Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FB67D4D0963111F1827E67B36511F970.roa
File:                     FB67D4D0963111F1827E67B36511F970.roa (raw, json)
Hash identifier:          4ErV8Mj9Cxid55WatD/442+2KtlSuAVYPakgyCAaHqQ=
Subject key identifier:   CD:75:F2:BA:D0:C0:82:BB:09:60:9E:80:80:82:EB:E8:09:39:B0:47
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6D1E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FB67D4D0963111F1827E67B36511F970.roa
Signing time:             Wed 12 Aug 2026 09:41:24 +0000
ROA not before:           Wed 12 Aug 2026 09:41:24 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154806
IP address blocks:        2001:df7:5340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 14:33:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27934 (0x6d1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 12 09:41:24 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a7c3fc4-8c8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fd:f2:e7:dd:26:ee:21:a6:1e:3c:96:00:b1:
                    3e:c5:d0:de:5a:00:f2:a0:e6:df:c0:14:69:06:83:
                    29:09:7f:39:16:92:56:ce:38:d7:f6:e7:16:37:1a:
                    66:cd:45:17:35:6f:45:93:07:e4:df:99:69:a3:5c:
                    a0:88:29:28:d8:ed:8d:83:e9:1d:9a:51:f2:c8:11:
                    8a:68:78:8e:c1:65:48:ca:b1:ef:04:7a:25:e3:17:
                    57:23:ef:c5:30:a0:33:bb:1f:84:97:8a:27:1c:c2:
                    5f:ca:fe:71:49:88:55:44:e4:f3:46:50:d6:8a:01:
                    d9:e8:33:24:18:b5:b3:04:73:93:ad:7f:8b:d3:7d:
                    93:4e:e4:fa:a3:3c:63:e5:34:b6:64:4f:36:75:1b:
                    16:3b:1e:4c:50:42:c5:1d:57:63:b3:8f:53:37:73:
                    c8:0a:54:a1:30:37:6a:b1:8a:ac:80:36:8f:ef:0b:
                    e6:cf:4c:02:7f:9a:58:c1:d7:1f:0f:6f:6b:e3:14:
                    a9:e8:fe:5b:4f:7d:f0:a5:54:8d:bb:f4:ce:77:b9:
                    21:3f:16:a8:65:02:6e:97:b5:21:ee:cc:f1:75:b0:
                    5f:51:aa:a0:4c:33:91:ca:98:b0:16:51:d8:f2:66:
                    4b:9b:a3:65:66:d9:c5:8f:ad:d5:75:10:22:d2:02:
                    d3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:75:F2:BA:D0:C0:82:BB:09:60:9E:80:80:82:EB:E8:09:39:B0:47
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FB67D4D0963111F1827E67B36511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:5340::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:ed:b8:09:32:e2:9b:18:68:a7:a7:2b:04:cb:96:7e:2c:66:
         2e:94:9c:2e:e3:a3:50:f9:8a:24:ed:47:f5:82:06:a4:fc:6f:
         41:88:34:6f:21:9b:6e:90:ca:e2:d2:d4:d7:f6:49:99:f6:7b:
         be:98:cf:53:0d:8c:2d:47:28:e2:91:9e:54:a5:97:ee:6e:07:
         0f:a0:92:b2:50:27:ce:c4:81:7b:01:e6:db:e0:1c:17:2b:47:
         47:dc:5c:c4:02:c6:22:90:08:b2:48:26:e7:4c:15:94:0a:13:
         5f:7a:8b:1b:b0:1f:62:e0:ef:18:43:ea:11:eb:f7:bc:79:b1:
         03:72:d4:88:68:73:12:47:a3:78:84:2c:ca:92:ea:65:07:57:
         e1:64:01:7c:52:34:ff:6a:8f:f7:cc:e5:bf:0a:2b:52:06:38:
         55:2d:f3:ea:8a:3d:a6:3a:7d:70:aa:f0:a5:17:ee:9e:9a:cb:
         c7:33:88:df:7b:60:6d:2f:55:dd:1d:cc:bb:53:79:c1:32:93:
         54:dc:11:aa:d0:9c:04:cb:c2:97:29:07:95:cc:96:c6:08:50:
         58:68:8c:f9:4b:2c:81:ea:50:65:83:c2:28:0d:9c:c5:67:39:
         89:f8:ae:0c:1a:72:67:49:bb:53:bb:22:87:bc:72:cb:80:c5:
         cc:9a:d0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:08:14 2026 by rpki-client