Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/077331D0564511F09ED8993AC4F9AE02.roa
File:                     077331D0564511F09ED8993AC4F9AE02.roa (raw, json)
Hash identifier:          lYejlTwBBopLmNES3Iy4cIgBNqRVtyblBpdeOsMsWkM=
Subject key identifier:   9F:EF:0E:3A:FA:9D:B5:C6:13:3F:86:B0:38:AB:15:6A:B2:CA:80:A4
Certificate issuer:       /CN=A91B13FE/serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78
Certificate serial:       7E
Authority key identifier: AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/077331D0564511F09ED8993AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:09:26 +0000
ROA not before:           Tue 01 Jul 2025 06:31:33 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     154006
IP address blocks:        2001:df5:cd40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl
                          rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 126 (0x7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B13FE, serialNumber=AEDF8A2118286EC7901FA2A894B94CA100A3FD78
        Validity
            Not Before: Jul  1 06:31:33 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a3e626-71e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:f4:58:2b:6b:fa:85:c6:83:6f:47:a8:dd:
                    44:53:75:a9:62:f3:c0:34:02:f9:02:be:0a:11:ab:
                    89:ce:0a:e3:32:57:73:f3:12:69:0a:d4:39:66:97:
                    b5:ee:37:3b:0c:5f:bc:46:22:d3:8a:e8:c4:ff:4e:
                    19:95:c4:92:1a:6b:b3:7e:fc:72:6a:79:1d:9e:ef:
                    ea:fb:51:3c:48:15:b6:20:a4:9a:22:6e:c2:91:c6:
                    15:18:29:f8:6c:4d:f5:8b:b9:ae:23:14:6a:1b:1a:
                    33:0d:af:0d:80:f0:58:51:c7:64:35:0d:e2:5f:b4:
                    53:00:43:6a:ae:4f:d9:e9:fe:1c:4a:7b:f9:2f:e3:
                    e4:ff:fc:0b:16:72:5b:b3:94:57:bc:fa:6e:8d:a6:
                    ee:af:69:9c:42:1c:c4:80:f5:97:6d:24:ca:be:da:
                    d2:7d:ad:c4:18:d0:fa:7b:03:52:26:ea:6f:2c:d6:
                    e8:5a:9a:a0:4a:89:c9:30:96:10:ea:07:f1:e0:a2:
                    3e:e6:85:51:15:fa:70:16:e8:17:bb:5f:16:31:db:
                    97:6f:a5:56:5f:23:3d:db:22:a9:2f:3d:2e:49:9a:
                    81:f1:ba:a1:08:31:d6:04:28:66:48:4f:9f:9c:a8:
                    a0:56:67:a2:20:e4:fa:f0:02:a1:0b:63:6e:c9:0b:
                    32:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:EF:0E:3A:FA:9D:B5:C6:13:3F:86:B0:38:AB:15:6A:B2:CA:80:A4
            X509v3 Authority Key Identifier:
                keyid:AE:DF:8A:21:18:28:6E:C7:90:1F:A2:A8:94:B9:4C:A1:00:A3:FD:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/rt-KIRgobseQH6KolLlMoQCj_Xg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rt-KIRgobseQH6KolLlMoQCj_Xg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13FE/966D71EA564311F0B1627A15C4F9AE02/077331D0564511F09ED8993AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:cd40::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:8b:7b:b3:c9:19:d2:39:7b:74:bf:bb:ec:bd:a2:fb:d2:e9:
