Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/D6075FAE22A911F1B999B242B5833773.roa
File:                     D6075FAE22A911F1B999B242B5833773.roa (raw, json)
Hash identifier:          hoH+7hdmgPXKwxfgbiApjuFfBwt+Y2bPJbIp+G+HCz0=
Subject key identifier:   6B:B9:A6:0E:97:4D:E4:57:B7:75:83:C5:0D:CB:58:07:45:6A:59:03
Certificate issuer:       /CN=A9111D65/serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A
Certificate serial:       02
Authority key identifier: FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/D6075FAE22A911F1B999B242B5833773.roa
Signing time:             Wed 18 Mar 2026 09:07:06 +0000
ROA not before:           Wed 18 Mar 2026 09:07:06 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     133780
IP address blocks:        2001:df6:6240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl
                          rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:22:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111D65, serialNumber=FBEEA50B47D8EB1C70FD3A0AE95AD1B769D8434A
        Validity
            Not Before: Mar 18 09:07:06 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69ba6b3a-4ed5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7a:57:b8:da:59:49:66:86:b3:8f:a8:5c:69:
                    d6:c7:00:13:54:6a:1b:a6:18:74:e1:4e:e4:c8:20:
                    56:c8:d2:36:7b:39:d2:00:e9:79:1e:78:e0:22:2c:
                    44:ae:e2:39:75:48:bb:3f:38:8e:6f:e5:f6:7b:06:
                    fa:6f:0e:24:fb:69:a2:37:02:5d:99:1c:33:d9:57:
                    d9:6f:28:d5:de:ab:b1:59:d9:a5:82:b1:68:d4:8f:
                    fd:32:f6:9c:49:e0:08:1c:4c:79:01:0a:15:c5:da:
                    6b:45:f2:df:16:9b:07:7f:8c:df:ee:d7:df:4f:f7:
                    8b:0b:5a:6a:0b:39:0b:e9:e7:93:ee:9f:f3:bd:ed:
                    94:65:33:b4:9a:a7:31:f5:bc:af:fe:b1:73:b3:cc:
                    67:2e:1a:ff:4d:31:cd:39:44:94:97:4d:2a:56:22:
                    ca:ed:9d:89:6f:fb:03:f9:1b:9c:02:07:1b:19:58:
                    33:23:07:12:2a:4d:ef:ac:19:2f:99:0b:b7:93:3a:
                    be:5b:d3:0f:a3:12:8e:1e:fb:01:dd:af:fc:68:fd:
                    b3:4f:6a:9e:50:f2:74:39:a1:5a:cc:16:0d:a6:ae:
                    b6:d4:f4:b6:b6:72:07:b0:30:80:bf:d6:74:d7:e0:
                    a6:9b:f5:c9:ee:dc:c7:e6:fc:45:f1:3b:0a:8c:87:
                    e3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B9:A6:0E:97:4D:E4:57:B7:75:83:C5:0D:CB:58:07:45:6A:59:03
            X509v3 Authority Key Identifier:
                keyid:FB:EE:A5:0B:47:D8:EB:1C:70:FD:3A:0A:E9:5A:D1:B7:69:D8:43:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/--6lC0fY6xxw_ToK6VrRt2nYQ0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/--6lC0fY6xxw_ToK6VrRt2nYQ0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111D65/CFB9E77622A811F1A29C851CB5833773/D6075FAE22A911F1B999B242B5833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:6240::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:84:3d:23:b7:46:d9:e7:ed:c6:c3:f9:c2:f8:65:a9:fa:8c:
         6d:ec:4d:0e:db:20:2c:39:ba:23:cb:8c:63:6a:50:a7:eb:5b:
         5a:36:1a:71:e6:ea:fa:5f:d6:34:de:d3:6c:ac:26:da:5b:f5:
         c9:20:33:e5:52:1e:c0:e7:2a:32:d1:3b:d0:35:34:3b:57:74:
         35:fe:aa:4e:c1:ac:69:b8:b8:1e:fe:b6:5d:3a:be:05:ee:6f:
         9b:be:8c:11:1d:39:7d:e9:84:d9:66:b7:92:75:03:06:df:d8:
         e9:e4:23:3a:0e:c0:e0:d5:2e:60:37:16:4a:6e:8e:26:ed:07:
         54:4c:96:b5:05:c8:62:4c:f8:da:56:15:98:b5:62:85:c9:75:
         8d:02:c6:ad:2a:e3:a1:ed:dd:80:34:63:49:7d:52:b9:da:30:
         4f:d1:7e:0a:b4:2f:44:82:21:13:97:5a:ea:8e:f8:02:18:b8:
         43:47:f1:b4:a5:ac:b9:88:ba:fb:58:d1:e7:0c:32:60:a9:46:
         a0:ea:f9:dc:70:3a:2a:5d:c4:d5:e1:18:63:e4:ea:3a:25:d2:
         6e:80:37:04:5d:07:85:0f:f2:96:ef:98:e7:63:01:c7:b0:bd:
         6e:f9:6e:88:22:22:66:0f:b6:d7:80:b2:48:56:d4:55:b1:b6:
         82:08:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:29:22 2026 by rpki-client