Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91618CC/BE10FD74B7D211F1BDEC96036411F970/1190F5CEB7FD11F1B60FE3E66F11F970.roa
File:                     1190F5CEB7FD11F1B60FE3E66F11F970.roa (raw, json)
Hash identifier:          JLURucWU3mWkmCHGceX/BINflLURN7LspmptIE7Lqlc=
Subject key identifier:   BA:12:9D:74:26:E9:28:F5:B2:48:50:0C:72:E3:B7:5C:B7:F1:21:87
Certificate issuer:       /CN=A91618CC/serialNumber=E6521A8919A51769AA0A3ABD440B18EAF00E7461
Certificate serial:       03
Authority key identifier: E6:52:1A:89:19:A5:17:69:AA:0A:3A:BD:44:0B:18:EA:F0:0E:74:61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5lIaiRmlF2mqCjq9RAsY6vAOdGE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91618CC/BE10FD74B7D211F1BDEC96036411F970/1190F5CEB7FD11F1B60FE3E66F11F970.roa
Signing time:             Thu 24 Sep 2026 09:48:17 +0000
ROA not before:           Thu 24 Sep 2026 09:48:17 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     154646
IP address blocks:        2001:df6:fdc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91618CC/BE10FD74B7D211F1BDEC96036411F970/5lIaiRmlF2mqCjq9RAsY6vAOdGE.crl
                          rsync://rpki.apnic.net/member_repository/A91618CC/BE10FD74B7D211F1BDEC96036411F970/5lIaiRmlF2mqCjq9RAsY6vAOdGE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5lIaiRmlF2mqCjq9RAsY6vAOdGE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 10:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91618CC, serialNumber=E6521A8919A51769AA0A3ABD440B18EAF00E7461
        Validity
            Not Before: Sep 24 09:48:17 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6ab4f1e1-0be6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0c:64:69:e5:3d:6f:86:c3:cc:4f:69:15:75:
                    77:bb:5e:cb:7b:8e:3d:33:8e:01:2c:31:3f:de:06:
                    fb:46:22:88:7b:f4:86:29:20:d2:69:e4:53:e5:16:
                    05:33:91:60:18:43:1e:63:91:32:f5:62:07:31:71:
                    37:cc:ca:1c:0c:28:c4:9f:43:79:92:b0:81:f5:21:
                    4c:12:b4:f1:6f:4c:12:1c:0f:fe:7b:2b:8e:9f:2c:
                    53:66:cc:d9:32:93:8e:39:12:bb:1d:6f:8b:f9:9c:
                    19:48:5c:3b:0e:2b:b8:c2:6a:27:ec:a7:85:62:d9:
                    65:32:bf:a0:3c:3e:66:a3:21:c1:f1:37:05:b6:59:
                    1c:f2:82:00:b8:6e:d0:4d:e7:13:bc:7f:97:09:40:
                    0f:73:7c:44:39:f7:5a:f7:79:96:21:d7:e0:2c:0b:
                    61:8d:70:50:09:09:9f:29:03:98:0f:17:04:a0:3b:
                    fa:ee:05:1d:bd:ab:bc:53:d2:45:c7:cf:d5:f6:ab:
                    32:41:de:17:89:1c:f4:35:c8:f1:11:05:b5:ee:a2:
                    ea:53:8c:23:56:26:a9:bd:4b:02:36:1b:09:bf:47:
                    4f:72:8f:bb:06:44:be:6d:66:2c:40:dc:69:e4:e2:
                    3a:62:b2:ec:58:8c:81:c3:50:21:5a:09:83:c3:29:
                    d9:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:12:9D:74:26:E9:28:F5:B2:48:50:0C:72:E3:B7:5C:B7:F1:21:87
            X509v3 Authority Key Identifier:
                keyid:E6:52:1A:89:19:A5:17:69:AA:0A:3A:BD:44:0B:18:EA:F0:0E:74:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91618CC/BE10FD74B7D211F1BDEC96036411F970/5lIaiRmlF2mqCjq9RAsY6vAOdGE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5lIaiRmlF2mqCjq9RAsY6vAOdGE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91618CC/BE10FD74B7D211F1BDEC96036411F970/1190F5CEB7FD11F1B60FE3E66F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:fdc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:37:93:d0:a7:ba:b8:92:a0:dd:11:79:2c:f1:6f:1f:f4:23:
         af:41:98:81:d6:34:df:c1:7a:a3:73:1b:57:64:51:11:e1:20:
         d6:4a:d4:93:f7:2c:7b:ff:fa:f2:ee:02:0c:1e:04:5d:05:9c:
         31:0f:a2:4a:4b:2d:4c:bb:67:e9:58:72:3f:57:13:cc:8f:81:
         43:69:eb:f3:e5:4a:3b:84:e7:6a:8f:c3:6f:cc:24:f0:9c:ca:
         e1:f3:aa:83:86:f0:58:87:18:77:5c:4b:25:8e:d3:d5:39:8b:
         61:0f:e2:16:ae:65:98:1c:92:22:39:e2:94:83:7a:a5:1c:f0:
         48:2d:ae:77:0a:bc:86:d9:b3:08:33:ff:02:71:d4:a1:47:82:
         f4:5b:66:2e:67:d1:a5:1a:5b:33:3f:05:03:2d:bb:09:94:bb:
         b7:55:43:5d:44:0a:d5:71:ec:17:7d:f9:80:32:ed:92:b9:9f:
         2d:02:f6:f8:6a:5f:b7:5c:30:7b:66:0b:3b:b2:d6:1a:42:c4:
         8d:e8:0d:f9:30:23:a2:64:41:c8:81:7a:26:c0:f7:86:ea:51:
         fb:c5:d2:ad:72:5b:6c:64:2c:09:47:83:00:32:1f:77:57:75:
         dd:7b:df:6a:33:92:68:31:29:9a:dc:68:1a:0b:33:ed:7f:60:
         77:4c:14:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:48:38 2026 by rpki-client