Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
File:                     0EB302DCEA5B11EFABB07C6DC4F9AE02.roa (raw, json)
Hash identifier:          yxcEwj+JBBXiVTX+aFQc5ddxq/vEi232S7B1rwDfWO0=
Subject key identifier:   F6:81:84:36:6B:14:CB:5B:AE:3A:3D:BD:84:47:CD:29:31:E8:26:32
Certificate issuer:       /CN=A91A91CB/serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
Certificate serial:       C9
Authority key identifier: 89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:16:38 +0000
ROA not before:           Wed 21 Jan 2026 05:25:16 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     7575
IP address blocks:        2001:df4:c7c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl
                          rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A91CB, serialNumber=8966423EE2A415631F7AF314E4D884007A8468B6
        Validity
            Not Before: Jan 21 05:25:16 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a42016-2713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d6:e2:d3:6e:90:31:4f:8f:0c:1e:7b:62:37:
                    e5:8f:b8:aa:96:47:de:c6:63:5d:f9:39:85:cb:d9:
                    99:03:d7:83:c2:25:d4:00:2c:17:9c:a1:77:01:59:
                    a4:a4:c7:f6:f4:36:e8:11:ea:55:7d:a4:f4:cc:17:
                    39:71:45:e8:a0:83:12:f4:bd:26:bf:d1:cc:a4:cd:
                    29:96:e1:3f:b6:96:cd:16:6b:19:00:7a:e2:8a:78:
                    1f:d5:1b:1c:e9:af:fa:2f:13:cc:be:f1:35:ad:a3:
                    e6:c4:38:61:f1:52:68:6c:41:c4:33:ba:94:f6:0e:
                    a5:b6:8b:2f:82:b0:67:a9:1f:45:f6:fd:96:b8:32:
                    8f:c5:d3:f5:03:ee:99:49:e3:f8:87:a9:b5:26:69:
                    36:2f:be:7e:b0:c0:78:e3:af:77:ef:e9:06:5d:49:
                    b8:e7:ac:62:e3:89:26:c1:2d:6e:e5:d0:bb:a5:d1:
                    94:c9:76:c5:95:8d:3b:af:c6:71:18:56:0d:af:5e:
                    2d:76:8f:60:ed:9d:d6:78:7d:a3:d6:14:68:f8:8d:
                    28:d4:15:65:b7:bc:fd:20:3f:e7:ae:4c:17:81:86:
                    c9:a9:44:92:9f:54:08:8b:ce:bd:be:8e:07:b4:1a:
                    e0:b1:16:a6:c5:4a:34:40:59:56:b5:50:0d:3d:e8:
                    af:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:81:84:36:6B:14:CB:5B:AE:3A:3D:BD:84:47:CD:29:31:E8:26:32
            X509v3 Authority Key Identifier:
                keyid:89:66:42:3E:E2:A4:15:63:1F:7A:F3:14:E4:D8:84:00:7A:84:68:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/iWZCPuKkFWMfevMU5NiEAHqEaLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iWZCPuKkFWMfevMU5NiEAHqEaLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A91CB/650E600AEA5A11EFB84AE468C4F9AE02/0EB302DCEA5B11EFABB07C6DC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:c7c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:e2:71:17:db:0f:48:bf:7a:05:4f:79:9f:91:35:d7:21:68:
         5f:63:5a:52:ff:15:16:97:86:f2:f7:07:f9:47:a3:91:85:36:
         d9:40:27:26:07:fc:02:2a:5e:66:84:c1:b6:45:16:96:49:3c:
         31:1d:15:ba:b3:37:b4:01:06:21:15:bf:bd:3a:55:29:09:d8:
         3d:76:f6:19:ce:6b:dd:03:fe:81:ce:79:5c:8e:f7:94:ee:50:
         6a:cf:6f:a0:38:5b:e5:0e:c1:9a:7f:9b:60:f0:94:f1:09:68:
         7a:e5:db:95:96:18:4f:fb:7b:a1:90:74:06:c4:1d:7c:27:89:
         c9:16:d3:29:ab:1f:67:aa:df:3c:c4:c8:af:60:ff:22:46:ff:
         88:b8:3a:0b:86:ad:a3:93:08:29:ba:d6:18:a7:bc:8c:bd:4a:
         17:81:3f:58:df:9c:26:fe:6b:94:64:7c:93:bf:38:6a:c6:78:
         e4:9f:e7:99:60:ae:e6:66:ed:87:32:65:90:01:9b:8c:9d:a4:
         84:f2:e2:b9:ec:4a:7b:64:48:a3:50:a4:e2:54:6d:61:36:36:
         bc:c9:03:c0:c5:05:ab:22:52:c7:0d:02:87:7d:63:a3:93:b3:
         bb:05:c4:89:6a:08:12:4c:ad:a6:df:c6:3a:30:96:b0:12:50:
         7b:68:79:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:40:24 2026 by rpki-client