Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/7FC75E34C4B211EEB684BF7FC4F9AE02.roa
File:                     7FC75E34C4B211EEB684BF7FC4F9AE02.roa (raw, json)
Hash identifier:          q05ljgath9EJ2Ml9Q3ZPGNUrePFu/Fa2fuhBhk1dNp0=
Subject key identifier:   EB:AB:EB:0F:9B:A1:F4:F7:4F:15:04:05:D0:FF:03:62:EB:37:A4:43
Certificate issuer:       /CN=A91C167F/serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
Certificate serial:       0187
Authority key identifier: C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/7FC75E34C4B211EEB684BF7FC4F9AE02.roa
Signing time:             Fri 27 Feb 2026 04:23:17 +0000
ROA not before:           Fri 27 Feb 2026 04:23:16 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152462
IP address blocks:        2001:df3:6fc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl
                          rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 05:29:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 391 (0x187)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C167F, serialNumber=C2112F44D4458F185CDB9AD9A91AF82906489CC6
        Validity
            Not Before: Feb 27 04:23:16 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a11c34-6cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:e5:36:9c:30:c8:09:47:bd:12:4a:a8:95:
                    8a:6d:4f:d3:6a:47:09:f1:4d:b6:de:0a:0a:09:55:
                    59:82:f0:c3:26:3c:4c:0e:8e:86:f2:86:7e:11:42:
                    c4:0b:08:7d:50:e3:f2:3b:64:b1:7a:a7:00:45:29:
                    34:db:cf:2f:c8:81:71:36:bf:b7:d9:19:35:85:e3:
                    85:75:cb:a8:9f:b6:1f:20:b3:21:40:3f:6a:9c:66:
                    89:f1:ee:a7:b2:a0:ca:0c:89:3c:e8:6e:26:15:26:
                    a0:43:01:ac:dd:30:33:6f:fa:8f:88:80:61:f0:16:
                    f8:3d:bc:dc:75:1a:ce:1e:9b:74:40:24:1c:93:ae:
                    5f:31:74:ec:da:b1:f0:d7:26:cf:8a:be:96:ee:19:
                    c4:3e:97:41:d1:20:13:b0:28:18:b7:99:d0:17:e9:
                    c2:90:fa:25:e4:5e:bc:c9:89:52:ad:45:f9:64:8e:
                    fd:58:10:e0:c8:0a:9a:b4:5a:b0:20:e8:36:7f:fd:
                    cb:4a:53:df:86:cc:06:a0:d3:fc:5e:29:97:f2:53:
                    b0:d4:db:4b:42:98:c8:99:61:fc:37:6b:c8:99:34:
                    cc:ce:8d:11:da:36:57:12:24:f2:5f:2f:dd:cf:a2:
                    be:84:11:74:6b:27:c1:23:cf:89:85:9b:d0:b8:8e:
                    dd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AB:EB:0F:9B:A1:F4:F7:4F:15:04:05:D0:FF:03:62:EB:37:A4:43
            X509v3 Authority Key Identifier:
                keyid:C2:11:2F:44:D4:45:8F:18:5C:DB:9A:D9:A9:1A:F8:29:06:48:9C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/whEvRNRFjxhc25rZqRr4KQZInMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/whEvRNRFjxhc25rZqRr4KQZInMY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C167F/87C3454CC45F11EE8281CC7DC4F9AE02/7FC75E34C4B211EEB684BF7FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:6fc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:d4:dd:70:5b:67:f5:2d:5a:9a:17:6d:92:4f:b0:58:43:28:
         f0:a4:91:92:79:96:2e:5f:b1:44:13:6a:b3:c9:f2:eb:be:03:
         44:dc:6f:8e:63:d1:6f:58:08:c2:c6:28:98:a0:36:84:06:27:
         9f:04:ed:77:a5:af:9a:27:06:8c:b9:ae:18:0a:51:70:53:b3:
         6a:a9:40:d4:4c:64:8c:d3:dd:74:01:4b:73:c4:d9:2b:72:2a:
         1d:b6:15:43:7a:b9:92:c4:fd:5a:5c:f1:e6:18:a8:85:e4:f1:
         9d:05:79:94:56:f3:84:63:7d:31:0c:7c:b2:1e:75:ce:08:84:
         50:19:21:10:83:49:85:28:69:73:0c:5a:a5:b9:fd:37:08:ce:
         73:d9:c3:77:5a:0e:ee:3f:79:7c:82:df:05:85:f9:23:89:0c:
         42:65:c3:04:83:b4:7c:c1:8b:d9:5d:50:aa:08:d9:25:e6:0e:
         5b:4a:3e:69:83:e1:0d:88:d2:0b:92:b5:d9:7e:9f:38:73:b0:
         84:df:3c:5b:63:5a:96:96:eb:6a:d9:c7:f7:c8:af:dd:89:fc:
         54:1d:10:85:1f:f3:69:b4:46:c9:fc:f0:29:f4:af:bc:6d:83:
         99:cb:ca:2a:2c:c1:e0:9a:b6:fa:d6:13:f7:ce:f5:32:89:00:
         dc:8d:81:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:12:02 2026 by rpki-client