Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa
File:                     AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (raw, json)
Hash identifier:          C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=
Subject key identifier:   D5:97:A9:01:42:B0:56:FB:90:26:CB:CB:77:E4:A6:84:F6:1B:86:74
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       08C5
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:03:31 +0000
ROA not before:           Tue 16 Dec 2025 21:17:22 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     10153
IP address blocks:        2406:9dc0:50::/44 maxlen: 48
                          2406:9dc0:1010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2245 (0x8c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Dec 16 21:17:22 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47f73-840f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:1a:67:b6:48:3d:cc:76:03:45:a4:4a:d2:a8:
                    0d:0f:eb:0f:da:34:08:05:17:80:43:50:51:90:fe:
                    c1:0c:2c:71:9d:d2:cd:e8:98:b1:8b:3b:5a:f6:87:
                    39:a9:9c:2e:fe:b8:74:75:db:4f:95:52:99:b8:e8:
                    4d:c4:d0:0a:48:35:0a:e2:18:8f:a3:02:b9:88:62:
                    01:4f:65:17:45:31:34:05:18:a1:2d:bd:3b:2a:22:
                    d0:72:a8:54:0d:2c:72:c0:cd:f0:d1:04:59:54:32:
                    b6:ad:b4:cb:13:66:b2:50:6b:fc:af:dd:3b:af:5c:
                    0c:45:de:b0:b0:86:9d:91:51:25:2e:04:19:dd:ea:
                    c5:0a:a8:45:35:b1:ed:fb:40:2e:13:ff:59:68:4b:
                    73:9e:7c:c8:d2:8a:44:ee:66:a9:cd:dd:7c:48:1b:
                    12:c6:87:41:55:fb:6b:ea:32:f5:d3:54:01:5d:54:
                    4b:97:02:41:d5:52:03:1b:84:92:d3:5c:3d:a4:72:
                    2e:fd:36:67:9d:fc:6e:35:0b:1a:ca:c1:fb:53:2a:
                    97:09:39:66:a6:6b:e9:db:a6:e7:fb:5e:4b:57:9d:
                    2b:be:c5:25:82:be:70:5f:57:b4:75:47:7e:0c:b9:
                    8f:6f:b3:92:35:26:38:94:2a:84:11:e7:3e:ff:86:
                    27:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:97:A9:01:42:B0:56:FB:90:26:CB:CB:77:E4:A6:84:F6:1B:86:74
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9dc0:50::/44
                  2406:9dc0:1010::/44

    Signature Algorithm: sha256WithRSAEncryption
         75:29:d0:b2:ca:fa:e8:0e:52:5c:5d:d4:e8:25:e9:e5:20:d2:
         e3:64:30:7f:90:d9:90:22:0e:0f:01:97:0d:9e:26:8e:f1:3e:
         05:ef:1a:15:f1:d5:8d:94:e8:93:6d:14:4d:43:8a:4e:bc:f9:
         4c:be:46:e1:f6:51:b1:d8:91:28:66:ae:52:56:c5:a0:07:61:
         c9:6b:fb:6a:7b:b0:79:ae:7e:36:bc:6a:b0:12:a2:46:d4:47:
         be:83:f6:18:f3:30:86:5a:ab:5d:de:bc:3f:31:7f:c8:43:f5:
         9f:cd:11:74:b6:56:1b:9b:9d:69:79:30:0f:6e:15:a5:d3:92:
         3f:43:d6:e3:62:8d:c8:3e:1e:20:6d:90:ef:b4:88:6a:71:d7:
         ab:a7:6c:af:ad:57:57:fd:f9:a3:30:f0:59:7a:38:e2:41:d1:
         d7:60:34:bc:5c:58:bc:b9:08:29:7e:7b:e8:f0:40:87:8c:6b:
         0e:82:d5:b2:6d:7a:5e:6a:c8:3d:f7:e4:34:a6:30:f1:09:99:
         b6:70:f6:22:7f:23:43:2e:0a:3d:26:ea:e6:32:c7:96:e6:43:
         fb:e0:79:63:c0:ce:d2:32:16:3f:5d:a1:a1:11:59:95:ae:c2:
         e9:5f:8f:42:63:74:b2:15:f5:4f:7a:39:e9:0a:ce:15:d1:ba:
         98:2c:d9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:20:57 2026 by rpki-client