Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EA1A8C6FD9211F086C79E7D5C6F56BC.roa
File:                     4EA1A8C6FD9211F086C79E7D5C6F56BC.roa (raw, json)
Hash identifier:          xUiT+fzcd4OMpmEHE3DJvV+jkiigfb/zXYXsg7Kmvwk=
Subject key identifier:   F5:2D:77:7E:10:2D:B6:5D:F9:18:1F:DE:0E:16:29:38:8F:C0:3B:88
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E91
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EA1A8C6FD9211F086C79E7D5C6F56BC.roa
Signing time:             Fri 02 Oct 2026 15:31:28 +0000
ROA not before:           Fri 02 Oct 2026 15:31:28 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     151905
IP address blocks:        2401:7be0::/48 maxlen: 48
                          2407:5c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Nov 2026 14:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28305 (0x6e91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:31:28 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfce4f-736d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:71:98:f6:79:30:dc:ca:6c:13:f6:9e:16:02:
                    6a:ed:5a:85:6b:99:76:4d:2a:55:67:70:60:6c:1b:
                    76:fb:95:8a:1a:e5:67:25:b6:71:65:d3:7b:80:5d:
                    29:dd:79:6e:69:99:5d:fe:d5:9b:c7:0f:8d:24:06:
                    f3:59:c6:34:16:23:58:63:0b:d7:08:7f:b2:36:05:
                    d6:68:b9:b7:92:e9:37:0a:4c:2f:bf:f0:da:17:4e:
                    f0:8b:7b:a9:09:f9:c0:fb:b3:79:f7:68:3a:da:bd:
                    45:b4:47:46:2d:0e:19:6b:fd:36:e9:fe:12:77:46:
                    ee:d4:f6:b5:26:a9:a2:5d:74:e5:62:1d:40:30:42:
                    2c:58:c5:ee:b5:71:0a:04:54:e3:3e:b1:e4:77:56:
                    6e:71:13:6f:3f:27:64:ef:76:ab:03:4b:24:89:88:
                    42:db:58:64:5b:6d:10:37:ba:bb:12:55:67:47:31:
                    63:c9:ff:69:64:d2:db:09:4f:27:c6:1f:87:4b:0d:
                    33:bf:e0:0d:05:17:d4:bf:c6:49:36:8e:69:84:4e:
                    23:a5:9c:5b:4d:23:28:b0:fd:37:30:86:57:91:b8:
                    19:a3:57:19:ed:5c:14:fa:e3:95:8b:92:d3:3f:0e:
                    b7:86:60:cc:35:f6:cb:63:e1:28:42:78:5b:9d:c1:
                    b5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2D:77:7E:10:2D:B6:5D:F9:18:1F:DE:0E:16:29:38:8F:C0:3B:88
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4EA1A8C6FD9211F086C79E7D5C6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:7be0::/48
                  2407:5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:05:11:28:68:73:d7:06:31:7b:ba:a2:bf:7e:f6:f8:fb:4e:
         5e:a6:f9:66:59:cc:72:1a:4f:19:95:53:12:14:e5:46:ea:1c:
         ea:ee:66:16:aa:a2:ee:01:67:83:1d:d4:ac:95:46:6e:48:66:
         d0:0d:a5:8a:0c:b6:84:1f:60:7b:56:8a:6a:6c:27:32:1a:99:
         c0:d6:76:e8:0a:2b:0b:e1:d7:e9:ec:d6:fb:cf:cf:b8:e6:3b:
         77:0a:d0:ad:2d:0f:6e:32:57:a6:0c:5d:b3:86:0f:77:87:f1:
         56:78:cf:be:9e:5c:56:c3:fd:66:57:95:d8:b7:8f:34:9f:cd:
         37:9b:5f:32:f8:28:06:2a:19:e5:01:52:03:71:d2:1d:6f:97:
         b9:99:c1:12:c5:a9:7e:9e:80:ee:dd:47:c3:8d:9b:fc:87:d6:
         ae:fb:79:59:4b:a3:64:f9:9b:72:ae:d8:94:47:cc:c9:0b:32:
         2c:b9:e4:fe:5f:dc:75:eb:29:bb:38:12:74:e3:90:e8:ad:6a:
         61:ce:71:15:e1:d0:ce:06:20:26:5e:44:5b:7c:19:b3:7d:c1:
         43:75:8d:72:5a:06:dd:79:47:41:dc:4a:1d:3c:9d:f5:d5:a9:
         7d:cf:99:96:f5:0e:da:ad:21:40:2f:b2:d6:85:73:47:e5:1f:
         38:59:d5:9d
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgICbpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUzMTI4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2U0Zi03MzZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAiHGY9nkw3MpsE/aeFgJq7VqFa5l2TSpVZ3BgbBt2+5WKGuVnJbZxZdN7gF0p
3XluaZld/tWbxw+NJAbzWcY0FiNYYwvXCH+yNgXWaLm3kuk3Ckwvv/DaF07wi3up
CfnA+7N592g62r1FtEdGLQ4Za/026f4Sd0bu1Pa1JqmiXXTlYh1AMEIsWMXutXEK
BFTjPrHkd1ZucRNvPydk73arA0skiYhC21hkW20QN7q7ElVnRzFjyf9pZNLbCU8n
xh+HSw0zv+ANBRfUv8ZJNo5phE4jpZxbTSMosP03MIZXkbgZo1cZ7VwU+uOVi5LT
Pw63hmDMNfbLY+EoQnhbncG1WQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFPUtd34Q
LbZd+Rgf3g4WKTiPwDuIMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNEVBMUE4QzZG
RDkyMTFGMDg2Qzc5RTdENUM2RjU2QkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY
BAIAAjASAwcAJAF74AAAAwcAJAcFwAAAMA0GCSqGSIb3DQEBCwUAA4IBAQBJBREo
aHPXBjF7uqK/fvb4+05epvlmWcxyGk8ZlVMSFOVG6hzq7mYWqqLuAWeDHdSslUZu
SGbQDaWKDLaEH2B7VopqbCcyGpnA1nboCisL4dfp7Nb7z8+45jt3CtCtLQ9uMlem
DF2zhg93h/FWeM++nlxWw/1mV5XYt480n803m18y+CgGKhnlAVIDcdIdb5e5mcES
xal+noDu3UfDjZv8h9au+3lZS6Nk+ZtyrtiUR8zJCzIsueT+X9x16ym7OBJ045Do
rWphznEV4dDOBiAmXkRbfBmzfcFDdY1yWgbdeUdB3EodPJ311al9z5mW9Q7arSFA
L7LWhXNH5R84WdWd
-----END CERTIFICATE-----
Generated at Mon Oct 26 22:07:27 2026 by rpki-client