Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/C6425B12981D11F093FE8643C4F9AE02.roa
File:                     C6425B12981D11F093FE8643C4F9AE02.roa (raw, json)
Hash identifier:          F8AcmHCCsVf4O2O4KK36dIYHv8D/txNz+sC3SnfmP6Y=
Subject key identifier:   F2:78:36:95:08:A8:57:72:90:B9:22:8A:E6:25:00:D8:60:71:6F:B8
Certificate issuer:       /CN=A91BDC6D/serialNumber=53BE8128B9CFE87749847E6445FAAE1A8722C9D2
Certificate serial:       55
Authority key identifier: 53:BE:81:28:B9:CF:E8:77:49:84:7E:64:45:FA:AE:1A:87:22:C9:D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/C6425B12981D11F093FE8643C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:25:33 +0000
ROA not before:           Tue 23 Sep 2025 01:36:50 +0000
ROA not after:            Wed 01 Jul 2026 00:00:00 +0000
asID:                     38083
IP address blocks:        2403:3b00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.crl
                          rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:13:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDC6D, serialNumber=53BE8128B9CFE87749847E6445FAAE1A8722C9D2
        Validity
            Not Before: Sep 23 01:36:50 2025 GMT
            Not After : Jul  1 00:00:00 2026 GMT
        Subject: CN=69a58fcd-add7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e6:a4:8c:5b:59:f3:f2:e4:96:fe:f2:ee:93:
                    a5:e6:a1:3f:e3:c3:1f:70:c9:0e:81:e2:2a:1c:89:
                    f4:97:f9:27:6c:ac:80:91:a2:f6:fc:7e:dc:68:67:
                    9a:a5:89:94:3e:56:ae:be:8a:83:e0:b8:02:ce:63:
                    d4:61:36:38:d7:e8:ce:fc:e8:7b:e0:81:a3:a2:4f:
                    04:6a:46:9d:07:58:0a:56:92:c1:1a:e4:93:41:78:
                    1b:5d:0b:30:9d:cc:71:34:22:a3:9e:5d:42:04:3a:
                    61:c6:07:ca:c2:a5:09:2f:25:44:62:46:67:b9:2f:
                    53:6a:06:2a:95:07:08:50:ae:45:14:d0:40:95:e8:
                    60:92:7c:ec:63:36:7b:18:da:e8:00:ff:9c:45:80:
                    20:4f:a8:de:55:7f:3e:c1:b3:d0:43:56:c0:9c:90:
                    29:fb:5c:c3:52:c5:10:ee:7a:f9:be:e3:3d:34:8a:
                    78:8a:43:8e:f9:40:79:e8:ac:55:b0:63:3b:c5:46:
                    c6:6a:e6:cc:28:22:72:fd:fa:27:b6:6a:92:b3:06:
                    12:59:4d:20:45:ea:a9:cf:dc:eb:c4:49:c6:8b:bd:
                    69:ca:c4:b2:7e:71:c5:4d:8f:9f:e7:fb:0d:03:13:
                    61:59:9c:6a:60:3a:d0:44:7d:25:62:7f:37:5e:ee:
                    e2:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:78:36:95:08:A8:57:72:90:B9:22:8A:E6:25:00:D8:60:71:6F:B8
            X509v3 Authority Key Identifier:
                keyid:53:BE:81:28:B9:CF:E8:77:49:84:7E:64:45:FA:AE:1A:87:22:C9:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/U76BKLnP6HdJhH5kRfquGociydI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U76BKLnP6HdJhH5kRfquGociydI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC6D/97BAE560976511F0B8A2CC0CC4F9AE02/C6425B12981D11F093FE8643C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:3b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:a4:8d:90:12:ca:0c:ee:4f:e0:25:b8:f4:0e:70:76:b9:8e:
         24:75:26:59:71:cd:e6:cc:98:52:c2:69:0f:bd:4b:bf:3e:fb:
         81:c7:fd:b0:3c:27:4b:fa:5f:bd:ad:4e:3b:d0:bc:2b:79:e2:
         87:8a:2c:28:84:cf:57:86:55:49:3b:ed:bb:bd:8e:ff:c5:8a:
         f1:b2:4e:a2:80:13:70:32:3a:dd:92:47:db:13:ce:5c:82:a8:
         1b:df:8e:2f:9c:68:47:9e:5c:cf:f0:61:03:66:d0:3b:b8:a7:
         43:24:e0:6b:85:4a:89:39:ac:f9:bd:14:bb:12:f7:eb:bf:a9:
         a4:bc:32:32:60:82:9d:d3:45:ef:31:79:f4:fa:15:90:6e:66:
         fa:c5:3e:1d:a0:da:10:23:cf:40:16:81:c2:67:dd:59:91:b6:
         78:4a:ff:73:38:02:95:3e:2e:81:56:0b:be:29:83:6f:45:96:
         97:51:dc:bf:41:70:4b:00:2c:ef:c7:1f:ce:f6:89:d5:5d:02:
         93:15:ce:35:df:da:13:f6:15:f0:23:8b:8f:a3:a4:b4:fd:13:
         a8:88:f4:3e:42:52:9c:91:9d:84:8a:16:28:71:fc:fb:7e:5b:
         2c:fd:97:ed:c8:40:73:1c:d2:a7:5c:1b:3e:8a:a9:fc:e9:2d:
         d6:e6:39:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 05:05:43 2026 by rpki-client