Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1076FF5EC69011EF9334B50FC4F9AE02.roa
File:                     1076FF5EC69011EF9334B50FC4F9AE02.roa (raw, json)
Hash identifier:          zUja6ZmGwTdA4QBJ1MEGuCJ0/bKoSlOZLabrflm+cfQ=
Subject key identifier:   E6:BB:74:6C:67:B9:E4:EE:BF:1C:EE:E9:FC:B5:A5:A5:36:0E:D3:71
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5EA3
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1076FF5EC69011EF9334B50FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:19:05 +0000
ROA not before:           Thu 28 Aug 2025 14:56:04 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152969
IP address blocks:        2001:df4:24c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24227 (0x5ea3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:04 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60cd9-ddfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f2:f1:e0:14:9e:58:7e:f3:eb:15:0a:93:ce:
                    5c:a1:75:2a:b5:31:2c:f1:cc:8a:34:3f:4d:38:5f:
                    b7:48:12:22:75:02:65:1d:bc:54:93:dd:d7:dd:60:
                    9a:64:09:63:d4:d2:61:1f:e8:bd:44:b1:50:16:da:
                    d9:f3:28:35:bd:b1:06:e1:a9:ec:42:53:27:a7:56:
                    a5:ec:5b:c4:bc:07:87:0d:a6:ba:49:7e:59:c0:e3:
                    4a:28:10:db:6c:e0:29:1a:69:5d:31:43:d7:3e:99:
                    19:96:11:2b:19:4e:26:ea:de:19:f6:29:34:85:ed:
                    80:ca:e4:c5:24:9c:b7:56:32:e3:22:ff:f8:39:4f:
                    59:bc:9d:e4:09:30:e3:98:99:ae:92:8d:e5:e6:f9:
                    cf:bc:85:10:a8:ef:a4:e5:e6:ea:ec:90:91:8f:70:
                    b4:a4:17:dc:7e:66:6e:f1:ad:9b:0a:94:a9:7d:cd:
                    18:1d:07:90:61:85:3b:48:37:cf:63:51:fc:41:95:
                    55:f2:25:6c:84:2f:54:44:29:db:6b:5a:3e:98:3c:
                    13:7e:cc:8f:3a:54:0d:b2:b6:18:77:73:e9:87:d0:
                    16:d6:ae:08:b5:2e:e6:86:e4:91:41:f8:82:1c:9b:
                    70:7a:ee:61:c0:68:75:16:dd:41:b3:07:58:85:b5:
                    2f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:BB:74:6C:67:B9:E4:EE:BF:1C:EE:E9:FC:B5:A5:A5:36:0E:D3:71
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/1076FF5EC69011EF9334B50FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:24c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:e3:09:37:40:85:f1:e0:f1:b8:46:9c:5d:a1:a5:29:a9:0e:
         6a:7a:ba:86:00:44:01:96:cc:06:05:e6:37:48:1d:22:04:1e:
         fd:4d:6b:30:1d:73:62:89:17:a1:fa:ce:d8:af:1c:d1:e6:41:
         47:e9:4b:17:98:7f:9c:1e:4e:b1:b1:94:28:f0:b2:6b:94:b3:
         1a:92:b0:80:be:f4:dc:49:a6:59:a2:4b:c2:3f:ef:a0:ff:45:
         68:d0:27:0a:f7:9a:89:92:80:ac:02:d3:89:f5:49:3e:e5:0e:
         61:fe:5d:a1:ac:de:65:51:40:ad:86:97:9e:8e:5a:1f:f3:66:
         fb:a8:14:2e:99:3a:1b:df:a8:2e:54:bf:13:de:ef:ee:c4:78:
         4e:10:74:17:98:bd:c8:0b:19:21:6c:79:4e:5d:3a:ad:1c:51:
         83:2d:65:d3:84:93:5d:07:e5:9d:07:1d:e0:e6:99:4d:bb:2a:
         c4:98:47:b5:b1:7c:70:2b:2f:e0:10:35:dd:37:f1:ba:60:b6:
         3f:bb:89:04:ba:64:ea:a0:e5:1a:3a:6a:ed:ca:fc:2b:ad:2b:
         d3:f0:98:87:0b:04:9e:59:57:0f:58:db:ad:21:17:48:54:30:
         8f:28:a7:42:31:08:fc:8f:7d:41:7e:3b:47:41:dc:f1:4e:dc:
         ab:04:54:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:45:25 2026 by rpki-client