Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/073A991CB7C211F1A276FF195F11F970.roa
File:                     073A991CB7C211F1A276FF195F11F970.roa (raw, json)
Hash identifier:          ESHniOIE6hjdTnh19HGi7Rold0meXeAIjgAAbP+FVrM=
Subject key identifier:   67:4D:72:FF:AF:39:27:86:E3:37:7C:E5:3C:56:ED:00:7E:72:BA:91
Certificate issuer:       /CN=A91927A0/serialNumber=53B93FA60E450B88DF9CB760CED62596DA264806
Certificate serial:       02
Authority key identifier: 53:B9:3F:A6:0E:45:0B:88:DF:9C:B7:60:CE:D6:25:96:DA:26:48:06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7k_pg5FC4jfnLdgztYlltomSAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/073A991CB7C211F1A276FF195F11F970.roa
Signing time:             Thu 24 Sep 2026 02:45:40 +0000
ROA not before:           Thu 24 Sep 2026 02:45:40 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154803
IP address blocks:        2001:df7:50c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.crl
                          rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7k_pg5FC4jfnLdgztYlltomSAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 Oct 2026 09:43:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91927A0, serialNumber=53B93FA60E450B88DF9CB760CED62596DA264806
        Validity
            Not Before: Sep 24 02:45:40 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ab48ed4-7efd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:02:b3:3f:42:8b:dc:fb:3e:28:f8:32:33:6b:
                    6b:20:15:62:b1:27:ab:9a:db:f8:53:16:c1:fe:0d:
                    28:a7:4c:4e:75:66:f6:2f:47:1b:24:55:41:ea:94:
                    a3:d3:18:0a:99:6f:f9:49:46:7f:64:4e:1c:7d:a6:
                    e6:23:bb:95:27:6b:ef:c2:c8:da:9a:fa:0b:01:c4:
                    12:ca:11:7f:ab:0e:5a:eb:f2:a4:13:1b:1a:a7:6d:
                    5b:9b:ef:04:af:dd:57:12:35:86:16:ab:95:d8:2b:
                    e7:89:e8:75:f3:8b:2e:97:e0:03:a5:4f:f7:f8:97:
                    ca:b9:1f:85:de:c5:62:42:bc:8f:b5:e0:fe:a4:7f:
                    ca:e3:cf:09:26:b9:f5:fd:09:89:29:83:8f:fa:3f:
                    11:2d:dc:95:08:7a:fb:cf:9b:7d:e7:1f:f4:c1:f5:
                    42:a8:3c:32:42:2b:f0:7e:e3:bf:5c:6b:4d:cc:72:
                    fd:b5:d9:75:8e:b0:8c:ae:b1:29:72:9f:d4:2c:dc:
                    da:01:70:77:ee:39:d6:78:5d:a6:7e:df:6c:fc:00:
                    90:9c:13:68:f1:c7:12:b1:49:20:71:78:12:ac:2b:
                    50:f5:ed:56:3c:bd:62:7c:1a:b3:87:37:07:34:47:
                    12:ee:c6:a0:84:47:e1:61:66:d2:65:76:3f:13:3f:
                    df:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:4D:72:FF:AF:39:27:86:E3:37:7C:E5:3C:56:ED:00:7E:72:BA:91
            X509v3 Authority Key Identifier:
                keyid:53:B9:3F:A6:0E:45:0B:88:DF:9C:B7:60:CE:D6:25:96:DA:26:48:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/U7k_pg5FC4jfnLdgztYlltomSAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U7k_pg5FC4jfnLdgztYlltomSAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91927A0/21A609F4B7C111F1B0FFD2025F11F970/073A991CB7C211F1A276FF195F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:50c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:f6:e2:71:23:2f:00:29:28:5e:87:fb:d8:86:c9:c0:90:db:
         53:ae:34:7f:82:34:f7:51:03:af:8c:ca:94:ba:c9:05:32:0b:
         f7:65:e3:35:e5:54:5a:57:7a:e7:f1:45:4c:f3:de:e8:ce:9a:
         01:43:16:5b:b6:5e:16:08:92:4a:c8:c5:ac:62:6b:76:f6:0a:
         0c:4d:17:53:c5:30:bf:18:99:2a:40:03:85:d5:17:94:14:2c:
         c8:6e:25:91:df:9e:b1:de:de:1a:58:35:e6:4e:af:19:ec:d4:
         4b:1e:56:00:05:57:eb:c7:52:cc:7d:fd:c3:4f:dd:e8:78:a1:
         31:26:ee:94:ee:72:c1:7a:30:51:1e:5c:7a:ec:de:8a:73:b0:
         e1:15:1e:19:da:45:71:d1:bc:ce:52:cc:c2:48:7d:3b:c8:31:
         b2:28:d9:7a:ea:a3:c2:89:2f:6f:fe:90:97:cc:7e:bc:dd:3a:
         b2:bc:a3:73:a3:e3:38:c7:be:3d:93:2a:37:b0:87:83:87:30:
         97:f8:30:f1:bb:be:61:ed:0b:92:4b:f1:54:98:c6:e6:92:c0:
         d1:8c:6f:7e:91:19:d3:70:01:fc:a3:14:3d:22:3f:84:a8:3f:
         23:e7:9b:c8:95:be:a8:44:10:b4:02:5a:f9:4a:16:ee:63:28:
         77:a1:98:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:51:17 2026 by rpki-client