Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/EAAE802834B911F1B8589B72BC833773.roa
File:                     EAAE802834B911F1B8589B72BC833773.roa (raw, json)
Hash identifier:          hYHnbi70DEeeHLUAwomrQxmvt6OsQN+4vZ8kSWKcIq4=
Subject key identifier:   0D:BA:40:5F:6F:39:EC:4E:69:B9:29:02:AA:A2:E5:1D:D6:2F:9B:F4
Certificate issuer:       /CN=A91C7AB9/serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
Certificate serial:       01CD
Authority key identifier: 59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/EAAE802834B911F1B8589B72BC833773.roa
Signing time:             Fri 10 Apr 2026 08:47:34 +0000
ROA not before:           Fri 10 Apr 2026 08:47:34 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     213607
IP address blocks:        2401:f6a0:4000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl
                          rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7AB9, serialNumber=59CA0ED6B96B70C29B3DD8E4EC598EA12E0DC2E6
        Validity
            Not Before: Apr 10 08:47:34 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69d8b925-d339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2b:74:c7:44:a4:39:bc:c0:5a:df:a6:21:28:
                    78:b0:09:e4:69:1c:2b:10:38:26:71:ac:f5:ef:fa:
                    f5:bb:9f:29:d2:07:92:70:ab:ae:5f:98:17:06:7b:
                    7a:e0:31:a6:0b:d9:d9:bb:95:7a:fd:94:11:8c:32:
                    b5:14:30:8a:68:dd:1c:8f:77:4f:68:01:5f:05:1a:
                    7d:ea:26:d1:3c:37:20:ab:17:fb:53:bd:7d:8e:b8:
                    5b:14:f1:f1:ff:0a:02:54:67:b0:39:88:7f:06:30:
                    22:06:96:e2:d1:ff:33:51:a8:c6:e4:47:80:41:d3:
                    e5:c6:9b:14:f1:ed:1b:fe:7f:fd:4e:35:f7:37:67:
                    b6:32:7d:18:ec:2b:1d:a2:2f:f8:f9:3b:22:06:2a:
                    c5:3f:11:1c:70:18:07:8d:c2:70:5c:9d:22:ac:b1:
                    62:d8:a9:db:c3:e6:ad:ea:c9:69:58:4b:65:3e:d6:
                    29:7c:ed:d2:bd:ee:37:e7:ef:11:85:37:e9:fc:c5:
                    26:3a:e1:1d:da:3f:2d:9f:ca:f5:e4:e5:5a:4c:fc:
                    98:e8:20:13:14:df:9c:a6:5a:c5:94:4c:76:73:45:
                    3f:d0:0f:e9:4b:e7:c9:10:f0:cd:0c:ab:9a:eb:55:
                    77:03:f5:94:62:80:4d:c4:69:9f:7b:a1:e2:17:f8:
                    5e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BA:40:5F:6F:39:EC:4E:69:B9:29:02:AA:A2:E5:1D:D6:2F:9B:F4
            X509v3 Authority Key Identifier:
                keyid:59:CA:0E:D6:B9:6B:70:C2:9B:3D:D8:E4:EC:59:8E:A1:2E:0D:C2:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/WcoO1rlrcMKbPdjk7FmOoS4NwuY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WcoO1rlrcMKbPdjk7FmOoS4NwuY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AB9/AB5753069B1311EEAAAA3982C4F9AE02/EAAE802834B911F1B8589B72BC833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f6a0:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:1a:be:b3:45:ff:82:45:8b:a1:ce:5a:85:f9:99:61:f6:46:
         65:69:97:be:ba:52:e2:45:f9:25:37:db:b2:01:2c:e9:a1:ab:
         59:3a:02:c3:07:c0:36:7e:e2:92:0f:23:08:56:cb:28:dd:04:
         d5:99:ac:d3:68:c1:ff:37:50:6c:9f:a7:79:1c:41:08:e5:59:
         af:ee:73:9e:10:8e:9f:26:bd:65:b7:91:63:a4:1b:1d:97:67:
         ed:27:53:a5:17:48:da:14:39:b9:cc:53:65:5e:0a:d7:b9:60:
         85:fb:4f:13:31:8b:73:69:9c:40:74:c9:f7:70:c9:93:6f:e0:
         35:0c:da:88:23:fe:09:f2:74:c6:7d:5c:74:91:f8:89:ac:57:
         c1:78:47:19:51:5d:27:f5:fc:81:dd:c4:fd:f1:e8:a5:bc:0a:
         09:d3:33:d5:04:96:17:84:dc:9c:06:0e:56:40:c8:e9:1d:6b:
         2c:70:fe:34:24:2d:ac:4e:a5:5d:d2:96:f7:f0:32:1c:37:c4:
         78:01:69:cf:89:7d:dd:fa:2f:07:84:b4:2c:ad:0d:a5:5a:f4:
         3a:9a:69:a6:1e:86:c6:02:06:e2:de:26:16:45:52:49:48:b0:
         38:db:15:dc:c6:9f:76:92:a4:16:05:ed:74:d7:43:ae:b7:89:
         ee:7a:77:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:42:49 2026 by rpki-client