Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/D9D5455006AD11F1A15422A90B3D8C67.roa
File:                     D9D5455006AD11F1A15422A90B3D8C67.roa (raw, json)
Hash identifier:          9mXmmqDvRyQw4N2RkVpMeSLK2aerK/OHjHDytxXqiIA=
Subject key identifier:   74:B8:09:BE:06:35:18:6D:EF:48:9D:27:1F:4D:EA:C8:9C:97:22:06
Certificate issuer:       /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Certificate serial:       9E
Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/D9D5455006AD11F1A15422A90B3D8C67.roa
Signing time:             Mon 02 Mar 2026 14:57:06 +0000
ROA not before:           Tue 10 Feb 2026 18:25:18 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     154131
IP address blocks:        2001:df5:f640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 158 (0x9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
        Validity
            Not Before: Feb 10 18:25:18 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=69a5a541-8aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:de:af:cc:cd:a9:43:02:57:94:75:eb:f9:
                    6c:45:d5:f0:9c:79:e8:fd:c1:30:df:17:81:33:e0:
                    59:e1:bf:73:f9:a2:07:92:3b:80:ef:f6:6e:e5:a9:
                    48:07:16:77:7d:4d:a0:73:27:8f:1f:c3:9a:69:d1:
                    6b:7d:b2:32:90:60:8b:85:64:25:57:b7:4a:0c:50:
                    69:2e:96:b7:40:1e:da:d1:39:84:5b:28:55:52:ee:
                    69:9a:03:6c:cf:27:89:27:bb:ba:14:60:cf:54:92:
                    93:63:ed:6f:c4:58:64:f9:ab:5d:30:ac:d7:0b:23:
                    1f:d4:5d:d4:38:28:d1:a0:6a:db:a9:0f:ab:0a:3f:
                    ac:03:e3:c6:17:ce:57:a7:e4:59:76:f4:58:7e:56:
                    51:76:36:39:56:11:bd:bc:3d:30:4a:31:52:4f:79:
                    a2:4f:26:9b:68:14:4f:64:62:17:2d:f7:a8:f1:21:
                    7d:dd:7b:de:f2:1d:5e:d4:56:49:40:18:0d:6e:3c:
                    62:b6:5e:44:98:f6:a1:ef:47:82:85:a5:f1:eb:57:
                    9a:6e:2b:92:d6:a4:7b:28:cd:cb:57:16:59:d5:61:
                    3c:a0:0a:02:5c:cd:1b:d6:75:da:4b:43:f6:36:01:
                    05:ae:6a:b3:ae:72:8c:97:50:60:62:1b:0c:70:8c:
                    de:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B8:09:BE:06:35:18:6D:EF:48:9D:27:1F:4D:EA:C8:9C:97:22:06
            X509v3 Authority Key Identifier:
                keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/D9D5455006AD11F1A15422A90B3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f640::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:9a:de:2e:36:6a:85:2b:6e:4d:a0:eb:b2:61:31:7a:96:e6:
         d8:05:e4:d9:0f:65:f2:97:78:27:e6:01:36:a5:01:82:c3:9b:
         db:57:95:69:4c:25:59:2c:b3:98:83:2c:e9:f6:6e:55:e4:90:
         db:53:ad:f9:1c:09:6c:70:72:b8:de:68:2a:a3:af:74:34:71:
         24:9c:c0:93:6c:ae:7f:33:46:ac:64:01:32:c1:70:e3:c1:1c:
         30:5c:85:3a:7f:86:1c:fb:24:ef:be:61:1a:3b:44:ec:1c:0c:
         d4:1d:4a:e0:f3:f8:3a:0c:c2:a9:17:92:fb:25:b3:f6:da:66:
         2f:18:a7:f9:29:b0:9c:b4:93:53:8b:fb:35:b8:b7:37:25:60:
         71:24:1e:9a:57:f8:c4:17:9a:85:69:04:e9:a9:6d:6c:21:43:
         b6:50:03:cf:2e:e0:2d:4c:4b:fb:e5:de:70:51:50:3c:8f:f8:
         ad:4c:d8:75:0b:ce:bd:c4:c4:c2:96:f1:19:6f:3b:7e:e1:d7:
         2f:39:32:8d:e0:6f:1b:94:46:a1:0e:7a:c8:03:39:b0:8d:43:
         03:45:94:98:f6:ad:4e:10:e9:01:88:09:fa:40:68:c4:37:c4:
         5b:b5:39:95:33:5b:2d:52:d3:09:33:04:12:c0:cc:4f:d7:94:
         c0:1d:fb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:59:08 2026 by rpki-client