Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/3F1CEAEC1D0311F1B8948CF0043D8C67.roa
File:                     3F1CEAEC1D0311F1B8948CF0043D8C67.roa (raw, json)
Hash identifier:          1C1WKunXRhUP/ppMqilBjQAG9/WWODiA+ekMdQn1ktE=
Subject key identifier:   46:F0:C6:E6:72:3A:C9:33:F0:41:7C:A7:D4:E3:1F:C5:B6:03:DA:BD
Certificate issuer:       /CN=A91133DE/serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
Certificate serial:       02
Authority key identifier: FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/3F1CEAEC1D0311F1B8948CF0043D8C67.roa
Signing time:             Wed 11 Mar 2026 04:32:01 +0000
ROA not before:           Wed 11 Mar 2026 04:32:01 +0000
ROA not after:            Sun 31 Jan 2027 00:00:00 +0000
asID:                     9983
IP address blocks:        2401:7300::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl
                          rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133DE, serialNumber=FC055DA9215418C2A14566EF5676B8A4F4D20B30
        Validity
            Not Before: Mar 11 04:32:01 2026 GMT
            Not After : Jan 31 00:00:00 2027 GMT
        Subject: CN=69b0f041-bad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4e:f4:35:73:70:5e:6c:a8:58:e9:06:d0:8b:
                    34:6a:47:19:5e:6b:b7:2f:32:35:ea:c0:2d:4f:ed:
                    13:08:27:4d:d1:a3:94:2c:8c:c6:0d:15:87:4c:2c:
                    88:6a:01:66:c0:b8:6e:b0:c9:1a:d9:62:0c:a6:7c:
                    31:0f:20:c9:ca:42:c7:4d:de:9b:b8:5f:4d:53:f5:
                    ef:26:41:d1:af:84:94:57:0a:3e:06:aa:62:b8:e5:
                    d9:8f:80:17:e1:15:a4:f3:62:1d:7e:4e:6a:32:a1:
                    27:2d:ed:de:a7:0f:46:b0:05:eb:fd:60:e5:65:05:
                    95:11:9a:3e:85:68:58:8c:26:f2:00:d1:43:51:4a:
                    25:ca:1a:72:56:cc:64:a9:04:2a:64:ba:0e:18:44:
                    a2:71:7c:89:15:53:62:c4:3b:da:fc:d7:87:66:2c:
                    0c:1f:b9:e4:75:f6:78:97:14:c4:f4:ed:bf:7c:ac:
                    e0:42:ec:ac:4f:73:29:1e:a9:88:11:9a:ad:04:81:
                    6a:a9:3f:66:5e:50:6f:b5:b3:15:74:4b:02:09:00:
                    e2:4f:d1:43:87:c2:7d:00:24:47:6e:35:2e:d1:34:
                    79:9b:bd:09:2e:7e:db:7a:4b:53:2a:f6:53:88:49:
                    af:4e:e4:f9:b1:53:36:3e:19:fe:a5:dd:4a:fc:f1:
                    38:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F0:C6:E6:72:3A:C9:33:F0:41:7C:A7:D4:E3:1F:C5:B6:03:DA:BD
            X509v3 Authority Key Identifier:
                keyid:FC:05:5D:A9:21:54:18:C2:A1:45:66:EF:56:76:B8:A4:F4:D2:0B:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/_AVdqSFUGMKhRWbvVna4pPTSCzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_AVdqSFUGMKhRWbvVna4pPTSCzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/2160C9201D0211F19BF09361033D8C67/3F1CEAEC1D0311F1B8948CF0043D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7300::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:c8:b2:0d:a5:40:f2:4d:a0:c6:55:65:68:95:c7:c1:dc:5c:
         aa:7e:d0:05:46:9b:cc:12:11:3b:68:96:fa:76:1c:22:48:a6:
         ef:d7:6d:f3:c0:32:56:b0:f9:e9:2b:a7:d7:42:3d:d3:49:5b:
         f8:2e:56:f8:05:ca:3c:e1:14:a8:da:e4:98:d3:50:41:a0:2d:
         24:ce:67:ce:1c:07:d9:0d:2f:59:dc:1a:af:79:3e:7a:c3:74:
         ac:35:36:80:7f:84:57:f0:02:57:2c:79:9b:24:7a:53:dd:cb:
         8a:c9:e7:f1:ea:ca:e1:0a:b4:56:40:01:db:ab:0a:a7:4d:a8:
         f6:e0:74:84:cf:fa:fc:2a:fe:a9:6e:ea:86:e2:8e:26:43:65:
         8b:a6:83:e6:52:31:34:ce:f5:9c:db:21:27:84:69:2d:0e:6c:
         50:19:93:3a:93:76:f5:29:7c:83:a0:2f:f4:83:0f:ee:72:46:
         bc:b8:59:48:e1:e0:58:c8:4a:16:6e:8e:bb:65:85:da:7e:c6:
         8b:47:d9:de:eb:fd:1d:9e:1b:ea:c9:fd:f3:53:9a:b3:0c:96:
         12:c1:77:90:4e:c7:ff:18:3f:08:14:14:c2:2b:26:5a:65:0a:
         be:bb:f8:95:b7:a9:3c:63:d1:8f:f5:2b:94:3a:3b:b2:c2:20:
         82:47:ba:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:12:10 2026 by rpki-client