Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/44B43AAECC1011EFA5596A50C4F9AE02.roa
File:                     44B43AAECC1011EFA5596A50C4F9AE02.roa (raw, json)
Hash identifier:          k+B0JqG6DzUUO2dkYKnaQ9nxWqOFCU6QTo0xPWo3f40=
Subject key identifier:   E2:38:EC:5F:9A:FF:B8:26:97:E6:46:9B:CB:84:81:9C:33:3E:13:37
Certificate issuer:       /CN=A91CE7A4/serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB
Certificate serial:       F8
Authority key identifier: 78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/44B43AAECC1011EFA5596A50C4F9AE02.roa
Signing time:             Fri 17 Apr 2026 06:40:41 +0000
ROA not before:           Fri 17 Apr 2026 06:40:41 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     153483
IP address blocks:        2001:df4:dec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl
                          rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 05:56:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 248 (0xf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CE7A4, serialNumber=78362EF9FE39496EF65B36F83B6698AF9308DFAB
        Validity
            Not Before: Apr 17 06:40:41 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69e1d5e9-bac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:58:2f:28:00:79:6b:48:86:2a:61:17:e5:
                    93:8e:34:7c:b1:6d:e9:36:fc:8c:a7:14:f3:2f:74:
                    70:50:84:db:95:02:9e:36:4a:79:7e:38:a1:cb:10:
                    a1:d6:db:bc:6d:ad:ea:af:c6:56:92:55:13:ef:83:
                    61:c0:f1:b3:22:99:71:46:e5:2d:cc:95:38:44:db:
                    31:25:cf:a9:2c:de:e7:62:ed:df:eb:b2:7c:33:1f:
                    16:f6:5e:50:72:20:7b:87:6c:33:03:5d:98:0a:37:
                    c5:c9:aa:83:01:e7:94:22:0b:f9:18:44:13:3b:f4:
                    ca:04:3e:63:38:d1:8a:5c:4c:7b:6f:01:c5:2e:75:
                    a7:14:4b:3e:9e:1c:90:ad:fc:f2:5b:31:2b:f1:6b:
                    4b:b8:64:47:57:b3:22:7b:b4:8d:a0:5d:f7:f5:e5:
                    51:62:97:fc:78:6d:18:67:14:dd:85:c4:88:69:8e:
                    2f:6e:a7:7d:32:ac:e3:9b:a7:ea:e2:7e:f1:28:fc:
                    e0:c6:23:cc:40:96:a0:90:a7:68:71:cc:56:dd:ce:
                    62:1e:a5:a4:82:be:02:7a:b8:b8:9a:36:61:11:28:
                    b8:56:05:df:38:db:7b:69:88:91:fa:18:42:a9:38:
                    c9:32:af:8e:a9:39:dc:c8:ed:33:70:78:a5:1d:a5:
                    67:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:38:EC:5F:9A:FF:B8:26:97:E6:46:9B:CB:84:81:9C:33:3E:13:37
            X509v3 Authority Key Identifier:
                keyid:78:36:2E:F9:FE:39:49:6E:F6:5B:36:F8:3B:66:98:AF:93:08:DF:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/eDYu-f45SW72Wzb4O2aYr5MI36s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eDYu-f45SW72Wzb4O2aYr5MI36s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE7A4/C0CAE742CC0F11EFA278FD4CC4F9AE02/44B43AAECC1011EFA5596A50C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:dec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c5:d4:7e:d4:ad:3a:bc:31:2f:86:2a:e9:08:1c:d3:7f:46:41:
         e6:63:5f:60:95:49:7b:18:9a:f7:04:97:ca:8c:1d:ca:26:15:
         d8:07:6d:31:90:f4:5f:f4:3e:bc:ec:3f:c2:3d:4c:fd:c3:ad:
         8e:18:29:b6:dc:56:37:62:a0:45:a8:85:35:c3:74:b6:27:91:
         46:d8:de:db:05:8a:e4:62:2f:0c:bf:62:50:bc:05:7c:4e:b5:
         69:4f:5b:5a:d9:74:dc:86:08:75:da:e9:26:54:da:81:2f:a5:
         3e:c5:e1:ef:0f:a2:b0:34:4f:9e:0f:59:b4:6a:40:28:f0:8f:
         15:07:6e:14:b8:fe:02:15:ee:4a:02:09:cb:8f:61:0b:a4:01:
         8c:55:6a:ce:f4:13:a0:13:76:47:95:d9:ce:2f:ff:60:aa:68:
         22:64:27:58:61:34:76:8c:7b:a3:d2:c9:ad:1b:6d:51:91:52:
         96:9e:6a:0c:f1:b2:8e:85:ce:19:0c:a0:31:ef:12:0c:94:72:
         a0:d4:a1:62:a5:ce:5c:00:e9:96:dd:97:56:7c:d9:05:9a:b9:
         27:85:ab:0f:ea:4a:d8:67:6e:07:1c:73:09:4a:96:f7:4c:fa:
         1e:32:50:12:7c:be:96:fd:a8:f2:0d:26:b8:d6:3e:05:34:57:
         7f:6c:c2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:41:43 2026 by rpki-client