Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/2837843AA3E811EAB397F675C4F9AE02.roa
File:                     2837843AA3E811EAB397F675C4F9AE02.roa (raw, json)
Hash identifier:          mX70QQ2yE9wPh1hnIXZOciGYYAe5yUlr20YktwOYe68=
Subject key identifier:   BD:88:C4:33:47:11:DA:64:F6:B2:30:84:F5:F2:1D:0E:C7:3A:79:93
Certificate issuer:       /CN=A91972B6/serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199
Certificate serial:       11AA
Authority key identifier: 95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/2837843AA3E811EAB397F675C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 14:36:45 +0000
ROA not before:           Wed 18 Feb 2026 17:15:15 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     0
IP address blocks:        2001:7fa:0:1::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl
                          rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4522 (0x11aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91972B6, serialNumber=95EAAFC24B5AF4B172B58BB01A701CFE196DA199
        Validity
            Not Before: Feb 18 17:15:15 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a44efd-33a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a9:d5:36:2b:55:44:f5:d0:00:0d:c8:4c:df:
                    69:f1:12:fc:2a:06:f7:f7:79:91:9e:e2:04:a0:9e:
                    5f:28:42:dd:75:23:5e:d5:4f:dc:a9:9e:cc:c9:ca:
                    ad:10:5d:63:2a:9f:0d:c6:34:46:44:d9:88:89:f9:
                    5f:1b:00:ee:46:96:cf:80:1b:01:31:db:40:f3:d2:
                    c6:60:5d:c1:51:47:4b:e9:dd:09:ff:64:e0:6d:fb:
                    ad:b2:a7:d1:f9:36:53:e9:90:3b:40:5a:e5:5b:6a:
                    cb:8d:89:21:46:dd:18:22:e2:3d:2a:c6:ca:bd:49:
                    38:33:01:d8:75:e8:de:db:e7:9a:45:f1:db:89:12:
                    56:83:0e:cb:83:e3:83:68:43:b3:36:ed:10:0a:a9:
                    7b:99:f4:73:47:7d:0b:ef:35:74:5d:6a:f9:1e:07:
                    b2:83:88:1e:15:07:d5:81:53:59:66:eb:a7:8b:ad:
                    aa:ef:eb:9f:42:71:75:e1:e8:4f:a7:87:13:7e:58:
                    2f:7a:b5:8d:b1:25:6e:c3:57:05:33:19:db:32:23:
                    f2:8f:21:ee:53:c6:d0:d6:df:67:64:d3:d2:5f:fc:
                    00:c3:d1:ad:08:3b:44:17:bf:9d:46:c4:c8:0d:ad:
                    8a:b2:fc:63:87:e4:4d:68:4d:43:9f:61:bc:08:c6:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:88:C4:33:47:11:DA:64:F6:B2:30:84:F5:F2:1D:0E:C7:3A:79:93
            X509v3 Authority Key Identifier:
                keyid:95:EA:AF:C2:4B:5A:F4:B1:72:B5:8B:B0:1A:70:1C:FE:19:6D:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/leqvwkta9LFytYuwGnAc_hltoZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/leqvwkta9LFytYuwGnAc_hltoZk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972B6/08243C8C132B11E9AE77AD7BC4F9AE02/2837843AA3E811EAB397F675C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:7fa:0:1::/64

    Signature Algorithm: sha256WithRSAEncryption
         24:49:34:ec:6a:1a:b7:61:d1:17:b5:98:8b:95:ac:0e:c9:77:
         76:6f:4c:05:3c:28:d6:ec:d2:79:5f:ab:86:19:bd:80:e0:72:
         94:4d:a0:94:42:d4:c0:da:e6:9c:c1:b2:76:df:9c:aa:91:0f:
         81:d2:ef:c4:f4:bb:81:37:0a:b8:dc:a6:86:eb:56:42:d2:59:
         1a:fe:b7:96:39:1e:a2:63:f8:2e:81:57:f1:39:02:77:fb:11:
         a8:05:7f:73:65:8f:67:bb:17:a1:25:34:2c:b9:f8:1d:08:5c:
         b0:ed:46:3c:fe:04:4d:65:22:b1:3a:e0:81:a4:7e:e9:3f:b3:
         b5:db:9e:c7:43:d8:bd:f4:41:bf:aa:c2:5c:b9:70:ae:a9:88:
         ff:e2:31:1d:9c:23:f7:68:60:ec:e2:ee:fe:c5:a3:ee:26:31:
         33:81:59:36:79:1a:7e:1e:18:e7:2d:e3:68:a9:10:e9:c9:d2:
         c2:fe:8d:af:70:f5:c6:76:71:75:ef:6a:c2:e9:3e:3c:19:07:
         18:c8:e7:04:8d:25:09:a5:6d:7c:5c:19:f4:77:27:ce:8b:d5:
         d0:d3:7a:5b:b0:6a:24:2b:72:38:24:fa:1d:fc:cb:c0:d2:42:
         d4:fd:83:01:90:6d:8e:52:4c:07:48:63:c0:91:5a:66:c3:3c:
         d5:32:9b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:09:42 2026 by rpki-client