Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3816FE9844B211EFA3EEED58C4F9AE02.roa
File:                     3816FE9844B211EFA3EEED58C4F9AE02.roa (raw, json)
Hash identifier:          o9foTg9KC+zHuQHyEzpE82EozOscM9Th3fDMEqASRSA=
Subject key identifier:   56:9A:0B:E7:74:2A:16:62:39:AA:77:BB:79:BA:CB:A1:DA:30:77:49
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E9F
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3816FE9844B211EFA3EEED58C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:31:56 +0000
ROA not before:           Fri 02 Oct 2026 15:31:56 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     152949
IP address blocks:        2001:df4:dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28319 (0x6e9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:31:56 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfce6c-1972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:64:22:a4:8c:9f:30:98:80:bc:f7:91:9a:53:
                    21:f2:65:69:94:d7:1f:92:f4:7b:96:b0:76:14:6d:
                    4b:ec:bb:3d:ee:94:14:5a:7e:9c:65:61:9a:c0:24:
                    e6:a4:60:48:11:6d:3f:29:fe:14:3c:40:ba:3c:31:
                    52:66:35:11:1b:71:d6:0d:4f:7f:99:78:38:cd:66:
                    67:4c:7e:f1:4c:57:ba:b1:e1:0d:37:4a:64:4a:ce:
                    6c:2c:b8:72:9b:2a:70:f5:59:3b:2c:df:0e:32:68:
                    f9:7d:db:27:f6:04:ff:0d:e7:34:d4:f1:eb:11:32:
                    c5:76:45:34:22:d3:d9:80:01:34:9b:85:32:2f:41:
                    df:0d:d9:a3:6e:d8:00:f7:64:95:9b:38:ad:82:ec:
                    6c:09:dc:7a:aa:ed:95:09:81:6a:aa:14:34:4f:eb:
                    23:ee:13:c3:0c:9d:56:2e:09:dc:8b:d1:d1:e1:e5:
                    da:6b:27:f5:82:1c:92:51:a9:89:24:0c:a9:bf:36:
                    a6:b8:7b:67:dd:d3:2c:82:7d:f5:ac:f3:51:56:38:
                    3f:35:db:80:8c:e2:73:93:45:31:6e:1f:4d:94:69:
                    a1:09:47:14:55:e6:75:db:ae:70:af:ea:f0:7f:af:
                    c7:1d:e1:d0:fa:e6:a7:89:56:43:db:26:e5:8a:c6:
                    b5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:9A:0B:E7:74:2A:16:62:39:AA:77:BB:79:BA:CB:A1:DA:30:77:49
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/3816FE9844B211EFA3EEED58C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         81:4d:30:e4:8a:27:ae:76:dd:8b:92:0a:06:e5:23:93:e4:74:
         38:78:4c:4c:6b:c2:15:4f:55:a3:be:4a:bd:40:77:9d:80:7d:
         07:cc:41:46:18:13:a7:88:74:06:75:9a:c1:bc:a2:f1:70:9e:
         6d:14:9d:c8:af:e6:9c:11:e9:f0:0a:35:2b:40:55:6e:5f:8a:
         58:52:a0:80:a2:91:3f:e9:be:63:70:80:c3:bd:c7:ee:47:c3:
         8a:0c:10:8b:e9:b8:f4:91:dc:c3:4e:d1:dd:e3:cc:6e:0c:bc:
         41:3b:17:bd:60:c2:68:10:43:cc:5b:97:98:6b:63:22:96:c8:
         65:ed:e3:f2:08:24:c4:7e:a3:f2:bc:e1:2f:83:6b:e5:e8:24:
         33:ec:46:ce:e0:90:a6:af:44:a1:a2:9b:6b:03:cd:9f:cd:76:
         53:cf:9c:8b:0c:ed:1b:6b:67:22:d7:94:0a:10:fc:c3:36:d1:
         23:77:54:80:0a:56:9a:2c:1b:4e:71:55:9c:9d:3a:a8:5d:89:
         2c:9b:51:05:05:97:ff:00:cc:c9:f8:2b:89:6d:c3:47:30:79:
         ca:71:ee:4d:5f:85:2e:e7:6d:b3:7b:9b:e0:43:72:b4:f9:2b:
         35:ef:76:3f:30:1e:1c:1f:6d:49:5f:f2:dd:d7:a6:f1:50:b7:
         03:66:e3:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:03:06 2026 by rpki-client