Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/60CAB8A8923911F1A16E312F7011F970.roa
File:                     60CAB8A8923911F1A16E312F7011F970.roa (raw, json)
Hash identifier:          kxgq9wDGhy5DpFUh8aVV3Bcxz5DjHUd6ldA2b8Gt2yA=
Subject key identifier:   85:57:C2:04:12:E4:14:8A:B9:BC:CF:28:3B:52:D9:84:31:D7:ED:1C
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6EEB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/60CAB8A8923911F1A16E312F7011F970.roa
Signing time:             Fri 02 Oct 2026 15:34:35 +0000
ROA not before:           Fri 02 Oct 2026 15:34:35 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154782
IP address blocks:        2001:df7:4840::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28395 (0x6eeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:34:35 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcf0b-be02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:8f:63:25:a1:95:fc:89:89:a8:11:1f:03:
                    e8:1a:fd:f9:9c:c9:26:54:ac:54:8e:d2:93:f4:93:
                    f5:dc:ed:cf:cb:15:0e:a0:02:33:84:8f:cd:22:0f:
                    83:c4:03:18:e8:ec:6e:13:0e:d2:fe:98:a4:0f:f2:
                    2b:57:fc:4a:50:b4:c3:b6:9c:3e:c9:8f:d8:d3:f5:
                    10:11:f4:78:2b:fd:62:a5:10:5d:63:e0:34:b7:61:
                    b9:15:f3:bf:d8:8b:b4:b8:90:0d:66:2d:7d:fc:5f:
                    b1:bf:13:6f:f8:e2:35:39:2c:9b:dc:56:9a:9d:63:
                    92:15:e7:a9:93:32:84:69:d8:94:87:f6:6b:32:53:
                    3a:50:2c:f0:44:7a:3e:2f:f2:5c:cb:5e:ba:7c:49:
                    81:08:98:1b:01:9e:eb:92:c1:bb:8a:a8:af:89:6d:
                    d2:a2:cb:f7:cc:12:b3:82:34:a8:c2:e6:26:03:b9:
                    a3:bd:6e:8e:f8:67:03:89:9d:b5:5d:6c:4c:e6:f4:
                    b1:92:81:c5:b7:47:2c:9c:b6:3a:ab:5c:3c:8e:09:
                    7a:31:d2:11:d3:af:77:fc:ae:a8:df:af:53:7b:cc:
                    c7:c3:b1:9d:5b:15:e3:41:83:7a:4d:56:0e:db:cf:
                    d4:97:81:0d:77:9b:3b:e7:f2:44:4f:d3:a1:95:30:
                    63:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:57:C2:04:12:E4:14:8A:B9:BC:CF:28:3B:52:D9:84:31:D7:ED:1C
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/60CAB8A8923911F1A16E312F7011F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:4840::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:a8:a7:a2:1d:bd:2c:e8:32:bd:31:a6:ff:be:a8:14:81:3c:
         f0:a7:09:26:c4:51:a2:f5:11:24:b8:74:08:56:96:fc:de:a8:
         6c:8b:7a:23:09:de:e7:9e:17:ce:a1:dc:aa:96:3e:3f:c5:29:
         e1:5a:ad:73:4d:ef:60:6c:54:c1:25:1f:8f:4b:c8:ae:67:30:
         da:e1:be:27:d9:c6:de:39:e2:92:ba:af:c0:85:7c:22:59:45:
         32:8e:87:18:b2:45:4c:92:ce:da:e7:9f:f9:1b:68:57:6a:40:
         13:bc:6e:79:a0:4f:9c:46:e3:4e:f8:8a:31:c4:6d:59:c2:80:
         23:26:b8:4d:71:59:a5:fc:e3:8b:46:5e:1e:9e:23:d2:4c:ed:
         60:84:5a:e9:19:f8:94:c5:98:d0:b5:8f:3a:a9:03:6f:12:c7:
         a1:d7:81:63:72:7b:4b:de:0b:11:82:18:06:37:03:e2:54:8c:
         5b:cf:66:0c:ed:34:60:2c:1d:5a:c5:2d:92:40:9e:a0:78:c8:
         a8:06:9c:7b:60:25:b7:3a:cb:dc:23:44:98:d4:88:11:f5:c2:
         47:47:4f:2b:0b:59:23:0e:94:1c:b4:bd:ad:c1:8e:07:8f:2c:
         73:b5:e1:00:4f:61:26:ed:21:8d:d6:78:2f:f2:29:05:4e:c8:
         db:eb:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 15:42:59 2026 by rpki-client