Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/6AAF8E08F51C11F09AD046EA586F56BC.roa
File:                     6AAF8E08F51C11F09AD046EA586F56BC.roa (raw, json)
Hash identifier:          SP0l74PQqvrBQ9lrsUma09WUsHYdqT0/VfQ61jRKUvk=
Subject key identifier:   A0:EE:3E:D1:13:09:F3:4A:34:33:B2:8B:49:E0:51:A6:9C:1A:61:D2
Certificate issuer:       /CN=A91188EE/serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
Certificate serial:       01B9
Authority key identifier: 3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/6AAF8E08F51C11F09AD046EA586F56BC.roa
Signing time:             Fri 29 May 2026 04:36:16 +0000
ROA not before:           Fri 29 May 2026 04:36:16 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152702
IP address blocks:        2001:df6:640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl
                          rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 441 (0x1b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91188EE, serialNumber=3AEDA80407D77BB52848ABD9F7259BD807A5D360
        Validity
            Not Before: May 29 04:36:16 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a1917bf-740b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0c:23:88:c8:11:09:5b:88:e3:ee:45:85:f9:
                    7d:b5:ff:0d:05:28:b0:f3:c1:e1:79:5e:f4:45:2c:
                    02:11:bb:c5:2b:6e:b4:a5:8c:4f:a1:4f:92:85:38:
                    c8:7b:f5:b9:68:0c:73:4b:c7:5c:18:99:ca:bb:1f:
                    74:76:48:7a:3e:aa:26:56:35:47:9a:4b:79:71:51:
                    68:86:3a:eb:b0:1c:19:0d:7d:38:85:e6:c4:80:25:
                    a4:fe:c5:6c:85:95:4b:92:f0:6b:41:2d:7d:fd:41:
                    25:66:52:f6:9f:42:f3:89:24:2e:a2:82:5d:d7:56:
                    8a:c8:3c:6c:88:0e:fb:d1:4e:5f:e1:fa:9c:df:db:
                    92:80:7b:ee:68:48:d4:ac:c8:41:65:63:43:8b:37:
                    94:90:cd:53:cf:b4:ee:6c:a2:8c:aa:61:c8:c4:3c:
                    a8:99:b5:5d:68:9d:6a:4f:00:c5:f2:7b:bb:ed:f0:
                    51:83:c1:08:ca:9d:71:a7:60:b7:0e:e8:ba:12:97:
                    ee:69:ab:9d:4f:83:54:bc:d8:f3:87:86:d4:2a:00:
                    36:70:44:87:42:01:a6:f2:5e:a8:1a:3a:20:f8:e9:
                    4f:f7:25:24:bc:ed:e5:70:7a:bd:5a:37:92:ee:5c:
                    6a:70:a7:ca:c9:4d:cf:c5:37:12:ac:55:4d:5d:f1:
                    d4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:EE:3E:D1:13:09:F3:4A:34:33:B2:8B:49:E0:51:A6:9C:1A:61:D2
            X509v3 Authority Key Identifier:
                keyid:3A:ED:A8:04:07:D7:7B:B5:28:48:AB:D9:F7:25:9B:D8:07:A5:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ou2oBAfXe7UoSKvZ9yWb2Ael02A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91188EE/3209731AFBAF11EEA6BC3952C4F9AE02/6AAF8E08F51C11F09AD046EA586F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:640::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:83:ce:61:78:ae:f6:bf:09:df:83:f9:36:33:66:82:12:20:
         ee:41:e6:44:42:9a:f6:c0:fc:27:53:66:18:27:67:72:4b:3a:
         ca:7e:5f:30:fa:8d:74:ca:9d:65:82:69:63:5a:2c:28:d7:4b:
         ad:b7:09:4a:01:49:61:4f:96:e8:38:8d:ef:fb:0a:14:ca:50:
         4a:6a:60:80:4b:fd:f4:05:59:2f:ac:8f:34:af:de:ed:a5:25:
         7f:48:a4:55:55:16:5b:27:67:67:96:f2:a6:13:11:98:19:1c:
         b1:39:2d:98:79:02:7e:8f:c2:d3:0b:8f:f5:4e:bd:4a:08:fb:
         b7:ba:3d:02:94:a7:37:ed:d5:90:77:e5:bf:c5:0d:74:ab:71:
         17:88:8a:6c:b7:f7:70:25:1c:e9:51:5f:fe:d6:4e:a1:7d:fd:
         b1:ec:df:31:0e:b8:4b:89:2b:3e:15:73:83:40:20:2c:aa:f1:
         95:bc:c1:e2:a4:fd:c2:03:c9:a9:0f:db:cf:42:56:b5:13:ae:
         42:a2:e4:04:eb:f9:97:8c:d1:7d:d4:0e:b3:f8:05:d7:00:cf:
         56:24:46:14:db:ee:f8:3a:b9:a3:2d:93:d1:d8:e2:14:65:09:
         79:ee:b4:c9:b7:b6:93:8e:08:5b:95:f6:c7:0a:f9:cb:d3:0b:
         bd:07:e0:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:23:22 2026 by rpki-client