Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5674F86CC2BC11EF9A776235C4F9AE02.roa
File:                     5674F86CC2BC11EF9A776235C4F9AE02.roa (raw, json)
Hash identifier:          ztMDxL9BpzBVCXFmSpoHlFHJ8cBnHxGzbugpyQa6NFc=
Subject key identifier:   7F:0F:76:F1:A1:A6:0D:56:63:A3:12:4A:F4:FD:36:47:70:D3:2A:88
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5EB7
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5674F86CC2BC11EF9A776235C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:19:25 +0000
ROA not before:           Thu 28 Aug 2025 14:56:23 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153428
IP address blocks:        2001:df4:a8c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24247 (0x5eb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:23 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60cec-5897
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c4:6c:53:c6:91:e0:e8:b1:97:3b:c1:8a:45:
                    57:49:72:0e:91:be:0c:f8:2d:35:e7:82:ed:93:82:
                    4c:65:58:52:f7:81:0e:25:43:88:ab:2f:dd:8f:b1:
                    26:0b:21:6c:9a:6a:fb:f8:33:29:e8:ee:a4:bc:9c:
                    f2:91:22:ba:6a:01:04:d6:ed:e7:6c:b2:1e:8a:50:
                    cf:b6:22:db:66:30:e5:5a:ca:39:3f:d4:31:e5:ba:
                    b7:56:f8:1f:75:d7:09:51:c9:a3:8c:a1:c2:6b:bb:
                    e7:e4:04:07:01:7d:8e:42:1c:b9:8e:d3:e0:d1:43:
                    e8:cb:15:45:43:ca:6d:64:75:de:48:aa:91:89:87:
                    ff:f2:4c:2a:da:1b:e8:a5:aa:1b:4c:88:85:68:a7:
                    ca:1a:a4:b0:69:ab:7c:ab:ae:e5:d5:7c:86:81:5c:
                    20:52:92:73:11:cb:cf:20:02:47:fd:61:9e:52:d3:
                    24:47:ed:b0:3b:a2:de:23:40:aa:a1:ec:9b:28:43:
                    1c:51:ce:21:39:7b:64:24:4f:1a:e9:19:5b:27:77:
                    74:63:b4:80:b7:f3:b1:82:62:20:e0:c7:17:4e:69:
                    a4:51:68:19:84:85:48:9f:c7:3e:d5:66:39:c9:2e:
                    6a:ce:5a:e0:49:f2:0d:4e:5f:d8:bf:f7:35:f5:55:
                    07:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:0F:76:F1:A1:A6:0D:56:63:A3:12:4A:F4:FD:36:47:70:D3:2A:88
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5674F86CC2BC11EF9A776235C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:a8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:15:d8:d0:cd:9f:a5:d3:6e:05:2c:d1:3b:b1:62:18:06:30:
         b5:55:27:c2:7e:1a:6e:4d:fa:e5:7c:86:f1:62:99:92:00:15:
         17:63:d1:ed:84:cc:09:61:9e:e9:fd:37:3f:07:97:ee:90:66:
         a7:2a:c7:a2:41:9c:6e:c6:f6:89:30:07:1a:6e:94:fc:d2:b6:
         b9:6b:6d:b8:31:89:98:9f:48:3c:f6:b8:0c:1d:4e:80:bc:cc:
         cf:f7:c4:44:9b:9d:73:0f:7c:42:48:48:2d:2b:4c:d4:f3:a2:
         81:cd:df:1f:41:b5:b5:08:82:e2:f3:6e:44:79:cb:16:3a:6b:
         1d:44:50:95:a9:81:e1:63:05:45:be:dc:d9:c6:4b:57:2e:e9:
         8e:d7:f1:a0:e2:57:55:18:f2:42:8b:68:8b:77:2f:60:85:51:
         dc:ff:02:5c:07:81:ac:3b:b2:85:8e:09:cb:7a:d7:9b:1b:f1:
         b6:77:69:12:9d:9a:c0:ee:ef:6a:fa:8a:52:6c:4a:9b:19:ff:
         98:72:5b:de:82:8c:11:90:22:79:b0:58:aa:d7:31:e6:af:26:
         cd:82:19:9f:fc:ec:af:fe:16:6b:9a:44:ef:df:ac:aa:6b:e1:
         89:60:57:2b:3a:e5:13:91:f3:02:4b:11:99:e7:c8:d0:9c:1d:
         e1:ff:d9:f0
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICXrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjIzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MGNlYy01ODk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAk8RsU8aR4OixlzvBikVXSXIOkb4M+C0154Ltk4JMZVhS94EOJUOIqy/dj7Em
CyFsmmr7+DMp6O6kvJzykSK6agEE1u3nbLIeilDPtiLbZjDlWso5P9Qx5bq3Vvgf
ddcJUcmjjKHCa7vn5AQHAX2OQhy5jtPg0UPoyxVFQ8ptZHXeSKqRiYf/8kwq2hvo
paobTIiFaKfKGqSwaat8q67l1XyGgVwgUpJzEcvPIAJH/WGeUtMkR+2wO6LeI0Cq
oeybKEMcUc4hOXtkJE8a6RlbJ3d0Y7SAt/OxgmIg4McXTmmkUWgZhIVIn8c+1WY5
yS5qzlrgSfINTl/Yv/c19VUHOwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFH8PdvGh
pg1WY6MSSvT9Nkdw0yqIMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNTY3NEY4NkND
MkJDMTFFRjlBNzc2MjM1QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9KjAMA0GCSqGSIb3DQEBCwUAA4IBAQBJFdjQzZ+l024FLNE7
sWIYBjC1VSfCfhpuTfrlfIbxYpmSABUXY9HthMwJYZ7p/Tc/B5fukGanKseiQZxu
xvaJMAcabpT80ra5a224MYmYn0g89rgMHU6AvMzP98REm51zD3xCSEgtK0zU86KB
zd8fQbW1CILi825EecsWOmsdRFCVqYHhYwVFvtzZxktXLumO1/Gg4ldVGPJCi2iL
dy9ghVHc/wJcB4GsO7KFjgnLetebG/G2d2kSnZrA7u9q+opSbEqbGf+YclvegowR
kCJ5sFiq1zHmrybNghmf/Oyv/hZrmkTv36yqa+GJYFcrOuUTkfMCSxGZ58jQnB3h
/9nw
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:43 2026 by rpki-client