Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/E0F26F840C7A11F1925E54691C3D8C67.roa
File:                     E0F26F840C7A11F1925E54691C3D8C67.roa (raw, json)
Hash identifier:          I7EBb+YBXT8xgUhV3T13QqxJ9GRbIYd43OJn2AJIB9Q=
Subject key identifier:   4A:8D:46:D5:20:47:57:67:BA:AA:34:DF:AB:B0:CB:69:EA:D1:08:93
Certificate issuer:       /CN=A91E6369/serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
Certificate serial:       0D
Authority key identifier: F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/E0F26F840C7A11F1925E54691C3D8C67.roa
Signing time:             Mon 02 Mar 2026 14:05:04 +0000
ROA not before:           Wed 18 Feb 2026 03:35:32 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     154514
IP address blocks:        2001:df6:ba40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl
                          rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 14:05:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6369, serialNumber=F1ED26755FC08BD059919532B8FA3A6A4834E3F9
        Validity
            Not Before: Feb 18 03:35:32 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a59910-5e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:10:39:a0:c8:c1:18:a6:75:df:df:40:14:03:
                    3d:52:83:5b:6f:10:83:8f:97:51:27:4b:3d:2a:a8:
                    7e:36:91:fe:27:dd:48:d1:fb:58:51:ae:01:1e:8d:
                    c3:e6:bc:0a:62:cd:e3:1a:da:ee:21:45:06:f6:c4:
                    d5:5b:04:ab:6a:ea:58:01:73:b7:72:a6:23:c0:9f:
                    2b:ec:5c:a8:51:5a:14:35:b1:1a:7d:1a:e0:f7:ae:
                    1a:55:0e:10:7f:dc:1c:82:05:2e:36:11:6f:fe:38:
                    20:65:d0:71:ae:95:62:5c:3e:3b:72:06:61:aa:b5:
                    4a:0f:46:bf:32:a5:4f:04:0a:c3:ee:0e:72:6a:82:
                    2f:4b:e1:10:c8:33:6b:03:4a:fc:5d:07:01:0f:6c:
                    41:98:ed:55:62:17:79:69:87:c5:c0:5c:92:4b:d8:
                    7e:50:d6:f8:0d:f7:dd:90:1d:b9:3d:6b:72:af:1e:
                    9a:b2:67:13:07:a5:06:2a:fa:53:b8:45:f2:74:61:
                    c1:6d:be:ac:1f:ee:97:0f:cc:50:ae:1c:10:fa:36:
                    c5:0e:bb:29:43:ad:e4:79:2f:7d:80:06:9a:b8:3c:
                    2c:10:85:d8:5d:31:43:36:9e:8d:85:18:41:2b:8a:
                    ec:f8:b6:ea:b6:2b:6c:2f:9b:52:b7:cb:0f:a3:e6:
                    9b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8D:46:D5:20:47:57:67:BA:AA:34:DF:AB:B0:CB:69:EA:D1:08:93
            X509v3 Authority Key Identifier:
                keyid:F1:ED:26:75:5F:C0:8B:D0:59:91:95:32:B8:FA:3A:6A:48:34:E3:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/8e0mdV_Ai9BZkZUyuPo6akg04_k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8e0mdV_Ai9BZkZUyuPo6akg04_k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/5C9C68440C7911F1B18A0C0E1C3D8C67/E0F26F840C7A11F1925E54691C3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:ba40::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:c6:39:2d:31:e5:dd:38:53:b2:3e:2d:a0:bb:95:09:76:f4:
         f5:9b:cb:b3:f3:67:3d:b9:14:35:cf:02:33:b8:a4:24:9b:0e:
         a4:1e:70:ca:9d:47:87:96:95:84:63:10:3a:7b:90:05:b9:e6:
         fd:f4:ac:f0:60:58:40:d4:a9:a1:f1:4a:4f:55:a5:48:47:a2:
         ee:b8:da:7b:e8:60:59:8d:62:35:1b:05:66:6c:85:6c:25:b5:
         af:98:b9:7f:3d:df:b7:91:d7:17:bb:f5:59:57:9b:a0:10:be:
         2c:4b:a0:25:82:02:54:97:0c:8d:ad:2c:e7:7d:35:1f:b5:6c:
         41:b5:cd:95:e0:bc:89:8c:f0:e7:0f:2b:2c:25:0d:f0:40:93:
         55:02:bb:f2:7f:0f:ab:da:d0:69:76:fa:19:68:6e:13:b5:c8:
         6e:c5:d8:54:5f:59:e2:31:1a:d7:bd:fd:ee:9e:85:37:3d:3d:
         eb:48:a4:9c:db:9a:00:75:4a:c1:47:99:3d:92:b3:3a:fd:f1:
         d3:0c:db:4e:65:62:86:ff:3c:8a:77:9c:8c:f4:7d:a4:d7:4e:
         7a:18:21:95:e1:4b:77:67:a4:80:5e:6e:89:e3:c2:a0:ee:c1:
         03:8f:e0:a0:2d:ee:24:11:81:87:ce:96:52:b8:1f:e3:cd:d9:
         14:91:a8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:44:59 2026 by rpki-client