Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/BAE1F274190511F0826DA721C4F9AE02.roa
File:                     BAE1F274190511F0826DA721C4F9AE02.roa (raw, json)
Hash identifier:          wp5Bbdm9q2bQP+NH3qhWvc9NbTFLA+VfDHmL/JL9bns=
Subject key identifier:   E3:CE:F1:44:94:12:4E:ED:F3:A7:E9:F9:D9:72:F7:83:D2:F9:32:96
Certificate issuer:       /CN=A91ED9F9/serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
Certificate serial:       0190
Authority key identifier: 92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/BAE1F274190511F0826DA721C4F9AE02.roa
Signing time:             Tue 03 Mar 2026 04:39:36 +0000
ROA not before:           Tue 03 Mar 2026 04:39:36 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     18914
IP address blocks:        2401:7f60::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl
                          rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:41:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 400 (0x190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED9F9, serialNumber=92EFD5C0B9201A7ED3965F2D98B6D9EB66290530
        Validity
            Not Before: Mar  3 04:39:36 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69a66608-b0e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8b:35:1f:cd:60:76:09:2d:88:ac:81:30:b0:
                    ce:0f:50:74:9c:ef:68:d2:98:c1:bf:a4:a0:ca:8b:
                    36:ae:9e:a8:15:5c:7c:f5:13:e4:9b:8a:3b:d2:70:
                    60:9d:68:88:77:c5:2f:bb:8c:5d:16:24:1d:11:46:
                    5b:86:9e:2d:c1:ad:ca:d2:79:1e:51:ff:5a:b4:52:
                    52:20:cd:01:44:c8:e2:cb:4f:75:e9:a5:32:25:ca:
                    ce:08:91:df:a7:fb:6d:24:ce:d2:ca:3e:fc:3e:10:
                    27:dc:5e:aa:a1:bb:1f:16:1b:88:bd:c7:93:5f:1f:
                    e8:3a:4c:6d:3f:35:d5:9f:14:35:51:2b:a9:ff:1b:
                    eb:07:94:3b:b5:df:50:3c:a4:3f:6f:28:f2:ac:bd:
                    e3:eb:02:2f:64:7e:03:77:a1:64:96:c2:bb:eb:9a:
                    bb:83:cc:d0:f5:15:c7:e0:2a:f3:eb:1b:40:1f:b1:
                    75:b7:51:cf:a4:23:ec:43:4a:1b:69:4a:82:8b:47:
                    d1:c9:13:d6:52:61:9a:33:86:fa:78:31:2d:67:92:
                    44:44:65:14:22:4e:a8:8e:ba:a9:12:31:25:93:44:
                    97:e8:57:1d:3d:8c:0e:ec:97:78:6a:4d:1e:c6:20:
                    4e:a3:83:0e:81:89:7b:70:2e:4d:90:6f:41:ff:e0:
                    4c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CE:F1:44:94:12:4E:ED:F3:A7:E9:F9:D9:72:F7:83:D2:F9:32:96
            X509v3 Authority Key Identifier:
                keyid:92:EF:D5:C0:B9:20:1A:7E:D3:96:5F:2D:98:B6:D9:EB:66:29:05:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/ku_VwLkgGn7Tll8tmLbZ62YpBTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ku_VwLkgGn7Tll8tmLbZ62YpBTA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED9F9/6860D5A0C95211EEB7ADDD4EC4F9AE02/BAE1F274190511F0826DA721C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7f60::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:ad:d2:ad:09:87:ec:d1:2a:f2:97:b3:66:f0:4a:52:c4:0d:
         a3:50:b5:4a:b9:2c:4b:81:47:78:f5:30:89:17:86:70:fa:16:
         2b:63:a5:9c:ec:f9:09:04:39:22:29:fa:fd:9a:89:24:ab:92:
         a1:53:30:16:ef:c3:f0:06:39:02:5b:fd:dd:83:48:b0:6e:b3:
         d3:39:e8:f2:01:a4:34:77:bf:11:68:2b:05:f5:f8:64:ba:5d:
         17:31:4b:e4:7f:2d:04:b2:dd:97:b9:ed:d0:d5:80:0f:a4:a0:
         f6:e7:58:6d:b3:f5:f6:cb:9f:90:72:88:6f:41:72:22:6b:44:
         9a:c3:f8:ed:bb:9b:fc:92:bf:5d:18:9c:45:37:78:ad:e0:58:
         42:31:73:7a:36:53:b9:64:aa:1a:0b:4c:43:b2:a4:ed:54:15:
         82:b0:6c:53:dc:0c:db:57:e3:d4:a1:22:9b:85:01:a9:76:71:
         64:cf:ed:71:ca:1e:79:c7:64:8e:ba:a5:fb:7f:f9:e3:79:b4:
         16:c3:85:2e:1e:30:23:4c:3d:08:a0:5c:90:8c:85:69:30:9c:
         a9:b3:e7:42:aa:f4:e4:c0:2f:dc:38:63:23:40:30:b4:d4:e8:
         b5:1e:c9:99:68:68:f7:0d:ed:ea:89:36:b2:9f:1f:fe:66:ef:
         70:6f:0a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:52:44 2026 by rpki-client