Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa
File:                     8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa (raw, json)
Hash identifier:          T8baqypAJteFawFWQo7rv2BFEthoLxlG1JlHYcEv8qI=
Subject key identifier:   42:99:CB:6C:79:AF:0F:00:12:94:0D:B5:2A:10:F6:6C:8B:F6:7C:04
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       09FF
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:35:25 +0000
ROA not before:           Sat 02 Aug 2025 21:01:54 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     38656
IP address blocks:        2406:7ec0:1007::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
                          rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2559 (0x9ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
        Validity
            Not Before: Aug  2 21:01:54 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a478dd-ea84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e5:ee:5e:7d:ad:8f:49:fa:1e:f9:0f:bd:11:
                    e8:19:c7:03:96:ac:32:69:df:28:2e:6d:1b:63:cb:
                    f8:2f:d6:37:97:40:ee:66:f0:0e:95:ab:5b:45:27:
                    fa:92:9f:1e:43:d5:a0:cd:35:4f:9f:30:be:dd:d1:
                    1a:1a:c7:e8:a1:33:6b:0b:4d:34:f9:f6:4d:27:1a:
                    4a:4c:d3:2b:2c:bb:84:64:aa:c6:f6:f7:de:16:a9:
                    f5:8f:30:4d:95:32:82:90:3c:8b:32:bb:9f:e6:90:
                    83:3d:d8:02:73:3b:76:be:85:e6:f9:36:7a:63:ee:
                    ab:c4:c6:52:df:bc:99:6f:e8:25:75:b3:db:45:e0:
                    9c:a0:95:fa:aa:7e:f0:79:1b:d5:3e:90:02:f1:f6:
                    b9:df:67:f0:07:40:70:ca:38:e0:81:60:20:3a:c6:
                    f8:15:fd:08:7c:9b:fe:35:6c:23:e4:3e:fa:63:eb:
                    b3:96:c2:f1:e4:e0:97:d7:c7:0b:3d:d1:60:0e:2c:
                    5d:df:1c:8d:e1:23:9a:d3:33:e1:9f:71:a3:bd:72:
                    96:a8:d5:53:68:17:25:36:51:6d:e4:d9:2c:5d:39:
                    eb:ad:f9:9b:22:10:f6:f8:c8:cc:82:c0:87:d5:88:
                    d8:8b:2f:06:0a:3e:41:0c:ec:7f:83:80:c9:9b:71:
                    c9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:99:CB:6C:79:AF:0F:00:12:94:0D:B5:2A:10:F6:6C:8B:F6:7C:04
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/8DA3D4E03F7E11F0B8EF8F28C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:7ec0:1007::/48

    Signature Algorithm: sha256WithRSAEncryption
         bf:76:10:12:31:6d:fc:17:6f:1f:cc:8b:11:4d:e3:b7:e7:82:
         cb:da:c1:f8:13:b4:9e:80:a8:19:b8:ac:08:d4:35:71:4f:df:
         48:ac:19:1b:68:99:a9:72:fc:0f:55:1d:9f:1a:73:b5:bb:85:
         e0:be:4b:11:df:5f:a3:b4:cf:83:3b:fa:54:cd:c9:44:17:79:
         e4:36:07:83:d9:a0:02:89:65:48:dd:f3:46:b5:41:46:39:03:
         29:f5:8b:11:0d:40:83:9a:e4:81:ed:02:ce:a7:fc:17:54:9f:
         ec:48:25:53:c8:eb:9c:18:8e:17:2f:c2:e0:58:4c:03:7d:04:
         7c:73:6e:9b:dc:26:f5:37:ff:e9:92:cd:f0:5f:dc:cb:65:c9:
         e6:e9:18:de:98:8c:38:54:68:34:86:26:74:b0:7c:95:53:8d:
         4a:5c:61:a7:c7:bd:80:ab:37:3c:4e:b9:4b:7e:84:de:10:0d:
         2d:6c:ae:52:43:9c:e2:5d:d4:40:b6:65:89:15:a3:f9:17:88:
         ef:4e:fc:1e:5d:df:c2:b3:18:b6:94:e6:34:b3:6f:69:83:ff:
         37:d7:78:54:e0:80:9c:87:55:9d:d5:ca:45:0f:34:96:a6:1f:
         5a:b4:5f:02:4b:33:e7:ac:7b:dc:64:8e:05:d5:99:2f:16:b8:
         6a:f9:9a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:02:30 2026 by rpki-client