Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/B4B581DEDFDB11F0B149F2E3536F56BC.roa
File:                     B4B581DEDFDB11F0B149F2E3536F56BC.roa (raw, json)
Hash identifier:          BDN3eWU1QOvpwhp4B8qHZfh25EaapwZh0B/UqPtIRS4=
Subject key identifier:   40:15:24:11:FF:AD:A6:44:F5:8A:08:7D:44:1D:73:31:05:61:FA:BF
Certificate issuer:       /CN=A91E28E2/serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
Certificate serial:       0295
Authority key identifier: B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/B4B581DEDFDB11F0B149F2E3536F56BC.roa
Signing time:             Sun 05 Jul 2026 03:28:32 +0000
ROA not before:           Sun 05 Jul 2026 03:28:32 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     54994
IP address blocks:        2403:1cc0:1005::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl
                          rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 03:16:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 661 (0x295)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E28E2, serialNumber=B481987331E1ED408B51CB9FD8EF4A650AC8669A
        Validity
            Not Before: Jul  5 03:28:32 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a49cf60-adbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:24:0d:f9:5c:e3:ca:a8:65:e1:ac:c9:12:29:
                    22:0b:b0:f8:7a:73:b2:7f:9a:d2:05:cd:e2:00:42:
                    13:0b:81:4d:b3:76:b6:c8:21:cb:2c:31:cb:4d:9d:
                    e6:69:a0:23:f1:a9:49:97:a3:00:ee:38:74:56:d0:
                    a1:c0:c0:99:c7:39:84:47:44:87:59:98:80:65:46:
                    cc:f4:76:3b:12:1a:41:2f:e2:1a:38:8f:ba:d9:8a:
                    89:31:de:08:f8:0b:0a:82:bb:1d:2b:b1:32:37:02:
                    ce:7c:d6:53:df:43:bc:e1:da:9b:24:02:6e:61:03:
                    35:3f:45:96:9d:dd:f4:be:5b:56:ef:88:31:cf:25:
                    8c:c8:54:a2:22:f2:82:c3:d1:43:b7:43:ae:66:92:
                    ad:c6:38:35:54:6c:3e:42:96:e2:5a:43:ce:3f:66:
                    21:29:58:dc:b6:a8:09:b3:b6:7f:36:7e:96:d9:cc:
                    e1:d5:cb:56:51:c9:28:16:e4:f0:4c:d3:2c:68:60:
                    6b:3f:7f:fc:29:3e:bc:e5:1c:c5:2a:b5:7d:ef:dc:
                    68:3d:d1:32:78:a2:89:cc:a6:fc:22:fb:8e:c6:7d:
                    76:b1:65:6f:21:fa:a8:b2:1d:1b:75:43:e2:04:74:
                    ea:cc:d7:ce:6d:4e:69:f7:17:65:4f:ea:c3:cb:a9:
                    44:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:15:24:11:FF:AD:A6:44:F5:8A:08:7D:44:1D:73:31:05:61:FA:BF
            X509v3 Authority Key Identifier:
                keyid:B4:81:98:73:31:E1:ED:40:8B:51:CB:9F:D8:EF:4A:65:0A:C8:66:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/tIGYczHh7UCLUcuf2O9KZQrIZpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tIGYczHh7UCLUcuf2O9KZQrIZpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E28E2/952FA632D2E611ED9A52D55AC4F9AE02/B4B581DEDFDB11F0B149F2E3536F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1cc0:1005::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:49:f3:8f:79:ec:47:67:19:3d:e5:24:b1:f9:75:6c:b9:d0:
         e1:a8:66:36:e4:ca:47:aa:2b:fe:22:ea:b2:82:42:98:4b:e9:
         25:73:b4:7e:9f:76:8f:f2:fb:3a:11:b9:ec:52:96:3d:93:08:
         0d:ad:92:6c:4c:89:55:b6:bc:0a:67:05:a9:1b:89:8b:fb:2b:
         fc:fa:a0:5e:f6:97:1d:56:6d:f5:4a:f6:2c:28:37:cc:ae:7c:
         cb:d8:b4:92:47:e3:3e:86:ac:8f:77:fc:35:d8:fa:0a:33:4b:
         5d:ba:33:e9:8a:69:18:74:78:8d:03:6c:68:6a:28:8d:24:0f:
         42:0a:d2:14:a5:2a:1b:9a:82:f9:53:e8:6e:56:15:5b:95:2f:
         1a:bb:fd:91:19:bd:91:22:69:b8:8f:66:de:57:3f:44:2a:66:
         b2:a3:f4:3d:36:83:34:a8:56:4e:30:77:98:68:a2:7d:6b:06:
         9b:9f:c3:d2:ed:a7:c6:11:88:ff:23:1e:ce:03:a8:51:e7:63:
         21:6a:62:0e:f6:6b:93:08:ea:67:33:ef:ea:47:dc:91:bf:60:
         a9:72:89:59:e8:79:4e:81:d9:7a:ba:e0:67:2d:80:3a:1e:04:
         51:d3:b1:97:52:f4:51:fe:de:ec:75:0e:68:52:77:f6:8b:ce:
         96:a1:e9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:48:55 2026 by rpki-client