Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3715983EEF6411F0BA166417586F56BC.roa
File:                     3715983EEF6411F0BA166417586F56BC.roa (raw, json)
Hash identifier:          gV/ingv425tyaIqGUCb8mOFcCO41AiZrVYyw/4Bo5vc=
Subject key identifier:   48:12:23:2B:83:76:80:BA:63:BA:39:85:52:7F:AC:7B:06:F0:95:43
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E4C
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3715983EEF6411F0BA166417586F56BC.roa
Signing time:             Fri 02 Oct 2026 15:28:53 +0000
ROA not before:           Fri 02 Oct 2026 15:28:53 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150323
IP address blocks:        2001:df6:5b40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28236 (0x6e4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:28:53 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcdb4-3900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:42:7b:5a:59:cf:1b:9b:c8:aa:c5:7e:e2:53:
                    1e:df:39:42:b3:a1:a6:c9:dc:f8:14:8f:62:4c:4a:
                    78:79:69:91:b4:29:6d:aa:4d:ce:74:ce:06:b4:0e:
                    d1:f8:8b:ed:27:d4:ce:a8:1e:32:25:53:15:39:69:
                    f9:2a:c2:6a:b1:92:3a:72:1b:ed:0b:59:e8:d2:11:
                    f6:f5:a4:d5:ee:3d:f0:6c:7b:9a:ce:fa:29:05:e7:
                    96:d5:6f:cc:11:5a:9b:b3:8f:85:06:4a:5d:0e:41:
                    52:8f:3f:38:42:df:1a:9e:0a:77:05:a4:62:9d:33:
                    12:63:43:92:04:f5:fc:05:65:c4:32:46:ee:b1:48:
                    f6:f9:ed:f4:c4:65:29:b5:ef:6b:a5:7c:c6:ed:80:
                    bf:ec:5a:e7:af:78:95:7c:d3:59:85:86:9d:1f:a2:
                    d9:06:27:b3:8d:01:df:84:a3:b5:c6:69:8a:14:a1:
                    f5:93:cf:31:a8:a3:de:2b:49:f1:f4:0f:c4:8b:7c:
                    9c:8a:04:fe:5e:92:5e:78:ba:1a:11:ff:16:92:8e:
                    01:ca:de:36:cc:5b:17:99:8c:bb:55:77:bf:31:6a:
                    81:f1:bb:96:a3:11:c8:16:5b:38:ab:2e:f0:5e:f3:
                    0b:49:ad:c1:e8:69:f3:00:b2:7e:67:07:7b:71:03:
                    7e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:12:23:2B:83:76:80:BA:63:BA:39:85:52:7F:AC:7B:06:F0:95:43
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3715983EEF6411F0BA166417586F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:5b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:58:b0:d5:f8:a7:68:c1:8a:7e:44:76:f2:e7:bf:cf:cf:9f:
         a3:6a:61:1e:e1:d6:e3:e3:5f:2f:a0:bf:3d:1a:29:c5:db:05:
         86:2f:ac:59:e0:d3:ed:bb:df:05:35:00:8f:72:aa:56:22:7d:
         ee:86:4e:b9:52:b3:27:11:79:f3:29:fb:05:b4:a4:d7:d4:01:
         b8:d6:57:3f:13:59:7a:73:e0:f8:8e:0b:6f:f1:29:27:c4:ac:
         42:99:ce:65:e0:63:b3:f7:7e:d5:67:fb:fb:90:df:75:8a:b7:
         02:9f:5f:9f:38:78:63:95:98:4f:c0:03:ae:d8:95:00:8c:0e:
         82:45:8f:23:32:5e:ed:0c:dc:7a:50:95:ec:f8:e5:b4:e1:d2:
         3e:89:f6:c8:73:15:9f:5c:b8:1a:4c:48:e3:6c:fc:d0:d1:78:
         fe:60:5d:5e:b6:24:16:f5:7b:b4:04:58:c0:73:4a:4e:d4:aa:
         2f:62:22:a3:b6:0b:22:81:c8:e0:98:7f:aa:b5:b4:e2:01:6b:
         39:b7:8f:17:d6:61:7b:fd:c9:c4:4c:6e:c3:a5:e5:98:f5:16:
         42:ed:40:a5:a1:79:69:4b:65:c7:1a:b7:65:32:cd:8a:49:91:
         70:4a:d1:2f:83:ad:6e:67:13:ee:77:65:f1:8e:fb:05:89:97:
         48:61:68:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:35:53 2026 by rpki-client