Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/DEDB3932BED411EF835BB47AC4F9AE02.roa
File:                     DEDB3932BED411EF835BB47AC4F9AE02.roa (raw, json)
Hash identifier:          WziZMnogtrt5ODR5BwAGdePYHn5IgubVnNvNashcDd8=
Subject key identifier:   4A:D9:44:AA:D9:2B:70:8A:84:3E:E0:EB:2C:61:B5:8A:7C:10:81:C4
Certificate issuer:       /CN=A91C8307/serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
Certificate serial:       E6
Authority key identifier: 3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/DEDB3932BED411EF835BB47AC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:13:37 +0000
ROA not before:           Sun 15 Feb 2026 06:25:10 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     133496
IP address blocks:        2001:df4:cc40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl
                          rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8307, serialNumber=3DD095BE7A3BD1DD829E2A2649FC7E81A7EFE34C
        Validity
            Not Before: Feb 15 06:25:10 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a41f60-492e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b1:58:44:36:e8:02:52:1c:b4:c1:50:a9:31:
                    3e:20:b4:e6:f6:ff:33:d8:41:09:84:7f:d4:57:10:
                    88:8f:06:10:59:3d:27:a5:dc:c0:5c:05:7b:e8:44:
                    06:57:a7:de:63:a4:5e:e7:28:bd:95:41:3f:3b:05:
                    b2:39:a5:c3:d4:9a:ee:9f:5f:9b:49:0b:31:34:95:
                    dd:08:e0:ba:9d:06:dc:fe:a8:7c:23:fd:47:9c:8c:
                    b0:d1:a5:f9:de:44:38:79:77:f1:43:94:b7:32:9e:
                    d9:1f:3c:6e:c1:36:87:f0:c0:2e:b4:6c:4c:f3:b0:
                    f9:9c:0f:bf:08:95:5a:a8:aa:11:2a:1e:5a:01:2a:
                    b6:7f:b6:6a:41:f2:f3:50:42:c6:f9:9a:9a:05:5b:
                    92:41:90:f7:93:40:c1:2f:83:2d:3a:bf:c7:fd:1d:
                    78:5c:6e:66:f6:3f:95:cd:8f:a6:e4:25:2f:7f:61:
                    aa:37:25:d4:d5:97:68:ff:f6:81:6a:a8:e3:a0:0a:
                    ef:ea:4e:f2:70:06:6c:46:af:ab:54:22:19:c9:4e:
                    b0:44:a4:15:e2:76:fe:5e:55:02:e3:25:37:18:72:
                    79:8d:e5:3b:48:ed:02:67:09:fe:54:3d:08:02:72:
                    5c:90:18:ad:92:c2:06:77:aa:27:5e:44:b4:c2:ec:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D9:44:AA:D9:2B:70:8A:84:3E:E0:EB:2C:61:B5:8A:7C:10:81:C4
            X509v3 Authority Key Identifier:
                keyid:3D:D0:95:BE:7A:3B:D1:DD:82:9E:2A:26:49:FC:7E:81:A7:EF:E3:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/PdCVvno70d2CniomSfx-gafv40w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PdCVvno70d2CniomSfx-gafv40w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8307/3432F60CBECD11EF98C74132C4F9AE02/DEDB3932BED411EF835BB47AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:cc40::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:18:7e:3b:5c:95:a5:f0:30:a3:d4:4c:d0:c5:17:e6:8f:bf:
         d8:6d:52:31:a2:04:73:a9:e2:ea:3b:36:85:5e:e4:d4:81:52:
         4b:3b:fe:46:b0:e9:11:02:de:ff:da:27:db:41:45:6c:c3:76:
         ee:3e:14:c3:2f:e6:44:d7:5f:eb:22:7a:98:2d:50:be:89:0d:
         2c:ff:4a:2d:08:15:ba:d4:7a:8c:c3:2c:2f:c3:65:4d:93:c6:
         a8:e2:07:50:62:06:b5:91:e7:69:78:14:09:07:ca:e6:66:a6:
         45:c4:b3:eb:ea:a8:3e:27:41:57:63:1e:2e:f6:a6:84:97:e1:
         eb:5f:c9:46:c9:b4:94:f2:13:cb:f4:3d:91:29:17:3d:19:37:
         e0:c5:0e:28:0f:2c:14:1f:ba:0b:2b:5f:76:bc:2c:18:89:fd:
         2a:2e:ba:77:3e:9a:b1:98:bf:cd:7b:cd:8b:d3:1f:95:0c:0e:
         aa:cd:4f:1b:f4:a6:be:5b:96:bb:0d:40:1f:5f:58:c8:98:0a:
         2f:f0:74:c4:79:2c:da:f7:de:54:c9:0f:55:74:56:aa:1b:ea:
         bc:2b:04:db:b1:ae:80:e0:7d:c5:3c:0b:e6:78:e8:c3:88:b8:
         0d:a1:e1:67:62:35:3f:cf:a4:c2:8b:7f:6c:f9:b4:4f:92:69:
         48:fd:6b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:24:42 2026 by rpki-client