Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/EF57185A9D5911EEAA9F0413C4F9AE02.roa
File:                     EF57185A9D5911EEAA9F0413C4F9AE02.roa (raw, json)
Hash identifier:          dZPIQkB0aEOTr2YhKhn/8aOaubRqYT004bV6OKdDzDs=
Subject key identifier:   5E:DF:24:64:D3:3B:50:F6:D9:39:FD:AE:56:0B:89:BB:EA:2C:7B:EA
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       3FFF
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/EF57185A9D5911EEAA9F0413C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:40:50 +0000
ROA not before:           Sat 02 Aug 2025 14:50:12 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     3130
IP address blocks:        2001:df7:5380::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
                          rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16383 (0x3fff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Aug  2 14:50:12 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a46c12-af68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:31:ce:b8:4a:3b:bf:b1:7b:a3:75:ac:74:8a:
                    07:45:44:2e:2d:5b:fe:53:36:13:e6:1a:02:46:d1:
                    73:8f:46:e4:73:cb:93:96:96:45:bf:28:4e:3c:8c:
                    09:53:67:08:5d:98:85:c8:e6:84:da:de:50:22:4b:
                    5f:ba:0f:24:01:4a:ee:66:76:84:3b:60:e1:07:8f:
                    9f:18:0e:5f:47:dc:41:2f:0e:fc:ae:08:25:b9:3b:
                    a4:8d:c3:bf:45:9e:87:e6:ef:01:07:22:88:1d:61:
                    86:1a:1e:60:52:ed:1f:04:aa:a2:2c:18:9b:4c:b6:
                    be:66:58:33:b2:0c:0a:1a:86:3a:1c:59:32:82:d9:
                    0f:a3:68:62:58:4d:dd:d9:0d:89:d2:78:fa:1e:10:
                    12:3f:7e:f4:b9:83:69:7f:70:6d:99:97:4a:f0:5e:
                    15:c8:d3:11:75:ff:ba:e6:25:32:54:3d:a9:f2:57:
                    24:bf:3b:ae:a8:de:35:68:15:2f:40:ce:05:9f:e6:
                    c9:eb:c6:7a:5a:a3:67:bf:92:eb:1c:50:a5:43:67:
                    a7:62:2f:6c:cf:01:07:cd:7b:f9:c4:ec:ca:f7:90:
                    85:f1:7d:ce:2b:2a:6b:6b:5d:2d:1b:e1:52:f8:3a:
                    5e:60:a2:66:cb:5c:2d:74:a1:aa:be:02:2d:48:5c:
                    99:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:DF:24:64:D3:3B:50:F6:D9:39:FD:AE:56:0B:89:BB:EA:2C:7B:EA
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/EF57185A9D5911EEAA9F0413C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:5380::/47

    Signature Algorithm: sha256WithRSAEncryption
         13:36:17:fb:9a:c4:3a:c4:ef:6e:ca:ce:b9:8b:21:ae:03:35:
         be:d5:0a:34:4d:8d:95:69:0f:8d:a5:10:bd:c5:dd:e7:89:f1:
         96:f5:97:39:8a:ef:57:b0:b9:18:77:7b:b0:68:e4:84:fc:68:
         7e:f2:2b:3f:a8:d0:b3:d7:74:cd:50:60:ec:c1:38:1b:d1:aa:
         94:69:bf:25:76:29:99:df:79:20:b9:66:b2:1f:6a:0b:44:06:
         b1:c8:b3:c4:45:22:f5:6f:f5:99:30:62:3e:cd:17:2a:63:f8:
         e1:9f:3d:a4:62:ea:a5:28:f5:7f:90:3e:c0:d7:d2:3d:6f:80:
         b2:43:b3:59:e5:79:02:1c:29:fc:5e:7d:de:ba:76:80:cc:f1:
         e6:1c:1d:d6:59:37:25:50:95:92:96:9a:03:ad:67:fc:9c:21:
         85:d9:5c:e5:63:de:25:87:78:0c:49:d5:ce:6d:54:81:17:6d:
         02:73:4e:26:d5:5a:54:f1:60:58:9f:52:68:a8:31:02:2c:48:
         8c:2f:1e:1b:45:e3:67:e4:15:8b:cb:83:de:c6:38:a3:35:92:
         b9:0e:13:da:d4:de:ff:18:1e:b0:68:99:1d:5f:da:bd:84:01:
         c8:1c:f9:82:ac:7c:22:bd:00:9d:59:a2:0c:9f:d6:52:09:5c:
         8d:3c:be:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:48 2026 by rpki-client