Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/54FB2C8CD61711EEB983D919C4F9AE02.roa
File:                     54FB2C8CD61711EEB983D919C4F9AE02.roa (raw, json)
Hash identifier:          kdVR/T3ew7TyPnhxkEWRlQM3zCM8IzXis0xGyLY9c78=
Subject key identifier:   21:03:33:3A:1D:92:24:82:C5:26:C5:10:2B:59:6B:0F:8C:B6:DF:4D
Certificate issuer:       /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
Certificate serial:       0236
Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/54FB2C8CD61711EEB983D919C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 12:58:51 +0000
ROA not before:           Fri 17 Oct 2025 05:38:46 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     135381
IP address blocks:        2403:f040:13::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl
                          rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
        Validity
            Not Before: Oct 17 05:38:46 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4380b-85e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:12:18:6b:6c:9c:d9:13:e8:d6:30:20:d0:43:
                    20:a4:9a:12:27:8a:d3:00:d2:58:5e:93:39:d6:3b:
                    0e:34:fa:ba:20:5b:83:e2:59:b6:91:ed:d0:f9:29:
                    cb:bc:52:42:5b:bd:e2:b7:7b:6b:b6:37:4f:50:9a:
                    c4:42:17:88:3e:5a:de:95:d1:74:72:33:82:28:66:
                    7a:e9:87:0b:d1:91:3e:43:23:4e:43:5d:f1:13:00:
                    3f:2f:8b:75:63:9c:05:b5:17:61:40:28:cb:5f:1e:
                    b1:94:a2:85:5c:9a:f6:bf:aa:e1:0e:63:41:05:af:
                    89:5b:b7:00:ce:90:7c:0a:eb:11:98:aa:0a:90:a8:
                    48:42:0f:a9:21:19:4f:a8:5b:67:97:1b:b2:68:8e:
                    72:d9:d9:aa:68:8f:d8:41:83:82:64:ac:43:10:e5:
                    59:c9:32:14:06:76:b1:10:01:77:5f:1b:90:5d:40:
                    9e:0e:c8:c4:fc:a2:d4:19:3d:34:45:70:9d:11:77:
                    5b:2c:61:ae:f9:e1:08:b7:59:0e:1a:a1:f3:40:db:
                    f9:67:33:65:57:df:5e:dd:84:86:13:9a:7b:3b:98:
                    45:4d:a0:26:a1:c2:b0:31:c5:2f:7c:a3:7d:18:39:
                    bd:a3:c0:c0:02:e7:96:e1:85:76:0a:a3:0f:0b:81:
                    29:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:03:33:3A:1D:92:24:82:C5:26:C5:10:2B:59:6B:0F:8C:B6:DF:4D
            X509v3 Authority Key Identifier:
                keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/54FB2C8CD61711EEB983D919C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:f040:13::/48

    Signature Algorithm: sha256WithRSAEncryption
         32:47:b4:1d:d7:a0:30:63:b0:a3:76:b5:da:7a:7c:12:79:2f:
         e3:af:cc:a9:a4:26:58:d7:b6:d0:20:f8:c0:48:dd:6e:1f:59:
         ba:e5:c2:d5:06:7e:e9:34:de:5a:1d:0c:15:54:b8:8b:1e:56:
         21:6f:6b:f0:bf:37:c9:76:f0:ff:42:d6:fd:04:9f:65:95:b3:
         f3:f3:15:ee:33:85:cc:3d:51:66:1c:bd:15:6f:5f:be:26:ba:
         18:83:ce:8f:cb:9a:d1:21:c8:43:6a:47:88:51:66:c3:11:f8:
         63:74:55:5e:24:7d:f6:be:6b:6e:79:8b:57:72:7a:c3:9d:37:
         bf:16:0e:2a:44:8d:e7:3f:0a:4d:a6:4c:02:a3:24:c3:86:76:
         22:63:dc:32:de:e4:77:e1:09:65:7a:13:58:4c:1e:6a:81:2f:
         6a:a0:f9:64:85:99:e4:a8:e7:e3:48:e1:86:dd:02:08:bb:47:
         fa:ae:a5:20:ff:32:4a:0e:52:2c:4d:f3:2a:a3:29:1a:8c:fc:
         cc:72:f6:91:71:3f:90:6a:6a:6d:83:04:c3:6f:7b:13:5d:34:
         c6:e7:10:e4:dc:3a:af:71:d5:a4:8b:02:8c:87:f9:8f:90:70:
         95:d8:20:38:20:55:fb:cc:a5:86:96:b2:ba:8d:72:87:79:14:
         f8:a4:f2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:06 2026 by rpki-client