Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/04EB22A890CF11EDA79E3741C4F9AE02.roa
File:                     04EB22A890CF11EDA79E3741C4F9AE02.roa (raw, json)
Hash identifier:          BPFzjrjvbIENiZufbAJecJN44zWR8aGWobvBpelAKzo=
Subject key identifier:   EF:CB:1B:13:63:95:C2:A4:3C:03:5E:97:EB:DE:3C:DC:FB:04:0D:2E
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E19
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/04EB22A890CF11EDA79E3741C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:27:13 +0000
ROA not before:           Fri 02 Oct 2026 15:27:13 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     149064
IP address blocks:        2001:df0:2040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28185 (0x6e19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:27:13 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcd51-0467
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a8:6b:80:38:16:fb:e2:66:9f:e8:20:84:a7:
                    72:7e:49:2a:69:4e:43:1b:26:81:17:49:06:ac:3d:
                    e1:11:11:16:03:7f:c7:2a:27:53:7d:b6:b5:e9:31:
                    2b:8a:f6:7b:11:3f:b6:af:9d:ad:13:bd:60:74:d7:
                    42:c7:ab:08:3c:e5:ba:4b:7c:b4:17:c7:47:40:64:
                    bd:9a:3d:7b:0e:f6:29:ba:82:37:9b:de:ad:e8:93:
                    5d:e7:ca:09:a0:0b:bd:65:48:63:ad:40:0e:19:7c:
                    27:1f:b5:cc:ea:4b:00:e1:70:34:78:ce:bb:0d:5f:
                    22:63:01:c9:fc:f5:e3:18:b3:90:b8:9f:14:5e:15:
                    af:c7:dd:65:f4:5e:55:05:0f:90:27:8e:0b:93:3c:
                    22:ad:48:fc:a3:39:4b:ba:3a:72:31:95:30:e2:e0:
                    3e:8e:ad:1e:08:3c:fa:29:8f:87:5d:0c:50:ca:39:
                    ab:97:d1:9d:04:6f:3b:34:aa:71:f6:ee:72:46:eb:
                    4e:2d:a3:48:fc:61:b6:29:33:c9:ec:1c:b3:6a:a9:
                    1f:ed:d1:f4:8e:6a:7b:04:0b:70:0c:9a:51:d1:f9:
                    6f:5b:bf:bc:b8:4c:b6:d5:6e:5b:ab:9a:38:ea:c1:
                    1b:19:b6:f5:70:30:ed:21:97:f4:d9:21:57:6d:7f:
                    c4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CB:1B:13:63:95:C2:A4:3C:03:5E:97:EB:DE:3C:DC:FB:04:0D:2E
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/04EB22A890CF11EDA79E3741C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:2040::/48

    Signature Algorithm: sha256WithRSAEncryption
         b8:e9:2f:0d:d3:5e:ee:77:1e:ce:cf:49:1e:34:6d:80:56:80:
         3a:ee:d1:f4:95:c9:02:41:c8:25:3c:6e:46:3e:0a:02:26:c3:
         6b:3e:7d:eb:eb:66:ae:10:b4:9c:29:0b:23:c7:a2:eb:02:9b:
         4e:ac:a5:0e:10:84:3f:56:5b:3b:c6:ff:1f:3b:ad:03:6b:c4:
         a8:2c:4e:d3:9a:4d:35:ca:5b:d4:36:fe:31:cf:f7:0d:cf:bd:
         ba:2e:a8:af:dc:f0:ae:93:a0:fe:f9:f9:58:b6:38:8d:37:0e:
         e4:fe:b0:83:70:8b:8d:ed:cf:9b:83:2d:d1:bf:eb:b9:37:f9:
         f4:e5:dd:17:37:89:76:78:ab:59:2d:4e:0a:56:e1:e0:57:8f:
         0f:c9:a9:59:68:29:29:04:ad:c2:8f:d3:95:a7:77:b0:b9:95:
         b7:a1:95:3d:73:21:c8:8d:3f:45:99:86:2f:32:8f:5e:17:83:
         1a:e7:31:2b:44:c6:c3:91:37:bb:73:62:9d:f2:7e:3c:f1:bb:
         da:dc:41:d8:99:5a:46:2e:48:d6:6e:c0:50:88:30:23:aa:15:
         37:9a:70:16:03:ae:5d:23:3b:71:7a:21:c4:5c:73:ee:9c:28:
         a7:10:38:93:dd:36:c6:5d:4c:8a:fc:34:96:5b:02:31:2d:bf:
         2b:fe:ce:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:21:55 2026 by rpki-client