Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/671EAC66343D11EFB36ED310C4F9AE02.roa
File:                     671EAC66343D11EFB36ED310C4F9AE02.roa (raw, json)
Hash identifier:          czoz5UivPk2DZLmeDI+JHyZhgkVk8064UwjiPvLfMg4=
Subject key identifier:   BB:01:40:D5:B1:01:CC:36:7F:DD:59:7D:05:33:95:8D:19:37:9D:76
Certificate issuer:       /CN=A91774FB/serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
Certificate serial:       0141
Authority key identifier: 92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/671EAC66343D11EFB36ED310C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:44:28 +0000
ROA not before:           Wed 21 May 2025 05:17:05 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     152916
IP address blocks:        2001:df3:eec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl
                          rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91774FB, serialNumber=922416659558217C93627B96D9C9EAFAC1FAA3EE
        Validity
            Not Before: May 21 05:17:05 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a5a24b-0d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:15:3a:22:93:fb:41:e5:88:99:48:74:4c:f0:
                    b4:7e:d2:18:73:4a:dc:f6:52:c2:13:d2:cd:58:be:
                    aa:9d:a3:49:f7:32:fd:33:27:84:a8:2c:f2:fd:41:
                    5a:c4:31:19:1a:65:b9:e0:54:75:75:d1:0f:84:f3:
                    5a:37:35:97:6d:db:15:8f:0c:6e:c6:06:4f:42:22:
                    c8:7c:d1:26:48:ac:ea:1c:e7:ea:b3:a0:12:37:e1:
                    f5:89:bb:59:90:72:b3:92:16:83:14:38:1d:60:d9:
                    0b:0f:f2:01:dd:02:ed:6a:6f:a2:18:b8:90:07:e6:
                    7a:ca:80:a5:f9:82:e8:cd:e2:dd:d9:55:35:79:62:
                    b3:c0:a9:32:92:76:6f:9c:df:20:c7:26:e0:f6:04:
                    1b:58:20:ec:15:59:26:61:29:03:61:b1:68:e9:79:
                    83:cd:fa:8a:08:ee:c6:41:f1:6f:dc:a9:19:44:f1:
                    ac:ed:0a:09:4d:94:ea:ed:38:67:d8:2d:c5:d7:a4:
                    f5:39:d1:b6:0c:fe:a7:a2:f2:68:81:92:0f:d6:e6:
                    f2:ca:4b:21:15:46:09:f6:01:26:07:77:12:b7:8e:
                    83:cc:40:c6:45:54:42:d9:80:fe:d8:42:14:34:10:
                    91:88:e2:90:dc:99:e6:4f:4e:42:d1:af:4d:38:9a:
                    d3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:01:40:D5:B1:01:CC:36:7F:DD:59:7D:05:33:95:8D:19:37:9D:76
            X509v3 Authority Key Identifier:
                keyid:92:24:16:65:95:58:21:7C:93:62:7B:96:D9:C9:EA:FA:C1:FA:A3:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/kiQWZZVYIXyTYnuW2cnq-sH6o-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kiQWZZVYIXyTYnuW2cnq-sH6o-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91774FB/816972C6343911EF9C3D213EC4F9AE02/671EAC66343D11EFB36ED310C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:eec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:06:7a:fa:4a:ae:26:ed:e2:82:27:e5:59:a5:3e:95:53:a4:
         96:d6:2f:93:25:d7:78:bc:2d:07:59:91:b8:64:6b:21:33:d0:
         e0:9c:9a:d6:6b:52:f6:e5:33:5c:d0:54:c2:6d:f6:be:8c:3c:
         6c:5d:0b:40:37:c7:56:c9:23:f1:a9:4a:34:f6:17:8b:f1:f3:
         a3:fa:c6:23:24:82:c8:ce:21:be:0b:28:ac:cb:49:98:fc:5c:
         f2:a9:a2:a1:eb:c4:93:35:8a:e7:34:a5:76:d2:3b:02:ff:19:
         eb:63:a1:af:e4:0e:69:31:86:ef:d8:56:ed:e1:70:af:81:21:
         4f:9d:75:1a:37:d6:21:5c:31:95:30:c1:d3:1b:31:e2:50:75:
         68:ba:68:99:5b:2f:ab:a6:a3:59:da:b2:5b:ef:8e:1c:ef:28:
         ae:43:a8:0d:ca:7b:98:2c:ce:64:c5:de:f4:e6:4d:e7:ec:e7:
         ab:2f:69:64:5c:4c:f8:bc:82:18:0b:61:63:a8:d4:be:9c:42:
         2f:c6:f9:58:eb:92:81:1c:41:ef:b1:cb:4d:1f:17:1c:c9:94:
         27:60:9f:ef:5e:ba:33:10:96:ed:bf:a9:c2:8b:50:4f:b9:2f:
         33:5e:14:39:17:fd:54:45:a7:be:57:ca:c0:85:d8:8a:33:c7:
         5b:6b:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:05 2026 by rpki-client