Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/86131D8AEA5D11ED80641166C4F9AE02.roa
File:                     86131D8AEA5D11ED80641166C4F9AE02.roa (raw, json)
Hash identifier:          akZ7H2CCWjRteC0DsYzzpQopHtGbHczA7D7Pola5e8U=
Subject key identifier:   48:C3:57:D6:BF:F4:F2:C8:87:B8:04:28:C5:F1:D1:F5:89:D8:20:4E
Certificate issuer:       /CN=A91D51A0/serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
Certificate serial:       04C7
Authority key identifier: C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/86131D8AEA5D11ED80641166C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:57:52 +0000
ROA not before:           Fri 07 Mar 2025 00:46:00 +0000
ROA not after:            Fri 01 May 2026 00:00:00 +0000
asID:                     139321
IP address blocks:        2400:54a0:2050::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl
                          rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:33:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1223 (0x4c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D51A0, serialNumber=C6EABEB93E1D06E2C32E1C4CBE147CFB39992539
        Validity
            Not Before: Mar  7 00:46:00 2025 GMT
            Not After : May  1 00:00:00 2026 GMT
        Subject: CN=69a47e20-b81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ef:26:4b:1d:14:81:e6:be:49:37:96:34:54:
                    e2:c7:5c:53:a9:d0:3e:54:16:b2:21:7f:e0:d2:dd:
                    8d:4e:34:8d:f8:73:bf:09:42:db:61:86:da:b3:e6:
                    42:b5:47:a1:b5:93:28:eb:63:6e:f5:15:fa:fa:eb:
                    5f:f2:e3:f5:04:e8:ca:53:a2:d0:76:aa:b9:08:6d:
                    4d:b2:94:8e:61:7f:4d:49:aa:5c:c0:6c:b6:eb:4e:
                    50:32:6a:d6:7f:bf:13:df:8b:b0:1b:9f:9d:27:d3:
                    1b:dc:1c:ca:13:89:66:7d:55:c8:0b:50:4f:07:e9:
                    7f:19:12:26:2b:08:0b:29:d5:7a:c3:de:36:e6:c0:
                    3b:88:52:9a:09:66:4c:d7:2b:bc:fe:9b:53:59:f1:
                    b9:39:f3:a3:f1:a0:3c:eb:b9:be:19:eb:c9:79:5e:
                    ba:b2:d2:cf:46:21:be:13:df:a2:c1:67:b1:26:a1:
                    30:44:8a:b1:79:a4:3e:17:2f:b3:fb:c2:f7:5d:a3:
                    64:2b:c6:f6:47:6b:bd:c6:bd:8a:3d:fc:4d:39:44:
                    9e:0e:e6:53:db:29:8c:08:23:72:06:8f:03:aa:2c:
                    d0:1c:26:98:5d:cf:3b:5f:eb:52:fc:46:e4:da:25:
                    71:25:a7:0b:f3:b8:11:53:ab:4a:5b:ac:2d:31:69:
                    35:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C3:57:D6:BF:F4:F2:C8:87:B8:04:28:C5:F1:D1:F5:89:D8:20:4E
            X509v3 Authority Key Identifier:
                keyid:C6:EA:BE:B9:3E:1D:06:E2:C3:2E:1C:4C:BE:14:7C:FB:39:99:25:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/xuq-uT4dBuLDLhxMvhR8-zmZJTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xuq-uT4dBuLDLhxMvhR8-zmZJTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D51A0/7C53910C7F8411EC80518E51C4F9AE02/86131D8AEA5D11ED80641166C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:54a0:2050::/48

    Signature Algorithm: sha256WithRSAEncryption
         4b:83:94:80:e8:cc:d1:3a:72:2b:ed:6c:dd:5c:4d:89:91:96:
         71:f2:18:b7:0a:36:19:7c:a6:f7:be:73:cd:fb:cc:72:10:12:
         78:70:7b:c5:77:9f:fe:88:5b:15:ba:b8:54:bd:14:3c:eb:c8:
         0c:60:9f:78:bb:69:04:9b:d8:9a:4f:7a:46:43:d6:88:5d:d5:
         bc:c6:54:a1:89:08:e9:cb:48:5e:b4:8b:e2:f2:8d:9b:5a:4f:
         f1:55:ce:97:7e:ef:d0:41:e0:46:ef:c8:ce:fa:0c:5b:3f:9c:
         3f:fe:33:bf:49:db:98:65:f5:e2:ba:34:a6:13:7c:14:dd:b8:
         6c:99:aa:ca:ef:4c:ea:02:b7:f1:16:02:33:e0:d4:2c:f3:43:
         03:49:cb:87:0e:14:34:0e:31:16:72:5b:c7:4d:12:91:f5:9d:
         2a:6c:ad:92:06:5f:3d:ac:55:12:c8:9c:70:a4:41:60:44:a6:
         7f:aa:b9:eb:14:3a:ee:06:c3:0c:60:56:e7:dd:54:fd:dd:ed:
         76:91:6a:73:d2:2c:75:dc:ae:0f:a1:a1:ef:39:5a:48:a6:a0:
         d7:4d:3d:7b:40:8c:52:f0:d7:2b:95:b8:da:60:e2:4c:61:21:
         bd:72:39:5f:4c:3d:82:ff:38:b7:f3:07:14:2f:75:45:96:ea:
         bb:f1:b3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:37:08 2026 by rpki-client