Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/863670328FD011EEB6FFC636C4F9AE02.roa
File:                     863670328FD011EEB6FFC636C4F9AE02.roa (raw, json)
Hash identifier:          soe5Moz4gQVVes64vfH27mxJAWxDV9xSP3vrYYcdBj8=
Subject key identifier:   58:3D:7F:9B:B4:75:A4:9F:BB:09:0C:E8:F4:11:ED:2D:44:75:55:29
Certificate issuer:       /CN=A91D83D0/serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
Certificate serial:       09BA
Authority key identifier: C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/863670328FD011EEB6FFC636C4F9AE02.roa
Signing time:             Wed 08 Apr 2026 20:25:27 +0000
ROA not before:           Wed 08 Apr 2026 20:25:27 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     398791
IP address blocks:        2407:1c00:6200::/40 maxlen: 40
                          2407:1c00:6300::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl
                          rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:57:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2490 (0x9ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D83D0, serialNumber=C4E4F0DA010AF58637CC59628471E998B7243C52
        Validity
            Not Before: Apr  8 20:25:27 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69d6b9b7-aa82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:74:2d:14:b6:9a:67:cc:ae:46:47:30:fb:8b:
                    bc:e2:d8:5e:04:27:99:5d:da:b9:82:bc:ac:0e:7c:
                    c7:f5:82:33:14:b8:78:1a:39:7a:0d:16:f2:f6:6e:
                    92:8e:ab:15:27:0b:dc:79:37:5a:8a:92:74:62:67:
                    ef:b3:2f:ba:8b:a0:11:7d:62:98:ed:04:f4:78:c5:
                    dc:ad:1b:fa:1d:b6:b7:e5:60:30:5e:15:88:36:ce:
                    b4:a6:0e:b5:59:b1:aa:b7:b8:ed:e0:8d:9a:a0:9f:
                    38:f8:8e:f3:49:8f:9f:97:59:c1:b7:60:96:52:86:
                    68:f5:20:81:72:29:2d:48:d4:b1:7e:d6:89:a8:37:
                    c1:fe:7f:7f:38:60:9c:0f:fc:6c:a6:de:d1:27:76:
                    9b:ff:03:47:b1:d0:c6:5e:0c:c4:5e:26:2b:70:91:
                    f4:6a:ec:12:2c:18:ba:5a:2a:7b:8d:d0:a8:be:97:
                    72:be:ea:24:45:f5:2b:90:27:31:c9:86:07:6a:8d:
                    dc:dd:85:36:a8:4a:cf:2d:c5:9d:ce:2c:fb:51:ae:
                    ba:46:2f:54:fe:f2:41:73:79:22:85:bd:4e:ce:9f:
                    09:9d:22:8d:51:16:0e:a9:ba:26:a3:10:8c:35:aa:
                    33:1d:41:29:19:a7:c1:36:3b:43:99:f0:a3:2f:54:
                    63:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:3D:7F:9B:B4:75:A4:9F:BB:09:0C:E8:F4:11:ED:2D:44:75:55:29
            X509v3 Authority Key Identifier:
                keyid:C4:E4:F0:DA:01:0A:F5:86:37:CC:59:62:84:71:E9:98:B7:24:3C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/xOTw2gEK9YY3zFlihHHpmLckPFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xOTw2gEK9YY3zFlihHHpmLckPFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D83D0/0A16208AAFBC11EAA961CB86C4F9AE02/863670328FD011EEB6FFC636C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:1c00:6200::/39

    Signature Algorithm: sha256WithRSAEncryption
         03:b7:b7:88:4a:35:1c:35:f6:4b:83:a4:c4:51:06:c3:0f:11:
         f4:17:14:80:e3:5f:77:98:f5:9e:1c:9c:b1:0f:23:c2:ec:94:
         aa:f9:a0:af:fc:71:f2:96:1e:c9:41:24:85:6b:4b:9c:ef:62:
         2a:f8:fb:35:d3:8e:78:2a:95:62:b3:b6:4f:94:39:b4:9a:c8:
         70:ee:e0:20:31:1e:a5:a1:3e:f6:1b:92:58:f4:ae:6f:14:0b:
         ef:0f:02:64:68:9a:00:b0:a1:62:f3:69:2e:b9:9b:4e:1e:08:
         01:ff:0f:bb:54:1f:59:d4:17:26:cd:ff:1f:25:96:7a:b5:2b:
         13:03:01:de:98:ed:99:e9:9e:fe:1a:38:15:28:44:12:17:51:
         b8:b7:0b:dc:b3:de:d4:81:4f:a4:16:ae:71:f4:3c:9a:c6:fa:
         da:30:30:bb:7e:4e:1f:69:3e:aa:a5:4d:81:5b:f6:aa:ce:ed:
         bb:21:d2:ca:80:18:c2:04:7b:09:6b:5a:64:38:bb:ca:f4:f2:
         f8:ca:8e:71:db:df:d3:81:29:4e:e3:e5:11:61:4e:81:06:89:
         dd:ad:af:8a:67:43:1c:dc:64:8e:d5:5d:13:a8:3f:3b:9c:4a:
         fa:77:86:40:2a:86:31:fe:7c:6e:39:6a:10:56:4c:fb:d8:80:
         dc:16:6c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:19:52 2026 by rpki-client