Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/F025BAB69D5911EEAA9F0413C4F9AE02.roa
File:                     F025BAB69D5911EEAA9F0413C4F9AE02.roa (raw, json)
Hash identifier:          uR51mJszDb9Ae22yXDS7eZ3aiLyh49qcIOPtps96eJ0=
Subject key identifier:   34:EE:F4:2E:4F:FC:5A:B0:53:60:D1:D6:A4:BF:84:09:34:78:3A:E3
Certificate issuer:       /CN=A91A001E/serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
Certificate serial:       4000
Authority key identifier: 82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/F025BAB69D5911EEAA9F0413C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:40:51 +0000
ROA not before:           Sat 02 Aug 2025 14:50:12 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     3970
IP address blocks:        2001:df7:5380::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl
                          rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:31:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16384 (0x4000)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A001E, serialNumber=8278F47DEC5B7ADC201897F99BCC6E2BFA88D015
        Validity
            Not Before: Aug  2 14:50:12 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a46c13-dbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c8:4b:dc:9f:f3:70:ee:34:ad:8e:9e:7e:6c:
                    b1:52:8e:86:bd:90:25:8b:d6:4e:72:0d:99:75:3d:
                    a9:47:e4:2b:1a:aa:98:85:0e:d3:fc:6a:54:c1:29:
                    0f:d6:0b:ad:e3:4e:42:e4:61:40:96:5c:67:60:d7:
                    49:17:f6:ef:a2:5b:dd:b5:9c:47:c1:18:70:6e:15:
                    26:af:2b:9f:72:be:3f:08:15:93:b2:f3:8b:69:dd:
                    39:3e:2f:6e:cc:2c:28:24:26:4a:8e:18:5e:72:3e:
                    e6:df:2a:89:3a:51:c6:77:5b:56:ac:16:a2:31:99:
                    4b:99:07:4b:9e:cc:40:84:83:a4:b1:69:0f:eb:75:
                    ae:57:80:85:10:63:02:b4:1e:63:ff:d9:a2:57:c6:
                    8e:25:5d:9e:1c:05:aa:34:80:24:cc:3d:0e:e8:8a:
                    bf:3c:e0:09:67:ab:6e:8c:0f:85:a9:83:ec:2e:8f:
                    34:d0:97:8b:6b:a9:82:81:24:5a:26:99:85:c1:ce:
                    e1:8e:97:d1:35:d2:aa:74:e1:63:85:b8:b0:d7:b1:
                    57:98:70:d5:00:13:d6:13:db:8b:3d:7a:4f:0e:45:
                    01:a2:e9:dc:67:ba:be:09:7a:46:ef:e0:da:2a:19:
                    a4:bd:c5:48:f7:7a:7d:71:f5:61:4f:49:69:f9:24:
                    e5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:EE:F4:2E:4F:FC:5A:B0:53:60:D1:D6:A4:BF:84:09:34:78:3A:E3
            X509v3 Authority Key Identifier:
                keyid:82:78:F4:7D:EC:5B:7A:DC:20:18:97:F9:9B:CC:6E:2B:FA:88:D0:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/gnj0fexbetwgGJf5m8xuK_qI0BU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gnj0fexbetwgGJf5m8xuK_qI0BU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A001E/35FA0F561D7811E293771FC408B02CD2/F025BAB69D5911EEAA9F0413C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:5380::/48

    Signature Algorithm: sha256WithRSAEncryption
         71:1b:00:bf:ec:0f:bd:73:cd:cd:a7:e5:d3:a3:99:2b:79:4a:
         60:df:e1:17:5f:54:74:6e:e8:02:d2:8e:70:29:79:51:13:bc:
         da:06:13:9b:2c:e6:1f:ef:26:39:63:b3:85:35:eb:a5:9a:75:
         37:65:29:bd:39:5e:b6:17:79:e0:31:64:14:10:88:76:80:42:
         fb:82:2e:7f:8b:aa:b0:ad:7b:51:c0:7c:cd:02:b0:e8:a9:59:
         70:de:90:2d:43:94:bf:87:25:e8:e9:c5:d7:e9:ac:52:82:72:
         2e:03:bf:d6:49:31:4e:76:62:65:0b:6d:53:df:3a:a5:3d:a2:
         4b:58:05:42:c8:fa:4f:14:0d:f9:ff:f3:1b:64:9b:6c:a1:f0:
         a6:10:27:15:04:fb:0b:21:0c:c6:9f:29:ae:34:8f:62:65:48:
         0f:61:a1:12:63:58:10:4f:fa:3f:56:4b:c1:12:c6:b7:60:1a:
         59:2e:ab:e5:05:c5:b4:15:64:c0:e8:53:50:76:2e:6b:e7:f0:
         c7:ab:79:ac:4e:f1:3d:53:b0:e9:53:3e:0b:0c:ba:6e:36:09:
         84:fe:2a:61:78:15:9c:c5:38:71:96:0f:b8:04:18:f0:ad:87:
         c6:b7:41:2c:04:9e:02:a8:3b:4a:a8:d3:a1:98:ea:e4:a9:73:
         aa:fa:c3:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:38 2026 by rpki-client