Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6FFAF082B5E411EF98A07C1CC4F9AE02.roa
File:                     6FFAF082B5E411EF98A07C1CC4F9AE02.roa (raw, json)
Hash identifier:          uh+fmAbUTk7G5r/6KpPvWeo8nyxQWug64pmLgDNh/TA=
Subject key identifier:   BF:8A:06:94:E8:03:E9:95:C8:87:03:71:EC:9B:B3:0A:E2:89:9B:40
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       4DDB
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6FFAF082B5E411EF98A07C1CC4F9AE02.roa
Signing time:             Thu 28 Aug 2025 14:56:26 +0000
ROA not before:           Thu 28 Aug 2025 14:56:26 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153439
IP address blocks:        2001:df4:b3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 14 Sep 2025 16:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19931 (0x4ddb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:26 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=68b06e1a-3262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:2c:69:6c:33:1a:3c:01:27:4b:fc:94:b0:
                    b2:c0:10:c3:70:73:88:3d:26:af:ea:59:0c:a1:01:
                    72:46:8d:00:52:73:1e:de:a8:27:24:cb:0b:4e:93:
                    b4:8e:f4:64:18:00:60:f3:a7:b4:6f:9b:87:b4:6a:
                    a8:3e:6c:d0:b8:70:3c:ed:b7:80:0a:a0:41:ad:f8:
                    f2:9e:ba:88:27:ec:b0:7d:54:7a:b2:a1:5a:9d:da:
                    cc:c0:fd:9d:d3:88:df:f5:78:f9:a8:4b:a3:2f:23:
                    70:2d:40:dd:2e:19:bd:99:fe:94:02:a7:be:0e:25:
                    a4:ff:da:aa:37:6d:7f:fc:6e:76:8b:1c:0c:8a:ec:
                    a4:73:db:6c:44:55:4b:ae:b2:92:83:e6:59:6b:18:
                    67:c8:4b:21:15:6f:08:68:b8:97:1b:20:9f:9b:b8:
                    67:0f:57:64:72:e0:c8:5b:39:d6:86:29:18:7a:d5:
                    8f:12:3b:78:c3:3d:a8:d2:cc:e3:bc:c2:98:90:34:
                    72:4d:b9:ee:be:ee:62:af:4b:1c:a1:3b:bf:9d:2e:
                    91:93:a9:00:ca:e0:98:c4:53:40:a9:2d:c8:1a:1a:
                    99:ae:e5:2e:42:6d:8e:3c:10:98:33:54:3e:01:33:
                    61:9b:d5:85:f5:23:48:b4:7d:7d:15:eb:a7:88:ce:
                    f1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8A:06:94:E8:03:E9:95:C8:87:03:71:EC:9B:B3:0A:E2:89:9B:40
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/6FFAF082B5E411EF98A07C1CC4F9AE02.roa
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:b3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:8f:c0:d3:b4:46:c9:f1:3b:97:8a:6b:4c:4d:5b:a1:31:8e:
         d8:82:a3:05:74:8e:21:7f:e1:89:8a:0d:6f:41:18:bf:e5:99:
         5f:0e:e8:d7:51:89:13:4e:cb:d5:a5:ae:d9:5a:ab:8d:c8:72:
         a4:e0:fa:b5:39:2b:2b:c7:b3:d7:05:45:88:5c:62:a9:af:aa:
         ee:44:f7:ad:a0:60:28:78:ce:24:3f:7f:8f:97:cc:a6:d1:c5:
         2f:c1:ce:4e:be:01:f8:7c:ac:12:6f:dc:f3:2a:9e:e7:f5:68:
         cb:dc:4a:56:b6:36:d0:61:30:6a:38:87:d9:84:ae:59:b5:e9:
         b2:85:7e:8f:a2:50:70:f4:ff:02:06:d9:4b:cf:6c:91:6e:32:
         1e:ee:01:36:2d:4a:73:62:66:a8:05:a5:0c:7e:30:59:1f:c6:
         84:ba:7d:93:d9:a9:61:df:19:bf:94:46:7a:d8:68:1f:bc:f9:
         f8:91:ba:13:15:d3:e6:99:f8:b4:10:40:7b:19:93:75:75:23:
         f0:89:e6:cb:bd:84:47:0c:e7:14:93:58:ee:bf:38:3b:01:bd:
         42:73:15:bd:72:cf:1b:46:31:4c:69:9e:c5:51:55:f5:77:7d:
         a6:52:9a:44:a5:0b:e4:99:11:a8:84:8b:53:c9:4a:f8:1c:e4:
         99:3f:ab:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:33:22 2025 by rpki-client