Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
File:                     01607012DD3711EC9EF48256C4F9AE02.roa (raw, json)
Hash identifier:          JLuibLFe2igwYYBnUOCMg1rvtCWv2EtsXGaKbROLXRs=
Subject key identifier:   02:7A:07:3D:E9:B3:32:9B:48:2A:D5:AC:BF:C6:C7:03:58:E1:EC:EA
Certificate issuer:       /CN=A91E6304/serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
Certificate serial:       040D
Authority key identifier: 25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa
Signing time:             Wed 18 Mar 2026 18:44:16 +0000
ROA not before:           Wed 18 Mar 2026 18:44:16 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     16509
IP address blocks:        2407:30c0:100::/43 maxlen: 48
                          2407:30c0:120::/48 maxlen: 48
                          2407:30c0:140::/43 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl
                          rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 00:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1037 (0x40d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6304, serialNumber=2596AED0C0CB3BCFE31804B239CF4657712E276A
        Validity
            Not Before: Mar 18 18:44:16 2026 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69baf280-9cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ab:6e:fa:8b:01:13:35:5c:9f:6b:08:c2:8c:
                    4d:79:84:f2:d7:b3:60:40:a7:c3:ae:a0:bc:4f:50:
                    0b:52:de:26:17:77:c2:46:1c:23:59:d9:7f:39:ee:
                    31:dd:eb:0d:fb:42:39:9c:93:25:5b:c6:3b:e7:0e:
                    c4:c9:7a:60:cb:f6:3b:70:50:06:39:55:f3:07:3b:
                    71:b3:ec:5f:3a:83:8c:a8:49:11:de:c2:73:22:54:
                    f2:7e:8c:7d:93:56:74:47:c2:43:fe:3a:ef:15:ca:
                    b0:63:98:87:13:62:6a:55:2c:3e:ea:95:5b:56:5c:
                    9f:33:30:26:d8:1b:8a:9f:a2:ab:d9:7f:48:f8:bd:
                    73:f1:d3:31:2e:9f:ed:a4:03:6f:b0:d3:1d:30:81:
                    bb:f0:be:16:3c:e5:b9:46:ca:58:b3:89:9a:11:5c:
                    0f:c9:71:d2:5e:17:d8:3b:7e:ee:1c:f1:47:38:4b:
                    2c:32:bf:9d:8b:bc:79:cf:14:1a:77:3f:ca:f2:c3:
                    dc:75:e9:13:58:1e:05:8f:ee:38:b9:8a:c3:9a:64:
                    07:5a:ed:72:8d:c1:16:b3:f9:0b:cc:20:ee:20:03:
                    8b:8a:d2:ea:1b:b7:3f:5d:a1:16:ec:f5:cb:86:e3:
                    4e:b7:78:27:bb:7c:0e:ad:03:91:b9:a7:6e:61:ce:
                    b5:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7A:07:3D:E9:B3:32:9B:48:2A:D5:AC:BF:C6:C7:03:58:E1:EC:EA
            X509v3 Authority Key Identifier:
                keyid:25:96:AE:D0:C0:CB:3B:CF:E3:18:04:B2:39:CF:46:57:71:2E:27:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/JZau0MDLO8_jGASyOc9GV3EuJ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JZau0MDLO8_jGASyOc9GV3EuJ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6304/19E4DF06DB0711EC9922D70FC4F9AE02/01607012DD3711EC9EF48256C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:30c0:100::-2407:30c0:120:ffff:ffff:ffff:ffff:ffff
                  2407:30c0:140::/43

    Signature Algorithm: sha256WithRSAEncryption
         2b:ec:e9:72:81:0a:73:7b:a7:a4:63:be:44:b1:a2:91:18:6d:
         39:71:07:99:75:a0:8e:c9:64:5e:b4:e2:3f:c6:fc:57:58:96:
         27:3b:f6:c1:40:00:e3:a2:b9:be:c3:50:bb:87:14:86:28:86:
         e2:89:3c:5e:1c:48:5a:51:93:0a:f2:65:dd:95:64:63:dd:c1:
         9a:c9:75:1f:c2:81:82:62:59:32:f7:6c:37:46:a5:9a:bf:06:
         cb:fb:a2:85:65:55:15:4d:1e:65:17:e1:36:03:32:ef:28:fc:
         05:af:2c:bc:e2:aa:79:61:51:32:68:b3:8c:b3:de:d5:2d:72:
         f2:ca:ea:17:62:a7:3a:7d:b5:72:1f:89:cd:db:d6:51:14:c7:
         5f:0c:ea:de:94:9a:0a:50:8d:21:c7:e6:1c:11:92:6f:21:6c:
         13:d7:6b:da:67:34:2d:ef:d2:12:e0:98:39:3a:41:7d:c2:d6:
         e3:9b:74:ed:fd:53:88:28:06:f1:04:bb:d6:ac:57:03:8d:71:
         18:ca:f2:86:4b:d8:0c:06:68:44:2c:c0:89:a1:11:97:50:f1:
         c0:e9:21:5b:55:eb:33:75:cf:0d:56:47:6c:14:54:c4:db:21:
         79:8d:73:3d:cf:94:86:46:c1:63:1b:5c:28:0b:e7:cb:91:c5:
         dd:5c:dd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:30:39 2026 by rpki-client