Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8A916FDC83D711EAAA5AEC56C4F9AE02.roa
File:                     8A916FDC83D711EAAA5AEC56C4F9AE02.roa (raw, json)
Hash identifier:          i+DeWSxP+SUrPsRvRk++UVMLgUpYl/0wKKoB8sZiS1A=
Subject key identifier:   5A:BC:2D:CF:CA:33:AC:2B:5B:D1:72:1A:E0:45:28:EF:F9:49:90:05
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0B23
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8A916FDC83D711EAAA5AEC56C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:50:32 +0000
ROA not before:           Wed 26 Mar 2025 19:59:53 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     1613
IP address blocks:        2001:218:3002::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:29:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2851 (0xb23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: Mar 26 19:59:53 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a47c68-b16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:86:cc:b7:7e:92:ca:87:8d:a9:cf:8e:49:57:
                    71:1e:f0:e9:be:1e:b9:4e:b9:43:fc:4a:5c:3f:06:
                    b9:65:f7:33:47:18:41:73:9b:3d:19:ea:6c:ce:95:
                    cc:3f:db:45:96:6e:dd:69:16:49:be:67:54:87:a4:
                    18:9b:58:e4:7c:be:e9:39:18:4f:1b:21:4c:45:8f:
                    e6:97:39:fb:4c:3d:e4:b2:6c:52:df:8f:cd:d5:57:
                    0f:b0:b0:3f:e3:6d:8d:e6:78:e0:13:50:5f:37:10:
                    46:ad:a0:60:63:e7:71:60:cf:45:a1:b1:34:63:d1:
                    fd:07:49:25:ed:0f:a1:a6:eb:b1:d3:ea:00:29:e3:
                    e4:f6:ea:45:8f:02:08:98:31:ae:dd:46:37:82:ef:
                    73:0a:a0:7a:4b:88:54:e0:2e:84:f7:ea:dc:b4:f9:
                    96:09:09:48:65:5d:6e:46:9b:65:82:6f:51:76:80:
                    98:6a:0c:da:a8:eb:65:55:07:27:4a:5e:2b:c3:96:
                    6e:13:ff:81:2f:6c:aa:db:ea:b3:34:84:bf:b0:f4:
                    b2:7b:3e:6b:31:82:38:03:8d:23:fb:d8:1e:a7:7b:
                    ee:57:3e:77:2a:6e:26:97:87:98:7d:54:4f:ac:d2:
                    7a:0e:47:03:cc:54:72:d2:ed:5a:c6:0f:62:85:12:
                    e7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:BC:2D:CF:CA:33:AC:2B:5B:D1:72:1A:E0:45:28:EF:F9:49:90:05
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/8A916FDC83D711EAAA5AEC56C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:218:3002::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:b2:aa:15:72:83:6f:94:70:4d:39:45:63:a1:4e:18:2f:66:
         2e:80:b4:3f:bd:0b:5f:98:75:db:87:3e:f7:69:db:c2:9b:07:
         d9:44:f2:47:1a:03:52:12:6d:72:bf:99:60:9a:9b:82:03:dc:
         fb:57:59:8f:8d:56:24:dc:da:ad:3d:14:1f:14:5b:5e:30:6b:
         a9:ff:7f:eb:3e:1e:0c:73:46:95:a9:7d:0f:06:dd:9b:ae:0b:
         df:8a:c5:d4:f2:c4:0a:ff:14:29:98:04:fc:2c:a4:04:82:5a:
         c5:73:ca:bc:6c:2b:65:b2:c1:73:9a:f0:c0:04:f0:1b:b2:82:
         59:4a:69:e9:bc:e6:da:d3:ab:f9:85:be:44:b8:d9:6b:c4:cd:
         05:16:76:46:d1:02:41:1a:3a:4d:3d:50:3f:f0:5c:c5:77:66:
         00:ad:09:90:ce:c9:32:e2:75:95:59:11:75:b3:5e:a7:d9:3c:
         cd:b1:3b:d0:88:52:8d:87:e3:10:a3:cf:dd:a4:eb:18:06:83:
         bd:90:45:69:43:51:d5:8e:dd:35:75:82:5c:da:65:2c:33:b5:
         d1:17:7a:58:73:f5:81:e0:5b:78:96:6d:e8:bc:b2:60:8b:f9:
         01:c8:cc:7c:fc:6e:38:b5:9c:01:6a:5e:8f:d8:c0:3f:cd:de:
         15:7e:d8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:17 2026 by rpki-client