Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/D734CCEA1E0A11EF87335F33C4F9AE02.roa
File:                     D734CCEA1E0A11EF87335F33C4F9AE02.roa (raw, json)
Hash identifier:          0Dvz1Xg7o404n7QtLdxopJyG/BpV+3aI+/Po4MvWU6E=
Subject key identifier:   13:77:D1:9B:D8:C3:CF:F1:92:15:AC:3A:E0:C1:60:F8:C4:8F:9F:7A
Certificate issuer:       /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial:       0335
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/D734CCEA1E0A11EF87335F33C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:57:15 +0000
ROA not before:           Sun 20 Apr 2025 22:53:33 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     142000
IP address blocks:        2001:df6:3580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 02:16:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 821 (0x335)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
        Validity
            Not Before: Apr 20 22:53:33 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a48c0b-3b42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:05:5d:75:28:9f:8e:d8:7e:69:2e:1f:27:
                    22:9a:78:e4:27:3a:f8:3c:0b:94:37:f1:69:e7:1e:
                    8c:21:41:44:7a:67:08:15:7d:fa:4d:9e:11:93:47:
                    93:3c:ba:c9:c8:48:f4:0e:8e:ff:9d:dc:53:f1:f3:
                    fc:f9:4f:5d:80:ed:c7:66:93:0b:ea:bf:c3:83:fe:
                    79:a3:14:17:e9:c6:d3:21:4c:96:d6:47:93:a2:bd:
                    a9:5d:9a:be:6e:67:9d:d0:74:12:4c:dc:b4:5f:1c:
                    02:fc:a5:92:13:c8:32:74:c3:cd:4e:1c:47:e6:94:
                    ad:d1:cd:07:ab:92:7d:7f:4b:71:7e:ec:61:8c:5d:
                    33:cb:0b:24:7e:72:a7:78:3a:df:d4:0c:27:e5:7c:
                    11:58:69:67:fc:b3:e0:96:4c:6a:25:03:c8:e9:85:
                    e9:4c:da:67:3d:27:32:f5:7e:2f:82:78:7e:fc:2f:
                    13:0b:e5:96:14:da:3f:75:da:17:85:be:72:a4:ad:
                    4f:b5:74:29:6b:ad:f6:07:96:ee:28:ff:1a:c3:86:
                    b4:8c:0b:84:6c:fc:07:8f:96:e5:bb:2e:89:70:0a:
                    d9:4c:52:a4:b4:bd:3a:3d:2f:98:66:02:84:37:64:
                    6f:fe:6e:13:02:f9:e4:c2:20:e9:69:2d:67:d8:cc:
                    b2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:77:D1:9B:D8:C3:CF:F1:92:15:AC:3A:E0:C1:60:F8:C4:8F:9F:7A
            X509v3 Authority Key Identifier:
                keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/D734CCEA1E0A11EF87335F33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:3580::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:34:72:85:a2:0b:d5:5b:8a:de:d9:70:b1:1d:1e:dc:10:56:
         16:b1:91:90:5a:8f:2d:33:ee:e7:4a:5b:54:16:b1:75:6b:ec:
         50:f3:2b:af:2d:7e:75:ee:83:5d:e1:5f:7c:0a:6f:d4:5d:42:
         57:02:31:c4:8f:96:ce:55:a8:b7:9e:a2:f7:e2:66:64:0d:91:
         a2:9b:2b:6c:aa:75:5b:fe:33:2a:ff:fd:bf:7c:a8:8a:a8:65:
         85:1e:dc:68:ca:ea:2d:70:15:d1:8b:90:f8:54:32:78:bf:39:
         92:af:92:a5:f1:3c:9a:c1:e0:c8:2b:58:46:6e:17:f7:d3:ad:
         37:67:99:41:d9:db:2b:5d:72:5d:58:f4:2a:79:92:9b:8a:74:
         e4:e9:5b:a2:aa:4e:c3:dc:69:db:56:1f:7e:5e:33:ed:8a:32:
         af:9a:33:14:cd:77:6b:84:00:24:98:f4:6e:02:61:65:a5:a8:
         28:93:52:a6:b0:f0:f4:28:9d:b9:33:e9:5c:58:31:b1:d9:cb:
         94:ba:39:c4:3f:e5:3b:a2:4e:4c:0a:61:c5:22:3f:cb:77:e1:
         26:20:76:a3:b0:08:70:81:05:d0:f7:e0:86:a9:d8:a4:51:6b:
         39:9e:9a:27:b3:de:7f:0d:3a:44:2d:b8:75:ad:f0:d5:27:16:
         3a:02:79:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:44 2026 by rpki-client