Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/FFD0154CC51111F081EB9984C4F9AE02.roa
File:                     FFD0154CC51111F081EB9984C4F9AE02.roa (raw, json)
Hash identifier:          s9ovKXk6i7U35KNY19JGw8V3ccjwmwtWthKx7l0Dc6c=
Subject key identifier:   BA:41:FC:F8:A1:47:54:91:EE:5F:FB:90:09:0B:3C:27:24:E0:70:FF
Certificate issuer:       /CN=A91FDC84/serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5
Certificate serial:       36
Authority key identifier: 37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/FFD0154CC51111F081EB9984C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:00:05 +0000
ROA not before:           Wed 19 Nov 2025 06:35:54 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     154377
IP address blocks:        2001:df6:5640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:57:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC84, serialNumber=377E4F5861E6D801D6871F86C941F58708FAF3B5
        Validity
            Not Before: Nov 19 06:35:54 2025 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69a3d5e5-2785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:6a:77:4a:b3:3b:76:f6:e0:01:09:36:70:
                    b9:10:36:d9:63:24:aa:22:b9:78:d4:62:d8:2b:f0:
                    27:4f:21:00:b0:4d:3e:af:ef:fe:0a:fb:ba:eb:08:
                    1b:40:4b:82:34:10:71:da:8c:2c:9b:74:cb:14:d3:
                    a5:ce:f0:c2:c3:af:55:2c:ed:86:99:57:24:ff:8e:
                    69:31:3d:41:17:10:a9:42:d5:cc:1b:51:64:27:de:
                    32:e7:26:cd:e4:e1:c9:38:68:d8:b1:42:d9:3b:6f:
                    2a:cd:cd:18:7a:82:7c:07:69:9e:57:28:3e:15:5d:
                    6a:dd:36:e8:e3:95:30:54:6c:e6:d6:f5:8b:e0:e3:
                    dc:f2:e0:4c:3a:81:dc:19:bd:63:7f:49:bb:aa:96:
                    22:ca:99:bc:87:25:15:80:f4:cc:a9:a5:7e:a1:13:
                    89:f4:9a:31:6f:80:e7:b0:ad:a9:b5:84:67:12:a3:
                    62:1d:42:4d:4c:69:ff:df:c9:a0:87:1f:7a:b5:2b:
                    9f:58:14:59:34:64:8b:1a:b8:96:13:65:83:9d:9a:
                    f8:d1:01:10:fb:6e:70:28:03:08:b8:34:70:18:13:
                    24:32:b0:1e:68:62:2c:d9:b5:56:7e:4d:8d:ff:1e:
                    30:bc:b9:61:28:d9:56:ae:dd:00:c9:5f:78:69:31:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:41:FC:F8:A1:47:54:91:EE:5F:FB:90:09:0B:3C:27:24:E0:70:FF
            X509v3 Authority Key Identifier:
                keyid:37:7E:4F:58:61:E6:D8:01:D6:87:1F:86:C9:41:F5:87:08:FA:F3:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/N35PWGHm2AHWhx-GyUH1hwj687U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N35PWGHm2AHWhx-GyUH1hwj687U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/E8EACAE4C51011F08908B75FC4F9AE02/FFD0154CC51111F081EB9984C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:5640::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:36:3e:9f:97:61:d4:6a:86:51:50:06:28:f6:ec:ea:7d:1f:
         e9:42:36:9f:b3:d3:bd:e4:d2:30:d3:02:b0:10:02:c1:af:3a:
         f1:fa:4b:7b:a6:20:1b:92:0a:5d:02:66:65:89:3f:dd:a0:d6:
         ee:25:a5:d4:74:be:10:2b:54:39:b5:e0:92:b8:df:12:0b:ad:
         fa:69:88:7f:f9:69:8c:ed:02:cb:82:df:f4:b1:19:09:b8:70:
         0d:e0:e2:6d:c1:fc:62:2f:09:bb:7a:4e:80:7e:4f:a8:2e:f1:
         34:fd:84:4c:bc:d9:a0:89:d8:eb:27:be:f7:fc:04:e9:61:3a:
         fc:60:15:9d:56:77:af:14:e8:26:6b:94:68:ac:4a:9a:dd:3c:
         18:1c:2d:3c:e9:5a:88:42:ba:f1:d2:e3:14:7a:47:28:19:05:
         fa:12:f3:83:10:03:4a:67:ed:7b:e2:a5:9f:2e:13:91:75:bc:
         fc:c1:60:52:8c:d1:5a:c6:5c:e6:0b:65:64:b5:84:f9:25:1a:
         d9:b6:de:69:a0:1c:48:15:15:03:e6:03:5e:65:89:92:eb:2f:
         44:57:35:63:ec:72:47:37:e6:08:3c:31:df:59:67:9c:63:25:
         82:9c:59:8b:24:68:c5:6c:de:cd:6f:e1:a3:b5:7a:26:c9:45:
         9d:3d:8d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:41:27 2026 by rpki-client