Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/9D1E103C79BD11F1A56111AD5AA30FBC.roa
File:                     9D1E103C79BD11F1A56111AD5AA30FBC.roa (raw, json)
Hash identifier:          v5LCMSJ7unsotsj1CUAFikFHoJMXhj0hIvgSsrnsLqo=
Subject key identifier:   95:8D:EE:89:01:D2:69:BF:28:82:1A:CC:8F:11:E6:88:AA:88:1B:FB
Certificate issuer:       /CN=A91689B9/serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE
Certificate serial:       03
Authority key identifier: D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/9D1E103C79BD11F1A56111AD5AA30FBC.roa
Signing time:             Tue 07 Jul 2026 04:37:52 +0000
ROA not before:           Tue 07 Jul 2026 04:37:52 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     135880
IP address blocks:        2001:df6:9dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl
                          rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 11:03:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91689B9, serialNumber=D869DBEA2630643CD6D1D4B638D46E534D3F6EAE
        Validity
            Not Before: Jul  7 04:37:52 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a4c82a0-e291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:d6:d3:dd:99:f3:1c:d5:30:9a:db:15:a2:
                    8c:e9:9c:54:0b:51:96:9e:17:e3:a2:e6:80:71:51:
                    5d:65:33:9f:84:5a:2e:7f:81:fc:e9:3e:c5:f4:5b:
                    98:8a:3b:bb:cb:58:1f:a6:b4:3a:e0:1f:d5:39:99:
                    17:62:35:e2:ad:4b:f1:5c:99:e4:ae:57:85:15:1e:
                    dc:78:f4:68:94:51:54:4b:02:65:f0:2c:f9:99:eb:
                    fc:54:49:af:ba:44:a0:2b:cc:a2:b1:fd:66:e3:d0:
                    0c:67:c2:e5:41:0c:b3:15:52:07:47:d6:15:f9:d5:
                    92:1f:23:ff:c4:89:e2:8a:7a:04:97:32:7b:ac:f4:
                    97:1f:3d:01:0f:a0:55:d3:60:da:e2:4d:81:f1:74:
                    d7:21:b8:58:b2:1e:66:69:fb:7e:05:63:7c:cb:41:
                    9a:7a:4e:65:c1:cf:80:5d:f8:32:54:ae:6d:a3:c1:
                    62:18:25:5b:d2:52:22:75:81:2b:2b:0f:eb:4e:53:
                    a0:07:42:9d:85:d9:57:06:0a:44:89:50:cf:6b:b7:
                    35:97:8f:2a:08:e8:4f:ec:7f:89:80:5d:7a:74:ab:
                    06:b0:bd:b3:40:72:48:50:9e:1d:dd:25:b5:4d:ef:
                    d7:98:8a:19:9a:17:4f:ee:8b:53:ef:ea:f1:8e:81:
                    fd:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8D:EE:89:01:D2:69:BF:28:82:1A:CC:8F:11:E6:88:AA:88:1B:FB
            X509v3 Authority Key Identifier:
                keyid:D8:69:DB:EA:26:30:64:3C:D6:D1:D4:B6:38:D4:6E:53:4D:3F:6E:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/2Gnb6iYwZDzW0dS2ONRuU00_bq4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Gnb6iYwZDzW0dS2ONRuU00_bq4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/00CE5C40792D11F1BC8890906FA30FBC/9D1E103C79BD11F1A56111AD5AA30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:9dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:48:1f:3f:fb:49:3e:59:aa:41:3e:7c:e2:d4:3f:69:cc:15:
         a1:be:ee:43:83:ca:74:20:49:cf:21:5b:b5:f8:e0:6f:d3:27:
         ac:17:64:96:c5:6c:74:16:51:36:62:24:b3:ad:8e:8f:15:1a:
         19:23:6e:22:b8:de:0f:73:66:d9:b5:18:b9:83:0a:39:71:14:
         29:b1:9b:ff:24:68:da:79:fd:58:df:42:af:13:b0:f1:76:56:
         47:13:43:3a:a1:77:7b:69:c6:78:e7:59:77:12:df:4a:fd:5b:
         55:75:c2:6b:37:cf:e9:87:19:ad:68:60:68:fa:49:e4:e6:f8:
         c7:e4:dc:85:df:58:00:59:a5:b7:34:8c:04:fd:5b:46:62:ad:
         64:c2:03:55:1e:0c:40:5c:85:97:98:8c:fb:c5:f0:5d:ee:ae:
         bb:9a:31:0a:c1:85:af:94:05:26:68:ab:d4:33:a6:59:68:60:
         87:04:7c:e7:b5:a9:80:a8:a0:46:08:52:a0:87:a2:7f:06:7e:
         a1:a2:d1:76:8a:8e:4a:c4:99:dc:d1:7d:5b:61:60:36:cf:c3:
         ea:8b:64:a0:db:f3:31:1a:9c:64:a2:5e:91:15:87:62:89:2f:
         fe:03:82:4d:9a:df:6d:d6:95:cf:5c:f9:cc:b3:52:1c:44:ec:
         38:e4:91:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:48 2026 by rpki-client