Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/180850186A3311F1BA523DEE7847A888.roa
File:                     180850186A3311F1BA523DEE7847A888.roa (raw, json)
Hash identifier:          ymTKak4YnIcV4KGXe6+Q/qa4370F7z5OMYLhR8PoPmc=
Subject key identifier:   30:9D:04:03:7B:EA:34:A6:6E:C9:92:7C:54:14:60:D6:B0:DE:43:20
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6CB6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/180850186A3311F1BA523DEE7847A888.roa
Signing time:             Wed 17 Jun 2026 09:58:30 +0000
ROA not before:           Wed 17 Jun 2026 09:58:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154712
IP address blocks:        2402:60a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 04:12:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27830 (0x6cb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Jun 17 09:58:30 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a326fc6-149f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:23:9f:db:82:e1:63:67:33:ea:78:97:f3:a8:
                    3d:1a:44:b7:f8:70:62:40:c8:80:dd:99:2a:3b:d7:
                    0c:a2:f3:ed:52:f1:5a:a1:ea:0b:81:79:00:6b:f4:
                    8d:df:ba:59:18:80:c9:49:64:52:a6:a6:9d:f5:8c:
                    57:86:ae:53:2b:bf:1f:a1:a0:8f:af:85:bb:e5:cb:
                    66:d9:80:a0:81:23:52:7d:82:b0:00:dc:c8:67:69:
                    13:51:7c:5e:96:95:63:37:1c:87:c3:1f:36:94:71:
                    e0:bb:0c:c8:de:5a:bf:9d:03:43:c1:39:4c:a8:02:
                    cc:a8:9c:83:57:d3:65:2e:b3:a2:75:8f:dd:f6:92:
                    ea:22:9b:5e:f3:0a:c2:88:12:bc:90:34:52:f4:0a:
                    16:3a:7a:d1:4b:5b:f9:0f:d4:6a:fa:56:30:de:3e:
                    a9:84:f5:14:38:2f:32:fc:15:f2:cb:0f:d2:6a:a5:
                    e6:65:84:bb:6f:86:2e:37:fa:c7:68:4c:0a:6c:a4:
                    64:1e:91:5a:03:73:3a:83:79:ba:65:c4:2c:d7:a2:
                    07:d6:12:c0:30:c3:d9:2e:b2:32:59:50:fb:69:c1:
                    b7:34:cb:22:14:39:4e:43:9b:fa:72:92:ab:df:69:
                    05:b6:e1:cf:80:6c:4a:e3:ef:bf:39:79:9d:0d:ac:
                    88:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:9D:04:03:7B:EA:34:A6:6E:C9:92:7C:54:14:60:D6:B0:DE:43:20
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/180850186A3311F1BA523DEE7847A888.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:60a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         90:f5:20:da:b4:56:02:07:74:f6:d4:ba:fe:e7:e0:7a:03:e6:
         45:73:7c:71:ac:dd:40:48:5f:7d:11:a8:57:1b:84:3c:a2:83:
         f4:08:9a:1b:0b:77:8c:3a:c8:60:d8:a7:75:51:81:84:a3:ae:
         1a:8d:16:18:26:84:e4:a2:e3:03:55:5a:1f:6f:0f:25:1f:a1:
         c9:4c:4c:c5:03:66:27:63:de:17:e1:c0:8a:49:62:da:d6:64:
         19:70:3d:d1:ea:aa:ae:b6:77:78:9e:d9:3f:68:5b:54:74:11:
         e2:95:5b:36:f1:04:15:d9:2b:89:e4:a7:16:67:8b:04:2e:bc:
         ee:82:d1:be:74:a4:e2:77:5e:24:bf:e5:d8:08:33:6e:a9:00:
         3d:68:e4:86:8e:4e:e9:7c:25:8e:d2:21:1f:c5:f1:82:4a:31:
         0f:2c:de:e8:9f:a0:5d:e1:07:e0:69:e5:40:5f:68:6b:46:5f:
         7c:af:2a:b5:c2:9a:6e:b5:67:1a:4c:c1:9e:d5:40:e8:c2:51:
         15:c9:5d:d5:53:ab:8a:ea:51:b6:74:88:be:63:4b:7f:7e:c9:
         2c:1b:95:2a:ac:bc:f8:dc:87:c9:e7:13:ff:d9:43:a6:fc:1e:
         f1:2a:96:6a:eb:e1:e0:c9:92:fd:c6:c2:fb:04:69:c0:63:21:
         04:e9:28:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:19 2026 by rpki-client