Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/7879B24A3BA611EC8737B534C4F9AE02.roa
File:                     7879B24A3BA611EC8737B534C4F9AE02.roa (raw, json)
Hash identifier:          1GbLqjYWrwO+B9i33IFxJ8aHv1NdPvotqSkvEUnCP88=
Subject key identifier:   AF:AB:55:14:7F:B8:4D:15:CA:29:31:30:BD:60:06:0E:F4:83:FA:BE
Certificate issuer:       /CN=A91F4268/serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
Certificate serial:       05EC
Authority key identifier: 93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/7879B24A3BA611EC8737B534C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:36:40 +0000
ROA not before:           Mon 02 Feb 2026 23:19:40 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     26506
IP address blocks:        2402:6800:6::/48 maxlen: 48
                          2402:6800:100::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl
                          rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 22:37:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F4268, serialNumber=93732F3FC31359BBBF8B379624BF91351CCAD857
        Validity
            Not Before: Feb  2 23:19:40 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=69a47928-c17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:76:3d:4c:3a:25:93:33:c5:bb:37:64:82:ed:
                    ec:90:97:4e:11:5a:23:81:72:60:07:83:36:de:33:
                    fc:38:37:ad:31:79:bb:c0:bd:8a:b3:7d:34:ab:30:
                    78:8c:fa:cd:1c:67:f9:de:43:27:1d:db:ca:d1:c0:
                    d6:62:a7:4f:24:93:ed:fa:74:ba:43:87:42:42:14:
                    de:0d:31:6e:fe:59:24:4c:9a:20:d3:cf:65:9d:47:
                    06:20:69:e1:a2:84:9c:73:53:68:85:72:78:4e:7e:
                    cd:a0:ad:3b:32:42:25:a6:ee:20:5c:cc:f3:bd:98:
                    71:87:44:ea:c9:f3:53:65:eb:e8:2a:ae:7d:01:db:
                    7c:03:fe:88:e2:73:43:5e:e6:e0:0c:d1:da:31:0c:
                    ca:02:50:67:4a:50:b6:91:fb:5f:50:57:ae:88:99:
                    3a:e8:4a:62:9f:ee:10:02:65:c2:6b:3d:f9:6f:1c:
                    14:0b:e6:ff:51:5a:a6:38:14:f2:4b:cd:84:e1:0a:
                    f4:2e:5c:b7:ed:69:53:5a:14:bc:21:85:39:21:50:
                    bc:9b:0d:67:90:fb:04:fc:23:cc:ec:5e:07:69:0d:
                    fb:d5:67:b2:8e:78:74:67:78:8b:2b:70:26:27:e1:
                    ee:17:f9:e3:07:79:dc:06:9b:73:17:a2:13:79:48:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:AB:55:14:7F:B8:4D:15:CA:29:31:30:BD:60:06:0E:F4:83:FA:BE
            X509v3 Authority Key Identifier:
                keyid:93:73:2F:3F:C3:13:59:BB:BF:8B:37:96:24:BF:91:35:1C:CA:D8:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/k3MvP8MTWbu_izeWJL-RNRzK2Fc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k3MvP8MTWbu_izeWJL-RNRzK2Fc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4268/C78EBCEA219311EC900C5653C4F9AE02/7879B24A3BA611EC8737B534C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:6800:6::/48
                  2402:6800:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:fd:16:c5:bc:bb:15:bf:63:d6:d2:f7:9e:bf:89:0b:a2:13:
         5c:03:9b:58:05:44:16:77:83:3f:23:00:99:67:1e:7c:a1:d8:
         6e:29:4b:dd:d3:82:1a:d9:8e:60:d4:4a:4c:2e:66:7e:0e:6e:
         b5:aa:a5:54:aa:ff:6c:9c:53:c0:1c:d0:36:eb:83:84:f5:f7:
         58:b1:d3:f3:5b:a6:9c:bf:c0:94:97:70:21:41:f8:dd:e6:24:
         d4:46:ad:b8:7f:01:9e:67:98:b2:7b:12:ee:ed:89:79:5a:ad:
         b3:c1:7f:f9:cf:fd:f5:d9:59:94:86:be:96:c8:bd:ea:6a:53:
         b8:2c:80:32:8b:f3:01:01:1a:f2:dc:88:74:2b:11:d9:91:c7:
         bf:21:84:ea:7f:f9:01:2a:91:bc:4b:3c:61:a8:fc:28:18:11:
         95:38:7c:e0:17:3a:64:9e:82:ce:ac:8e:00:5c:28:2a:5d:1e:
         de:ca:e0:b9:ec:d1:af:13:a2:b5:70:6d:0d:0b:5f:82:ce:ad:
         ab:75:88:71:75:26:e7:2c:90:45:4f:cd:a1:a3:58:d3:4d:a8:
         b5:d3:65:06:81:09:e8:50:23:d1:b2:67:60:b2:0b:88:f7:31:
         49:2d:69:f4:9b:99:88:49:07:97:f8:45:17:13:4b:30:cb:56:
         79:ea:1f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:05:31 2026 by rpki-client