Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/4D144B780DFE11F09C46E054C4F9AE02.roa
File:                     4D144B780DFE11F09C46E054C4F9AE02.roa (raw, json)
Hash identifier:          ZgPtES9Kb7/bZDuku74P3oPXELpqML+BgkqSggVYIcY=
Subject key identifier:   B7:3D:87:51:5E:D9:C1:55:4D:F2:69:DA:1E:50:7B:67:A2:46:C2:E7
Certificate issuer:       /CN=A91E85F1/serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
Certificate serial:       B6
Authority key identifier: C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/4D144B780DFE11F09C46E054C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 12:56:06 +0000
ROA not before:           Fri 31 Oct 2025 07:21:17 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     153322
IP address blocks:        2001:df4:3ec0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl
                          rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 06:14:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E85F1, serialNumber=C8BF065A74822EF8CC62F4A54E59D587120B6F47
        Validity
            Not Before: Oct 31 07:21:17 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a588e6-961a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a7:5a:9e:8f:8a:12:05:63:8b:81:7e:d5:32:
                    1b:3c:58:d9:d5:5a:75:8f:1e:2c:46:8e:e0:82:f0:
                    d8:a7:02:ee:86:c0:d2:42:d4:33:40:30:be:1e:1d:
                    58:d5:c8:4a:69:87:8a:01:bf:c8:fc:1d:a7:83:ae:
                    7c:37:ee:49:c1:b5:e1:95:81:48:2d:93:f6:20:58:
                    d0:3b:9e:71:ce:6f:80:fa:f1:e3:98:e7:34:9d:16:
                    a0:d1:79:6c:c5:00:67:db:4b:2a:de:70:c8:06:e5:
                    d9:c9:f1:91:50:bc:e0:e2:c3:65:b1:e7:17:dc:13:
                    04:60:d0:0b:4e:4a:f1:21:90:6a:16:b4:5e:a4:1e:
                    9f:84:c6:1e:22:cd:e0:1e:7a:33:ff:49:d4:ff:66:
                    a7:69:c3:99:b4:e5:23:32:ca:0f:3c:d0:c5:70:32:
                    0e:7a:3b:11:8e:79:99:6b:2f:c4:3f:09:d2:4f:b5:
                    e9:e4:8a:74:b7:c8:08:f1:3d:d2:2a:a1:af:10:d7:
                    65:46:77:1d:c7:1a:08:a2:1b:34:6d:b4:41:ce:f6:
                    bc:93:46:d7:5e:21:bd:a8:5b:e1:cd:45:d3:df:65:
                    83:db:d7:d3:b3:cc:c4:57:f9:9c:ec:60:2b:4c:34:
                    3b:a7:b8:64:a2:1e:ae:68:1c:e8:3b:f9:6e:6c:57:
                    e3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3D:87:51:5E:D9:C1:55:4D:F2:69:DA:1E:50:7B:67:A2:46:C2:E7
            X509v3 Authority Key Identifier:
                keyid:C8:BF:06:5A:74:82:2E:F8:CC:62:F4:A5:4E:59:D5:87:12:0B:6F:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/yL8GWnSCLvjMYvSlTlnVhxILb0c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yL8GWnSCLvjMYvSlTlnVhxILb0c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6AA4D60A0DFC11F0A1D98053C4F9AE02/4D144B780DFE11F09C46E054C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:3ec0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:99:0a:74:30:2c:85:f8:ed:0c:d9:4c:b6:29:d2:d1:8e:5d:
         b5:b2:fb:f0:dc:ee:7e:7c:18:22:83:b4:78:a8:e3:18:a1:b9:
         12:71:55:76:d3:be:c8:f3:a9:73:c8:12:a2:9d:82:d6:cd:1a:
         e5:b9:4c:4a:f9:72:24:43:79:e9:4f:aa:89:61:9c:cc:94:1c:
         ad:94:cf:a5:f2:ea:34:c8:5c:3a:21:90:52:b9:01:73:fc:2c:
         dd:42:8d:c8:bb:cb:95:d2:d1:68:9c:88:68:2c:4c:cd:41:79:
         0b:f9:c3:1e:96:68:49:06:00:bb:17:51:44:57:b9:69:60:81:
         63:74:fb:98:55:6f:37:f8:47:70:9c:6b:2a:40:93:d6:aa:01:
         6c:8b:97:d5:97:64:64:3c:30:5c:3e:21:f3:ff:bd:b5:ed:ce:
         a2:1a:de:6f:6a:06:a6:27:a2:f8:17:97:9b:0f:5c:87:e2:77:
         67:c1:d8:e1:68:64:1b:e4:e4:68:ce:93:5f:bc:0e:c4:e5:91:
         ec:bc:fd:1c:d5:1d:e6:31:5e:39:e4:3c:55:f8:e0:4c:83:ba:
         07:c1:5b:83:14:77:d7:05:2a:d1:d5:8e:82:ff:e1:5f:40:92:
         e5:1b:df:b5:5a:76:1c:5a:dc:45:dc:fc:20:a8:73:46:4d:4a:
         44:4c:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:40 2026 by rpki-client