Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B47A0CDA660F11EB8A1DB351C4F9AE02.roa
File:                     B47A0CDA660F11EB8A1DB351C4F9AE02.roa (raw, json)
Hash identifier:          BkGrEGh07b8z6hdCEXOfl/KwA0qpYfw5gLTGBInTNpg=
Subject key identifier:   45:28:42:AE:57:92:B9:25:0F:33:13:31:0D:F2:48:75:45:F7:B2:BE
Certificate issuer:       /CN=A91755F6/serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D
Certificate serial:       0B16
Authority key identifier: F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B47A0CDA660F11EB8A1DB351C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:46:48 +0000
ROA not before:           Mon 12 May 2025 19:35:36 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     136992
IP address blocks:        2001:df3:1080::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl
                          rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:24:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2838 (0xb16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91755F6, serialNumber=F68B86268B37DE810B968DB8F357F773E983BF6D
        Validity
            Not Before: May 12 19:35:36 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42727-2adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fb:22:df:1f:a2:d8:92:76:5a:e3:b8:c8:0f:
                    5d:47:52:f6:e6:79:db:69:88:89:4c:f8:f7:9e:51:
                    fd:22:92:12:13:09:17:51:e2:31:ca:b0:9e:ad:77:
                    4e:f5:0d:6a:7f:b2:a3:ea:ee:03:59:e7:e3:53:d2:
                    af:25:29:92:6f:af:2d:bd:51:9d:8c:bb:00:e3:06:
                    79:a6:05:94:4e:16:a4:3a:17:2e:2f:f3:0b:3d:e1:
                    7d:c0:35:e4:ae:dd:8e:d1:89:96:45:d9:00:27:6d:
                    0f:23:86:bb:72:02:7f:3f:2b:a5:ff:8a:a3:27:a5:
                    3f:ec:6f:eb:e7:ea:b4:4c:01:81:40:c1:56:59:d5:
                    15:69:19:01:78:2a:09:2d:14:92:5c:e5:39:b9:91:
                    89:cd:8b:2d:76:a0:d1:a2:a2:38:88:e3:39:60:17:
                    07:67:ce:59:52:cb:81:1a:03:a5:d7:35:2d:70:18:
                    62:ae:97:e3:dd:db:ec:60:e2:b2:4d:31:25:58:c9:
                    ef:cd:44:14:3c:3e:50:32:4e:d9:db:5a:cb:d3:01:
                    fc:c6:64:01:4e:68:2c:81:2b:84:64:c9:3c:a6:15:
                    73:b1:55:ca:1c:89:0c:d6:34:a4:92:f5:dc:7b:68:
                    d4:77:98:8e:1f:59:37:5d:49:2e:ce:be:73:20:e6:
                    26:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:28:42:AE:57:92:B9:25:0F:33:13:31:0D:F2:48:75:45:F7:B2:BE
            X509v3 Authority Key Identifier:
                keyid:F6:8B:86:26:8B:37:DE:81:0B:96:8D:B8:F3:57:F7:73:E9:83:BF:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/9ouGJos33oELlo2481f3c-mDv20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ouGJos33oELlo2481f3c-mDv20.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91755F6/D69EAAB25F6411EA9CAA3A64C4F9AE02/B47A0CDA660F11EB8A1DB351C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:1080::/48

    Signature Algorithm: sha256WithRSAEncryption
         94:7e:c1:29:87:85:c4:2e:a4:3c:7e:16:bc:3a:c1:93:e3:60:
         64:4a:2a:7f:b3:9c:02:8c:5d:48:d8:c3:6f:c4:f6:b7:27:43:
         e4:1d:88:b6:0c:b1:e4:1f:ce:a2:5d:ad:2d:d8:05:77:a1:f6:
         9e:dd:be:fb:93:81:22:37:26:57:60:03:c3:ed:11:55:c9:86:
         f8:1d:a7:4e:9d:f9:cb:63:56:7b:d0:b5:7c:27:6b:b0:93:c5:
         17:fd:54:ab:3e:ba:2c:21:81:37:fa:6b:57:08:5f:98:da:94:
         ea:80:25:90:d4:90:3b:c5:cd:d3:eb:65:28:2d:3e:50:89:2a:
         2b:88:30:3c:9e:22:49:a3:56:b3:cc:e0:10:02:9f:08:82:15:
         d9:35:69:13:99:70:61:69:73:e1:5c:37:bb:d5:0a:7e:45:ec:
         d1:11:0b:62:3d:38:42:8c:bf:b6:26:4b:4c:3d:fd:fa:1f:60:
         35:75:59:dd:2d:df:1c:f1:b6:a4:6f:60:1e:90:81:e5:53:11:
         45:78:8a:47:ad:98:b1:b7:c9:cb:3b:4c:0e:97:0f:23:35:b9:
         ae:18:92:24:cd:f6:cc:9e:c7:1b:cb:e6:bc:84:b6:84:91:2f:
         c2:3f:fe:99:c3:b5:b8:2a:11:64:d3:b3:ac:35:44:c1:16:1d:
         05:27:03:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:31 2026 by rpki-client