Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/60A1565CA1F211F1993DFC693F11F970.roa
File:                     60A1565CA1F211F1993DFC693F11F970.roa (raw, json)
Hash identifier:          vUUvIDHpi+5qhhVsIm9u11cDe+AgLvPuSqn8tQsyhOo=
Subject key identifier:   7C:E4:11:38:B0:37:FD:2C:92:7C:B4:A5:19:7F:D6:5A:91:7C:9A:11
Certificate issuer:       /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
Certificate serial:       0DE8
Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/60A1565CA1F211F1993DFC693F11F970.roa
Signing time:             Thu 27 Aug 2026 08:36:20 +0000
ROA not before:           Thu 27 Aug 2026 08:36:20 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     53356
IP address blocks:        153.79.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl
                          rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 15:47:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3560 (0xde8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846
        Validity
            Not Before: Aug 27 08:36:20 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a8ff704-3d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:1b:e9:b6:aa:d2:6d:f2:f2:5c:22:d2:32:
                    a5:8c:40:c5:8d:cc:cc:45:3f:85:27:f9:84:84:2d:
                    8e:1c:4e:6b:3d:54:15:88:74:08:a5:9e:e2:2b:70:
                    46:56:17:09:cc:38:4b:38:81:51:4e:05:12:c0:65:
                    ba:9b:14:1d:25:56:bf:b0:89:ac:9f:1f:0b:13:aa:
                    32:41:d0:35:1f:97:a8:e6:20:b5:7f:52:07:82:98:
                    bc:b1:75:10:f6:4a:ff:c4:29:47:66:c9:ca:17:bb:
                    22:cd:4a:f6:46:b4:5a:a7:be:ee:c5:88:0b:6c:a6:
                    e0:64:e1:3d:be:75:80:04:35:b9:0d:ce:e5:23:bb:
                    93:da:36:53:0c:af:84:be:38:ff:4c:75:0a:b2:37:
                    d3:c1:dd:86:e6:ff:70:b6:2b:4c:c8:c7:17:53:9c:
                    89:08:7c:cd:11:1e:63:dc:f3:97:88:83:9e:7a:9c:
                    e8:51:d8:97:fc:60:f5:77:0c:a7:eb:c6:7d:18:36:
                    a2:c1:e2:b6:2f:66:64:b3:9a:22:c7:ce:10:84:3e:
                    b7:19:c7:87:7b:47:6f:97:d6:e5:ed:37:fc:66:cf:
                    65:95:de:23:9d:77:9b:81:77:c1:2f:5a:f7:19:89:
                    2f:b3:ed:23:b4:f0:ba:f3:87:88:2e:69:af:a3:e2:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:E4:11:38:B0:37:FD:2C:92:7C:B4:A5:19:7F:D6:5A:91:7C:9A:11
            X509v3 Authority Key Identifier:
                keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/60A1565CA1F211F1993DFC693F11F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.79.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:7b:54:5d:3c:91:42:96:cd:e8:3e:0b:fc:f5:fc:58:5a:66:
         c0:a1:ba:e6:4b:89:43:06:79:d0:87:8b:a6:13:05:38:18:64:
         3e:77:b5:90:9b:b6:78:bd:19:73:0f:5c:0d:a0:93:95:41:a3:
         c3:83:34:d4:35:77:87:97:84:bb:e3:99:5c:b1:e9:dc:7b:fe:
         bc:4b:86:f8:27:52:d4:4e:62:df:29:76:0e:e5:f5:85:f9:11:
         ce:84:f8:4a:66:10:14:5a:de:cb:9e:74:99:de:50:84:45:0b:
         51:51:7c:4e:34:1d:46:a7:7a:c4:6b:a6:94:10:f5:85:02:9e:
         75:4b:92:79:1d:15:7c:77:77:b3:48:9c:f6:18:12:1b:d8:2b:
         a7:4b:25:18:e1:d2:c1:c7:69:44:1a:2a:78:46:9c:7b:51:4a:
         b6:69:cb:ba:77:5c:56:62:01:7c:92:dd:dd:c5:55:15:83:e7:
         aa:3a:8e:76:78:6f:de:b7:be:9e:68:c4:4f:17:53:32:46:79:
         07:98:d2:a5:c4:76:2c:2a:03:2b:1b:c2:25:3b:a1:04:8d:6e:
         1d:83:c5:2c:d1:90:bd:ff:a4:e0:a0:35:35:ce:d2:4b:8d:66:
         e8:75:46:8d:94:87:77:fc:50:63:de:fd:72:f8:8f:5b:8b:97:
         b6:19:90:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:48 2026 by rpki-client