Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/808D8B4AB40211F0AD5B7354C4F9AE02.roa
File:                     808D8B4AB40211F0AD5B7354C4F9AE02.roa (raw, json)
Hash identifier:          tU35KeQjtZgc7V5YAzYuL51TG9tcBGSRzKoyTO6zrr8=
Subject key identifier:   34:ED:FB:31:A8:5E:82:FA:32:D4:2B:53:E1:37:22:28:14:07:88:60
Certificate issuer:       /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
Certificate serial:       0A8C
Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/808D8B4AB40211F0AD5B7354C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:12:14 +0000
ROA not before:           Tue 28 Oct 2025 13:32:09 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     138471
IP address blocks:        2001:df3:5c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl
                          rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 13:12:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2700 (0xa8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5BCD, serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
        Validity
            Not Before: Oct 28 13:32:09 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a58cae-756e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:62:a6:2e:dd:14:2b:56:e9:1c:c6:54:7b:
                    fc:2a:1f:93:21:62:b5:01:9c:5a:d4:7f:0a:de:2a:
                    00:c5:4e:62:3e:8a:c5:83:69:2d:ee:b1:1d:3a:e7:
                    aa:4c:77:a9:0c:86:7e:ee:19:3f:0a:73:92:a9:5b:
                    ca:88:7d:f6:99:76:f7:15:e8:90:9e:a8:df:5e:7b:
                    49:54:24:16:9d:b6:c0:98:2d:89:09:5c:e3:6a:e5:
                    9c:b9:09:f4:05:c5:b1:c3:8d:8b:87:dc:bd:e2:27:
                    84:5e:7e:0f:b0:4b:a0:42:5f:69:e9:6d:a7:c0:91:
                    a4:f6:b9:35:ad:6f:f2:6e:b4:ed:94:fb:8f:6f:08:
                    5a:85:7d:75:e6:5c:e0:2c:fb:a6:df:05:84:33:3a:
                    6d:59:51:33:32:e0:19:3f:29:25:a3:9b:5c:4c:22:
                    c7:06:dc:35:00:a9:d7:c9:4d:e8:8e:c3:da:64:25:
                    bc:8a:db:4f:51:38:0f:f6:3a:7e:8f:16:2f:e8:c3:
                    2f:9b:67:30:69:7b:a1:8c:86:77:b2:a6:eb:6d:87:
                    a2:2f:f4:f5:65:a7:a5:5a:37:dc:59:e7:d7:8b:45:
                    5f:b3:77:4a:b6:b2:f9:63:9e:d5:61:6d:9f:9f:f6:
                    6a:ca:be:b5:1f:38:b1:3a:26:62:6a:83:ef:50:b3:
                    75:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:ED:FB:31:A8:5E:82:FA:32:D4:2B:53:E1:37:22:28:14:07:88:60
            X509v3 Authority Key Identifier:
                keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/808D8B4AB40211F0AD5B7354C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:5c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:b4:72:46:aa:8d:d9:1d:18:2c:c8:87:50:dd:14:64:40:c8:
         86:4c:34:e9:55:48:ac:6e:4a:d3:5a:49:f9:46:22:70:68:87:
         ed:29:26:42:5e:32:e3:c2:4e:28:ae:03:d9:13:4e:60:e2:10:
         4e:fd:8c:70:4c:4e:1e:00:d9:29:ca:e6:8a:40:f7:81:5d:db:
         b9:6a:8c:77:0b:0d:67:4f:f9:64:7a:82:57:df:63:88:db:83:
         63:c8:3e:aa:61:bd:18:ea:a2:13:30:c8:61:be:a6:8b:ef:15:
         d5:77:4f:d2:8d:6d:93:b2:55:a5:9c:a8:32:28:83:85:63:2d:
         71:01:cd:11:c5:e3:d6:99:77:a9:f6:34:12:e5:89:7d:6d:5c:
         03:2a:ac:49:28:ba:3b:92:54:30:ef:52:a7:fb:ec:17:ac:77:
         30:d7:dd:08:b2:8a:df:03:c9:61:07:85:0e:98:12:fe:ff:25:
         0b:aa:0a:0b:d9:7e:ab:f0:8b:c0:9f:57:ea:19:d2:a9:68:9a:
         a9:04:f0:7f:77:28:b0:92:31:cb:ff:d1:83:a4:22:48:a8:d6:
         00:c7:20:62:9a:bc:42:15:c6:92:3a:39:c9:c1:68:6e:58:10:
         e2:72:9c:01:f0:97:89:56:12:e1:0d:02:c1:06:4e:54:d2:bf:
         88:8b:5f:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:04:28 2026 by rpki-client