Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa
File:                     6D3C9D30195F11F08408FA45C4F9AE02.roa (raw, json)
Hash identifier:          Yp0HMv7qZ1vbYODUUhc9C4+UvXo6Ym2toNyWlLIJdGg=
Subject key identifier:   09:94:61:85:47:B1:E3:2E:E4:43:19:A9:1A:26:01:4A:02:51:B1:98
Certificate issuer:       /CN=A91A7169/serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
Certificate serial:       022C
Authority key identifier: E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 18:55:50 +0000
ROA not before:           Thu 14 Aug 2025 23:43:08 +0000
ROA not after:            Mon 31 Aug 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        2400:7aa0:2701::/48 maxlen: 48
                          2400:7aa0:2702::/48 maxlen: 48
                          2400:7aa0:2703::/48 maxlen: 48
                          2400:7aa0:2704::/48 maxlen: 48
                          2400:7aa0:2705::/48 maxlen: 48
                          2400:7aa0:2706::/48 maxlen: 48
                          2400:7aa0:2707::/48 maxlen: 48
                          2400:7aa0:2708::/48 maxlen: 48
                          2400:7aa0:2709::/48 maxlen: 48
                          2400:7aa0:270a::/48 maxlen: 48
                          2400:7aa0:270b::/48 maxlen: 48
                          2400:7aa0:270c::/48 maxlen: 48
                          2400:7aa0:270d::/48 maxlen: 48
                          2400:7aa0:270e::/48 maxlen: 48
                          2400:7aa0:270f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl
                          rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 556 (0x22c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A7169, serialNumber=E50CB250BFAD0863E85C2902EA0219D53CC0812E
        Validity
            Not Before: Aug 14 23:43:08 2025 GMT
            Not After : Aug 31 00:00:00 2026 GMT
        Subject: CN=69a48bb6-70be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8a:55:9a:4d:6f:a2:59:2a:1f:76:ce:3c:73:
                    1f:9e:c3:f5:1b:c2:78:2a:60:66:5c:58:f8:c6:e1:
                    6e:f2:02:c7:ef:d8:98:6d:7d:16:35:3c:a3:92:8b:
                    01:81:26:28:4a:5a:41:cc:aa:f0:cd:43:67:fb:ff:
                    8c:99:fe:65:f5:93:24:bd:9f:c7:63:05:58:06:56:
                    8e:d9:b3:f2:19:cb:8c:5d:32:6b:8d:5c:fe:99:d2:
                    51:f8:6b:51:8c:70:ae:5a:62:07:1e:00:13:d3:95:
                    5a:19:0d:7e:4e:01:67:5e:eb:22:5b:80:04:84:a7:
                    86:f0:56:80:e3:36:0d:5f:9b:d9:83:60:8d:a7:80:
                    0a:95:fd:70:d8:36:b2:66:25:82:51:4f:af:41:d0:
                    ad:6b:57:63:ed:c2:ae:8e:17:b2:79:c5:56:4b:fb:
                    da:b5:9b:a2:9f:8a:8b:13:7b:7f:e8:50:97:90:bb:
                    d3:73:33:a5:fc:58:3f:62:43:13:48:f0:c2:57:3b:
                    9d:cc:de:47:c2:ef:c8:7d:c5:f9:6e:aa:06:e0:0b:
                    e7:bb:c7:9f:67:d2:c7:17:67:ff:cb:5b:44:cc:4e:
                    0d:68:87:29:32:f9:18:8b:9d:96:2b:cd:16:c7:f2:
                    f6:e3:c2:ba:bd:d6:b6:35:78:6c:a2:a1:15:00:26:
                    28:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:94:61:85:47:B1:E3:2E:E4:43:19:A9:1A:26:01:4A:02:51:B1:98
            X509v3 Authority Key Identifier:
                keyid:E5:0C:B2:50:BF:AD:08:63:E8:5C:29:02:EA:02:19:D5:3C:C0:81:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5QyyUL-tCGPoXCkC6gIZ1TzAgS4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7169/6B7F993CEBAE11EE8A0ED964C4F9AE02/6D3C9D30195F11F08408FA45C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:7aa0:2701::-2400:7aa0:270f:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         c4:41:ff:f1:39:63:9f:18:ff:4e:e6:fa:ed:0e:e5:e9:9e:55:
         f8:2f:a7:58:63:3e:1f:09:68:aa:b4:7e:e0:74:c6:e0:8c:34:
         4e:11:c9:ad:a5:39:fa:35:10:a3:6b:6e:16:2f:35:50:54:9b:
         c0:5f:fb:bd:ba:0b:4c:e4:ce:28:f1:a2:3a:ec:92:d0:82:48:
         6b:ba:3d:ad:ee:f8:22:0d:b3:82:2b:c7:f3:11:a3:7b:82:21:
         b6:a4:11:56:fc:98:16:b6:8b:20:4e:b8:e2:17:ab:29:c6:49:
         fb:97:64:69:5e:68:80:fe:cc:32:24:de:e0:a4:76:49:c8:a9:
         83:18:69:03:65:e0:9a:fc:07:08:eb:ad:14:50:d8:b0:0b:e4:
         02:97:8e:d3:5a:64:d3:36:09:4c:3f:71:78:63:a2:24:c3:a6:
         cb:7e:71:c2:b6:33:0b:35:c0:c5:fc:a6:2f:f6:ef:c1:d8:4a:
         49:bf:17:74:91:20:cc:fe:ba:71:87:06:c0:49:b6:6f:47:94:
         10:f8:a2:cf:b4:31:e0:e0:35:7d:73:e6:94:16:48:18:b5:e4:
         e7:7f:d5:b5:83:1a:2a:a9:e9:74:e5:51:97:12:8a:dd:35:b7:
         38:94:2b:85:cd:6d:89:2c:69:08:91:10:39:56:89:cb:94:77:
         ec:34:3c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:57:19 2026 by rpki-client