Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/09C0DFCE202011F098619934C4F9AE02.roa
File:                     09C0DFCE202011F098619934C4F9AE02.roa (raw, json)
Hash identifier:          wOYzNzzIS0paJhEaL4lnWRrHmB69EScSsL5hsvt2zxE=
Subject key identifier:   03:E0:36:F1:D3:44:37:97:B1:E1:9D:3D:ED:57:74:03:1E:28:E9:A6
Certificate issuer:       /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Certificate serial:       19A6
Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/09C0DFCE202011F098619934C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 11:30:45 +0000
ROA not before:           Wed 23 Apr 2025 08:50:43 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     55408
IP address blocks:        2401:ffe0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
                          rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6566 (0x19a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1306, serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
        Validity
            Not Before: Apr 23 08:50:43 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a42364-7a6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:98:05:d0:b5:e5:b7:04:7e:56:ec:ca:a1:
                    3d:df:f8:e0:4b:f8:6a:28:6a:d2:f6:87:74:ac:df:
                    5e:84:9a:0e:57:ef:b9:a1:11:cd:ab:ef:f5:e7:82:
                    d9:f2:60:3d:48:ea:f4:a7:01:a5:35:4e:82:1b:7c:
                    45:3b:10:ba:db:2b:a4:0d:b8:b4:cb:81:18:62:33:
                    a5:18:95:13:18:be:4c:83:95:2c:47:c2:d6:15:98:
                    52:38:71:e1:b7:12:32:76:6a:df:e5:e8:4a:4e:b5:
                    1c:cd:25:67:0e:3e:70:10:8b:69:b5:00:d1:64:e0:
                    e3:78:26:6c:fd:69:0d:58:8a:a4:d2:02:20:e1:b5:
                    43:44:8c:fc:af:01:f8:5d:cd:e0:db:f2:d8:ef:b6:
                    d4:36:c1:a6:cf:29:b1:f1:5e:94:71:c3:5b:3a:23:
                    4f:14:77:7a:2c:bd:b4:f5:2a:7b:91:21:13:0f:0e:
                    e6:b1:fe:08:d4:62:2a:7f:7b:71:07:ab:9c:f2:a5:
                    94:b9:aa:27:30:c1:68:71:20:dd:3f:2f:ec:16:cd:
                    c6:e0:b0:ee:34:67:06:98:f9:6e:28:f2:5c:2d:74:
                    23:85:e0:23:15:8c:e5:0a:08:fa:f1:2e:00:b0:68:
                    47:6b:78:19:b0:e2:ca:76:4e:e8:58:e3:5c:40:39:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E0:36:F1:D3:44:37:97:B1:E1:9D:3D:ED:57:74:03:1E:28:E9:A6
            X509v3 Authority Key Identifier:
                keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/09C0DFCE202011F098619934C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:ffe0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b4:e7:3b:21:0c:f8:65:dc:b5:36:48:31:7e:8b:5d:6b:e8:bc:
         7b:0c:4b:4d:9f:e5:37:34:42:39:a7:3a:98:ed:4e:42:66:7d:
         b3:52:a7:66:b7:d8:02:3e:e0:c5:d9:4e:c8:ab:6f:a9:86:aa:
         a6:82:cd:c3:2d:12:3d:1d:85:0d:57:0d:ad:57:8d:d3:7b:00:
         a7:b0:f3:98:ea:a0:e0:fe:f5:e8:28:49:35:16:4a:72:3f:d5:
         06:d8:86:1e:73:0f:ca:b0:6d:12:b5:3e:31:3b:52:f6:6b:a0:
         de:40:88:66:b6:36:cf:d2:f0:6f:a0:9f:1c:2d:43:1e:7c:b8:
         ec:89:f7:3f:6a:e5:ae:63:e1:92:d1:96:5a:51:f9:8c:e3:0a:
         34:b5:b2:aa:2c:be:17:db:39:3a:04:ad:7c:42:0b:9f:62:73:
         39:4e:a2:6d:f7:58:c8:d7:89:16:bc:8d:05:fa:8f:62:5a:29:
         39:fa:91:3c:80:d4:5a:c9:0d:56:86:03:88:89:7d:a0:35:83:
         3c:c0:df:48:c0:6b:a3:6c:eb:5e:0b:da:4f:92:0d:f4:25:43:
         25:61:7f:dd:a6:2e:3d:fa:86:8f:30:3f:a9:78:f2:95:6e:c3:
         2a:9a:17:dd:f0:35:de:c5:b0:30:5f:69:5b:ca:50:83:38:3f:
         29:dc:11:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:38:04 2026 by rpki-client