Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/D9173AE459E811ED85614349C4F9AE02.roa
File:                     D9173AE459E811ED85614349C4F9AE02.roa (raw, json)
Hash identifier:          leMECVmhVTsAWm2huPmHyjfAW/BQtxrDM48+UQZcH9Y=
Subject key identifier:   00:F6:37:6C:FD:78:F7:14:4C:47:0B:01:EA:F9:24:91:CA:D7:90:3A
Certificate issuer:       /CN=A91A8405/serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
Certificate serial:       0C21
Authority key identifier: 2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/D9173AE459E811ED85614349C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 13:57:05 +0000
ROA not before:           Fri 02 May 2025 19:27:37 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     137548
IP address blocks:        2402:b1c0::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl
                          rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 16:03:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3105 (0xc21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A8405, serialNumber=2D9ED3D26E635F7CFFE4BBF52087150B7A42188F
        Validity
            Not Before: May  2 19:27:37 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a445b1-e9ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e9:4f:0d:98:a4:53:33:12:09:e1:1b:67:c1:
                    42:4e:fa:66:95:a7:6c:15:de:21:6e:ed:58:1c:d4:
                    5e:fe:f4:45:92:33:09:a8:af:74:86:5d:81:6b:7a:
                    73:bd:38:7a:40:3a:50:13:73:38:42:22:52:21:39:
                    a9:0d:d5:81:dc:ac:b9:95:b7:0c:fd:9c:14:47:72:
                    4e:9e:e2:01:3a:ef:20:7f:c7:c4:fd:2f:4d:23:86:
                    3f:01:be:88:38:5f:e3:44:68:bd:8f:82:cb:fc:b5:
                    d3:39:55:75:37:4b:4e:8a:78:0e:36:c4:59:9c:bf:
                    dc:bd:f2:09:c6:81:4a:87:cf:50:c5:f0:c0:90:e0:
                    8d:83:2a:0b:d1:69:ad:cf:89:26:a5:41:d5:0b:c9:
                    a9:73:9a:70:33:87:04:04:f7:72:86:6b:f6:f1:31:
                    21:4a:a9:4b:bb:53:6d:91:7b:12:ad:10:b3:be:eb:
                    5e:47:83:af:7e:8a:da:43:08:25:17:e0:b8:a7:35:
                    99:50:0a:91:43:98:bf:55:33:ac:e6:70:6f:87:50:
                    c2:7d:ae:de:41:19:dc:54:47:96:09:a3:a6:24:49:
                    b5:f8:53:65:fb:2c:d1:c1:c4:ff:e4:85:59:7a:2d:
                    7b:56:bc:7f:9c:a9:d2:d8:12:a0:ea:ec:22:f8:e3:
                    b6:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F6:37:6C:FD:78:F7:14:4C:47:0B:01:EA:F9:24:91:CA:D7:90:3A
            X509v3 Authority Key Identifier:
                keyid:2D:9E:D3:D2:6E:63:5F:7C:FF:E4:BB:F5:20:87:15:0B:7A:42:18:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LZ7T0m5jX3z_5Lv1IIcVC3pCGI8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8405/F9C19696321211EA93633A59C4F9AE02/D9173AE459E811ED85614349C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:b1c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:3f:b1:85:63:5b:4c:10:db:2b:a5:1f:c4:58:c6:4d:16:18:
         25:49:d6:e9:6c:07:77:35:61:9c:dc:8f:19:be:04:bd:90:e8:
         10:f8:01:10:7a:d1:39:a0:f3:8c:4e:22:3e:33:43:2f:4c:00:
         90:f7:6d:1c:0b:77:b9:73:a7:a1:89:00:ae:be:4c:a1:9b:1f:
         e6:3c:0f:d1:95:56:1e:5b:7d:32:55:f1:38:a1:b9:78:e3:8a:
         13:c6:b4:3a:2e:0a:a2:85:f5:f0:14:d4:f2:3d:17:e8:e9:e6:
         a9:29:f8:99:d6:83:d0:83:f3:c3:36:37:f6:b6:2d:5d:3d:28:
         e5:d6:dc:73:f3:b3:f2:e0:12:da:44:05:cb:6c:51:b1:45:70:
         c7:65:80:4f:78:e3:54:6d:96:47:ab:88:8f:c7:a4:07:12:ce:
         96:e0:1d:d1:5f:dd:0b:1c:02:df:b3:00:0f:50:25:c4:4c:8d:
         ba:ba:16:e9:a6:e1:91:12:ed:76:1b:60:34:6a:4f:3f:d6:be:
         10:8b:63:de:18:ee:b1:1e:de:cc:71:d9:ed:06:d5:8a:5b:db:
         a5:f1:38:2e:43:d7:52:6f:ee:28:f0:4f:8f:61:5b:9a:6b:05:
         77:da:67:80:aa:98:e3:e2:30:da:29:e2:68:7f:21:9c:5d:d9:
         e0:87:43:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:57:07 2026 by rpki-client