Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/87221D64592111EF8909412FC4F9AE02.roa
File:                     87221D64592111EF8909412FC4F9AE02.roa (raw, json)
Hash identifier:          Jw4CyAWGgnGZ+UwuQ5s5T/gat85cAKl3FXpV3DUvln4=
Subject key identifier:   A4:78:20:3D:13:60:C5:9A:80:0D:E9:20:D1:2E:14:15:B5:C4:6C:C5
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5EA1
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/87221D64592111EF8909412FC4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:19:03 +0000
ROA not before:           Thu 28 Aug 2025 14:56:01 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     152963
IP address blocks:        2001:df4:1f40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24225 (0x5ea1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:01 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60cd7-6150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:10:5c:c1:f9:22:e2:d4:a8:01:6f:63:89:f4:
                    29:c0:28:c6:0f:13:fa:e2:64:ce:20:a8:b9:f4:28:
                    63:ae:fd:bd:41:c9:5d:b0:7b:17:b2:6e:0e:ac:6d:
                    1a:68:78:b8:71:a3:51:0c:6a:95:bf:c1:7c:7e:23:
                    65:08:db:9d:b6:12:2e:ac:60:17:8c:f9:24:eb:dc:
                    77:2a:70:00:0d:31:60:eb:fe:b6:f0:68:36:ed:95:
                    8e:2a:74:45:50:2e:45:91:4e:15:cb:86:ed:30:44:
                    a6:cf:4b:79:6e:62:8b:ed:c3:38:03:56:7b:1b:52:
                    77:a7:65:75:d1:c7:6b:76:f7:81:a2:73:6a:2f:40:
                    69:4f:fe:b1:d6:7c:c9:c3:a6:b4:00:47:43:14:d4:
                    b5:71:0e:67:9b:b1:60:90:57:ca:1a:69:3c:97:bf:
                    76:74:ba:3e:c8:8b:e7:ee:7e:57:5c:66:88:e0:b7:
                    6d:e9:38:2b:dc:99:08:9c:37:ca:6a:1c:e6:0b:df:
                    f0:7b:47:c9:85:89:d1:7f:68:85:45:af:df:8b:93:
                    68:95:0a:08:b8:7d:91:9a:f3:5b:0b:5f:ac:01:8f:
                    a7:52:f3:fc:8c:3d:02:5f:70:f2:fe:59:3d:47:8c:
                    8e:2d:b1:19:ef:9a:92:69:0d:5e:1a:ce:40:f3:09:
                    b9:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:78:20:3D:13:60:C5:9A:80:0D:E9:20:D1:2E:14:15:B5:C4:6C:C5
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/87221D64592111EF8909412FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:1f40::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:02:7d:49:e0:ea:72:69:fc:c0:a8:eb:9d:d7:ec:b5:a6:2f:
         d5:88:c7:43:9c:9c:8b:45:6c:f2:31:16:16:97:99:d4:e5:b0:
         03:60:99:ea:9d:7f:7a:3b:db:5c:36:66:90:0a:dc:50:ee:3b:
         bc:45:ba:a0:72:98:97:54:21:21:42:47:c5:e6:66:e5:5f:b4:
         a8:15:8d:04:47:28:b8:52:c3:04:65:37:f1:b2:95:1a:45:47:
         b0:6a:5f:22:b4:f3:f7:f7:72:ed:9c:e6:1c:76:9d:bc:ad:59:
         88:b9:fc:b5:5c:aa:72:d1:d5:d9:53:77:29:ac:95:6f:47:44:
         11:ad:13:36:53:0c:9b:4a:44:c2:d5:84:f4:f1:42:14:d7:c9:
         d0:35:14:e9:25:1d:1d:8b:2a:49:e9:1f:9e:b7:ab:43:8d:44:
         29:12:86:cb:76:28:2e:ec:4f:b9:1d:c0:b2:f0:16:d2:3a:b6:
         1b:7f:3a:cd:1f:1d:56:74:dc:24:01:b2:ba:0e:9c:9e:e3:73:
         12:a8:2c:ff:f8:16:50:21:b0:81:2a:5d:c3:38:97:d9:08:2d:
         00:90:71:b4:b4:de:d0:55:28:68:bd:51:1a:a0:d2:d9:19:2e:
         da:15:6a:19:33:dc:e6:31:11:e3:71:6b:df:f4:61:31:8c:9a:
         af:6b:a0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:45:27 2026 by rpki-client