Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/3CA96D46FF2E11F088116B6D89EE528E.roa
File:                     3CA96D46FF2E11F088116B6D89EE528E.roa (raw, json)
Hash identifier:          9k26GgzaF7JUBXzdAr1iBX77IktY67fjp/QCPFOAclU=
Subject key identifier:   15:45:77:7A:3C:49:1E:AB:21:B2:AD:AA:44:C0:C2:F1:61:2F:15:45
Certificate issuer:       /CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Certificate serial:       FD
Authority key identifier: 01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/3CA96D46FF2E11F088116B6D89EE528E.roa
Signing time:             Sun 01 Mar 2026 16:56:58 +0000
ROA not before:           Tue 03 Feb 2026 05:25:38 +0000
ROA not after:            Tue 02 Jun 2026 00:00:00 +0000
asID:                     138026
IP address blocks:        2001:df4:a3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
                          rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 03:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09BC, serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
        Validity
            Not Before: Feb  3 05:25:38 2026 GMT
            Not After : Jun  2 00:00:00 2026 GMT
        Subject: CN=69a46fda-0bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c1:31:5c:39:d6:0b:8c:c1:5f:3c:1e:93:c2:
                    37:6c:58:66:b8:3f:dc:1d:9c:99:0b:2a:1a:43:1e:
                    dd:0f:5e:d1:47:57:ca:51:ab:03:4d:a4:a7:fb:9b:
                    93:d1:ff:1d:e7:aa:78:47:c1:f9:52:bd:95:35:d8:
                    fb:4b:0f:f9:f4:32:67:bd:1e:3f:6c:fa:32:4e:8e:
                    af:79:02:61:aa:fc:cb:a5:49:8e:fc:aa:30:c4:e0:
                    ae:de:49:a9:37:b4:bd:e4:5a:4d:0a:d6:b9:8c:46:
                    ef:53:39:f4:14:0e:2f:c4:94:a0:d6:83:87:86:d6:
                    3a:de:df:a3:76:c4:89:c0:b5:00:dc:c8:36:31:c9:
                    8f:7b:e3:ee:f1:c0:3b:e7:d3:f5:f1:95:21:6e:34:
                    ca:06:d6:73:d8:ef:72:39:2a:48:84:8d:d6:79:b2:
                    8d:79:2c:85:99:47:b0:26:65:7c:0e:90:e7:33:f5:
                    e2:06:c6:60:bb:40:67:f1:55:6c:a0:d9:d4:c6:ce:
                    a8:2a:cc:1f:32:12:f8:01:fd:94:81:76:18:8f:42:
                    83:61:64:4f:77:da:f6:c1:40:30:38:e9:07:1d:90:
                    91:61:13:54:5f:9b:1e:96:a1:7a:53:e2:2b:a3:12:
                    99:3a:38:f1:e7:63:14:47:b1:73:2b:94:9b:3e:2c:
                    ac:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:45:77:7A:3C:49:1E:AB:21:B2:AD:AA:44:C0:C2:F1:61:2F:15:45
            X509v3 Authority Key Identifier:
                keyid:01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/3CA96D46FF2E11F088116B6D89EE528E.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:a3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:d4:5c:94:55:e6:83:42:f1:89:41:48:49:9c:30:6c:9f:b6:
         ef:e2:70:a6:09:bc:25:15:24:6a:7b:54:f4:7b:d0:4b:8e:d1:
         99:48:b3:80:28:62:8f:c9:51:1c:d6:e9:41:bc:49:e2:6d:63:
         41:f9:f0:c1:8f:bc:4e:c7:3a:65:8b:b3:cb:32:59:9b:2e:0c:
         4b:37:df:32:bf:1f:ae:23:8f:f1:a6:3c:c9:0e:d1:f4:e8:d1:
         3d:24:63:95:d7:8c:06:0b:8e:1d:9c:be:a8:d0:85:65:b4:c3:
         bb:81:d2:da:ee:3d:57:9a:28:09:bf:af:0e:2f:97:fb:52:af:
         d0:a3:85:d1:1c:a4:cf:dc:02:0d:a1:77:7b:d5:bd:be:5e:a9:
         c0:3d:67:14:ee:e1:48:4a:48:28:da:f2:16:22:86:46:23:99:
         68:5c:6b:23:f7:e1:b9:43:8a:58:c0:70:23:0a:80:53:e1:01:
         d1:fe:13:2f:95:ca:8d:49:5b:03:1a:3f:50:79:c8:46:67:a7:
         91:e2:b3:cd:41:5b:77:95:1e:c5:04:a9:bf:91:14:00:b3:92:
         83:eb:35:62:ee:2a:ea:39:ba:95:c6:6d:b3:4e:f8:d2:34:b6:
         4b:b0:a1:34:ef:43:1a:a2:11:ae:77:a6:a2:fc:78:b5:7a:b7:
         4f:5d:a0:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:46:23 2026 by rpki-client