Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/C1B7F140EF6811F09BA576A7586F56BC.roa
File:                     C1B7F140EF6811F09BA576A7586F56BC.roa (raw, json)
Hash identifier:          FZsMYhs+HhbrIDEvkDPfRQGiXabysevZPy7KXtW9MPU=
Subject key identifier:   F3:4B:DB:1D:37:A6:36:20:14:17:B8:9B:0F:BD:5A:F8:65:E3:1A:AC
Certificate issuer:       /CN=A91E855B/serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
Certificate serial:       20
Authority key identifier: 6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/C1B7F140EF6811F09BA576A7586F56BC.roa
Signing time:             Sun 01 Mar 2026 05:46:52 +0000
ROA not before:           Mon 12 Jan 2026 03:42:45 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     142192
IP address blocks:        2001:df6:8f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl
                          rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E855B, serialNumber=6F39579D9711335103A6DE72017ED075B3D696EF
        Validity
            Not Before: Jan 12 03:42:45 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3d2cc-62cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:66:8d:da:48:cd:43:15:0a:ac:86:30:da:fa:
                    87:c3:5e:96:89:3f:e2:1b:7a:77:6f:50:18:9e:da:
                    a8:80:86:d4:c6:15:8d:8f:5d:ba:67:10:5a:f9:62:
                    e8:52:1c:98:d2:6b:89:f5:b7:62:f2:80:59:4c:61:
                    f1:b4:c5:f5:61:1c:6a:6e:b1:9b:66:2e:32:0a:9e:
                    1a:e3:85:20:21:a4:7d:0e:2c:26:11:ae:63:e6:09:
                    a5:9a:2d:70:ea:36:91:67:69:60:8f:f5:62:17:21:
                    44:a6:18:a7:0f:a2:81:5e:9d:1b:39:67:e8:48:ff:
                    ce:ee:87:4a:dc:2a:e2:01:bc:08:cd:e4:ca:46:2c:
                    ff:a7:5d:b2:83:75:23:77:4e:4a:eb:97:c8:35:e6:
                    08:1d:9b:a9:58:9f:4b:c0:ab:09:91:35:5c:0f:21:
                    bb:10:53:7f:b0:c7:88:06:b2:b6:4b:40:43:1c:98:
                    3d:a5:93:2c:cf:2b:d8:d2:4a:24:cf:56:a3:bb:6f:
                    ef:26:a9:9c:eb:81:07:e6:73:0c:c3:0c:cb:6d:8c:
                    9f:48:a1:82:7d:fe:33:49:d5:4b:04:b3:f3:b9:de:
                    fd:af:33:a5:7c:9d:30:4f:e4:31:d3:ba:75:a6:21:
                    c8:ac:a2:5c:a5:5a:11:3e:6f:b9:90:82:9c:58:a2:
                    32:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:4B:DB:1D:37:A6:36:20:14:17:B8:9B:0F:BD:5A:F8:65:E3:1A:AC
            X509v3 Authority Key Identifier:
                keyid:6F:39:57:9D:97:11:33:51:03:A6:DE:72:01:7E:D0:75:B3:D6:96:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/bzlXnZcRM1EDpt5yAX7QdbPWlu8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bzlXnZcRM1EDpt5yAX7QdbPWlu8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E855B/70D7F38AEF6611F0833D7B26586F56BC/C1B7F140EF6811F09BA576A7586F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:8f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:c0:de:ee:7b:ad:85:cb:49:a0:7c:49:1e:45:06:6d:5c:ac:
         06:1e:b3:24:0c:ad:a8:f7:86:95:7f:80:2e:d3:c9:98:af:ec:
         30:6e:d8:6e:2c:a3:b3:95:aa:c5:3e:29:d2:8c:88:c4:a2:4d:
         7c:98:75:e4:1e:68:0f:48:a2:12:67:62:22:b4:9b:36:33:a1:
         b4:70:3c:77:49:d5:fd:ed:24:4f:30:0f:e3:a5:a8:27:f2:e5:
         6a:19:d9:ba:a4:a4:d8:23:3c:e3:c3:b3:45:6d:bd:6a:c9:af:
         82:14:f8:76:d6:a9:55:41:33:46:df:99:59:3b:31:bc:55:5f:
         59:de:38:07:73:70:44:27:b6:7c:a7:51:fa:83:79:34:80:ab:
         5d:c8:d9:9a:00:bd:07:76:1b:fb:72:27:58:d8:2b:e2:6b:12:
         91:d4:3d:69:cb:ab:82:48:b1:52:17:9c:c7:2a:97:21:e2:50:
         42:5e:a1:7b:c6:df:74:f6:9b:d7:0f:b7:34:05:ca:b1:97:56:
         f3:c4:60:bc:c5:9e:c7:55:aa:5a:3c:29:df:10:22:75:77:a0:
         d8:99:8f:bf:58:b0:24:56:b5:b6:62:6b:f1:ee:f7:17:7e:68:
         91:dc:32:5b:98:93:7f:ee:94:75:64:44:fd:60:59:13:46:53:
         02:cd:2b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:13:24 2026 by rpki-client