Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/6B471A667E7411F18CD72C758FA30FBC.roa
File:                     6B471A667E7411F18CD72C758FA30FBC.roa (raw, json)
Hash identifier:          vfqn/hE/AkoI86mFnTfekwx9EZ8FBICRYGloSQ5h680=
Subject key identifier:   53:84:D2:61:02:B6:B1:03:9C:C2:B3:A8:78:7F:1E:49:8A:32:F9:3D
Certificate issuer:       /CN=A91519CC/serialNumber=49649E94F6CA3DBDC1FFCE99FF1BBCAB8CD0AA5C
Certificate serial:       85
Authority key identifier: 49:64:9E:94:F6:CA:3D:BD:C1:FF:CE:99:FF:1B:BC:AB:8C:D0:AA:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/6B471A667E7411F18CD72C758FA30FBC.roa
Signing time:             Mon 13 Jul 2026 04:36:31 +0000
ROA not before:           Mon 13 Jul 2026 04:36:31 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     154434
IP address blocks:        2001:df6:7340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.crl
                          rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 09:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91519CC, serialNumber=49649E94F6CA3DBDC1FFCE99FF1BBCAB8CD0AA5C
        Validity
            Not Before: Jul 13 04:36:31 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a546b4f-25d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:2b:5c:c9:06:27:26:a4:a5:b3:d8:57:6d:46:
                    eb:85:e4:c0:44:a6:f4:d4:4e:c5:29:c2:18:fd:25:
                    6d:46:49:4e:8a:7e:c7:31:a0:17:ce:be:9c:03:a4:
                    73:50:7a:0f:ea:bc:66:9a:cc:95:23:1f:d5:9b:bd:
                    2e:8b:08:22:fc:a6:0d:a2:0a:d9:25:7b:f0:20:66:
                    5d:3e:c9:d0:59:c2:76:76:9a:66:15:48:70:37:5e:
                    4a:4e:06:d8:5e:0c:88:d2:f4:18:fe:1d:bd:dd:b4:
                    a8:e2:2c:b5:cf:38:86:cf:a8:67:25:ac:bc:d5:bb:
                    e6:f1:80:39:e0:2d:97:7c:69:68:02:b6:83:e6:78:
                    70:ef:13:fc:d8:93:f7:a9:86:9b:72:47:a5:1f:a8:
                    f7:67:d4:0f:f5:71:2c:cf:fa:22:0d:6e:7d:84:af:
                    16:dd:42:33:69:ea:b4:b6:a0:79:3d:67:0f:98:d5:
                    66:ba:7d:9e:b4:05:85:ac:92:25:b7:11:8a:6f:60:
                    fa:b0:1a:08:92:95:77:47:dc:f4:48:11:f8:cd:82:
                    7e:ce:a1:c1:e6:8a:b1:ea:12:a3:be:f1:d0:8c:a4:
                    b9:a5:24:8c:04:83:2c:c1:ad:c7:16:f7:34:fe:cb:
                    19:5a:fa:75:e1:cf:28:cf:68:ab:6f:61:d2:04:96:
                    b9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:84:D2:61:02:B6:B1:03:9C:C2:B3:A8:78:7F:1E:49:8A:32:F9:3D
            X509v3 Authority Key Identifier:
                keyid:49:64:9E:94:F6:CA:3D:BD:C1:FF:CE:99:FF:1B:BC:AB:8C:D0:AA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/SWSelPbKPb3B_86Z_xu8q4zQqlw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SWSelPbKPb3B_86Z_xu8q4zQqlw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91519CC/A2D46A46DA1F11F0AB820FF784D3641D/6B471A667E7411F18CD72C758FA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:7340::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:08:a1:a8:55:e0:63:9f:9d:ae:37:dd:7b:12:22:e5:27:08:
         7a:a6:95:39:8d:0f:1f:6e:fd:17:d6:d8:f2:65:7e:d0:d1:00:
         f2:77:74:7b:64:08:da:06:3d:f7:85:83:e2:df:33:df:91:fa:
         f2:a0:32:3e:83:af:a2:25:20:b3:62:14:18:8e:f8:f7:d3:bd:
         7c:48:fd:0f:7b:f4:8e:8b:82:c3:ec:7c:94:57:8b:1f:98:8a:
         d0:5b:27:5d:c1:be:38:dd:2e:57:74:22:17:70:77:ce:32:0c:
         0f:0a:70:2c:64:59:65:cf:b2:78:93:9d:0b:84:d7:75:2c:55:
         54:27:7c:ed:08:d9:2d:0f:28:31:80:7d:ad:96:4d:d7:8b:b1:
         e0:36:9f:38:9f:35:77:c1:de:06:97:01:1f:34:c4:52:a6:3d:
         e8:02:99:9f:61:ef:05:b1:91:4d:f0:a1:45:69:55:fe:63:4a:
         dd:e9:f3:17:ea:de:9d:54:60:15:f0:e1:7b:75:9a:73:b9:37:
         22:05:fd:81:1a:84:cb:1b:a1:43:e7:99:06:da:77:69:b5:51:
         72:59:b0:b7:7f:d5:40:71:c2:88:f2:8c:99:69:41:27:78:59:
         5a:3c:00:6f:01:77:65:25:1e:af:5d:91:d8:f9:df:ab:33:87:
         3c:87:bd:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:19:24 2026 by rpki-client