Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/07D143BC294811F0BE054340C4F9AE02.roa
File:                     07D143BC294811F0BE054340C4F9AE02.roa (raw, json)
Hash identifier:          kzSsxZ682v8/ERGLhjD9XrRbqG/U1pi7dFHad+/CXo0=
Subject key identifier:   88:5D:3E:EE:57:92:CE:E8:63:35:27:81:CE:2C:BB:B3:A4:52:60:DA
Certificate issuer:       /CN=A91B7DCB/serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
Certificate serial:       AA
Authority key identifier: 0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/07D143BC294811F0BE054340C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 16:19:54 +0000
ROA not before:           Wed 21 Jan 2026 06:24:47 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     45586
IP address blocks:        2001:df0:f0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl
                          rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:40:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7DCB, serialNumber=0A2A3312E08BA9C41BE7E0FB58AA642C6D01B875
        Validity
            Not Before: Jan 21 06:24:47 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a4672a-ec27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8d:72:c5:5b:ea:50:a3:50:dc:5e:a8:73:be:
                    68:e8:fb:72:3a:40:d6:8b:98:2d:5d:f6:3e:03:dc:
                    5c:f4:90:e8:84:f2:ab:72:4a:71:18:5d:d1:f6:39:
                    7f:da:eb:63:f8:08:4e:5c:f2:93:75:a7:71:bc:a2:
                    5d:77:96:77:dc:76:79:87:f3:8e:3b:28:f1:aa:41:
                    dc:46:63:c4:5f:7b:6d:12:59:65:c2:c1:b7:94:24:
                    0b:bc:b8:34:19:e5:99:c1:2b:aa:e3:c8:71:6d:2c:
                    65:94:9b:cf:ab:f2:02:58:65:37:2e:7f:0c:97:4d:
                    f5:d9:6d:3d:13:28:85:2b:ac:83:b0:50:f9:dc:16:
                    4a:3b:73:90:4c:1b:48:1e:85:3a:95:d7:37:80:13:
                    d6:b3:02:3b:0c:01:2f:65:8b:78:1d:eb:60:4d:0c:
                    42:4a:46:2a:bd:07:e4:fd:15:e9:b8:1e:f2:98:88:
                    15:cd:7f:59:e5:7b:8f:00:53:d9:1c:1f:9a:83:95:
                    a8:a0:a1:21:d5:5d:f5:d4:91:2d:15:68:70:c9:d7:
                    a8:2b:d8:7f:b3:2e:18:48:00:32:85:a4:b0:57:06:
                    2b:1b:52:22:7e:67:2a:1c:02:25:b8:31:d1:53:0b:
                    6d:d5:b7:98:25:f1:ee:34:2e:cc:8d:39:ae:76:f7:
                    4e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5D:3E:EE:57:92:CE:E8:63:35:27:81:CE:2C:BB:B3:A4:52:60:DA
            X509v3 Authority Key Identifier:
                keyid:0A:2A:33:12:E0:8B:A9:C4:1B:E7:E0:FB:58:AA:64:2C:6D:01:B8:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/CiozEuCLqcQb5-D7WKpkLG0BuHU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CiozEuCLqcQb5-D7WKpkLG0BuHU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7DCB/01505A30294511F0AE1ABC74C4F9AE02/07D143BC294811F0BE054340C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:f0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b1:56:1b:5c:21:b0:01:3a:3a:ca:ea:25:89:3d:65:ba:4d:fc:
         3f:a0:82:45:38:a6:d2:e0:b7:91:54:db:8e:3f:e4:3f:4c:ba:
         bf:47:0d:b6:1f:a1:6e:a1:97:d2:5c:79:9e:4c:ad:8e:15:e4:
         89:c3:7a:00:a1:44:8b:2f:c6:a9:48:67:b3:5f:80:ab:69:79:
         45:e2:ab:47:38:46:75:db:7e:cd:fb:ad:d2:b6:cc:ad:cf:ac:
         d4:e9:66:68:8d:57:c0:36:7c:8e:52:da:78:7a:34:f9:e0:d5:
         83:1b:75:1c:c5:16:d7:45:74:50:b1:6f:b3:6d:75:b7:66:73:
         cd:79:09:86:83:8e:5c:b3:c0:df:49:ee:13:6a:c5:b0:1a:47:
         da:ef:32:60:a7:8c:91:b9:bb:c1:4e:7b:3b:71:13:2b:c6:43:
         0a:3a:a4:7d:91:f4:2e:51:e3:b0:8c:ba:2e:7d:55:0d:44:eb:
         18:e5:9e:4e:4a:65:5e:f5:4d:16:aa:18:f6:fc:8e:94:b1:4a:
         27:79:6a:45:96:ca:39:9c:c2:0f:11:2c:b9:1f:d1:a9:ae:af:
         d7:29:02:ab:e4:86:4b:2c:8d:85:eb:66:d8:87:2e:4c:9e:53:
         d4:f8:75:c3:0f:f1:d3:c3:ea:7b:1f:18:fc:3e:62:4e:4e:b0:
         64:62:d0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:13:02 2026 by rpki-client