Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/98127914D29411F0BA72510FC4F9AE02.roa
File:                     98127914D29411F0BA72510FC4F9AE02.roa (raw, json)
Hash identifier:          fcVzdG0+J4J9gwuAgPs1jVI9TN7koe+xVsb1q5pHJIA=
Subject key identifier:   DE:0F:21:58:65:12:F3:91:A8:D0:C9:9E:42:68:3F:B7:B1:C4:56:0C
Certificate issuer:       /CN=A91E9B39/serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1
Certificate serial:       2F
Authority key identifier: 70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/98127914D29411F0BA72510FC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 05:54:43 +0000
ROA not before:           Sat 06 Dec 2025 11:13:30 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     135147
IP address blocks:        2001:df6:3ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl
                          rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9B39, serialNumber=70D8D82B221A71220EFD583D92F736175E5D02F1
        Validity
            Not Before: Dec  6 11:13:30 2025 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69a3d4a2-0a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b0:d0:00:36:dd:91:dd:1d:75:00:7c:6e:ba:
                    d0:37:70:9f:32:a5:aa:c6:fe:05:c4:9f:78:d4:c4:
                    46:74:0c:30:a3:8d:5a:b8:d4:d0:80:03:16:6d:55:
                    1e:fd:f3:df:0c:d5:fb:9e:0b:62:3f:80:28:d8:97:
                    e0:2f:8c:3b:35:5e:32:a4:f9:12:e7:70:4b:61:2c:
                    ef:af:46:7e:7f:d4:fe:1b:27:d4:69:ff:ab:ff:8f:
                    dd:26:29:00:53:dc:08:ba:d7:b2:dc:dd:a5:92:0f:
                    13:7a:0a:1a:ea:5b:1e:9e:63:67:83:72:58:1e:47:
                    fc:1e:7e:8d:0b:65:21:31:5c:08:22:e1:6e:c7:3d:
                    76:98:99:22:f9:17:94:b6:53:9b:80:06:8c:0e:f6:
                    28:05:a1:93:e7:c8:46:33:6c:9c:1b:3d:6b:be:33:
                    aa:c4:72:f0:5c:a4:19:c5:d2:dc:e0:2d:2d:25:db:
                    7f:09:07:ed:8e:3a:d5:e9:58:cf:e2:8b:34:01:66:
                    d1:c4:7a:4f:ec:cf:be:38:5e:8a:cc:da:d0:31:2e:
                    a1:3b:99:94:d7:46:d7:9b:1d:c6:d1:77:19:e5:81:
                    3f:34:0b:3d:d3:c4:92:cb:a3:ab:44:09:cd:db:42:
                    c1:b8:8e:f9:82:7b:62:38:bc:4e:c2:28:65:ff:44:
                    e1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:0F:21:58:65:12:F3:91:A8:D0:C9:9E:42:68:3F:B7:B1:C4:56:0C
            X509v3 Authority Key Identifier:
                keyid:70:D8:D8:2B:22:1A:71:22:0E:FD:58:3D:92:F7:36:17:5E:5D:02:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/cNjYKyIacSIO_Vg9kvc2F15dAvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cNjYKyIacSIO_Vg9kvc2F15dAvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9B39/5AEF222CD29311F08CA65D77C4F9AE02/98127914D29411F0BA72510FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:3ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:c2:c8:34:56:1d:ff:ce:af:92:56:f8:f3:98:ab:5a:91:58:
         b9:ea:56:3b:d7:19:cc:5c:08:4c:fe:d2:b1:a1:d3:15:b6:5a:
         3d:51:db:48:e3:b6:31:f8:02:99:74:36:8f:4f:42:e5:33:51:
         ed:f9:c1:79:f0:2e:55:33:86:7f:f6:eb:43:ec:28:e4:a1:b7:
         a3:33:d1:d8:2c:bb:df:fe:15:0f:83:2c:2f:14:1f:81:b7:0f:
         bb:4b:e7:06:33:67:1a:7c:8f:12:cb:7f:6e:a1:06:83:61:01:
         23:bb:e3:c3:7d:f5:64:49:e5:82:41:28:c2:be:4c:ef:3d:69:
         2d:3c:87:b4:24:dc:3f:91:14:02:7f:48:3b:72:26:fa:02:b4:
         17:39:2b:05:48:aa:8d:66:14:01:ab:5d:c8:e9:94:57:01:a1:
         c7:26:6f:e9:49:4c:af:40:03:8e:d8:3d:89:6e:5d:f5:8e:c2:
         37:a5:08:e1:15:4d:0c:82:61:9d:ec:45:f6:d8:6c:9f:08:8f:
         b8:93:d0:62:8a:a1:54:c6:e1:7e:2e:48:60:80:bc:ac:20:3d:
         c2:49:48:72:8b:e9:04:04:23:10:fd:ca:ab:d8:f3:e2:63:49:
         96:86:61:71:e7:2e:02:8f:81:3c:bd:34:50:bc:48:3e:c2:0b:
         8e:0f:a8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:30 2026 by rpki-client