Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/E2245D966E8B11F09764751EC4F9AE02.roa
File:                     E2245D966E8B11F09764751EC4F9AE02.roa (raw, json)
Hash identifier:          zAKfYfQvWBwX7n5TP08GxH0JVKLe7QwRy8xw3ikEYnA=
Subject key identifier:   94:98:19:29:00:C7:B7:7A:A4:91:AA:3A:D0:B8:CD:45:88:3B:9C:5D
Certificate issuer:       /CN=A91E0961/serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
Certificate serial:       79
Authority key identifier: 66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/E2245D966E8B11F09764751EC4F9AE02.roa
Signing time:             Tue 24 Feb 2026 18:46:33 +0000
ROA not before:           Tue 24 Feb 2026 18:46:33 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     0
IP address blocks:        2001:df5:27c0::/48 maxlen: 48
                          2001:df5:27c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl
                          rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:07:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 121 (0x79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E0961, serialNumber=66326CC0685A37636A45BC70947C219D0B5CCC60
        Validity
            Not Before: Feb 24 18:46:33 2026 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=699df209-4ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cd:81:7f:23:b0:ee:43:de:73:65:0b:94:f1:
                    57:f3:2e:55:e1:61:2a:a2:0a:fb:51:b0:5f:9b:1b:
                    05:16:50:8c:d4:50:37:0d:ee:03:cf:e9:e5:87:b5:
                    b3:b0:0d:5d:f4:a3:01:c8:53:8f:4d:7c:04:8d:ae:
                    4e:58:03:57:24:cd:9a:92:ec:5e:01:33:e4:f6:b6:
                    d3:73:6a:3c:52:af:34:27:14:10:07:7d:e5:ab:37:
                    fb:3b:1a:55:84:ed:af:70:d5:e0:de:5f:52:40:2a:
                    2b:5f:7b:2f:0a:df:0b:69:d0:e7:24:a5:3f:74:49:
                    69:f1:9f:f9:e4:90:5a:a9:bc:b2:8d:8f:f2:dc:42:
                    78:e3:1d:b9:81:fb:5c:65:01:67:a1:0c:cf:25:26:
                    ee:c7:56:82:4c:e3:15:5c:2a:65:d6:33:b5:ec:bd:
                    da:46:f3:74:a4:0d:c7:fb:73:dc:67:40:89:23:75:
                    69:47:91:bb:63:77:67:c6:26:1a:b7:9a:bd:2c:da:
                    55:30:b9:8c:7b:42:1f:b0:26:49:ba:d7:53:ac:8f:
                    de:13:7b:53:84:02:70:c1:4e:df:23:86:d4:5b:d0:
                    5f:7f:dc:f2:56:84:28:fa:48:4b:6c:83:ee:be:8e:
                    6f:17:ed:b9:90:3f:c7:a0:36:e6:cc:ee:d1:21:c2:
                    7b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:98:19:29:00:C7:B7:7A:A4:91:AA:3A:D0:B8:CD:45:88:3B:9C:5D
            X509v3 Authority Key Identifier:
                keyid:66:32:6C:C0:68:5A:37:63:6A:45:BC:70:94:7C:21:9D:0B:5C:CC:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/ZjJswGhaN2NqRbxwlHwhnQtczGA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZjJswGhaN2NqRbxwlHwhnQtczGA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0961/8E5996C4603D11F0B1505B21C4F9AE02/E2245D966E8B11F09764751EC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:27c0::/47

    Signature Algorithm: sha256WithRSAEncryption
         45:00:81:96:24:98:d4:99:2b:79:5f:58:59:66:f1:24:0f:ad:
         50:64:b8:b9:c1:36:06:9a:0a:d6:33:62:b1:d7:73:d7:ae:3d:
         1c:e0:c2:66:d8:7b:f0:9d:0b:de:29:92:ec:2e:d7:a0:1a:cb:
         a9:87:77:c7:36:04:09:7a:8e:c1:e5:cc:9f:97:29:dd:27:d2:
         1e:5e:b1:e0:d5:e1:9a:fa:7b:1b:c3:0c:cf:f8:1b:29:3b:b1:
         e8:55:cb:2a:a4:8a:ad:57:cb:d6:a3:ff:6d:79:d4:5c:e6:32:
         50:5e:b5:05:f3:91:78:0c:82:c3:c8:ef:e9:e0:49:1a:bb:7b:
         0f:71:ff:e3:f8:17:22:02:cd:49:5b:8b:a8:39:5b:3f:6d:10:
         ef:3d:c4:07:a1:cb:26:6a:4a:1b:7f:ba:ea:69:2b:3f:f4:99:
         39:07:ca:85:f4:4c:2c:37:05:dc:16:9f:74:b2:7b:aa:70:20:
         72:94:0e:81:4c:15:0d:14:c9:10:52:dd:ef:0d:ad:4d:61:bf:
         77:4f:79:d3:56:d1:e7:b4:1a:f5:d5:4b:24:9b:a3:0c:bf:24:
         66:a2:ef:10:d0:37:2e:ee:f3:4e:83:d3:b0:44:90:20:a8:65:
         5d:13:19:2c:7a:06:d9:5f:0f:7a:7c:a0:f2:74:91:69:d1:9a:
         13:d7:4e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:08:39 2026 by rpki-client