Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/900AE11A539811EAB7BED96CC4F9AE02.roa
File:                     900AE11A539811EAB7BED96CC4F9AE02.roa (raw, json)
Hash identifier:          QEmI8rFO3uFcQUGRkaarXEyZTTwJDnEF3MflJofq8Ho=
Subject key identifier:   50:41:62:23:7F:A6:7F:F7:1E:83:F9:3A:9D:DE:4A:56:47:6C:7C:69
Certificate issuer:       /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
Certificate serial:       19CC
Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/900AE11A539811EAB7BED96CC4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:50:40 +0000
ROA not before:           Fri 20 Feb 2026 17:14:47 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     133326
IP address blocks:        2404:bc00:c41::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:45:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6604 (0x19cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00
        Validity
            Not Before: Feb 20 17:14:47 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a48a80-5139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:96:32:29:ab:45:84:00:17:f7:af:20:06:93:
                    28:2e:52:e4:6f:59:d0:18:7e:6b:02:db:75:42:9f:
                    64:bb:e5:a0:1c:41:51:09:4f:77:7b:14:e0:1e:b5:
                    a3:a7:24:3b:fd:14:88:62:b1:05:dc:53:3d:d4:7b:
                    28:d3:1e:48:15:1a:5b:d8:13:b6:f0:35:f3:35:3a:
                    86:9b:fc:23:c0:88:75:e8:a9:88:d4:e1:c4:c3:9d:
                    71:4e:02:48:5e:88:3c:b5:51:18:86:66:2b:30:96:
                    70:cc:72:9d:51:39:30:99:40:0c:86:db:5e:03:23:
                    56:4b:85:3f:3b:0e:e2:fe:ea:2a:41:f6:4d:05:48:
                    a5:c2:d8:8b:0c:34:b1:53:25:7d:29:af:71:4f:b0:
                    20:83:87:8a:3a:64:b1:1d:4c:d6:41:17:fe:bd:d9:
                    0a:f7:15:8f:a6:ea:d1:ea:3e:87:bf:a4:c0:2a:44:
                    08:5f:0d:ba:87:3b:5a:53:45:0e:ea:73:e4:cb:09:
                    7b:fc:36:6c:ba:ab:5e:71:56:b3:d6:72:84:d1:26:
                    40:1b:12:65:4f:21:ce:d8:72:f5:88:54:a9:ad:49:
                    3b:38:bf:59:7c:ef:cf:bf:de:a3:26:a8:39:3e:53:
                    ef:a5:e9:f0:d5:1a:14:04:ab:b8:f5:8b:e8:10:13:
                    df:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:41:62:23:7F:A6:7F:F7:1E:83:F9:3A:9D:DE:4A:56:47:6C:7C:69
            X509v3 Authority Key Identifier:
                keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/900AE11A539811EAB7BED96CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:bc00:c41::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:3b:f7:76:de:76:ff:0b:38:dd:29:da:42:c6:aa:bd:56:0b:
         df:43:ac:d5:2c:84:a4:a0:78:04:e4:37:01:c8:fd:fe:dd:bf:
         54:34:df:5b:eb:69:af:23:67:61:0a:33:1d:25:13:21:77:23:
         81:64:e9:92:2e:c2:ff:52:e2:a4:71:6c:5c:24:63:cc:ea:9e:
         46:3d:02:e2:a0:2e:72:69:a2:ea:6f:9f:19:61:8e:59:79:0f:
         d0:a4:67:b4:25:8d:50:0a:a6:8f:b7:58:cb:da:a5:27:1a:09:
         99:75:e4:55:b4:a0:57:f9:33:b3:15:a2:68:de:0f:d2:21:d5:
         df:2c:d4:6e:28:b1:98:78:d0:78:d9:2a:b8:d2:a4:b0:f4:09:
         40:78:f9:4f:ef:53:13:cc:73:07:14:c4:0c:d9:00:ac:c2:64:
         fe:70:a7:ca:21:89:73:42:79:e4:d9:52:22:59:c9:dc:1c:80:
         74:f0:20:0d:66:0a:60:75:fb:8a:7c:9f:36:8c:3a:74:db:83:
         7a:c0:96:0f:dd:f6:b9:1d:9e:55:6a:01:e2:04:b9:da:16:37:
         dc:23:34:ca:5e:21:08:a0:d9:91:ee:34:9b:9a:76:07:54:bd:
         eb:5c:75:a9:d3:43:13:1f:df:7f:0f:83:c2:f5:e8:f7:9d:b5:
         dd:9d:12:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:55:31 2026 by rpki-client