Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa
File:                     C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa (raw, json)
Hash identifier:          Vpw51MZvJPxwx8AO4fLP73wnxskz1308n4tyJojyQJU=
Subject key identifier:   06:2C:63:AA:E8:02:55:43:AB:10:71:CC:CA:1F:4D:4B:BE:40:6B:FF
Certificate issuer:       /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial:       11DA
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:34:15 +0000
ROA not before:           Wed 02 Apr 2025 17:46:34 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     199974
IP address blocks:        2404:7ac0:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
                          rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4570 (0x11da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
        Validity
            Not Before: Apr  2 17:46:34 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a47896-d023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1a:f1:e9:79:a1:96:8f:98:47:16:01:c3:a3:
                    5e:9e:5e:8d:82:f2:d7:ef:48:ff:7d:c6:03:df:77:
                    b7:d9:55:db:b9:6f:30:b3:4a:69:72:04:f0:81:c4:
                    d0:f5:7e:c8:45:62:1a:b1:5a:c0:2d:90:aa:21:3a:
                    ba:83:62:fe:22:0f:26:06:38:25:55:d7:af:24:f1:
                    81:26:e1:f3:2a:c7:08:28:b4:28:61:06:aa:cf:80:
                    56:71:5d:ba:b4:78:3b:64:05:2c:d6:c5:bd:7c:c6:
                    60:55:2f:f1:f8:b4:a9:dc:d1:8e:fe:52:d9:b5:28:
                    d6:31:83:25:67:36:88:72:f5:37:51:bc:eb:38:2c:
                    4a:13:16:dd:1c:6a:85:c7:cc:76:88:48:e2:ba:97:
                    e1:8c:a3:01:21:91:eb:b1:21:21:f0:b0:16:e0:15:
                    e7:58:94:e4:59:67:10:4e:96:be:27:10:0b:5c:b0:
                    1b:6d:f4:09:83:64:e5:67:5b:94:3c:e8:d5:7e:78:
                    6f:cc:11:f7:68:eb:97:80:d7:97:04:2d:13:af:40:
                    c4:f6:9d:85:df:6e:fc:b0:c3:72:24:16:81:54:06:
                    18:1a:df:d1:a9:67:5b:80:28:d5:e3:c1:71:5a:36:
                    c1:c6:43:11:8f:0c:e5:48:b7:84:0a:af:c3:42:57:
                    1e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2C:63:AA:E8:02:55:43:AB:10:71:CC:CA:1F:4D:4B:BE:40:6B:FF
            X509v3 Authority Key Identifier:
                keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/C39DD1EAB2AE11EDBF6E4032C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7ac0:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         02:04:5a:dc:4d:c6:69:11:43:aa:c0:49:57:59:87:cb:fa:bd:
         f8:39:ab:ed:99:9b:ed:f8:f1:0f:d3:c5:80:9e:2b:5a:7c:21:
         d4:ed:e6:75:a9:fb:f1:57:bc:72:e8:0a:7c:60:3c:3f:fc:ac:
         ca:06:87:5d:35:01:0f:0c:28:34:f1:3c:34:69:64:46:18:2d:
         de:4d:82:eb:ee:02:b3:e8:20:48:4b:1a:42:72:e4:dc:3f:36:
         2a:80:2a:62:1c:dc:79:2f:b0:56:28:26:f9:04:92:d6:cc:a1:
         24:50:ff:4e:bb:97:99:ca:6d:8a:14:d4:16:bd:50:f3:0c:60:
         34:d3:78:1b:7d:ae:00:df:56:63:fd:1f:b2:ef:88:1f:1a:09:
         08:34:0a:56:8a:80:8b:b3:e3:a5:23:6c:dd:4b:72:eb:58:20:
         c4:83:3d:06:d1:4e:f5:ac:e8:b2:8a:63:a7:68:3a:e3:54:a5:
         e0:b3:ff:be:b6:6a:c1:55:d1:98:14:7e:91:af:8a:99:bc:eb:
         8a:d1:c2:f2:e4:bf:30:33:f2:2e:39:4e:31:d4:a3:9d:02:96:
         93:1b:4b:1a:f0:ea:8f:97:1d:4b:86:48:bb:6e:e5:fd:32:2b:
         76:83:d6:1d:00:b8:ed:4f:6f:d3:44:37:34:c0:cb:fe:3e:22:
         3a:4f:96:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:21 2026 by rpki-client