Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4CF3B33CC62B11F0AAF72726C4F9AE02.roa
File:                     4CF3B33CC62B11F0AAF72726C4F9AE02.roa (raw, json)
Hash identifier:          yYKeu14YqP0HKOGno5uOO/PNuEVOIrjYFZYHD7arI+4=
Subject key identifier:   4B:2A:5D:34:10:20:14:D8:17:B6:44:17:2E:E5:9A:D9:C9:D3:DA:73
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6EE0
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4CF3B33CC62B11F0AAF72726C4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:34:13 +0000
ROA not before:           Fri 02 Oct 2026 15:34:13 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154339
IP address blocks:        2001:df6:4540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28384 (0x6ee0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:34:13 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcef4-2022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:88:87:80:4b:5e:5c:7a:dc:cd:dc:b8:8f:1c:
                    8e:2f:19:fc:8f:2d:f9:ff:7e:75:78:41:10:84:9e:
                    3a:51:ba:6b:3c:9b:fc:84:47:4b:3e:28:5a:79:bc:
                    e8:fa:50:95:a6:54:d6:46:07:fb:3c:27:86:ba:10:
                    29:b4:eb:6e:82:00:db:0c:42:85:fd:59:3f:11:64:
                    aa:04:c3:7e:4f:4f:5d:cf:36:0b:39:73:c0:df:4a:
                    73:62:e1:0b:fc:8a:0c:03:2d:36:b0:5e:1b:c7:90:
                    75:1b:cc:ae:65:cc:41:07:db:b6:77:f1:cb:a2:12:
                    1c:ea:dc:b1:3f:bd:a2:0e:41:96:b6:72:4e:86:20:
                    91:a1:f9:31:c8:c3:ca:d9:ca:6b:49:11:c0:11:68:
                    d4:bd:47:0f:91:47:58:17:4e:af:9e:41:7e:be:84:
                    1a:1d:52:fb:6f:97:41:e3:00:9d:c1:ec:41:2a:7c:
                    15:57:6b:e3:1f:4f:b7:63:98:57:51:97:46:9b:df:
                    a0:68:3d:1e:a5:94:9c:d6:fe:fb:6a:78:6b:8c:37:
                    0e:c2:ca:83:e0:d1:87:ca:3e:0a:dd:fa:53:ea:03:
                    80:0c:44:25:78:cd:a2:d3:b9:a5:d9:9c:d8:bd:5c:
                    61:2e:4b:d0:45:ea:63:24:cd:ac:b5:b1:9b:56:60:
                    24:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2A:5D:34:10:20:14:D8:17:B6:44:17:2E:E5:9A:D9:C9:D3:DA:73
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4CF3B33CC62B11F0AAF72726C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:4540::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:03:a8:68:60:31:ef:50:ef:4a:33:df:37:9f:cf:ed:43:dc:
         94:b2:a5:eb:4b:a9:f5:21:2e:ef:fa:96:97:0a:a5:12:1e:b7:
         3c:bd:ba:64:a9:0b:7f:bf:09:20:ef:9e:90:7f:ff:8e:8c:1c:
         36:a7:fb:dd:55:30:2a:b9:59:ce:d6:10:40:1c:df:7c:b5:1a:
         0c:68:c2:d2:08:01:bc:5a:0a:aa:d7:33:36:e2:0b:e2:5f:94:
         36:7a:79:0a:25:9c:6d:48:f4:d8:7d:67:ae:72:00:c3:c4:ca:
         38:60:00:28:a5:88:0c:6f:c0:d9:ad:76:9e:4d:9d:73:35:c9:
         3e:45:98:7b:2f:cb:0a:8f:0b:ac:da:d4:ed:5e:b0:e1:b2:46:
         f2:86:1a:ac:5e:b4:3d:8d:89:4f:fd:5b:0f:d3:19:27:fa:9c:
         37:7c:59:35:10:af:4c:2d:3b:16:ed:f3:b6:39:22:17:14:27:
         ee:61:63:29:e8:a2:0e:bd:60:13:49:14:a8:5f:ad:b1:20:1a:
         9f:07:fd:c1:a0:7d:30:79:18:36:09:d4:64:b6:c5:29:b9:f0:
         8b:e4:c4:4c:be:01:5c:62:fb:de:f6:fe:04:89:00:b1:10:f1:
         9d:f5:a3:a1:22:f9:83:11:1e:3d:ed:1c:ad:a7:ed:6a:0e:34:
         e6:ba:90:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:08 2026 by rpki-client