Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/4CC50DB2BB7811EE9416DD42C4F9AE02.roa
File:                     4CC50DB2BB7811EE9416DD42C4F9AE02.roa (raw, json)
Hash identifier:          PC/dnoxD87VRfw71Wcxw5Xsha3MzVCvjI+ZW0s9g2Hg=
Subject key identifier:   2D:A5:5D:E9:50:E3:FF:63:7E:3B:09:35:C3:B4:9D:96:74:E1:23:F9
Certificate issuer:       /CN=A91CDB75/serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
Certificate serial:       018F
Authority key identifier: 7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/4CC50DB2BB7811EE9416DD42C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 10:32:09 +0000
ROA not before:           Tue 17 Feb 2026 03:23:57 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152446
IP address blocks:        2001:df3:66c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl
                          rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:11:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDB75, serialNumber=7BE98C7AAAD87C9F259296301643A3610A7B5188
        Validity
            Not Before: Feb 17 03:23:57 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a415a8-b960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:74:00:5c:cb:2f:9a:ff:31:e5:63:23:41:e0:
                    b7:6d:b8:ef:9a:c6:e9:78:0c:7a:49:47:24:a4:f9:
                    6a:41:99:a8:9c:40:5a:b5:4d:01:94:4b:7e:cc:95:
                    c9:2a:ff:1d:59:f2:76:bf:92:2d:dd:e7:fb:d8:97:
                    d9:33:c0:fd:1c:3d:cf:14:73:82:0a:48:e2:93:09:
                    aa:c5:94:60:b0:13:44:47:57:ce:d8:bb:f6:62:90:
                    0c:03:1e:76:68:81:18:b8:bd:51:90:b0:f9:a5:53:
                    a5:1a:f4:3e:31:59:8e:be:ba:4b:c7:ee:ac:f4:62:
                    f9:1b:e1:7c:24:63:c2:2b:0f:70:bf:0b:a0:7d:62:
                    12:cf:8d:dd:22:b6:0e:8b:d1:05:76:14:85:36:26:
                    1b:cc:08:f8:b6:49:3e:05:7a:46:12:3e:81:2b:67:
                    72:d1:55:83:f9:3d:c3:50:7e:b7:fc:c4:2d:39:ea:
                    7c:00:4b:bb:8e:3e:df:01:80:89:c0:29:bd:62:92:
                    26:d2:3b:ea:dc:66:d3:2d:14:30:a4:2f:8e:0e:5f:
                    1a:5e:06:27:fd:37:96:dc:35:07:df:4c:a6:6f:63:
                    54:32:e5:65:39:d2:74:b3:7b:8a:a4:49:27:49:36:
                    69:30:fa:f2:77:87:a4:39:02:aa:ab:99:f0:28:5b:
                    d9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A5:5D:E9:50:E3:FF:63:7E:3B:09:35:C3:B4:9D:96:74:E1:23:F9
            X509v3 Authority Key Identifier:
                keyid:7B:E9:8C:7A:AA:D8:7C:9F:25:92:96:30:16:43:A3:61:0A:7B:51:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/e-mMeqrYfJ8lkpYwFkOjYQp7UYg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDB75/E6519A14BB7711EEAAD7B241C4F9AE02/4CC50DB2BB7811EE9416DD42C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:66c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:5a:df:7a:41:e6:6b:8f:fa:e2:ce:7d:32:7b:a0:a5:35:3f:
         dc:98:bd:71:c5:5d:78:65:d1:93:cb:f5:d0:0b:78:4f:1a:0e:
         95:d7:9d:5c:55:53:ee:8a:4d:93:08:d8:0a:4a:bb:90:8c:73:
         12:45:0b:30:9b:8a:fc:9a:e5:97:7b:ad:d8:6f:b5:74:e2:fb:
         ff:77:e8:da:cb:aa:b4:3f:97:28:e8:6d:f8:ce:cc:f0:3c:c5:
         df:11:9c:ac:7a:93:2e:13:d3:71:25:fb:9d:6c:9c:f8:b2:a1:
         6f:f1:62:08:8a:64:c3:47:f8:8e:4c:77:ea:dc:71:54:73:d7:
         da:73:c9:36:68:6c:84:3d:35:80:bf:41:92:e2:23:a1:9b:a3:
         3a:d8:b6:c1:d3:32:ec:fc:37:1f:50:54:12:b2:1c:8b:bc:b3:
         b8:7c:1f:56:9b:96:cb:bc:eb:9a:c9:26:e4:9f:32:e7:63:14:
         69:dc:c4:76:af:7e:9d:2f:a1:48:0a:5d:e9:00:78:af:a8:ab:
         c7:32:c1:a2:c1:d3:0a:c2:ea:9f:4f:45:fe:35:b7:32:d4:df:
         ba:fd:32:7f:cb:5c:4a:92:ff:ab:93:b5:a0:63:82:f4:43:f3:
         ed:6c:6e:13:f0:ea:56:3c:51:42:3e:6e:f7:52:97:cb:37:a4:
         ad:48:0d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:41:28 2026 by rpki-client