Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5D9E700AE08411F09A71B4293D6F56BC.roa
File:                     5D9E700AE08411F09A71B4293D6F56BC.roa (raw, json)
Hash identifier:          FBan115x78xf5bqpsWBvfnXLs/bycR2FVH5pbrLgPD8=
Subject key identifier:   2B:C4:6B:F8:48:D7:51:4B:25:F4:51:B5:CE:35:9C:F4:FA:D0:51:2F
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6BC1
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5D9E700AE08411F09A71B4293D6F56BC.roa
Signing time:             Mon 02 Mar 2026 23:30:25 +0000
ROA not before:           Wed 24 Dec 2025 04:52:36 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     24035
IP address blocks:        2001:df0:19::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27585 (0x6bc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Dec 24 04:52:36 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61d91-9927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:5d:30:91:c7:ad:f2:67:bb:f7:bb:e8:f0:
                    90:6f:db:68:86:fe:13:c3:f2:5d:63:e2:b4:36:3f:
                    ec:44:50:09:c1:f5:d3:85:fd:73:81:b8:ce:1b:2a:
                    b0:79:56:14:dc:c0:46:1d:3f:35:52:64:07:50:9c:
                    32:c8:88:eb:6e:a2:a6:b2:6c:c1:02:f2:9b:1f:f6:
                    c6:f2:e9:8f:eb:23:22:d5:5c:0a:e1:69:44:14:91:
                    26:36:ee:af:84:25:cb:a9:cd:b3:1c:d8:4d:f2:51:
                    e6:34:d7:7c:85:c8:b2:0c:c4:e2:06:c4:44:12:31:
                    3e:f4:1e:d9:bd:07:ca:6c:e3:cc:67:c7:e6:67:09:
                    31:7d:fd:27:bc:df:91:22:3f:18:42:59:a3:e8:c9:
                    ea:b8:d3:20:13:d0:29:40:07:7c:63:8b:68:3a:ef:
                    01:99:63:90:83:a0:57:f0:5d:9f:ce:9c:9f:8a:20:
                    b3:42:44:92:fc:8d:26:63:9c:1e:14:5d:1a:29:b0:
                    94:a3:09:bd:41:80:29:e8:7d:92:8c:79:a6:f9:b0:
                    32:02:85:d1:49:ac:81:88:28:b8:42:b0:21:63:c5:
                    0d:53:63:1d:6e:23:50:8f:8a:08:cc:ab:0b:6f:36:
                    31:0d:6c:51:ad:bb:06:24:5f:c9:fb:f4:ad:35:2a:
                    27:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:C4:6B:F8:48:D7:51:4B:25:F4:51:B5:CE:35:9C:F4:FA:D0:51:2F
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5D9E700AE08411F09A71B4293D6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:06:e0:21:0b:d2:0c:e6:6d:00:60:32:d7:49:4e:a1:e4:16:
         90:b3:55:f7:a4:ff:dd:7b:8d:7e:47:d3:b7:5b:56:c4:9a:96:
         7a:08:8c:e1:10:e3:a1:5a:aa:63:81:5d:74:e4:55:ed:e5:35:
         6c:b5:50:f0:a4:6d:b9:7c:a3:12:e8:25:2e:ad:70:3b:b3:3a:
         86:26:f1:ab:e2:1e:11:1a:0c:77:df:a8:e4:ad:64:2a:68:99:
         cf:79:62:76:85:d0:9d:30:77:11:2a:91:b7:73:53:c2:9e:47:
         db:30:82:86:93:99:13:d5:b7:08:da:c4:a7:25:01:9d:ac:cc:
         19:e5:89:1a:86:5b:17:4a:44:8f:61:44:c6:aa:eb:da:2d:9f:
         a4:ef:01:87:06:ec:13:ae:0b:89:eb:68:f2:19:82:cc:f4:2b:
         1a:79:fd:c1:ec:88:b6:a6:d1:bc:e9:f0:24:3a:dd:71:c6:aa:
         86:9e:0c:fe:43:c6:2d:11:71:ef:b4:d2:c0:48:b8:b9:2b:60:
         ce:48:75:f2:bc:b0:ba:fb:22:94:6f:1a:3c:2f:18:04:ae:d5:
         0c:b2:c1:09:91:69:a1:13:7c:22:53:07:8f:89:72:8f:bb:86:
         7d:1c:d2:d3:02:43:9a:e1:6e:18:ad:85:19:22:8a:8f:5a:75:
         d8:db:23:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:48:12 2026 by rpki-client