Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/739C8BDECB5A11EFBEE64062C4F9AE02.roa
File:                     739C8BDECB5A11EFBEE64062C4F9AE02.roa (raw, json)
Hash identifier:          9KLT865tYEymgriQqOzA9F8VKTM5qw8pmJPKAk9mtkQ=
Subject key identifier:   EA:90:6B:75:13:37:74:CD:9E:D8:EB:1F:0A:3F:2A:F9:E2:F1:02:87
Certificate issuer:       /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial:       DB
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/739C8BDECB5A11EFBEE64062C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:26:25 +0000
ROA not before:           Sun 01 Mar 2026 08:26:25 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     133446
IP address blocks:        2401:e160::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
                          rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 219 (0xdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
        Validity
            Not Before: Mar  1 08:26:25 2026 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a3f831-a034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:78:db:6d:f0:ab:7c:6d:79:aa:2b:a2:50:36:
                    7e:d4:cf:5c:5e:75:c3:d1:b1:ed:cd:0e:d0:89:d0:
                    4c:84:fe:48:eb:c3:59:26:d4:53:bd:be:58:17:6d:
                    d9:df:c5:a5:1c:34:bd:42:cc:29:8f:69:85:85:e7:
                    c7:c4:86:99:ec:57:aa:66:ae:ad:67:3c:17:47:c0:
                    1f:76:f9:88:b1:57:27:fc:8e:cc:fb:d8:e0:98:f2:
                    43:2c:f7:8f:f4:2e:be:19:9b:63:b3:e1:d8:49:13:
                    d1:fe:d7:5d:2b:e3:c4:33:91:b6:30:a4:b0:b6:be:
                    84:28:c1:a6:17:60:eb:23:07:52:71:d7:e4:7f:9a:
                    32:cb:07:13:51:36:6f:5a:8c:b0:e9:46:16:a2:1c:
                    ad:04:b6:da:e9:0b:3a:a8:57:7e:51:da:b0:74:1a:
                    4b:ff:21:da:22:99:dd:59:41:6a:3a:60:f2:46:4c:
                    0b:ae:94:a8:29:a9:4f:a4:d3:28:ad:c8:8f:40:32:
                    9c:c8:41:67:52:26:5b:ee:74:e3:c8:1e:0e:17:7b:
                    3b:21:01:ca:a3:d9:86:fe:33:5c:42:1c:8a:7c:7e:
                    f4:a1:23:3b:fe:b3:e1:2c:68:71:5c:ef:23:a2:0d:
                    94:28:34:d1:4b:e1:7c:f7:e4:3e:00:bb:a0:03:de:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:90:6B:75:13:37:74:CD:9E:D8:EB:1F:0A:3F:2A:F9:E2:F1:02:87
            X509v3 Authority Key Identifier:
                keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/739C8BDECB5A11EFBEE64062C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e160::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:fa:4a:d1:fc:ac:56:7d:c4:bf:cc:fb:49:cd:23:2f:4e:d8:
         09:b6:36:2d:7c:2d:f6:49:0c:6b:7b:0f:ea:e4:75:d2:9c:96:
         fc:94:46:dc:22:ca:21:14:5c:92:3a:05:aa:ae:f2:d8:a6:99:
         2a:a4:ef:11:34:af:e6:42:a9:b3:38:bb:7f:92:bc:f6:9c:38:
         f0:07:e2:89:1f:87:6f:e0:d5:ec:a9:35:a7:57:f1:29:e1:54:
         34:24:ce:d0:2e:fb:99:63:55:1c:d0:93:0f:f5:4d:64:89:03:
         9b:51:6e:f6:b0:c7:f6:c6:cb:63:dc:5c:63:97:fe:22:a9:48:
         35:2e:56:f8:21:09:73:97:6f:9b:fb:f6:ac:55:1c:11:eb:2e:
         47:7f:d9:48:82:0b:7a:72:b3:61:d7:d8:67:69:38:e3:19:04:
         0e:da:df:14:2a:fd:8a:13:1b:01:40:f3:5a:36:25:8a:cf:37:
         9e:e4:52:44:10:68:13:1d:82:cf:35:07:1c:6e:86:19:e7:32:
         7f:30:18:07:de:fa:86:40:22:a7:f5:f7:3e:0c:f6:6c:9f:91:
         34:c4:8d:09:40:ba:63:b3:19:c0:f9:11:76:17:40:9e:8e:0c:
         fb:8d:07:4b:47:c7:a8:d3:da:df:89:0b:16:3e:2d:1e:d5:98:
         9d:1e:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:09:56 2026 by rpki-client