Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/70AB4F0A638B11EFA99DB91FC4F9AE02.roa
File:                     70AB4F0A638B11EFA99DB91FC4F9AE02.roa (raw, json)
Hash identifier:          cmXinoRGyLUbVxdg/b9r1N+o86F4PO4Kdnl19dzGUEY=
Subject key identifier:   C9:43:09:F7:D3:D1:82:B9:93:2E:DB:35:8E:BE:F1:94:70:A3:FE:33
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6EA6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/70AB4F0A638B11EFA99DB91FC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:32:12 +0000
ROA not before:           Fri 02 Oct 2026 15:32:12 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     152975
IP address blocks:        2001:df4:2c40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28326 (0x6ea6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:32:12 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfce7c-5adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:bc:99:84:c8:0b:26:2b:ba:85:14:8b:ed:db:
                    d3:2b:45:52:fb:6f:a8:e0:44:06:26:eb:7c:51:2f:
                    6c:f9:ae:69:99:1c:15:16:74:d4:3f:f1:9c:31:82:
                    93:c3:2f:b0:9b:10:95:04:4c:fc:61:09:c6:0c:8b:
                    85:66:85:24:f9:b7:39:92:27:5a:37:6d:3b:7a:95:
                    7d:cf:a9:6a:1c:d5:ee:57:11:77:aa:fe:32:65:65:
                    95:33:54:7a:6a:e5:2c:0d:51:3b:ab:a1:d0:27:f7:
                    a5:3b:87:30:62:ed:53:72:a8:93:cd:c9:6d:f9:88:
                    32:8f:96:46:39:8d:e8:da:79:f9:55:85:91:1c:29:
                    55:33:00:3e:16:72:1b:ca:66:9b:fc:6d:60:8f:19:
                    1b:23:2c:52:80:9d:86:98:28:f1:ce:4b:78:2a:13:
                    8b:7b:c8:51:dc:30:89:4d:70:fc:fd:5d:12:73:c8:
                    62:19:fe:0f:40:bc:22:bf:5b:c5:af:87:8b:9b:e2:
                    7e:4a:2b:50:94:77:cb:34:31:c9:6b:40:4e:4a:ee:
                    37:80:ea:5c:7d:06:48:a5:73:c1:5a:f1:28:3e:4e:
                    67:ed:5f:0f:28:5a:01:3b:3a:e5:5f:d9:76:42:61:
                    b7:6a:e3:c3:89:e6:1c:3e:eb:3b:fc:95:03:78:b6:
                    66:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:43:09:F7:D3:D1:82:B9:93:2E:DB:35:8E:BE:F1:94:70:A3:FE:33
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/70AB4F0A638B11EFA99DB91FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:2c40::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:70:ec:dc:45:8c:d0:18:aa:54:68:3d:52:ef:32:e8:3c:06:
         42:a2:fa:0c:ff:df:24:23:8d:72:df:c9:df:dc:73:1f:52:cb:
         fc:2b:d6:1f:90:ab:76:85:2c:f5:bd:e8:d8:96:1d:e4:d4:62:
         ee:34:8a:99:04:3c:f1:b5:d8:91:9f:3b:6f:95:05:ee:0e:fa:
         71:c2:7a:86:f0:eb:18:c1:4e:df:1a:06:92:19:65:ae:f7:c9:
         06:f9:31:2d:63:2a:ed:bb:ca:87:d3:0f:49:a3:77:98:c5:99:
         a2:de:03:03:66:d5:b8:d2:f3:10:71:86:69:34:36:0f:a0:8d:
         d1:29:75:23:ec:4a:5c:16:c1:e7:fd:37:0b:a5:0e:fa:9f:8d:
         24:98:8e:41:2e:fb:dc:b9:3e:bb:4a:c2:de:e4:b3:61:5d:f6:
         bd:da:28:6d:e1:ad:a4:5c:2a:1c:cb:e9:d8:8b:7e:62:04:1e:
         14:5c:24:23:ee:d8:f9:12:e9:1c:9c:01:64:78:29:ce:eb:db:
         a0:12:2a:f4:b8:a7:de:53:ed:c7:18:4c:60:9a:57:36:86:ec:
         1d:b6:8b:9c:aa:51:eb:26:bb:66:3b:75:b8:71:9d:1a:7f:b1:
         cb:9a:5e:b6:de:31:1d:09:4c:0b:d9:03:99:39:a1:9b:57:1e:
         97:7f:a1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:28:59 2026 by rpki-client