Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/1BB90D46DABA11F0A08D9BA06CD3641D.roa
File:                     1BB90D46DABA11F0A08D9BA06CD3641D.roa (raw, json)
Hash identifier:          7sE/4U476Hc/mgcr6agMQHrBpEwfsvBVQ9XVXdE0iPw=
Subject key identifier:   02:7A:F7:D9:69:E3:51:D1:15:91:C2:B5:43:ED:99:73:FE:08:65:88
Certificate issuer:       /CN=A91C05AD/serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
Certificate serial:       030E
Authority key identifier: F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/1BB90D46DABA11F0A08D9BA06CD3641D.roa
Signing time:             Mon 02 Mar 2026 14:03:13 +0000
ROA not before:           Tue 16 Dec 2025 20:02:11 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     153606
IP address blocks:        2402:3b60:8006::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl
                          rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:03:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 782 (0x30e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C05AD, serialNumber=F512AD663A63326355CA8D8E9100B3CEAB3CB9FB
        Validity
            Not Before: Dec 16 20:02:11 2025 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a598a1-c550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:a7:b7:83:cd:ba:f8:be:16:9a:a0:9a:30:d8:
                    f2:79:2c:da:bf:35:1c:00:d3:b9:39:1f:4d:58:60:
                    82:5f:3a:7c:cd:0f:b3:4c:3c:6b:bb:c8:60:6b:6b:
                    98:69:5c:5a:9b:b4:84:a6:33:b5:ab:72:7f:73:fc:
                    9c:ef:bd:c5:c9:7e:e5:4f:88:3f:6f:2d:1c:72:d6:
                    ad:b4:a8:23:cb:1f:66:a7:21:56:e3:36:18:dc:d6:
                    a7:d5:8f:b8:75:c8:1d:be:d4:52:90:a6:91:2c:2f:
                    1e:cf:88:36:67:ae:36:48:0f:48:e6:4c:a0:45:c5:
                    f6:70:a3:a2:8d:65:71:7e:5e:b1:93:15:03:3b:aa:
                    60:06:c9:b5:aa:a7:d2:fb:a1:2f:78:88:02:c1:ff:
                    95:ce:f6:bc:e2:4f:40:dc:10:0a:2a:6c:e9:81:0e:
                    94:fc:b1:92:28:0d:8f:c6:cc:e9:6b:c5:b7:c3:ef:
                    8f:b4:da:ad:18:10:bc:79:a3:02:f3:52:11:f6:f6:
                    b0:46:e2:9c:d6:f4:d9:04:6c:95:64:40:f5:98:09:
                    55:b3:d5:c3:29:c4:dd:fa:1e:68:4a:a9:1b:24:f5:
                    73:d3:04:13:d7:51:55:d6:1c:ea:4e:77:a5:91:33:
                    f8:45:b4:98:96:8e:20:94:3f:1d:da:68:f0:17:48:
                    dc:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7A:F7:D9:69:E3:51:D1:15:91:C2:B5:43:ED:99:73:FE:08:65:88
            X509v3 Authority Key Identifier:
                keyid:F5:12:AD:66:3A:63:32:63:55:CA:8D:8E:91:00:B3:CE:AB:3C:B9:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/9RKtZjpjMmNVyo2OkQCzzqs8ufs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9RKtZjpjMmNVyo2OkQCzzqs8ufs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C05AD/95BE3BD61D3311ED96A10A60C4F9AE02/1BB90D46DABA11F0A08D9BA06CD3641D.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3b60:8006::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:42:d7:15:06:5e:2d:9b:f9:bd:fb:1a:37:5c:89:04:78:bc:
         ad:8e:c4:30:10:d9:87:d5:fe:74:1f:d3:a5:bd:b0:03:23:96:
         e7:e1:05:b5:7c:41:c3:7d:4e:78:5b:34:00:3b:ac:4e:47:72:
         3b:6e:c3:3e:99:71:91:c0:13:69:49:0a:ab:53:fa:45:cf:5d:
         b2:ae:02:66:78:af:c2:e9:39:d7:c4:de:c0:73:44:9b:d2:28:
         87:bb:e6:ae:d8:a4:cd:38:dc:46:2b:e9:a9:c8:34:52:82:f2:
         c4:36:23:08:f4:2c:a6:36:b0:b4:4c:4d:66:23:53:5f:f8:37:
         cc:91:61:a4:1b:ed:ff:b9:0e:e7:6d:53:73:61:4e:68:ae:27:
         63:b0:d7:e1:33:92:28:05:b4:bb:0c:d5:5c:5b:cc:8a:da:31:
         ce:53:0b:b9:6e:f3:34:c2:4b:b3:c1:f1:2a:b5:95:9e:81:f6:
         e3:00:b1:8c:c9:ba:cf:77:be:98:e7:62:b4:04:70:09:20:1b:
         ce:60:c1:4e:fb:96:c8:99:37:b8:cb:22:f6:b9:c7:fe:2b:09:
         af:af:a2:0b:92:30:bd:26:58:de:63:80:0c:1a:be:55:67:a6:
         db:6c:d6:d6:81:21:73:21:0a:94:3f:24:27:d4:e3:6b:db:0a:
         1c:33:c4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:50:26 2026 by rpki-client