Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/18EDF038F73711F08BB88460376F56BC.roa
File:                     18EDF038F73711F08BB88460376F56BC.roa (raw, json)
Hash identifier:          t0hU3N1FD9zGsJ+FgYlfZfoiq30HXBUy+L5k5O72B6Y=
Subject key identifier:   2D:0D:B6:99:57:48:B7:EB:5C:97:A8:68:07:E8:B8:E3:87:03:9E:1A
Certificate issuer:       /CN=A91D0B40/serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
Certificate serial:       0146
Authority key identifier: BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/18EDF038F73711F08BB88460376F56BC.roa
Signing time:             Tue 03 Mar 2026 05:45:13 +0000
ROA not before:           Tue 03 Mar 2026 05:45:13 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     174
IP address blocks:        2401:86a0::/34 maxlen: 34
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0B40, serialNumber=BC0593C47DACF6C7A77A41E07DEB9A061631A484
        Validity
            Not Before: Mar  3 05:45:13 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a67569-a1f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:88:05:75:4b:0f:05:4b:4e:f3:71:b9:ef:97:
                    44:50:00:56:8e:25:c2:3d:99:66:29:85:9b:c3:5c:
                    86:b3:f2:2c:33:3a:f0:9c:c0:0f:c8:62:51:cf:c9:
                    3e:cc:7f:f3:fb:1f:51:e3:d3:15:11:e7:82:00:8f:
                    31:98:31:d5:e3:cd:76:ab:ba:5d:95:89:e0:96:bb:
                    b1:ba:0b:7d:7a:8f:4c:7b:7f:e1:b6:51:b3:cf:fd:
                    ca:54:4b:0a:89:e4:46:cb:46:06:74:23:b4:61:ea:
                    c3:b9:c0:2f:17:16:5c:a5:b8:de:13:5f:a2:ec:a8:
                    b8:82:92:4a:da:5f:97:b4:df:f6:4e:8d:8a:02:a5:
                    43:bf:27:0d:ea:6c:97:33:f6:d2:19:e2:ca:a4:26:
                    76:c8:f7:80:1d:c7:68:4e:77:d4:41:35:ac:84:bf:
                    6b:84:5a:65:15:5f:3d:47:68:bd:e0:33:15:b0:73:
                    3a:fd:c7:c0:d0:c8:f1:8c:c4:20:10:13:1a:50:12:
                    85:ef:1d:59:26:7d:39:f1:8c:7f:d8:5f:45:80:f1:
                    c6:7d:e6:f0:b3:68:02:0e:59:ae:69:7f:ff:35:ee:
                    05:e4:a3:64:23:f6:58:26:1f:96:0a:8c:11:89:75:
                    53:40:be:a6:bd:57:a8:d8:00:c8:e0:19:98:13:64:
                    9d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0D:B6:99:57:48:B7:EB:5C:97:A8:68:07:E8:B8:E3:87:03:9E:1A
            X509v3 Authority Key Identifier:
                keyid:BC:05:93:C4:7D:AC:F6:C7:A7:7A:41:E0:7D:EB:9A:06:16:31:A4:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/vAWTxH2s9senekHgfeuaBhYxpIQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vAWTxH2s9senekHgfeuaBhYxpIQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B40/2840C8A638E011EF94B84D7FC4F9AE02/18EDF038F73711F08BB88460376F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:86a0::/34

    Signature Algorithm: sha256WithRSAEncryption
         a3:9c:74:dc:54:da:20:87:44:1e:ce:78:78:a6:48:c5:54:a8:
         b9:31:e9:62:83:01:71:e0:c9:39:42:42:aa:78:f6:d0:b4:74:
         b9:9c:e2:fb:2a:35:cf:53:22:b4:7c:61:a6:06:6f:e1:66:b9:
         7c:f9:d9:32:16:c4:bc:17:9d:c9:02:a5:9a:56:1a:07:5d:bc:
         bd:5b:de:50:75:11:20:ba:40:3f:ad:cc:21:5a:d1:6d:58:6d:
         2e:93:cf:14:b6:1f:d2:5f:10:ba:7d:e9:03:8d:da:c5:c4:5d:
         27:82:12:bf:2d:6d:58:df:93:04:e3:fe:3e:96:73:be:e8:26:
         cf:d1:74:6e:04:dc:de:41:c0:60:29:eb:55:6e:f4:17:5e:22:
         72:d9:9f:76:68:82:1c:8f:4c:06:84:cb:f1:1c:51:4c:2f:d7:
         af:56:60:75:48:d7:69:aa:02:13:de:87:7b:a2:9c:32:4b:16:
         b4:a2:f0:80:a1:58:f1:2e:ad:f3:61:b8:6f:62:7e:28:bd:ae:
         76:c5:f7:b2:2b:33:f8:d6:8a:e2:ed:7b:c5:39:8e:39:15:f6:
         8e:0a:ef:ee:b8:41:ce:1b:59:74:d9:64:7c:e6:bf:df:84:4d:
         11:23:e6:40:0c:43:8d:a1:89:b6:02:ed:46:2f:67:45:88:bf:
         fb:84:91:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:23:34 2026 by rpki-client