Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EDD8F8E0721A11EFBDE87567C4F9AE02.roa
File:                     EDD8F8E0721A11EFBDE87567C4F9AE02.roa (raw, json)
Hash identifier:          zPJ0J/QwFXEWhDY2tVLZ/8dGIazdgDWOzvECWxMEsI4=
Subject key identifier:   93:D7:90:56:8D:C9:0D:34:6B:1F:6A:3C:FF:D7:95:27:FD:D5:4A:A2
Certificate issuer:       /CN=A91AAEB2/serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
Certificate serial:       0242
Authority key identifier: 9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EDD8F8E0721A11EFBDE87567C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:16:39 +0000
ROA not before:           Wed 31 Dec 2025 04:24:06 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     132482
IP address blocks:        2001:3c8:2705::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 578 (0x242)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEB2, serialNumber=9B98FB7D468983A2C14772733248EFFA3462E126
        Validity
            Not Before: Dec 31 04:24:06 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a49097-231e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:68:21:d0:3a:26:c9:9c:d3:00:f5:c9:c7:21:
                    90:59:2d:8c:18:cc:a7:1e:6c:fe:43:85:a9:f1:4a:
                    a1:58:4a:d5:f4:56:25:85:7b:4b:8c:8d:90:3e:f8:
                    0f:f1:3b:ec:47:35:d3:42:26:ae:0d:f6:9f:a0:33:
                    37:26:55:35:3c:71:7a:c2:f1:8e:3f:cb:3b:ba:d5:
                    db:40:42:e8:c0:23:0e:33:45:52:83:6b:c8:f0:91:
                    3e:2a:c7:66:52:b4:78:4f:bd:ba:65:aa:d7:c9:76:
                    89:2a:96:d0:f9:72:1f:28:52:ca:1e:91:fa:bd:83:
                    bc:7a:8f:1a:de:2e:f7:df:55:f9:8b:d7:4c:7b:a0:
                    d5:64:32:5c:74:77:06:57:92:3b:df:3c:0b:9c:c6:
                    cb:a8:54:11:bd:5c:21:d6:11:33:50:d2:10:95:d2:
                    31:b8:3f:99:f9:39:19:a5:4c:f5:af:b0:9e:ad:e5:
                    a6:4a:f1:11:c7:b5:6d:14:d0:db:f7:e9:dc:36:e9:
                    d9:85:ed:e6:54:b0:1a:71:e2:00:6e:f7:05:15:d3:
                    62:8f:19:95:92:b0:35:71:75:af:b1:74:f6:40:40:
                    19:b4:f5:94:03:40:47:1e:e2:c7:bc:d9:e0:1b:0f:
                    a7:3c:7b:47:d4:81:09:0c:8f:07:ee:7f:6c:b8:af:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:D7:90:56:8D:C9:0D:34:6B:1F:6A:3C:FF:D7:95:27:FD:D5:4A:A2
            X509v3 Authority Key Identifier:
                keyid:9B:98:FB:7D:46:89:83:A2:C1:47:72:73:32:48:EF:FA:34:62:E1:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/m5j7fUaJg6LBR3JzMkjv-jRi4SY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m5j7fUaJg6LBR3JzMkjv-jRi4SY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEB2/3952100E6E8311EFAB726180C4F9AE02/EDD8F8E0721A11EFBDE87567C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:3c8:2705::/48

    Signature Algorithm: sha256WithRSAEncryption
         77:78:59:7a:29:48:1e:33:fb:8b:9d:d7:5b:75:4b:31:f5:c2:
         37:40:8f:88:05:92:be:8d:5c:4a:7e:ae:6e:39:f0:34:89:89:
         e2:bd:b3:0e:3f:e0:49:1e:dd:10:fd:36:34:07:cc:5e:08:3a:
         aa:9a:8f:60:73:6e:b7:b7:27:0a:a2:65:e0:ae:0d:b5:e0:87:
         78:78:37:3c:3f:7b:6c:73:c0:4e:43:3b:3b:bd:f3:1d:60:f2:
         8d:09:6c:ad:84:d8:b9:d8:1f:53:ea:ea:f1:ce:8f:8a:52:22:
         f6:7d:8e:8b:7a:16:1a:96:4e:e0:39:3f:fc:dc:17:68:15:4c:
         b9:e6:92:9a:83:b7:e8:3b:c6:1e:dd:9c:24:6c:22:f9:c5:8b:
         a6:f4:55:22:b6:a8:5a:97:a3:ce:d7:9a:a0:ef:9c:b5:22:4e:
         a9:ef:53:e3:e7:7d:5e:42:35:b6:cc:0f:e1:cb:44:25:26:f2:
         3c:4f:0d:56:aa:84:c8:0e:90:b9:e8:2a:bc:3a:97:ce:80:7b:
         cd:ca:63:1b:3f:c1:da:94:36:85:80:cc:5c:b5:87:12:dd:24:
         34:e9:9d:b5:d5:67:6a:8a:86:80:f1:1a:91:99:4f:35:31:c0:
         6f:f7:cc:db:9b:a4:c7:44:91:55:b0:46:f3:41:91:3c:55:36:
         2d:70:74:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:21 2026 by rpki-client