Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/FE6E6B48749E11E8B07CAE80C4F9AE02.roa
File:                     FE6E6B48749E11E8B07CAE80C4F9AE02.roa (raw, json)
Hash identifier:          xTllv0TZOEMAn/qQnLiwyozD3bbL+lexznwQYHXLWKU=
Subject key identifier:   86:A2:B4:5E:61:F5:BC:89:A0:E0:DB:C8:FC:5C:62:2E:AE:73:47:87
Certificate issuer:       /CN=A91A0C55/serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
Certificate serial:       1D5F
Authority key identifier: 24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/FE6E6B48749E11E8B07CAE80C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:59:19 +0000
ROA not before:           Tue 18 Nov 2025 16:04:33 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     58431
IP address blocks:        2404:6980:31::/48 maxlen: 48
                          2404:6980:32::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl
                          rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7519 (0x1d5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A0C55, serialNumber=24CF7A2545A74EA2550201B6EDDB99F9BEDB81B5
        Validity
            Not Before: Nov 18 16:04:33 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a47067-5551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:ea:95:e5:67:64:80:2a:0c:49:7b:8c:d9:4c:
                    af:10:f6:59:19:f8:0e:26:82:16:a5:6b:f7:83:68:
                    56:56:e4:c7:22:1e:b9:f9:08:46:6a:24:3b:30:73:
                    5f:d4:27:b1:60:de:2b:d9:fc:7c:bb:a0:fc:1b:ea:
                    e6:a0:25:2a:b0:28:1a:90:9f:a9:fc:45:22:50:02:
                    d7:10:e2:89:3e:66:54:cf:90:ce:f9:7c:db:12:6e:
                    9b:4d:e8:0d:b5:dd:c6:b5:cb:dc:17:03:0d:a8:a5:
                    72:7b:d3:b8:8d:96:92:c5:f2:cd:b0:bd:bf:a7:6d:
                    6d:b1:6b:fa:e9:60:07:b5:3d:34:64:3f:a7:5c:dd:
                    5e:9c:a3:e5:23:4f:e5:1e:84:32:45:83:b7:7e:94:
                    84:85:97:f6:18:d7:c3:3b:2f:88:a2:ab:18:ee:f6:
                    f8:b4:da:f4:85:b6:b2:5b:07:df:be:44:15:30:a1:
                    8a:0e:fa:f8:74:44:7a:04:6f:58:9e:cc:89:20:55:
                    b6:a4:9c:46:f1:d3:61:46:32:2c:44:9d:d3:4c:04:
                    92:b2:b4:29:ac:74:f1:1c:71:e0:1f:51:6b:b1:ab:
                    d4:bd:a0:35:a8:33:c5:87:2c:74:41:aa:38:b3:6c:
                    ed:55:4a:9b:8d:6f:f6:5e:59:12:1b:79:fb:87:d8:
                    cc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A2:B4:5E:61:F5:BC:89:A0:E0:DB:C8:FC:5C:62:2E:AE:73:47:87
            X509v3 Authority Key Identifier:
                keyid:24:CF:7A:25:45:A7:4E:A2:55:02:01:B6:ED:DB:99:F9:BE:DB:81:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/JM96JUWnTqJVAgG27duZ-b7bgbU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JM96JUWnTqJVAgG27duZ-b7bgbU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0C55/2EA7A46CCE7111E69E2B9444C4F9AE02/FE6E6B48749E11E8B07CAE80C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:6980:31::-2404:6980:32:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         66:78:bf:64:d3:29:09:8e:1e:6c:0b:f3:fa:7b:2e:61:d9:ed:
         db:2b:ad:31:e5:ff:25:9f:9f:18:4c:cb:39:39:f6:c5:30:5d:
         da:c8:9b:76:d0:0c:70:e2:14:db:52:df:53:d7:28:2e:16:fa:
         8f:e4:1f:46:b4:10:3e:4c:cd:ba:b1:b0:b3:79:1f:06:66:64:
         51:45:af:e4:dc:f7:02:8d:ae:f7:19:c8:3a:4f:2b:45:05:fc:
         73:ed:14:cb:6a:e9:b7:6f:10:fd:02:4d:1e:24:5d:7a:8d:0d:
         32:cc:84:24:72:41:c0:55:ee:3f:11:97:4d:37:08:e6:64:df:
         2c:bc:45:1f:54:df:93:09:1c:2d:d3:b4:5c:d0:7f:d0:34:54:
         33:f6:d3:8a:96:15:2b:21:76:92:fe:91:9c:10:a5:18:cc:04:
         44:72:dc:be:9c:7c:5f:5e:24:8a:e1:1f:ca:26:e7:19:c8:49:
         83:46:c8:17:15:45:86:6c:08:d2:34:69:90:96:fa:f9:db:16:
         b0:9b:54:7e:73:0e:8d:e4:9f:1d:2c:dd:34:fc:68:e8:d7:0f:
         ce:43:e6:db:ee:d4:7f:35:21:46:1f:a0:c1:79:01:6a:67:96:
         71:06:0a:31:68:84:b6:a9:c9:38:72:d3:3d:e7:c4:32:d4:30:
         32:0a:d9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:49:56 2026 by rpki-client