Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/E68B45D6596711F094054D6BC4F9AE02.roa
File:                     E68B45D6596711F094054D6BC4F9AE02.roa (raw, json)
Hash identifier:          pknJeL3dBzuiwUpz2ylfG4n6Urn01CYbWkZFlRG5/kQ=
Subject key identifier:   8B:D0:3D:C7:54:11:9E:A2:B1:00:9D:E6:9C:B9:DC:0F:0C:F1:F8:D7
Certificate issuer:       /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
Certificate serial:       7D
Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/E68B45D6596711F094054D6BC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 07:09:52 +0000
ROA not before:           Sat 05 Jul 2025 06:18:43 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     134732
IP address blocks:        2001:df5:d3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl
                          rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E
        Validity
            Not Before: Jul  5 06:18:43 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a3e640-b534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:c8:67:b6:bf:2b:54:db:e8:60:85:5e:4a:
                    20:1a:5e:24:48:17:a6:77:fe:02:03:f0:a4:19:f0:
                    02:c7:8c:87:cb:a1:a8:c9:0b:96:58:d1:ee:c9:d9:
                    52:bb:63:6e:d9:5f:8c:f3:ec:91:3b:2a:09:2a:6c:
                    4b:38:0d:45:82:02:82:15:88:e1:ed:8a:99:23:e5:
                    be:af:f9:22:79:b6:3c:ff:7f:1a:02:bb:74:b0:92:
                    75:3e:a2:dc:f7:71:ca:f8:89:98:c7:45:68:3a:2a:
                    9a:57:22:a8:1e:44:2b:b8:73:3f:76:4c:cc:34:64:
                    92:ab:3d:89:d3:68:91:81:a3:ad:6c:08:76:e1:32:
                    e0:f5:dc:fd:03:ac:88:04:ca:ca:c1:f9:0b:14:be:
                    b9:4a:94:b8:33:4a:1e:f8:47:fb:73:08:70:41:b3:
                    32:84:e1:13:ad:84:3c:23:87:34:06:55:be:c0:c2:
                    e1:35:d3:3e:ad:94:a0:5b:d7:5f:98:ac:9f:7d:11:
                    5c:45:1a:fe:4e:81:ea:de:90:9c:18:35:21:67:62:
                    18:84:df:90:fd:b6:7f:4a:75:59:be:6b:dd:20:b1:
                    e2:f8:f7:67:ca:b5:eb:4b:a9:ce:65:0a:eb:fc:fe:
                    61:89:2b:7e:5c:c9:0a:78:35:e2:08:d6:07:32:7e:
                    a0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D0:3D:C7:54:11:9E:A2:B1:00:9D:E6:9C:B9:DC:0F:0C:F1:F8:D7
            X509v3 Authority Key Identifier:
                keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/E68B45D6596711F094054D6BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:d3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:f6:9b:cf:f8:f3:23:50:47:5d:c9:ab:6d:56:fd:c4:f5:23:
         da:21:6c:04:6b:7d:89:e3:f8:1c:76:65:43:f9:fd:5a:d4:ad:
         70:28:95:5f:03:90:f7:ad:7e:84:dd:7e:8f:0a:25:71:bc:9e:
         03:30:e0:da:11:2d:70:5b:8f:b7:67:c3:d5:78:e2:21:9c:4d:
         ea:a4:63:0b:e7:e0:64:8c:36:15:ad:b0:61:7d:5b:67:2e:e3:
         34:b8:6a:dc:3e:9b:89:86:1f:45:8b:c4:ce:bd:80:a5:11:2f:
         7e:46:74:66:ca:a6:25:6f:bb:0a:41:87:68:72:7f:db:d2:bb:
         ea:36:95:cf:9d:00:fa:8b:a8:47:57:88:cc:a7:23:62:96:39:
         6e:50:3f:67:d7:6b:8b:e2:fd:34:ef:cf:11:c2:52:dc:f9:d5:
         d9:c7:21:1f:a0:87:38:c7:7f:79:bb:2b:86:17:f1:a8:0e:d1:
         44:a7:7a:0a:75:5d:d9:1c:c8:d5:e1:aa:88:05:da:71:9b:fa:
         25:55:56:33:62:cb:ff:b4:35:03:96:83:52:e2:58:4a:ce:70:
         b9:07:5e:eb:4e:6a:6e:47:fa:a2:19:3a:7a:ae:08:00:26:52:
         eb:0b:9a:89:a2:75:36:50:cf:1f:c7:e6:7a:38:25:c7:4a:d4:
         d9:b5:1b:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:46 2026 by rpki-client