Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BB3F5AAE799511F098E98265C4F9AE02.roa
File:                     BB3F5AAE799511F098E98265C4F9AE02.roa (raw, json)
Hash identifier:          7+6x+nkCOZ5eJCqABcReNt2hBYcHFj9EJZ35TbWhwnc=
Subject key identifier:   50:0C:4F:16:E1:0F:63:1D:6D:92:18:F4:FA:F0:96:C3:6E:AB:E9:15
Certificate issuer:       /CN=A91BC64F/serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
Certificate serial:       69
Authority key identifier: 74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BB3F5AAE799511F098E98265C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 08:13:28 +0000
ROA not before:           Fri 15 Aug 2025 05:07:25 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        2001:df5:fd40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl
                          rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BC64F, serialNumber=7453D8813BC8EF7290B110232358894C77C4DB37
        Validity
            Not Before: Aug 15 05:07:25 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a3f528-7cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f6:2d:d9:cf:04:6b:48:6a:30:9c:2c:8a:9e:
                    75:27:cf:d7:14:78:c0:bb:12:9a:26:08:d1:f0:56:
                    69:27:55:5a:f9:78:71:de:97:95:d3:ea:09:7d:0c:
                    0c:2d:de:ec:ac:0c:0b:e2:12:c7:22:9b:b1:d7:70:
                    a8:19:9e:fe:e0:75:dd:55:c0:15:d6:d1:d7:65:bb:
                    dd:17:a2:ef:29:f6:4f:17:dc:51:e0:8b:47:1e:46:
                    dc:fd:09:c0:3a:ae:4d:d1:68:aa:e0:00:54:3f:37:
                    52:6b:e4:7c:c6:ae:57:cf:ef:8a:cc:96:00:d8:eb:
                    9d:5f:d3:c7:8d:c2:6c:c8:6c:3c:74:18:f0:9c:8d:
                    38:a7:9b:f2:48:18:8b:a4:1e:26:90:82:b9:22:09:
                    ad:e6:de:bc:7b:7b:04:71:f6:2e:5e:47:23:fb:ff:
                    59:5e:13:7d:77:e9:ee:91:90:b1:89:ab:95:f8:31:
                    e2:b7:49:cb:be:cc:45:2d:74:11:e2:9a:30:63:5b:
                    3e:c2:a0:cc:b0:ef:b6:47:9c:d9:64:39:4c:9e:55:
                    aa:fe:bf:67:a9:23:a1:6c:87:11:01:71:2e:a9:60:
                    bd:6d:c5:27:a0:a6:5f:0f:20:0e:fc:13:f8:71:f9:
                    8c:fb:b4:17:97:ea:f5:d9:db:cf:a1:17:94:fb:ca:
                    a8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0C:4F:16:E1:0F:63:1D:6D:92:18:F4:FA:F0:96:C3:6E:AB:E9:15
            X509v3 Authority Key Identifier:
                keyid:74:53:D8:81:3B:C8:EF:72:90:B1:10:23:23:58:89:4C:77:C4:DB:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/dFPYgTvI73KQsRAjI1iJTHfE2zc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dFPYgTvI73KQsRAjI1iJTHfE2zc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC64F/360CA17A799511F0BECF2D40C4F9AE02/BB3F5AAE799511F098E98265C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:fd40::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:a2:87:d8:f2:fc:00:87:94:27:4c:03:8d:3c:ef:71:18:f8:
         31:28:b2:af:52:c6:c7:4a:d8:d3:2a:30:c9:8f:01:bb:13:db:
         9a:12:34:07:0c:ae:e8:ca:07:6a:ac:b0:2a:0b:bc:03:5d:ed:
         87:5c:ff:b0:2d:08:95:2a:41:5a:9b:d0:52:a3:32:b0:d7:69:
         3b:6a:03:f3:fb:63:38:33:cf:b4:7a:df:87:bc:86:34:a0:d3:
         f5:c7:64:30:d5:1a:66:a2:c7:2a:81:82:d2:69:b4:99:9d:fc:
         2e:06:df:70:8f:7a:7a:ff:ee:b3:1b:97:85:77:28:e2:c8:5e:
         53:9f:68:d6:1f:86:dc:b9:be:23:d1:b4:2b:5b:9e:0c:9a:97:
         89:49:e4:07:50:2f:af:ff:52:8a:ba:5d:63:4e:94:af:27:bc:
         0e:d7:f5:6d:2f:39:4e:60:2c:e2:33:50:da:15:c3:df:5e:fa:
         68:3e:ae:a9:58:35:bd:9c:39:64:cf:0f:d8:d8:f0:59:5d:ea:
         3b:d2:a5:dc:2c:6e:43:53:98:15:3f:1b:c4:4e:c7:5e:49:b4:
         d3:21:11:58:4e:2a:a5:7b:18:25:bf:8a:88:0a:45:60:d6:9e:
         59:10:87:c5:7c:64:f6:fa:ae:27:53:4b:32:4c:a2:80:f7:c7:
         74:0d:a9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:33:25 2026 by rpki-client