Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/F8C50B08201711F0A5D51F16C4F9AE02.roa
File:                     F8C50B08201711F0A5D51F16C4F9AE02.roa (raw, json)
Hash identifier:          0V0IRbzifSTjNSAVOPWTTktiswJ9KarZ5qkmJcePTMA=
Subject key identifier:   37:17:08:FD:30:0F:00:21:9C:E1:8E:FB:34:96:5F:AF:74:C2:41:B3
Certificate issuer:       /CN=A91C66B2/serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31
Certificate serial:       9F
Authority key identifier: 3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/F8C50B08201711F0A5D51F16C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:03:27 +0000
ROA not before:           Wed 23 Apr 2025 07:52:58 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     153782
IP address blocks:        2001:df5:5c40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl
                          rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 08:35:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C66B2, serialNumber=3F31FB5D8EF47DAD38DD92EA1A89E88871403A31
        Validity
            Not Before: Apr 23 07:52:58 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a3e4bf-52a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:79:e1:8b:1f:70:1c:89:7e:7b:21:cd:77:ca:
                    fc:60:42:d7:73:d9:4e:eb:9f:ab:03:34:aa:06:54:
                    04:0a:2a:ef:b9:51:2e:2f:c7:ad:3e:22:95:c1:09:
                    50:e9:ed:b7:4c:cb:a0:a0:79:6c:99:55:0f:b7:38:
                    9c:bb:59:e7:8a:74:0c:39:fa:f4:9f:e2:8e:a7:42:
                    64:e3:fe:04:e7:b8:ea:09:10:a4:e0:1d:d7:eb:b0:
                    ee:e6:48:b2:e0:95:95:1d:be:27:08:fb:59:60:3c:
                    dc:95:50:79:85:7e:d1:cf:5a:86:dc:7b:23:32:59:
                    79:7b:b0:eb:90:7f:cb:96:34:01:1a:8b:d2:dc:04:
                    44:67:5e:6c:70:e2:1a:fc:07:21:cd:15:41:15:61:
                    05:c9:9e:ab:17:92:0c:fe:f5:3f:ca:71:c4:0b:bc:
                    f6:ff:6a:fb:95:8c:57:e1:72:22:5b:6a:6b:eb:e2:
                    92:bf:85:b6:f0:af:46:00:f2:1d:45:06:1c:e9:61:
                    99:d4:a1:8a:f4:41:ff:83:4d:18:fb:6f:ec:78:e1:
                    ec:16:bd:e5:59:fc:0b:c6:a4:6c:cd:da:0a:2b:93:
                    f7:8e:ba:00:7c:5e:0a:a8:34:83:6c:56:2b:39:3a:
                    cc:eb:ae:2f:8f:cb:65:bd:d9:08:33:bf:9f:b6:95:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:17:08:FD:30:0F:00:21:9C:E1:8E:FB:34:96:5F:AF:74:C2:41:B3
            X509v3 Authority Key Identifier:
                keyid:3F:31:FB:5D:8E:F4:7D:AD:38:DD:92:EA:1A:89:E8:88:71:40:3A:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/PzH7XY70fa043ZLqGonoiHFAOjE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PzH7XY70fa043ZLqGonoiHFAOjE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C66B2/C4F15472201611F0A8D74314C4F9AE02/F8C50B08201711F0A5D51F16C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:5c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         b7:26:23:74:8b:06:7c:f8:a1:32:2c:00:ef:bc:03:2c:31:b8:
         81:67:9d:0c:ce:90:40:9e:27:fd:e7:3f:fe:d5:37:c3:47:26:
         3b:bf:55:19:59:ce:34:c3:f0:79:6d:02:7b:a7:83:84:80:37:
         76:42:1e:50:3d:35:a0:e5:2d:ac:5e:68:e8:b3:7b:e5:5f:08:
         94:2e:63:af:88:2d:c2:47:af:05:d3:41:43:b9:4e:82:6a:89:
         b9:56:52:42:79:f8:44:e5:46:2d:8b:78:fd:9a:8c:fc:34:17:
         40:28:63:86:19:3e:44:3c:fb:b6:1d:92:d7:7e:28:7f:c2:4c:
         f4:35:1b:94:b1:50:f4:fd:76:86:89:df:91:dc:0c:2d:ea:2d:
         fe:76:53:93:a3:d2:d5:50:64:f6:46:71:a9:53:a5:89:ec:6c:
         18:61:34:b8:e5:71:f6:20:5a:20:55:79:ba:39:bf:52:f7:71:
         63:74:fc:58:e0:35:e7:8d:a6:38:c7:16:2f:f4:cb:08:d2:2a:
         75:6d:f7:1b:76:c7:04:68:2c:e1:ff:eb:18:fb:eb:62:b0:12:
         a8:f3:43:ac:a3:ef:01:eb:28:f1:4d:32:bb:35:cd:01:05:a5:
         eb:51:90:fc:27:ac:47:09:ba:38:c7:81:9e:02:28:62:46:c1:
         f0:bc:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:17:29 2026 by rpki-client