Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/2AD1C746940111F0B07D7068C4F9AE02.roa
File:                     2AD1C746940111F0B07D7068C4F9AE02.roa (raw, json)
Hash identifier:          AIsLYj1Q0Ri7p3sC6uZCzxYzj0O4+4SA75lfHau1SqU=
Subject key identifier:   B1:0B:DE:78:0F:13:69:A9:8D:9B:46:D1:A1:84:74:05:D8:3E:D8:75
Certificate issuer:       /CN=A91D1E4C/serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
Certificate serial:       038B
Authority key identifier: AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/2AD1C746940111F0B07D7068C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 19:06:03 +0000
ROA not before:           Wed 17 Sep 2025 20:01:58 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     140981
IP address blocks:        2001:df4:6880::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:47:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 907 (0x38b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E4C, serialNumber=AB67E82FC86AACA82ACFF8DC3645CD7161013F76
        Validity
            Not Before: Sep 17 20:01:58 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a48e1b-4e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:29:a1:9a:0b:01:c7:ca:a6:17:db:fc:7d:
                    6f:5a:b8:b9:69:87:da:5c:ca:0d:5d:aa:5f:04:60:
                    4a:8f:f2:c7:dd:f8:d0:7a:41:1c:21:24:49:a5:db:
                    df:76:4f:cd:14:91:13:b5:9f:cf:f6:58:ea:39:40:
                    ad:97:8d:48:0b:3b:8c:54:0c:5a:d3:4f:73:74:02:
                    56:78:eb:b6:e7:ae:65:7c:f3:19:13:23:a7:7c:5f:
                    c5:1b:74:15:db:8e:83:76:d9:e0:00:57:cd:15:c5:
                    70:5a:9f:1e:bc:c1:35:43:9b:dc:0b:cf:4d:a0:8e:
                    6c:ff:2e:0c:98:97:8c:a1:f9:de:d0:65:cb:b3:70:
                    90:56:57:da:7a:49:2c:04:72:f3:b6:74:c8:23:34:
                    72:2b:7f:0d:9d:9e:85:e0:c2:8c:24:8f:b3:0a:36:
                    3c:74:d0:d3:8d:e5:30:40:37:68:5f:f5:ad:0b:d8:
                    23:4d:fb:af:ea:cc:0a:a0:c6:74:b5:9d:38:de:fe:
                    d1:43:51:05:27:c5:0d:5d:25:72:85:e5:ad:cf:4c:
                    17:cf:3a:c6:42:96:9b:bd:90:82:d4:e0:a8:a3:71:
                    0f:2c:b4:ea:15:87:9c:ba:db:99:50:69:44:3a:62:
                    9b:96:81:94:da:21:01:30:ad:2a:6a:5f:04:a2:36:
                    23:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:0B:DE:78:0F:13:69:A9:8D:9B:46:D1:A1:84:74:05:D8:3E:D8:75
            X509v3 Authority Key Identifier:
                keyid:AB:67:E8:2F:C8:6A:AC:A8:2A:CF:F8:DC:36:45:CD:71:61:01:3F:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/q2foL8hqrKgqz_jcNkXNcWEBP3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2foL8hqrKgqz_jcNkXNcWEBP3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/2AD1C746940111F0B07D7068C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:6880::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:e4:a1:5f:04:e6:d7:7c:fb:40:88:42:a8:33:90:7c:8d:b9:
         c6:77:89:70:05:b8:42:ba:4f:b1:65:94:45:1f:0e:a7:b6:94:
         58:82:ec:58:07:ac:f5:3e:cf:b4:c1:6b:9f:1b:b5:29:e4:fc:
         ed:fd:55:a0:25:f6:fa:73:e0:cc:9f:a4:96:ff:c1:ab:1f:c0:
         83:b2:c2:3a:76:ef:19:2d:ee:ed:4f:84:21:34:fd:91:bd:5c:
         6f:cf:af:73:23:23:c9:31:ad:48:f9:e3:05:e5:dc:17:2e:f0:
         97:62:77:c1:5e:9f:09:7a:02:18:c4:60:20:d7:16:e4:f2:ec:
         20:9e:74:d5:c0:db:9a:27:95:99:7d:84:1a:48:19:cd:86:49:
         30:1e:c9:11:2a:15:c1:58:dc:d2:69:f7:2c:ad:30:6b:3f:6a:
         51:b0:c4:9c:ae:ad:89:eb:88:e9:10:14:0b:4e:48:65:26:5a:
         98:ef:ae:72:89:13:02:35:e4:db:b8:d2:1c:ea:83:f3:70:1a:
         8f:00:35:76:a7:ed:db:66:41:07:20:86:76:f1:2d:4d:5d:ea:
         e6:e2:ff:60:43:0c:bc:d1:d8:a3:5e:d3:0c:a2:e5:6e:6c:54:
         40:8e:7a:74:4b:14:19:66:ca:44:5c:50:e8:a4:8f:f4:ba:73:
         19:f0:ef:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:51:09 2026 by rpki-client