         81:c7:06:7b:0e:b0:ad:e4:6e:2b:95:13:f7:ae:4c:22:eb:03:
         be:44:2f:f6:97:f7:cc:7a:84:24:50:d7:15:a2:7b:21:c8:89:
         65:40:e6:a3:53:6e:9a:c9:59:58:73:3a:1a:82:63:df:56:bf:
         a0:01:2a:a1:7a:2f:5d:52:e0:21:bf:12:3f:f7:7b:dd:83:80:
         e6:6c:c7:2b:5b:8b:41:c3:25:c7:59:bf:57:23:df:9c:c1:fe:
         97:7f:0f:9b:24:89:c5:62:1a:fb:29:3d:9b:e3:a7:ad:99:4c:
         f2:df:4d:16:f4:2b:03:4b:25:e1:bc:0f:f6:f7:38:34:e4:65:
         cd:d3:13:1c:50:99:f8:1d:23:e2:a1:fd:ac:48:4c:e9:6d:ed:
         4d:75:e3:27:d4:7f:cb:72:1b:66:36:75:31:db:4f:b6:77:08:
         15:f7:eb:1b:fe:af:a5:83:75:9d:68:81:8a:fc:1d:c7:94:31:
         0f:3d:c5:40:a7:f7:d2:7b:ac:90:10:06:4f:0d:c8:2e:29:ea:
         e9:ec:4c:b2:9b:ef:71:94:38:64:22:93:35:3c:03:55:76:bb:
         aa:8a:d5:29:df:6f:a3:60:8f:90:d6:94:a7:74:5f:bf:fb:bf:
         49:ea:e4:90
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MTNGRTExMC8GA1UEBRMoQUVERjhBMjExODI4NkVDNzkwMUZBMkE4OTRCOTRDQTEw
MEEzRkQ3ODAeFw0yNTA3MDEwNjMxMzNaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV
BAMTDTY5YTNlNjI2LTcxZTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC9SPRYK2v6hcaDb0eo3URTdali88A0AvkCvgoRq4nOCuMyV3PzEmkK1Dlml7Xu
NzsMX7xGItOK6MT/ThmVxJIaa7N+/HJqeR2e7+r7UTxIFbYgpJoibsKRxhUYKfhs
TfWLua4jFGobGjMNrw2A8FhRx2Q1DeJftFMAQ2quT9np/hxKe/kv4+T//AsWcluz
lFe8+m6Npu6vaZxCHMSA9ZdtJMq+2tJ9rcQY0Pp7A1Im6m8s1uhamqBKickwlhDq
B/Hgoj7mhVEV+nAW6Be7XxYx25dvpVZfIz3bIqkvPS5JmoHxuqEIMdYEKGZIT5+c
qKBWZ6Ig5PrwAqELY27JCzJRAgMBAAGjggJjMIICXzAdBgNVHQ4EFgQUn+8OOvqd
tcYTP4awOKsVarLKgKQwHwYDVR0jBBgwFoAUrt+KIRgobseQH6KolLlMoQCj/Xgw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0ZFLzk2NkQ3MUVBNTY0
MzExRjBCMTYyN0ExNUM0RjlBRTAyL3J0LUtJUmdvYnNlUUg2S29sTGxNb1FDal9Y
Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvcnQtS0lSZ29ic2VRSDZLb2xMbE1vUUNqX1hnLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw
C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MTNGRS85NjZENzFFQTU2NDMxMUYwQjE2MjdBMTVDNEY5QUUwMi8wNzczMzFEMDU2
NDUxMUYwOUVEODk5M0FDNEY5QUUwMi5yb2EwIgYIKwYBBQUHAQcBAf8EEzARMA8E
AgACMAkDBwAgAQ31zUAwDQYJKoZIhvcNAQELBQADggEBANKLe7PJGdI5e3S/u+y9
ovvS6YHHBnsOsK3kbiuVE/euTCLrA75EL/aX98x6hCRQ1xWieyHIiWVA5qNTbprJ
WVhzOhqCY99Wv6ABKqF6L11S4CG/Ej/3e92DgOZsxytbi0HDJcdZv1cj35zB/pd/
D5skicViGvspPZvjp62ZTPLfTRb0KwNLJeG8D/b3ODTkZc3TExxQmfgdI+Kh/axI
TOlt7U114yfUf8tyG2Y2dTHbT7Z3CBX36xv+r6WDdZ1ogYr8HceUMQ89xUCn99J7
rJAQBk8NyC4p6unsTLKb73GUOGQikzU8A1V2u6qK1Snfb6Ngj5DWlKd0X7/7v0nq
5JA=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:51:28 2026 by rpki-client