Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/A8896B1892E811F0A5E48134C4F9AE02.roa
File:                     A8896B1892E811F0A5E48134C4F9AE02.roa (raw, json)
Hash identifier:          Fii/PTphWom/Flz+7QBuofT8Hy3WHpjWFmH/cbhMzx0=
Subject key identifier:   60:4C:BB:25:0D:32:27:70:69:85:89:07:66:51:F4:B4:12:67:F8:D4
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       0A00
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/A8896B1892E811F0A5E48134C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:35:26 +0000
ROA not before:           Tue 16 Sep 2025 10:34:01 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     152865
IP address blocks:        2406:7ec0:1008::/46 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
                          rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2560 (0xa00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
        Validity
            Not Before: Sep 16 10:34:01 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a478de-97a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e6:44:f0:ee:36:fc:35:42:ad:96:e7:33:2d:
                    5a:a7:07:83:30:01:41:dd:21:b2:db:f5:15:f1:ae:
                    46:cd:6d:5c:a0:0f:1f:43:07:7e:2e:59:8c:0d:50:
                    55:cf:40:94:66:78:8a:9d:47:8d:a9:49:42:cd:c1:
                    83:a2:2a:cf:41:93:a8:95:e9:89:d7:8f:fb:7c:2d:
                    da:59:77:ff:05:01:b8:56:2b:c6:4e:27:d1:b1:6e:
                    9f:91:9c:f2:c1:67:35:cf:dd:4a:49:b1:20:39:a3:
                    22:cc:6b:15:8a:11:df:6c:ad:9f:43:48:85:cc:6a:
                    a1:8d:7c:f2:99:af:45:25:24:32:66:d5:5d:67:ef:
                    d4:cb:85:67:0e:95:4e:01:01:85:6a:fd:23:64:46:
                    2e:c6:a0:b9:c7:26:3b:93:17:e8:0a:2f:97:69:df:
                    32:a6:32:94:71:aa:61:70:a1:e1:08:65:2c:fe:4f:
                    90:7f:20:83:0c:22:31:eb:f5:a9:cc:f6:98:d8:9d:
                    b9:55:16:14:90:90:45:e7:c9:64:f0:c7:b6:cc:c0:
                    90:ee:b2:15:a4:01:88:52:32:bd:7e:4e:cc:8d:4d:
                    09:18:95:50:07:8e:03:9c:1d:9e:a5:f4:e5:a2:79:
                    b7:6e:35:91:dd:1d:10:78:6e:e9:bf:54:dc:d8:91:
                    ab:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4C:BB:25:0D:32:27:70:69:85:89:07:66:51:F4:B4:12:67:F8:D4
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/A8896B1892E811F0A5E48134C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:7ec0:1008::/46

    Signature Algorithm: sha256WithRSAEncryption
         44:89:5f:2b:1d:c8:92:c6:b2:aa:e3:4c:eb:d8:ff:7f:8e:24:
         06:18:57:62:39:f0:06:97:11:b3:3f:02:03:73:93:02:0e:69:
         3f:69:98:13:b0:b6:b1:4b:32:eb:ff:66:73:4d:cf:c9:72:e9:
         31:54:b9:f2:cb:56:5a:c0:11:cb:6b:63:43:55:d5:bf:9f:1f:
         6b:90:20:a3:62:e0:b3:6e:83:4f:23:cd:ad:64:65:07:fd:75:
         aa:c1:6f:e7:bc:77:7e:31:e7:88:91:fa:d2:ee:91:f5:89:f0:
         98:dc:f4:eb:43:72:91:6b:c2:49:21:c5:3c:65:3f:9f:15:55:
         74:47:b9:cb:e7:99:73:88:07:e5:73:68:18:bf:29:60:28:2f:
         19:df:35:28:f9:00:33:96:69:62:76:0c:b8:95:11:a9:db:09:
         d2:c6:f2:ee:36:65:43:0b:08:be:5d:7c:b6:dd:27:da:2c:9a:
         b0:f8:c7:d8:10:cd:4f:f3:c0:4f:53:29:b9:73:01:40:7c:0d:
         a1:14:8d:f1:11:e4:4c:8b:24:e4:40:54:94:53:b2:c7:77:90:
         6a:bd:7a:ac:2c:b2:33:37:0f:aa:77:9c:44:f4:1d:98:87:eb:
         f3:01:b7:72:b4:25:2b:6c:68:3c:38:2d:22:45:77:8c:67:7d:
         c9:21:39:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:01:10 2026 by rpki-client