Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/B735FEEA118411F1951E019C333D8C67.roa
File:                     B735FEEA118411F1951E019C333D8C67.roa (raw, json)
Hash identifier:          qdQyipYaThgccgmXAXR/iB4/lWGcn5evCaadYGd7lUg=
Subject key identifier:   86:1E:CD:5B:EE:0A:68:6E:F2:16:EB:55:23:49:95:6A:80:E3:0B:3B
Certificate issuer:       /CN=A91C9706/serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8
Certificate serial:       0B
Authority key identifier: 85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/B735FEEA118411F1951E019C333D8C67.roa
Signing time:             Sun 01 Mar 2026 05:33:11 +0000
ROA not before:           Tue 24 Feb 2026 13:28:33 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     151805
IP address blocks:        2001:df6:bf40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl
                          rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:42:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9706, serialNumber=85F22D92153F201D5923A9F27F961FC76D7119B8
        Validity
            Not Before: Feb 24 13:28:33 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a3cf97-e785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c3:26:9b:16:0a:36:13:e8:a1:df:fd:b7:0f:
                    47:3f:42:09:64:21:55:69:7f:d7:2c:95:ac:00:aa:
                    30:fd:cd:64:3e:c6:3e:d0:52:33:63:59:e5:2d:37:
                    b9:a7:91:03:58:36:1a:88:e0:02:a3:84:ca:e4:c4:
                    74:26:da:7b:05:0b:73:a9:63:a0:a6:0f:e0:48:b8:
                    b8:70:47:58:6e:e3:10:52:2f:f9:b4:19:b3:2a:5e:
                    b3:54:46:74:7b:ee:dd:a5:0c:5e:e1:85:86:a4:0f:
                    4a:b3:7c:84:df:2a:c6:2c:bb:40:79:0f:eb:41:03:
                    4d:60:10:89:0c:51:e8:ae:7f:9d:e1:4e:16:89:92:
                    62:2c:92:1f:58:b7:1a:4e:6f:c2:dc:c0:c7:0a:95:
                    26:03:c1:50:04:e7:ab:ec:38:5c:fa:ba:ef:5b:93:
                    4e:69:b5:29:24:5b:5f:f2:8b:62:d2:79:d9:d0:c2:
                    74:a8:de:cf:17:34:e7:8a:ab:34:c1:c9:a2:58:79:
                    ce:ae:75:72:34:aa:fe:3f:aa:e2:e6:2d:0b:4c:2d:
                    0c:c8:43:c5:22:6b:6d:90:c3:5a:13:3c:46:f0:c1:
                    a7:be:86:23:d6:be:1c:db:dc:52:06:9b:97:25:26:
                    97:35:70:2e:1b:a8:9c:bf:f2:9f:09:1f:7d:1f:89:
                    fe:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1E:CD:5B:EE:0A:68:6E:F2:16:EB:55:23:49:95:6A:80:E3:0B:3B
            X509v3 Authority Key Identifier:
                keyid:85:F2:2D:92:15:3F:20:1D:59:23:A9:F2:7F:96:1F:C7:6D:71:19:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/hfItkhU_IB1ZI6nyf5Yfx21xGbg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hfItkhU_IB1ZI6nyf5Yfx21xGbg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9706/DDDC3916114711F18BB454AF223D8C67/B735FEEA118411F1951E019C333D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:bf40::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:0d:9e:ce:4a:2c:d9:36:0c:c6:59:79:02:f8:a0:71:6b:c7:
         10:e0:58:0e:0b:40:a6:49:24:f0:87:76:22:14:e2:5c:cb:07:
         0a:b1:e3:1c:c1:2b:c9:f7:93:5f:fd:55:7a:ba:19:70:f8:37:
         bd:c1:67:24:f8:dd:a3:3c:07:62:2d:a1:64:8e:af:8a:18:5a:
         91:20:60:2b:1b:23:93:66:35:4a:b1:23:99:14:f1:bd:7f:6f:
         91:f9:67:bd:f0:f0:4b:ff:d8:a2:85:f8:c5:2a:1e:57:44:cb:
         35:60:7c:1b:e2:68:84:71:15:75:08:b3:6a:cf:9b:e4:1d:05:
         5d:82:ff:f6:97:f6:b1:a4:b0:f8:50:98:76:7d:bc:59:97:57:
         dd:91:84:79:8b:c3:09:60:25:27:ce:02:36:5c:7a:d8:5f:3e:
         e3:6c:0a:8e:23:b7:72:94:21:fe:3b:8c:22:0b:77:f8:1b:10:
         7a:3f:1e:5f:97:44:94:6e:41:e5:de:fd:3a:56:b8:99:ff:a2:
         ee:77:d6:15:ae:b3:4f:14:81:43:23:10:5d:d0:8d:f0:a8:6f:
         95:33:09:ae:03:00:c3:ee:7a:ce:df:5f:c9:db:87:78:df:57:
         19:d5:04:3f:9b:b0:a9:4b:51:f5:d7:55:e8:b8:56:07:c1:da:
         34:d2:90:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:23:20 2026 by rpki-client