Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/B2D021C8A55A11F094B38083C4F9AE02.roa
File:                     B2D021C8A55A11F094B38083C4F9AE02.roa (raw, json)
Hash identifier:          CopiFiy8NW6DsTVMlaBrfwU5kNpwt1uoVXfboOWihQ8=
Subject key identifier:   7D:EC:15:2E:9B:3D:F2:82:01:EE:90:A0:5E:0E:3B:32:04:8D:2C:5B
Certificate issuer:       /CN=A91D4781/serialNumber=1EC66D906F7942DF3B77BFDEDDFD009FEB2BFD21
Certificate serial:       4C
Authority key identifier: 1E:C6:6D:90:6F:79:42:DF:3B:77:BF:DE:DD:FD:00:9F:EB:2B:FD:21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/B2D021C8A55A11F094B38083C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:13:42 +0000
ROA not before:           Thu 09 Oct 2025 21:55:42 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     151660
IP address blocks:        2402:3120::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.crl
                          rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:41:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4781, serialNumber=1EC66D906F7942DF3B77BFDEDDFD009FEB2BFD21
        Validity
            Not Before: Oct  9 21:55:42 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a3d916-683d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:0c:e9:19:78:15:97:70:36:9c:ba:4d:3d:
                    a1:c6:a0:67:6c:1f:70:ef:8c:3a:f2:ec:79:66:95:
                    11:75:98:1f:7e:22:bd:aa:7a:da:57:45:cb:dc:93:
                    9b:1a:e6:e1:88:34:ad:9c:50:a2:e9:fb:2e:a0:da:
                    3e:70:4e:6a:52:ff:cd:43:a1:47:e8:0b:9f:6f:26:
                    20:5e:dd:4c:cd:4c:ee:8c:1e:2c:96:13:20:8e:81:
                    c8:7f:a7:7d:2b:4b:98:aa:3a:8d:ac:40:57:81:46:
                    ed:65:b4:bb:be:8e:87:c8:fc:2e:c0:ef:0c:ce:26:
                    b4:b5:bd:3e:b1:f1:5a:b4:d3:de:e8:f2:27:54:f9:
                    a6:48:80:52:cd:08:e2:75:59:e3:6c:1a:25:1d:d1:
                    d1:09:b8:17:23:a4:5d:99:16:13:73:e1:2c:9d:c4:
                    cd:b9:40:2f:de:f1:54:bd:81:5a:74:1a:3b:a9:2f:
                    35:07:8d:49:26:ae:47:ab:b9:c8:5c:63:74:68:80:
                    f4:7e:5b:ab:69:a3:4b:af:43:95:d0:2f:88:33:29:
                    a9:75:98:24:53:3a:72:ef:76:15:45:8a:3f:b9:b9:
                    e0:11:44:2e:1c:25:6c:0b:0c:fd:89:36:b6:1d:7b:
                    4a:bf:95:89:39:a3:68:23:8f:8f:21:85:ec:f6:59:
                    e5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:EC:15:2E:9B:3D:F2:82:01:EE:90:A0:5E:0E:3B:32:04:8D:2C:5B
            X509v3 Authority Key Identifier:
                keyid:1E:C6:6D:90:6F:79:42:DF:3B:77:BF:DE:DD:FD:00:9F:EB:2B:FD:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/HsZtkG95Qt87d7_e3f0An-sr_SE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HsZtkG95Qt87d7_e3f0An-sr_SE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4781/E290476CA48D11F0AD97F016C4F9AE02/B2D021C8A55A11F094B38083C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3120::/32

    Signature Algorithm: sha256WithRSAEncryption
         24:fa:df:93:d3:7f:1d:2a:37:3d:76:a3:04:d5:1b:88:18:72:
         ba:2a:40:3c:c6:9e:fd:9a:df:6b:c2:a6:8e:9d:47:96:b1:9a:
         fb:bc:8a:ce:c8:49:4d:ef:22:57:d9:4f:b6:46:56:7e:ba:9f:
         1a:76:4e:e2:0b:8d:50:28:29:4c:40:14:bb:09:0d:87:7a:0b:
         65:2c:97:15:69:a1:74:d8:56:d0:0b:ac:dd:4f:c1:4f:7a:c0:
         93:96:ac:4e:26:79:96:4b:50:06:64:7b:c5:bb:3e:b7:11:28:
         13:5d:59:dc:e5:be:4f:ed:94:02:cf:8a:fd:10:f6:cf:a9:e3:
         f1:c3:dd:d6:7c:59:b0:2b:71:d3:84:e8:8c:8b:5f:be:62:de:
         79:28:85:6e:b6:bb:09:17:57:b2:6d:20:fa:b7:f4:cf:a5:69:
         de:2f:f1:35:45:33:2e:79:70:4d:75:d3:9c:9b:a1:40:0f:e7:
         8c:ca:f3:c9:ef:b4:50:28:25:ea:ff:d7:5f:d1:db:f4:e3:de:
         8f:ec:2d:b4:83:0e:f6:13:0d:09:39:b6:bd:9a:f2:67:fe:d8:
         ba:21:b7:ec:fd:54:f7:97:df:59:53:74:ae:19:37:04:02:24:
         79:c8:f9:1c:74:dc:23:b3:17:56:19:24:6d:58:8f:f5:6b:64:
         90:eb:be:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:21:25 2026 by rpki-client