Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/C13E824AC49F11EBAC936D7AC4F9AE02.roa
File:                     C13E824AC49F11EBAC936D7AC4F9AE02.roa (raw, json)
Hash identifier:          yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=
Subject key identifier:   B8:CE:9E:79:F5:06:97:F1:AB:BD:EB:70:D5:4C:9D:47:CC:A4:77:2F
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       08C8
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/C13E824AC49F11EBAC936D7AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:03:33 +0000
ROA not before:           Tue 16 Dec 2025 21:17:25 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     141747
IP address blocks:        2406:9dc0:1010::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2248 (0x8c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Dec 16 21:17:25 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a47f75-14d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8b:e3:a6:21:9e:05:0e:d2:da:ee:b3:be:71:
                    ca:53:87:ca:fd:88:b2:cb:18:7b:4c:1f:05:82:71:
                    64:c4:cd:b6:b5:9d:3f:da:c8:17:94:85:96:af:0b:
                    90:ef:db:65:3b:75:ad:f1:c8:fb:7c:be:0b:9c:13:
                    0b:b9:78:e1:a5:5f:9c:2c:f9:ca:3e:e8:57:66:d4:
                    3d:de:6d:5c:45:21:cb:56:22:1b:af:c9:c8:ae:ea:
                    18:98:42:d9:0a:86:fb:ba:7f:ab:44:b0:c9:5d:fe:
                    b6:e0:78:7a:35:5c:d6:79:be:d8:b1:cd:dc:de:af:
                    4f:33:7f:97:50:33:65:a9:1b:35:33:3e:81:17:e6:
                    b8:93:b7:ba:51:91:c8:87:d6:20:2e:93:4c:f9:0c:
                    82:8c:fa:15:ec:15:64:d8:b8:93:4a:9f:17:f0:04:
                    11:d1:12:7a:b7:2d:fc:16:3b:c4:30:f0:63:37:bc:
                    61:d0:9f:7a:f0:e1:e2:b1:bf:01:02:00:d2:f3:f9:
                    d7:cf:52:db:39:9a:b6:2d:1d:d6:cf:0c:55:22:08:
                    12:31:ff:94:ad:52:5e:68:19:11:51:6a:2b:fd:6b:
                    d6:eb:ae:3d:fd:57:32:a7:62:74:54:f9:b4:e3:02:
                    80:20:9e:17:0c:80:5f:ad:82:d8:37:0a:e2:0b:84:
                    8d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:CE:9E:79:F5:06:97:F1:AB:BD:EB:70:D5:4C:9D:47:CC:A4:77:2F
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/C13E824AC49F11EBAC936D7AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:9dc0:1010::/44

    Signature Algorithm: sha256WithRSAEncryption
         b5:eb:c6:05:07:06:51:16:c8:db:aa:13:db:95:84:45:d4:51:
         2a:0d:1a:2f:f0:40:4e:c1:a4:ee:c2:a8:18:2f:35:fc:df:fe:
         bf:55:f6:a5:b7:d3:56:f4:7c:ff:af:d4:73:1f:90:4e:e5:44:
         36:d2:e1:5a:52:04:57:d1:3c:2c:f5:85:66:c0:be:03:d1:4f:
         96:98:91:ec:76:d9:eb:8b:29:c2:38:ae:7b:33:72:c4:79:84:
         c3:60:ec:d4:36:a0:a1:dd:a6:69:cb:46:45:58:36:ee:80:c3:
         91:92:a6:42:d2:74:fc:e8:bc:11:7b:af:5f:1b:b5:89:9b:4c:
         16:da:c3:29:36:34:10:13:f2:48:d2:d0:a3:56:5e:23:a9:1a:
         ae:17:33:d2:b1:cb:7b:c9:e0:29:ae:af:29:92:8a:7c:83:ff:
         71:56:03:b1:83:10:76:05:f8:62:b4:0a:0c:35:59:9b:54:82:
         12:69:d0:aa:79:02:67:db:e6:b1:57:1c:60:6d:e3:f2:9f:2b:
         6c:3e:d7:e3:f3:91:19:25:0d:31:1c:11:ee:7c:9a:fa:db:7c:
         f4:be:8a:eb:e4:42:64:69:1f:d5:9b:d0:60:fc:60:94:fb:6c:
         d9:b9:ee:64:34:19:49:6a:20:d7:fe:e8:9e:b1:81:66:a5:5f:
         36:b2:55:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:50:08 2026 by rpki-client