Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa
File:                     E69ABF78033911EFBE28FC1FC4F9AE02.roa (raw, json)
Hash identifier:          +qNb2bGAuClTAyzcfKR7pzoXXTJGSIuKXBMLxWCq3Yg=
Subject key identifier:   F0:73:7F:5F:7F:DC:04:3C:C2:2F:D3:A7:3B:91:35:07:97:A1:33:AE
Certificate issuer:       /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Certificate serial:       0499
Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa
Signing time:             Thu 09 Apr 2026 00:32:03 +0000
ROA not before:           Thu 09 Apr 2026 00:32:03 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     151951
IP address blocks:        2400:5a60:2::/48 maxlen: 48
                          2400:5a60:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1177 (0x499)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
        Validity
            Not Before: Apr  9 00:32:03 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d6f383-ca87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:44:bd:30:5f:fe:f4:6a:db:7a:fd:ff:e8:90:
                    55:11:e2:04:2d:f0:0f:ae:5a:62:c1:aa:f1:de:ea:
                    9f:d9:e2:38:85:94:d8:6f:e3:a8:5c:46:bc:8e:c8:
                    c5:15:66:5d:aa:ee:7a:3a:b7:90:89:69:53:a9:8f:
                    cd:7d:75:ff:b0:b0:a3:f3:d7:4a:7c:2c:81:82:75:
                    da:d6:f5:42:22:07:93:24:62:aa:ec:d5:75:c9:b8:
                    12:23:7a:3d:fc:d3:c7:ac:3a:d5:ed:10:79:f9:23:
                    3a:b6:b3:75:87:f2:81:85:80:4b:90:67:b1:6d:c1:
                    ef:bc:15:e2:f0:90:3c:1d:03:54:fb:6c:f6:60:b4:
                    d1:51:ba:bd:0a:7a:06:92:bb:30:69:35:84:b9:76:
                    9b:66:1b:19:b2:f4:32:f4:03:29:78:a2:40:14:d8:
                    f1:64:40:f1:5a:31:32:46:ec:83:76:ec:d7:71:db:
                    45:a7:35:d4:df:c9:e3:1f:cd:e6:02:c8:82:ae:87:
                    34:e2:4e:a2:98:dd:34:40:7a:06:11:cf:22:10:96:
                    8f:7e:ff:fe:41:ba:2d:16:ed:16:95:8a:73:09:52:
                    28:ca:e3:bc:af:b8:d0:06:75:24:c9:89:01:a7:3d:
                    34:9e:75:49:5b:31:e3:32:dc:b7:7c:2e:0d:1e:57:
                    0f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:73:7F:5F:7F:DC:04:3C:C2:2F:D3:A7:3B:91:35:07:97:A1:33:AE
            X509v3 Authority Key Identifier:
                keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/E69ABF78033911EFBE28FC1FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5a60:2::/48
                  2400:5a60:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         57:01:3c:33:3c:55:42:3f:be:30:60:09:79:d3:d2:a4:db:85:
         4f:28:f4:c4:65:6b:3f:e9:96:62:2f:d3:33:f2:20:6a:1f:14:
         94:91:2f:be:f6:b0:34:1d:0f:a7:01:aa:a3:98:bc:1d:69:aa:
         0e:a7:e2:6b:b4:64:08:51:b3:8a:0a:94:39:22:1f:83:22:e4:
         c5:26:9c:cf:7d:2d:46:68:f1:b1:2b:04:d1:03:9b:56:38:55:
         d1:62:78:8d:69:81:61:5c:a7:c9:92:65:38:36:1b:ce:a7:49:
         ee:78:39:fc:b8:e1:b3:71:45:20:3e:1f:dd:a2:63:88:f0:65:
         03:01:80:f6:20:d5:48:57:64:c9:fc:85:dc:4a:b0:81:1c:21:
         de:cb:ad:9b:d4:c8:21:e8:99:cc:93:66:10:d6:b6:d3:b8:8d:
         4d:dc:6e:08:63:bf:bf:e8:91:3f:69:b3:6f:d0:e1:31:23:e9:
         29:dc:2a:b8:67:6a:90:1e:bf:37:88:bd:55:1d:c0:b9:54:4a:
         d3:4b:c8:06:36:cb:bd:9c:c8:87:61:62:46:29:d7:e0:40:da:
         f5:17:f2:14:5f:58:c8:e9:1d:69:a1:78:44:4d:16:20:7b:37:
         d2:f6:14:02:93:e9:53:df:05:57:1a:e6:23:18:9e:7d:1c:48:
         26:8c:14:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:03 2026 by rpki-client