Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8060AE3638A511F1981CA43DCB833773.roa
File:                     8060AE3638A511F1981CA43DCB833773.roa (raw, json)
Hash identifier:          3m4kmKyR/KwWcu9XE1iFF9Sry7QYt7VFCMvjtJjtMuE=
Subject key identifier:   BE:B0:DE:5B:9D:B7:A4:7D:C3:A7:5F:9C:25:5E:FD:5E:40:86:2F:27
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E8B
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8060AE3638A511F1981CA43DCB833773.roa
Signing time:             Fri 02 Oct 2026 15:31:07 +0000
ROA not before:           Fri 02 Oct 2026 15:31:07 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     151876
IP address blocks:        2401:53a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28299 (0x6e8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:31:07 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfce3a-2ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:e2:a0:bf:bd:93:62:72:6d:e1:bd:9e:0f:
                    07:e3:4e:6a:79:78:6b:a1:3b:26:ce:4f:8a:e8:b1:
                    39:33:0b:2f:30:2e:2e:9d:ab:ad:ee:ce:4b:af:e1:
                    15:5c:8a:7d:3f:a3:1d:f5:4a:7d:45:80:38:5f:b8:
                    17:6b:81:f5:11:87:63:92:69:b0:ab:10:9f:9d:b8:
                    f2:29:b9:25:5e:14:42:72:0b:71:d9:0c:89:ad:d5:
                    e3:ec:73:6b:74:48:97:91:87:4d:2c:4b:91:cd:ae:
                    b7:fa:ca:bd:cc:ad:48:0c:4f:74:77:c1:7c:bc:d4:
                    10:7c:3e:91:26:bc:fd:43:36:36:21:78:d6:47:e1:
                    4b:25:f0:a4:b5:40:3c:ad:6c:53:aa:ca:e5:04:0e:
                    c9:79:98:63:48:c3:4e:97:29:4c:c0:b1:0e:6a:09:
                    a1:4d:28:9a:27:a1:b8:83:97:0c:52:47:ff:50:01:
                    8e:1f:5a:f3:54:68:b9:ed:96:38:12:ba:a3:f3:a5:
                    df:b4:81:c3:5f:b2:bf:81:4e:ac:bd:a0:97:1f:df:
                    a2:cb:b8:c4:22:41:16:83:87:3c:15:bc:86:94:0f:
                    df:96:89:ae:7e:4e:10:79:0e:6d:23:5c:c9:a4:c9:
                    50:9c:8c:db:36:d4:c8:6f:0b:97:71:67:18:96:bc:
                    e5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:B0:DE:5B:9D:B7:A4:7D:C3:A7:5F:9C:25:5E:FD:5E:40:86:2F:27
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8060AE3638A511F1981CA43DCB833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:53a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1a:a5:86:85:d2:fc:2e:22:4a:ab:5e:9b:2c:0e:43:75:4c:3f:
         75:64:dc:1c:a0:04:5b:80:5a:16:17:06:e8:d3:82:18:cb:bd:
         55:1f:e7:9a:a3:e4:d8:bd:f4:5b:f6:0c:e9:f8:d8:49:7b:50:
         d4:04:fc:65:e0:44:77:e6:3d:2a:34:5a:76:be:63:6f:7a:a8:
         e9:16:ac:5d:f3:ef:32:cd:3f:88:c8:cd:51:7d:fc:b2:e3:d9:
         14:5e:4e:39:d2:1e:38:cc:6d:fe:87:e1:9b:07:12:ce:d9:c8:
         55:45:66:36:dc:c0:dc:51:21:9b:e7:fb:ca:23:05:f2:9d:22:
         92:f1:b2:b3:1d:f7:7c:cb:53:ee:95:91:1f:b3:30:be:31:81:
         d6:11:a0:ef:4b:93:a2:aa:b7:30:22:4e:a7:7e:2d:e2:89:bc:
         68:a4:d4:e2:fc:53:cb:6b:41:1b:5a:e0:f6:68:90:b6:38:25:
         db:dd:55:79:4a:d6:de:23:e9:c0:63:e4:e7:73:ca:6b:3f:42:
         ec:9f:18:65:d3:47:58:fa:96:9b:df:24:7c:c4:f0:f7:60:08:
         b6:27:9a:3f:a7:c9:6f:d9:7b:42:ff:4b:b4:fa:50:f4:f8:3b:
         73:58:53:8c:09:48:71:1f:84:c8:76:c8:c9:e3:d3:52:06:36:
         b4:89:ca:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:46:38 2026 by rpki-client