Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa
File:                     31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa (raw, json)
Hash identifier:          uV8rFDqMxRMdCRvkDEsV2MUMii9vsIlS/hRAm+P4Yu8=
Subject key identifier:   0F:2E:A6:CF:5A:44:4D:3D:A6:95:E8:EC:AA:E4:28:19:CD:7F:C2:B4
Certificate issuer:       /CN=A91706E4/serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
Certificate serial:       F6
Authority key identifier: 6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:12:03 +0000
ROA not before:           Thu 01 Jan 2026 05:24:37 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     141212
IP address blocks:        2001:df4:9fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl
                          rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91706E4, serialNumber=6F7E58D0896389F7E7FE4E8795AA555D5C555188
        Validity
            Not Before: Jan  1 05:24:37 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a41f03-75aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:28:e5:1b:ad:d6:bc:53:7a:1a:7a:1a:3e:a2:
                    7b:3a:f5:c9:13:c1:dd:a4:33:02:77:fa:c0:1e:fe:
                    de:b5:e0:c6:d8:29:24:c7:5d:75:3d:93:5e:65:76:
                    f9:cb:e8:00:db:c9:b3:54:8e:bd:e1:9d:79:d3:fb:
                    49:2f:9b:2b:7e:cb:28:2b:1a:c9:46:bb:d2:0e:f8:
                    49:a4:1e:24:39:ee:4d:92:08:4f:68:ae:97:de:02:
                    8e:03:c4:1f:75:d6:5d:b4:8f:9c:06:bf:2c:d4:49:
                    70:a7:ae:cb:fa:6f:e2:3d:e2:47:5b:9c:14:78:b7:
                    b8:d8:fe:b7:85:18:cc:6b:a3:58:26:07:46:b2:7d:
                    ca:ba:10:c9:f9:49:2d:ae:f9:9d:2e:d1:cc:62:97:
                    b3:77:31:ec:f9:c4:2a:03:7a:24:cd:0e:c2:30:4f:
                    df:ff:05:da:6f:36:bc:89:3d:7f:22:77:7b:87:6a:
                    da:d9:7e:cb:a0:f3:f8:4a:b5:d3:dc:04:24:26:8b:
                    d2:dc:82:19:d3:ed:52:4b:e4:3d:24:7f:e1:73:94:
                    6a:5f:a2:75:38:94:b2:85:2c:00:25:e7:61:55:63:
                    16:bb:fb:48:8a:35:00:8a:70:43:55:9c:20:7a:1c:
                    d3:f3:4c:1e:41:45:ac:68:5a:61:e4:7e:53:f9:51:
                    8a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:2E:A6:CF:5A:44:4D:3D:A6:95:E8:EC:AA:E4:28:19:CD:7F:C2:B4
            X509v3 Authority Key Identifier:
                keyid:6F:7E:58:D0:89:63:89:F7:E7:FE:4E:87:95:AA:55:5D:5C:55:51:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/b35Y0Iljiffn_k6HlapVXVxVUYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b35Y0Iljiffn_k6HlapVXVxVUYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/3ABA80AAA68411EF8F5ED37FC4F9AE02/31E9AEC6E30411EFBC0C3B2CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:9fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:74:0e:e7:d8:eb:f5:75:f2:72:dc:2b:35:64:22:df:7a:93:
         a8:01:c9:6c:37:a4:fb:c6:ed:e3:54:b9:25:24:93:75:4c:a4:
         8b:14:7d:71:af:c4:4d:1b:05:84:d4:e3:67:24:84:b4:41:2b:
         5e:f9:d7:4a:04:09:54:08:73:cd:f4:b9:c0:22:6b:70:9c:98:
         07:f6:7a:d9:a7:17:c1:be:46:59:85:ce:fe:f1:44:d3:3b:d7:
         42:a6:2c:62:c7:54:3c:23:53:61:6e:f6:57:9c:c9:80:ba:a1:
         53:41:29:ae:94:fe:89:02:71:49:c1:73:0c:c0:c1:c5:af:e8:
         aa:28:7f:53:23:6b:e5:29:c9:62:6d:2b:9f:59:bd:c6:47:47:
         0e:8d:ef:78:e2:06:20:5c:db:a0:f0:ba:8a:5d:de:da:bd:bc:
         49:14:e9:0d:3c:02:b7:b4:0b:7a:ec:0f:2a:ba:03:03:da:6c:
         f1:92:ef:97:18:2f:1b:fe:2d:36:e8:79:9c:ff:bb:d8:86:8a:
         e2:41:63:a7:74:03:b1:78:06:85:d3:cf:28:e6:5c:73:95:b2:
         4f:e5:95:55:94:fd:70:fa:32:45:5d:59:c0:2b:7f:1f:15:8a:
         a3:14:c3:68:df:e0:19:b2:fa:4e:77:01:b1:e5:ee:d4:93:f8:
         bf:1a:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:02:11 2026 by rpki-client