Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/800D4798721B11EF81654E68C4F9AE02.roa
File:                     800D4798721B11EF81654E68C4F9AE02.roa (raw, json)
Hash identifier:          fJH0OnAkV73NaYhJSOzfnbJOtG63wADTmRv7wLcZOSI=
Subject key identifier:   04:41:AD:F0:55:18:52:E6:E0:3C:51:46:4F:8A:C1:D7:88:41:C3:01
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       026C
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/800D4798721B11EF81654E68C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:17:17 +0000
ROA not before:           Wed 31 Dec 2025 04:24:45 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     45575
IP address blocks:        2001:3c8:900c::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 620 (0x26c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:45 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a490bd-c222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a5:57:c9:08:27:56:91:85:0f:10:ff:f8:80:
                    53:c6:69:ee:4c:52:99:14:67:71:69:d1:b0:fb:ba:
                    fd:29:83:7a:4d:3e:d7:63:00:33:ab:dd:b4:1c:71:
                    11:fa:6f:3b:d9:7a:7b:55:ac:f7:65:c8:5e:10:97:
                    3c:d8:f4:64:45:9d:02:47:d1:56:3d:16:bc:e4:f2:
                    6f:23:e4:81:4b:1f:46:38:49:26:5f:33:32:b6:e9:
                    90:21:28:88:ae:fa:2d:0a:40:7a:6b:07:a1:10:4c:
                    c9:bf:cb:bb:87:44:22:c5:f4:f6:60:de:2f:fd:b3:
                    42:00:9c:6c:f6:7a:1f:46:80:6e:2d:34:b1:1f:be:
                    9b:8b:48:62:20:4b:a8:37:78:6f:59:20:5f:8f:2c:
                    1b:97:77:3f:c9:0b:90:86:1f:a1:7a:dd:8a:87:7d:
                    bc:ad:29:1c:75:e6:b3:41:90:56:5c:c7:b6:15:76:
                    cf:92:7d:b8:2d:a2:01:8b:fc:37:f0:3a:ec:45:33:
                    90:58:f1:67:75:6e:97:4b:72:9f:33:ae:8c:b0:06:
                    fc:29:13:c5:3a:d1:b4:b9:9f:c8:4e:bd:17:75:70:
                    42:3c:d1:18:54:32:0a:bb:3b:63:e9:6b:c2:12:7b:
                    16:90:95:cc:55:b3:44:db:91:14:3a:b7:6e:64:36:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:41:AD:F0:55:18:52:E6:E0:3C:51:46:4F:8A:C1:D7:88:41:C3:01
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/800D4798721B11EF81654E68C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3c8:900c::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:72:97:ef:3e:b8:17:07:18:cb:c3:ed:9e:ef:bc:05:05:3c:
         5c:08:e7:f1:35:08:ea:7e:5d:7f:f7:7b:07:61:ac:33:4b:e8:
         80:01:b5:0f:03:ab:c0:78:3c:5c:65:09:42:d8:0f:5c:b7:4d:
         33:eb:32:eb:da:4d:92:51:5f:cb:57:2c:19:7e:96:00:91:80:
         f1:f5:4f:18:db:7d:7f:43:6a:f7:ab:bd:ec:80:2a:25:77:22:
         f7:ea:7b:2b:13:e9:7d:a5:94:78:3f:9e:9a:54:cd:5b:ea:48:
         74:95:92:12:ee:26:13:1c:03:6f:5d:46:a0:f4:a5:d4:e0:ba:
         59:6f:c0:af:08:39:2a:d1:5d:05:37:7e:cb:1d:a2:3a:ac:83:
         17:f4:ef:6b:62:72:76:f6:4f:ee:b9:d2:b7:90:9f:54:d4:45:
         3f:50:e2:ef:86:3b:4c:4f:d9:c0:ed:28:5b:2b:de:32:52:35:
         45:ca:83:09:e2:68:6f:99:4d:95:c5:22:2a:92:07:83:bc:ca:
         49:04:3c:b8:ee:ac:40:01:c5:60:5c:4a:2d:8c:24:55:09:0c:
         df:95:23:92:c5:ab:2b:14:6a:db:8d:4d:90:7d:1f:f4:5a:c7:
         35:d7:e0:13:16:e0:a6:2e:bf:3c:d3:ab:c7:3c:94:22:73:69:
         ea:3b:c3:35
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAmwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUFFQjIxMTAvBgNVBAUTKDlCOThGQjdENDY4OTgzQTJDMTQ3NzI3MzMyNDhFRkZB
MzQ2MkUxMjYwHhcNMjUxMjMxMDQyNDQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE0OTBiZC1jMjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwKVXyQgnVpGFDxD/+IBTxmnuTFKZFGdxadGw+7r9KYN6TT7XYwAzq920HHER
+m872Xp7Vaz3ZcheEJc82PRkRZ0CR9FWPRa85PJvI+SBSx9GOEkmXzMytumQISiI
rvotCkB6awehEEzJv8u7h0QixfT2YN4v/bNCAJxs9nofRoBuLTSxH76bi0hiIEuo
N3hvWSBfjywbl3c/yQuQhh+het2Kh328rSkcdeazQZBWXMe2FXbPkn24LaIBi/w3
8DrsRTOQWPFndW6XS3KfM66MsAb8KRPFOtG0uZ/ITr0XdXBCPNEYVDIKuztj6WvC
EnsWkJXMVbNE25EUOrduZDbW5wIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFARBrfBV
GFLm4DxRRk+KwdeIQcMBMB8GA1UdIwQYMBaAFJuY+31GiYOiwUdyczJI7/o0YuEm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUVCMi8zOTUyMTAwRTZF
ODMxMUVGQUI3MjYxODBDNEY5QUUwMi9tNWo3ZlVhSmc2TEJSM0p6TWtqdi1qUmk0
U1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL201ajdmVWFKZzZMQlIzSnpNa2p2LWpSaTRTWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QUFFQjIvMzk1MjEwMEU2RTgzMTFFRkFCNzI2MTgwQzRGOUFFMDIvODAwRDQ3OTg3
MjFCMTFFRjgxNjU0RTY4QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEDyJAMMA0GCSqGSIb3DQEBCwUAA4IBAQAmcpfvPrgXBxjLw+2e
77wFBTxcCOfxNQjqfl1/93sHYawzS+iAAbUPA6vAeDxcZQlC2A9ct00z6zLr2k2S
UV/LVywZfpYAkYDx9U8Y231/Q2r3q73sgColdyL36nsrE+l9pZR4P56aVM1b6kh0
lZIS7iYTHANvXUag9KXU4LpZb8CvCDkq0V0FN37LHaI6rIMX9O9rYnJ29k/uudK3
kJ9U1EU/UOLvhjtMT9nA7ShbK94yUjVFyoMJ4mhvmU2VxSIqkgeDvMpJBDy47qxA
AcVgXEotjCRVCQzflSOSxasrFGrbjU2QfR/0Wsc11+ATFuCmLr8806vHPJQic2nq
O8M1
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:05:02 2026 by rpki-client