Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/78F70C7CDA6C11F0961B74F799D3641D.roa
File:                     78F70C7CDA6C11F0961B74F799D3641D.roa (raw, json)
Hash identifier:          zVDUDALUgeUvvyplCUZ+CldqZbeq0Vz6Z9h8stfGTKY=
Subject key identifier:   AC:AF:19:16:CC:B4:79:6E:8B:73:92:77:B9:20:F8:82:6D:D2:8C:07
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6BC3
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/78F70C7CDA6C11F0961B74F799D3641D.roa
Signing time:             Mon 02 Mar 2026 23:30:28 +0000
ROA not before:           Tue 16 Dec 2025 10:46:27 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154406
IP address blocks:        2001:df6:6740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27587 (0x6bc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Dec 16 10:46:27 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61d94-400d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0c:7f:88:32:c5:be:1d:f9:de:bd:9a:e3:f7:
                    6f:36:d7:c1:01:46:71:44:49:c4:70:c7:75:a1:56:
                    b4:c6:d5:f2:05:4e:da:5c:ed:a4:22:e6:15:9d:ff:
                    be:39:78:3e:b9:21:5f:00:6f:1c:4a:79:ed:c6:51:
                    d2:a1:86:19:71:90:44:59:2c:fe:ab:8d:43:60:6b:
                    25:f4:2c:75:dd:b8:be:aa:1d:96:9d:1b:68:d7:69:
                    aa:ef:aa:36:4d:06:0d:67:6a:15:13:fa:d3:82:89:
                    14:8e:2b:a6:af:32:03:17:c8:f0:93:b2:b9:65:4f:
                    bf:5b:b1:1a:73:12:a1:91:a2:c5:7d:80:67:63:70:
                    a4:c3:a5:28:d6:6c:bc:9b:3a:53:ab:f6:67:79:b7:
                    9d:fb:84:57:63:49:9b:51:a7:dd:53:05:1d:36:94:
                    83:b9:92:68:63:45:56:39:19:cd:e5:67:98:ee:03:
                    e4:6c:52:03:f3:f5:ed:f1:82:1f:00:62:a9:b5:4d:
                    fe:af:a1:1a:c0:a5:85:ee:8d:46:c3:17:bb:ad:86:
                    43:66:c7:31:ea:74:b0:9b:33:a2:66:08:44:1f:14:
                    0c:5f:bb:2e:5b:fe:a2:0c:88:55:b6:2b:0e:32:3a:
                    e0:87:bc:dd:d2:ff:1d:8d:bf:c8:e1:28:57:9e:a7:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:AF:19:16:CC:B4:79:6E:8B:73:92:77:B9:20:F8:82:6D:D2:8C:07
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/78F70C7CDA6C11F0961B74F799D3641D.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:6740::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:2b:73:76:f7:63:a2:6e:23:df:5e:44:2c:95:16:b0:9d:3a:
         01:fe:bc:3e:7f:75:d0:a3:f5:18:2d:07:fc:3e:08:a5:5a:4f:
         1f:c9:3d:74:dc:e5:6e:4a:0f:e7:26:85:6a:f5:d8:ea:14:72:
         2f:89:94:f6:e3:f2:a2:8d:3c:f2:d6:7e:9a:41:8d:b3:67:d2:
         22:dd:7d:f3:27:6a:96:a5:df:4c:ac:89:3a:b2:19:28:c6:46:
         ba:84:81:e5:16:e8:3d:69:e3:d8:7e:20:c9:4f:71:1b:16:2a:
         29:dc:36:e0:df:07:12:c3:57:6e:1e:05:0a:2b:69:8c:eb:fc:
         f7:b6:d5:3c:c6:d4:63:c4:0c:f4:7a:85:9c:da:9c:3f:90:49:
         51:5d:24:9e:70:e6:45:5f:fe:2e:6b:ff:bf:55:d0:78:ba:f8:
         d9:97:f1:6f:9a:70:08:44:f2:58:eb:94:95:3f:61:1b:d6:95:
         e5:03:b5:29:71:68:c7:be:42:16:a8:e7:cd:58:c6:c1:c1:22:
         89:14:e8:f2:da:f4:b6:3b:41:37:c3:fc:7f:ad:b2:6e:82:89:
         84:a4:a5:43:2f:ac:36:8b:33:61:4c:4c:6f:b8:b5:f4:f7:87:
         2d:25:9e:2d:c4:6a:37:79:76:95:9b:3e:21:6b:83:94:0b:b3:
         38:4d:d8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:06 2026 by rpki-client