Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/06D77958D49411EFA8DF5E69C4F9AE02.roa
File:                     06D77958D49411EFA8DF5E69C4F9AE02.roa (raw, json)
Hash identifier:          8qLxul8XuxEVwOeqRrW614nwBywey9BFtI58Up/eWgA=
Subject key identifier:   76:40:47:FB:E4:4E:BB:1F:6F:B4:F8:FF:A1:3B:92:0B:9F:A7:AC:5F
Certificate issuer:       /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
Certificate serial:       D9
Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/06D77958D49411EFA8DF5E69C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 14:38:54 +0000
ROA not before:           Thu 05 Feb 2026 16:25:09 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135028
IP address blocks:        2401:e960::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl
                          rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 217 (0xd9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8
        Validity
            Not Before: Feb  5 16:25:09 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a5a0fe-172f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4d:59:f1:14:38:1d:c5:ac:a6:46:0d:d1:1d:
                    bf:59:24:d4:ee:ac:a1:8c:22:7b:2b:78:02:6c:51:
                    0a:04:f6:d1:14:d1:2a:f3:03:35:45:e9:b7:fe:cf:
                    11:0e:8f:d3:b7:f4:0b:f4:18:d4:71:b3:56:0c:e9:
                    8a:16:24:58:94:e0:fd:c4:3b:55:9d:9a:2d:84:33:
                    04:1c:6c:9e:fd:22:8e:e3:6a:54:0d:ad:09:77:90:
                    d2:ff:67:b7:d1:ad:27:b3:01:c1:b0:a1:a0:e8:83:
                    d9:b4:a9:a7:f0:a3:0f:76:57:c7:ae:3c:a4:92:bf:
                    5a:35:7b:19:51:67:b8:95:04:11:0f:04:61:1f:df:
                    34:1a:f7:ef:3b:98:cf:66:63:5f:1d:93:f8:ae:ba:
                    b8:79:72:38:eb:af:de:78:48:91:5c:b1:8f:ec:a0:
                    a4:2f:da:54:87:6a:86:88:66:78:f2:62:c0:84:03:
                    2d:60:65:7b:de:d8:21:a6:5a:97:75:0b:8a:98:e1:
                    a6:65:29:85:89:f2:bc:96:e6:90:f9:b5:be:e5:15:
                    65:83:8c:37:48:03:50:f2:84:b4:1f:d9:fb:a7:28:
                    07:bc:57:cb:45:4e:68:c4:99:82:8d:cb:f0:c2:74:
                    fb:72:ac:05:18:47:23:d7:33:7f:cf:af:5c:75:d6:
                    46:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:40:47:FB:E4:4E:BB:1F:6F:B4:F8:FF:A1:3B:92:0B:9F:A7:AC:5F
            X509v3 Authority Key Identifier:
                keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/06D77958D49411EFA8DF5E69C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:e960::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:93:f7:fd:43:a1:bd:eb:ca:7e:47:03:78:f2:c9:e8:53:54:
         3c:36:b2:9d:da:77:23:52:ed:84:13:31:a7:c7:b9:ac:f8:d9:
         e5:38:dc:c2:8e:65:cf:64:9a:77:7f:2d:fc:38:4f:4b:4f:28:
         7a:fb:07:60:30:83:6f:67:11:a8:3a:74:b0:fd:4c:94:30:d8:
         d5:19:2e:8f:9f:15:7d:ed:ab:e0:fb:bf:fa:87:f5:17:fa:85:
         4d:98:52:f5:e2:8a:24:a1:16:80:03:42:ec:6e:45:e3:92:d1:
         5a:3a:77:1e:06:1d:07:f1:22:41:0a:26:3c:c6:66:de:90:00:
         51:7d:b8:0a:1f:d3:81:74:11:cf:49:3b:1a:9e:13:7e:75:60:
         3e:08:b1:27:67:ec:82:73:84:a7:7f:14:50:91:4a:03:a1:61:
         5b:72:47:70:be:26:78:0c:35:e6:2b:dd:30:a9:70:87:4e:0c:
         9c:db:55:1f:1f:f7:5c:67:a8:bb:af:33:b6:5a:38:cb:57:6e:
         6f:92:d3:6d:2b:cb:9e:8a:d8:b7:9a:c0:39:8f:c5:a4:55:08:
         63:04:71:34:ba:48:18:2c:2a:95:6f:8b:c2:79:bd:74:7b:37:
         de:62:3c:cb:f1:20:98:2d:92:8f:98:03:ac:fa:ec:cb:be:54:
         79:10:a0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:07:28 2026 by rpki-client