Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8202A8E838A511F1981CA43DCB833773.roa
File:                     8202A8E838A511F1981CA43DCB833773.roa (raw, json)
Hash identifier:          5/vMel4Tl6uG3EoGVse691jDSp84t5vq37jBKBT9cQc=
Subject key identifier:   5C:93:F1:68:C9:AD:D3:78:F8:98:25:00:0E:B2:A2:B3:87:C8:1B:43
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6ECA
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8202A8E838A511F1981CA43DCB833773.roa
Signing time:             Fri 02 Oct 2026 15:33:28 +0000
ROA not before:           Fri 02 Oct 2026 15:33:28 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153586
IP address blocks:        2001:df5:e40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28362 (0x6eca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:33:28 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcec8-2007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6f:d1:cd:25:dd:e8:a7:8c:ad:b8:ff:04:b4:
                    39:18:0d:34:ba:23:21:8c:d8:aa:40:ca:69:d8:5a:
                    84:59:61:d4:33:b9:38:83:cc:76:25:35:7a:b3:32:
                    c4:81:4e:d5:f1:f5:85:64:af:34:d2:be:d6:e8:0a:
                    11:86:4b:1e:d7:6c:4b:15:7f:c3:86:a3:76:80:0f:
                    10:4e:d8:94:75:7b:9c:44:ec:49:4c:8d:02:bb:c4:
                    1e:8f:b4:22:60:4a:21:aa:ce:d2:55:02:57:da:4f:
                    05:da:e2:21:e3:44:d3:6e:ae:ac:f9:05:a0:9c:fa:
                    48:f7:ab:ae:c6:5b:48:2d:44:99:3c:46:54:7c:c2:
                    09:00:83:74:c9:49:d4:63:55:6e:84:23:53:5a:db:
                    f4:d8:84:42:2e:fc:4e:5a:08:56:2f:26:2b:1d:87:
                    17:e0:a1:7b:dc:3e:bd:bc:11:c7:18:af:45:13:da:
                    ee:63:fa:b7:72:da:14:cf:a9:c4:4c:4e:1d:2a:fc:
                    ed:dd:27:98:7e:a5:df:f4:da:d5:f9:17:ca:5a:f5:
                    11:5c:99:47:99:1e:2f:ab:81:66:a3:78:dc:9a:02:
                    c3:a2:03:0e:e7:76:dd:2e:1f:b5:c2:87:4e:e6:d8:
                    dc:ec:14:4b:e1:84:7e:41:d5:9b:68:66:b9:94:e0:
                    93:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:93:F1:68:C9:AD:D3:78:F8:98:25:00:0E:B2:A2:B3:87:C8:1B:43
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8202A8E838A511F1981CA43DCB833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:f3:25:5a:1d:3f:6c:a2:bc:89:da:88:1a:bf:44:cc:1e:3d:
         17:2d:20:79:c9:1d:aa:da:07:51:b2:cd:30:81:18:ba:d8:17:
         52:21:ea:1e:cc:77:03:90:6a:ef:c7:cc:8f:2b:32:49:df:a6:
         6f:bc:a6:c5:6a:a1:a1:24:6e:84:fa:c0:4f:0d:23:f8:f7:e8:
         ab:7f:53:2b:ac:c7:c3:ec:dd:9d:82:0a:07:d8:82:e2:6f:2e:
         0e:2d:c8:fa:07:a1:58:be:fe:fb:7c:ab:b3:2b:a7:d0:5e:f0:
         5f:18:a7:5e:df:81:df:41:99:51:78:0d:3d:ba:b4:ba:8c:e4:
         fb:02:20:9b:5a:35:82:e1:27:df:c7:1f:1f:34:c8:00:af:66:
         9a:4e:55:7b:e4:2a:d2:c1:72:d7:02:01:5d:43:41:e3:69:03:
         d9:bb:79:d3:d8:4b:50:8b:44:ae:a3:e7:04:a4:f9:8c:b0:7d:
         84:de:3a:57:98:38:59:84:15:ef:8d:26:fe:16:87:47:0c:88:
         b3:72:1a:28:c7:a7:3c:02:20:ee:bc:ab:4c:7e:3e:a4:0b:0d:
         bd:6f:51:15:db:02:38:90:2c:a5:d5:30:fd:2b:fc:a9:b5:44:
         0b:52:be:0f:f0:b4:b7:a9:64:a1:b4:88:2f:89:a9:2e:cb:5b:
         f5:ce:6e:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:13:17 2026 by rpki-client