Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/48B17B5CB4CD11F094AF5C23C4F9AE02.roa
File:                     48B17B5CB4CD11F094AF5C23C4F9AE02.roa (raw, json)
Hash identifier:          OjSFLxpZGyiGtdNh0yMA+ia6uojKgSD9CONMkXavII4=
Subject key identifier:   D4:98:B7:FB:D5:06:22:C9:F6:C1:69:47:B5:37:8C:6B:27:82:92:69
Certificate issuer:       /CN=A91731AD/serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
Certificate serial:       CD
Authority key identifier: B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/48B17B5CB4CD11F094AF5C23C4F9AE02.roa
Signing time:             Tue 07 Jul 2026 08:34:37 +0000
ROA not before:           Tue 07 Jul 2026 08:34:37 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     153930
IP address blocks:        2001:df6:31c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl
                          rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91731AD, serialNumber=B870D2E0E31C8A910EDFBA765BB7CF04C3C10CBE
        Validity
            Not Before: Jul  7 08:34:37 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a4cba1d-7981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:a9:c7:00:90:fb:e4:6a:16:85:94:e7:8d:
                    04:a2:e3:4d:18:28:25:fe:90:38:71:f5:4f:09:59:
                    29:7b:1a:5a:b7:e9:2a:61:92:f1:e0:b9:b5:e6:5c:
                    bd:4c:43:3c:68:70:d5:6a:1d:24:a6:7e:c5:6c:93:
                    ae:15:f2:80:54:65:d5:1a:a4:ee:ce:86:23:dc:0f:
                    a5:ff:0c:8c:0f:39:89:92:b2:02:97:6a:8f:5b:d2:
                    0e:02:41:58:3d:20:44:f2:df:8d:90:a3:ab:1a:3e:
                    0d:79:ae:58:3a:d9:7e:47:61:42:c8:b2:19:7e:a0:
                    8c:7a:f1:71:e5:43:62:7e:13:5d:99:a6:b6:46:e5:
                    f0:ca:81:d3:7e:91:fe:da:c2:dd:3f:b1:db:29:44:
                    57:54:42:be:f7:d9:0b:4c:ab:de:48:39:6e:16:c9:
                    1a:d2:29:4a:10:98:a6:db:11:ea:11:de:c8:59:b7:
                    7e:a0:a9:97:7c:4d:62:f1:ee:53:0f:18:3a:77:21:
                    5f:62:79:78:6c:e1:ec:8a:87:23:0b:07:7f:f2:aa:
                    76:f5:ce:f4:0f:5c:d7:3a:6f:c6:4e:89:ac:ea:30:
                    39:ff:9b:d5:fe:74:2e:99:f4:bf:b4:f8:e9:11:25:
                    74:4f:2c:d1:e2:62:7d:33:e5:b5:e3:30:f1:b5:0c:
                    57:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:98:B7:FB:D5:06:22:C9:F6:C1:69:47:B5:37:8C:6B:27:82:92:69
            X509v3 Authority Key Identifier:
                keyid:B8:70:D2:E0:E3:1C:8A:91:0E:DF:BA:76:5B:B7:CF:04:C3:C1:0C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/uHDS4OMcipEO37p2W7fPBMPBDL4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHDS4OMcipEO37p2W7fPBMPBDL4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/C4E26956509C11F086D92D38C4F9AE02/48B17B5CB4CD11F094AF5C23C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:31c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:b4:0a:94:19:15:90:5d:fd:95:66:35:4d:d3:c0:7b:b4:9f:
         7b:5a:b0:da:2c:70:5e:e3:02:75:2a:67:cb:61:eb:85:ab:8d:
         07:d2:ae:e9:fb:e5:7e:76:ca:3d:65:84:02:9c:87:7a:2e:33:
         fd:11:4c:9a:d4:a3:cf:d8:11:7f:6e:49:2a:de:a2:41:58:94:
         d9:5b:55:cd:f9:53:f5:36:20:cf:b0:45:ad:11:5b:ea:77:01:
         07:f2:58:34:65:24:a1:45:3a:36:0c:ae:e9:33:90:b3:2d:b2:
         04:f6:c5:62:c2:af:d9:ae:eb:93:54:98:88:74:5d:d5:1b:59:
         ed:39:8d:8f:56:8d:8b:4b:c3:88:8d:f6:68:62:77:7f:3c:da:
         7b:8f:71:00:b4:a6:d5:f0:dd:36:29:f8:4b:91:60:16:a9:04:
         e8:6a:48:e9:94:35:15:df:ed:1d:23:38:e8:6c:ba:d2:f7:09:
         0c:e4:82:a3:56:76:66:16:fc:56:c6:9f:d9:b5:09:aa:70:09:
         99:e2:a7:42:83:99:78:75:87:da:aa:c4:7c:6c:84:ac:83:4a:
         7b:65:38:ee:46:2a:b1:9c:19:4f:af:81:d0:6b:bd:21:ff:3d:
         6b:b8:d0:83:6b:8c:c8:31:2c:c8:33:87:55:31:96:3c:61:8f:
         a3:34:bb:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:20:15 2026 by rpki-client