Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/26E44986BE8311F0B427BB65C4F9AE02.roa
File:                     26E44986BE8311F0B427BB65C4F9AE02.roa (raw, json)
Hash identifier:          Dx5tcISPNh0RjY9tKVBv7tMDgBX0/Dr23CkV9FuyXMs=
Subject key identifier:   CE:37:2D:7A:EF:C9:5A:6F:48:CE:E4:E2:A2:AC:8C:0B:C0:A7:E2:EA
Certificate issuer:       /CN=A91D7578/serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
Certificate serial:       0692
Authority key identifier: EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/26E44986BE8311F0B427BB65C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:05:21 +0000
ROA not before:           Mon 10 Nov 2025 22:18:15 +0000
ROA not after:            Thu 30 Jul 2026 00:00:00 +0000
asID:                     22672
IP address blocks:        2402:3820::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl
                          rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:51:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1682 (0x692)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D7578, serialNumber=EC36AF5979091C6BFA580EA3BA225779357570D7
        Validity
            Not Before: Nov 10 22:18:15 2025 GMT
            Not After : Jul 30 00:00:00 2026 GMT
        Subject: CN=69a471d1-af3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:05:93:04:9c:24:15:c2:c6:2f:e0:41:f1:1a:
                    36:9e:2e:32:bb:ae:53:12:7b:10:a3:4a:5b:48:db:
                    e4:d4:4a:a2:ea:dd:58:01:5b:a6:22:2b:6f:fc:8c:
                    44:e4:b6:8f:dc:51:90:9b:7c:b4:ac:14:86:11:69:
                    9e:ba:8b:68:87:27:2c:37:c0:13:21:ff:6c:1e:a4:
                    1e:04:29:c3:38:2b:2e:e1:05:9c:53:7d:89:e2:e4:
                    f4:65:b9:32:fa:b4:f5:2c:6f:18:5d:fc:6c:42:5c:
                    5b:52:c5:81:ad:39:d3:d6:cb:74:8d:c6:91:57:a9:
                    9c:06:95:7f:24:6b:62:d7:f6:a7:a4:95:c1:16:e1:
                    34:55:2e:12:19:09:f8:f7:a7:bc:ee:b1:cf:67:65:
                    34:df:2e:61:43:14:1c:8f:65:7c:b4:0b:03:8e:74:
                    d8:31:24:c4:9d:12:09:32:f0:bb:f7:dc:d1:83:00:
                    6c:2e:56:38:28:29:07:8a:cb:a4:27:4d:fd:ed:78:
                    8d:bd:19:1a:82:4f:c8:08:88:0b:2a:90:79:95:11:
                    f6:ee:82:c4:d8:2c:b8:4f:3c:d5:2f:46:17:a0:7e:
                    67:8c:a5:c6:05:7a:0c:09:de:f0:c3:87:5b:1b:fc:
                    11:43:7a:a0:3a:ad:ed:d0:23:95:a5:4a:1a:38:7f:
                    43:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:37:2D:7A:EF:C9:5A:6F:48:CE:E4:E2:A2:AC:8C:0B:C0:A7:E2:EA
            X509v3 Authority Key Identifier:
                keyid:EC:36:AF:59:79:09:1C:6B:FA:58:0E:A3:BA:22:57:79:35:75:70:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/7DavWXkJHGv6WA6juiJXeTV1cNc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DavWXkJHGv6WA6juiJXeTV1cNc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7578/D3C0190CBB9D11EB84F73B3AC4F9AE02/26E44986BE8311F0B427BB65C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:3820::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:ae:9c:8f:25:d0:81:8a:8c:49:f0:6f:df:ba:69:76:49:84:
         a7:eb:91:9e:26:0b:63:f8:e3:36:d6:71:b0:ce:ae:21:ad:00:
         eb:44:98:61:4a:cc:a4:5c:57:1e:d1:65:14:1c:ea:b9:44:05:
         1c:a5:64:45:c3:5e:f5:e5:4d:0d:e1:08:76:d1:79:c5:00:8b:
         4f:ef:ee:25:dd:4b:4e:5f:23:d2:aa:74:63:54:9d:9d:11:15:
         7a:25:cb:fb:e0:aa:b8:65:42:d3:02:e4:4a:82:f5:b6:37:af:
         c8:3c:f9:1d:55:40:ce:68:77:da:bb:ab:f8:79:22:a6:2d:12:
         43:0c:ff:fe:dc:0b:f6:33:81:74:7d:73:8b:e2:c9:cb:91:79:
         12:6c:43:05:1b:c7:2c:31:e5:02:b9:9e:c1:9b:88:23:a9:ab:
         19:33:77:2a:5b:e3:a6:40:05:0a:24:e7:85:00:fe:97:5c:1e:
         83:26:d2:fa:fb:03:79:80:00:8b:44:2d:bf:66:27:61:b0:d0:
         49:de:a0:d0:3e:7b:ec:b5:c1:97:2f:96:ea:f1:25:87:30:f8:
         7a:38:b2:0b:84:02:b7:91:e8:ef:7b:f2:d0:a9:1d:da:6e:9b:
         bf:c1:19:24:27:de:78:3e:e3:31:e3:2c:f4:c6:5e:c5:3b:4f:
         f8:a2:c2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:24 2026 by rpki-client