1e:8e:92:a6:4a:d2:a2:98:45:42:66:af:4a:7c:
                    bf:6d:8e:9c:a2:2a:05:2f:b1:ca:25:d3:45:cb:3a:
                    d1:b1:ee:ea:8c:09:db:40:d9:11:23:f9:e2:9c:f7:
                    10:ad:b7:63:a9:d7:70:8a:bf:d2:c1:29:97:07:fa:
                    b0:a8:fe:b5:01:07:c3:80:34:04:e3:2c:42:48:38:
                    7d:24:ce:4d:1e:8c:96:77:8e:9c:2f:10:3b:62:c8:
                    c7:00:9e:20:08:e3:c5:0c:0f:23:09:62:21:0e:46:
                    de:50:49:03:2a:86:64:64:96:2d:3e:7c:f3:10:26:
                    d0:37:3e:69:18:12:38:f8:ce:f6:55:24:ee:c9:6b:
                    89:b9:8c:31:71:c2:d8:d6:ce:27:b5:39:23:9f:ae:
                    87:3e:e6:d6:68:27:e3:ac:fd:45:81:19:2e:2d:aa:
                    95:0c:e9:82:d2:04:37:1e:2d:23:d6:21:b1:59:17:
                    aa:d7:30:a8:cc:f8:99:d9:2b:6c:a6:53:34:8d:47:
                    73:c3:ff:a2:b3:23:36:c0:4e:31:d7:a6:31:9f:74:
                    27:ed:9e:fc:f9:88:c3:52:14:0a:d3:ca:d4:4d:31:
                    1f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:46:D9:2D:14:32:30:32:F3:59:B4:A8:4B:B2:D9:82:F0:B3:2F:84
            X509v3 Authority Key Identifier:
                keyid:F1:3D:F5:DD:FD:BC:09:01:BF:C0:47:41:20:88:DA:34:93:A0:F2:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/8T313f28CQG_wEdBIIjaNJOg8kQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8T313f28CQG_wEdBIIjaNJOg8kQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E1C6/42E0B6B2D51F11F08792B57DC4F9AE02/20F76E36056911F187C42801313D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:41f::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:8c:c1:b6:48:08:5f:e5:35:c3:e7:62:b1:13:6d:28:a0:80:
         b8:a1:b7:4f:c9:32:bb:28:1f:39:b4:13:a1:ae:48:16:cf:bf:
         6d:3d:5f:84:9a:36:2d:d9:62:2e:3c:12:a4:4b:9a:0e:28:75:
         f5:95:12:98:77:fc:0a:17:ca:97:63:7f:90:42:61:7e:05:d6:
         99:39:1e:77:65:24:a6:e5:fd:26:d1:59:db:ef:b2:b6:86:30:
         ad:6e:a3:e4:a2:c6:c6:0c:21:03:dd:e0:95:bf:bf:5c:1b:e1:
         73:07:76:07:c6:b1:b1:12:43:05:fb:a9:5e:4f:33:55:0c:49:
         11:2f:d8:2c:ef:e1:b4:ec:71:60:38:f2:e0:7c:62:fa:f2:23:
         49:48:9c:99:37:f8:a9:02:9d:01:f7:a7:64:0a:41:ad:1f:95:
         be:f2:8d:84:f8:54:e4:e9:64:94:6a:c0:0a:a4:f5:a7:9e:07:
         91:f0:d7:52:d3:56:ad:57:14:36:98:88:df:69:99:09:c0:73:
         1f:c3:78:d3:83:ad:33:b3:85:ee:fc:dc:24:d2:af:79:10:c3:
         bb:de:db:92:ac:d2:72:8d:ac:71:f6:80:92:d7:2f:e3:ee:af:
         d2:7d:61:76:05:c6:17:64:a3:57:82:b9:d6:43:f0:b5:83:b3:
         a7:8c:61:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:53:13 2026 by rpki-client