Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/2902D956492411EAAC15FB67C4F9AE02.roa
File:                     2902D956492411EAAC15FB67C4F9AE02.roa (raw, json)
Hash identifier:          Jnv0aGtmJmZtRkDFN/NTaEJWu0H9zmfWsPffd7dQQS4=
Subject key identifier:   6F:68:80:E2:41:BA:41:8E:6F:4C:D4:90:ED:C2:DA:23:55:03:69:1C
Certificate issuer:       /CN=A91B9EF3/serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
Certificate serial:       0B84
Authority key identifier: F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/2902D956492411EAAC15FB67C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:37:55 +0000
ROA not before:           Wed 26 Nov 2025 18:39:21 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     45637
IP address blocks:        2001:df5:b000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl
                          rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 00:09:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2948 (0xb84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9EF3, serialNumber=F6CB2E8EBC7A892BFA15C447B39824A058C755AE
        Validity
            Not Before: Nov 26 18:39:21 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a45d53-ed8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d1:be:e9:96:cf:45:e5:95:1e:d4:77:ed:1c:
                    7c:27:0b:99:65:18:bd:75:70:85:ea:0e:4b:2b:f2:
                    c0:d1:60:b7:80:4a:c3:b4:a0:05:a6:d6:68:24:6c:
                    3c:22:66:aa:aa:41:b1:f2:89:23:86:1e:2b:d4:9b:
                    dd:d3:59:66:3e:ab:a1:6c:80:ee:1e:9a:86:f8:8d:
                    45:67:8f:6c:91:9c:ef:ba:59:f0:01:6e:45:6e:ce:
                    43:20:3b:37:b4:2b:34:5b:32:e0:70:47:ba:57:c7:
                    5a:a9:2c:15:38:7a:ad:d3:25:c9:6e:3b:6f:30:13:
                    3b:af:96:23:c2:62:18:2a:65:fa:33:4e:d8:8e:d2:
                    4d:bf:07:01:6b:f8:66:76:89:d0:8a:62:23:bb:63:
                    f5:58:ce:73:25:fe:70:5a:69:4b:88:45:ac:51:00:
                    3a:b2:06:be:5f:9d:4e:7f:ff:bc:8c:10:98:d0:c5:
                    2c:7c:38:53:19:64:63:17:21:1d:17:04:56:42:0f:
                    51:1b:37:44:27:50:96:4a:d7:d5:b7:b6:b9:51:8d:
                    90:31:b1:3f:ea:a8:de:ea:3c:6e:3c:13:f8:a2:23:
                    91:b5:03:68:b4:e0:3c:2b:af:f1:f7:86:8e:72:0c:
                    72:34:28:23:0b:0f:d2:02:21:99:f3:ac:89:d7:fd:
                    02:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:68:80:E2:41:BA:41:8E:6F:4C:D4:90:ED:C2:DA:23:55:03:69:1C
            X509v3 Authority Key Identifier:
                keyid:F6:CB:2E:8E:BC:7A:89:2B:FA:15:C4:47:B3:98:24:A0:58:C7:55:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/9ssujrx6iSv6FcRHs5gkoFjHVa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9ssujrx6iSv6FcRHs5gkoFjHVa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9EF3/2519CDF0492311EAA069A566C4F9AE02/2902D956492411EAAC15FB67C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:b000::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:2e:f3:d6:06:1b:63:8c:b4:17:02:5b:d3:5f:32:b6:d4:
         fe:84:68:94:58:fe:1a:7a:6d:23:62:14:97:44:6c:68:eb:0d:
         27:bc:19:eb:7c:1d:c4:50:8e:1e:e0:a0:1a:ea:06:fb:2e:f8:
         d0:30:34:af:61:b6:38:1c:92:70:d9:0d:e6:9e:19:70:fd:fc:
         59:f4:95:19:f0:45:ab:4f:82:94:53:ac:2e:ce:b0:e0:51:a5:
         b5:d5:7e:52:bb:b6:5e:3d:b1:73:6c:fa:38:b6:1e:d7:06:9e:
         8b:ea:f7:5c:01:24:a8:59:19:ef:a6:d4:af:b4:81:26:76:56:
         63:42:6f:96:eb:fe:fd:f3:7a:0c:9c:db:64:51:ad:ef:74:6d:
         41:3c:4a:e7:cd:d3:87:3e:af:e5:34:7e:e8:c1:53:a0:de:e4:
         83:9c:2f:42:24:03:54:7b:8d:b8:2b:b7:61:32:45:ec:8b:57:
         39:fb:80:fb:de:e5:4d:c1:b1:82:ae:b5:62:ed:fe:49:98:c5:
         8f:6e:52:6c:77:56:a1:fb:ef:4b:8c:01:65:7c:e6:c8:a8:69:
         26:25:87:d0:79:99:ff:bf:ca:14:d1:b1:c6:38:2e:d7:6f:11:
         86:72:f6:3f:03:f0:35:5b:4d:55:86:d8:9e:71:15:d8:1a:22:
         4e:f2:fa:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:24:52 2026 by rpki-client