Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8DFF3E8E736D11F0AA6D9947C4F9AE02.roa
File:                     8DFF3E8E736D11F0AA6D9947C4F9AE02.roa (raw, json)
Hash identifier:          pd3RRAMeKkipboD7PATdVUjngp1ObG1Ra4vOH/no91s=
Subject key identifier:   A1:B8:E7:A0:27:AD:71:5E:17:F7:52:30:3C:1C:B3:E6:D4:9F:47:FE
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6BEF
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8DFF3E8E736D11F0AA6D9947C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:31:30 +0000
ROA not before:           Thu 28 Aug 2025 14:56:43 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154091
IP address blocks:        2001:df5:e940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27631 (0x6bef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:43 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61dd2-aa9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:33:a9:66:c7:4b:c6:44:99:ff:84:eb:a2:e2:
                    8a:28:d5:50:89:84:47:3e:51:39:ee:13:73:d0:96:
                    72:2f:d3:b2:cf:0b:a7:7f:f4:3c:67:53:bc:f7:a5:
                    5b:1c:81:1e:5e:0d:70:22:f7:ad:41:9d:22:3e:d5:
                    b4:9e:e0:5b:68:b5:1c:0d:60:44:52:46:ee:35:1f:
                    b9:59:bd:fe:52:5d:8c:c4:74:d4:65:b6:53:32:44:
                    e6:2c:bb:f4:b5:00:72:f7:ec:ab:8f:42:6d:b9:fd:
                    d1:4a:d4:8c:be:e4:9c:24:99:0f:b9:51:17:22:1d:
                    18:63:ed:66:e9:2b:f1:b6:07:56:41:ce:c5:65:8c:
                    17:39:91:c0:9e:74:8e:4b:db:a6:bd:f5:5d:ef:db:
                    8e:2a:a0:9c:e5:d9:d9:6d:b9:b9:10:47:c1:93:4c:
                    d2:d8:18:ca:b7:28:57:97:97:95:7e:33:a6:02:98:
                    ae:21:c3:17:ae:ff:18:b4:e8:5a:30:47:b5:9d:2f:
                    82:ee:d9:cb:4f:d2:b9:ef:8e:64:51:ec:53:a2:e0:
                    97:e6:dc:be:44:85:7b:b5:64:3e:37:26:81:c3:09:
                    10:cf:d0:7c:ed:c9:38:b9:86:0d:12:4d:c6:84:99:
                    8e:f2:1a:bd:87:96:3a:82:8c:b1:10:21:d6:10:7d:
                    f7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B8:E7:A0:27:AD:71:5E:17:F7:52:30:3C:1C:B3:E6:D4:9F:47:FE
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8DFF3E8E736D11F0AA6D9947C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:e940::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:d6:af:50:ca:f0:9a:23:f6:a7:62:44:e2:44:06:fe:af:f1:
         db:47:ca:8d:e2:09:03:bd:a0:6a:bd:8f:6f:c5:ea:2b:b5:d3:
         6b:45:b0:c6:6b:c0:91:03:7e:9f:cd:f4:f9:16:df:e3:23:78:
         38:33:45:ea:4b:e1:99:11:27:b7:8d:c1:20:c7:dc:e2:00:05:
         8c:42:30:46:1c:32:8e:15:ba:86:bc:28:fa:03:a7:80:3d:b4:
         68:35:a8:43:83:dc:cf:30:c7:54:3c:ee:2c:54:81:30:c3:6f:
         f2:53:51:90:77:fd:55:86:92:27:77:ee:ba:13:08:4a:26:1e:
         65:3a:39:b7:ff:4d:e5:59:a0:9a:54:69:4d:0f:02:1a:22:c5:
         cf:48:4a:56:d2:5d:f3:5b:bf:7c:8f:52:14:fe:2e:d4:62:1f:
         e4:7c:47:79:6a:ad:81:43:d7:31:6b:fb:c9:9d:35:2e:60:6a:
         c0:a4:82:19:f1:7b:70:32:5b:f4:16:ed:72:59:dc:60:2f:0d:
         76:41:1a:89:03:20:b9:2a:60:52:5c:92:cc:41:31:93:d4:38:
         56:b0:bc:c9:85:92:2b:6d:1d:f1:1b:3d:28:99:f5:ea:ac:2f:
         37:27:57:f8:51:00:08:06:f7:ad:12:31:05:74:7c:e3:0c:72:
         a8:b9:e1:4d
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICa+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjQzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MWRkMi1hYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkTOpZsdLxkSZ/4TrouKKKNVQiYRHPlE57hNz0JZyL9Oyzwunf/Q8Z1O896Vb
HIEeXg1wIvetQZ0iPtW0nuBbaLUcDWBEUkbuNR+5Wb3+Ul2MxHTUZbZTMkTmLLv0
tQBy9+yrj0Jtuf3RStSMvuScJJkPuVEXIh0YY+1m6SvxtgdWQc7FZYwXOZHAnnSO
S9umvfVd79uOKqCc5dnZbbm5EEfBk0zS2BjKtyhXl5eVfjOmApiuIcMXrv8YtOha
MEe1nS+C7tnLT9K5745kUexTouCX5ty+RIV7tWQ+NyaBwwkQz9B87ck4uYYNEk3G
hJmO8hq9h5Y6goyxECHWEH33rQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFKG456An
rXFeF/dSMDwcs+bUn0f+MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOERGRjNFOEU3
MzZEMTFGMEFBNkQ5OTQ3QzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9elAMA0GCSqGSIb3DQEBCwUAA4IBAQCa1q9QyvCaI/anYkTi
RAb+r/HbR8qN4gkDvaBqvY9vxeortdNrRbDGa8CRA36fzfT5Ft/jI3g4M0XqS+GZ
ESe3jcEgx9ziAAWMQjBGHDKOFbqGvCj6A6eAPbRoNahDg9zPMMdUPO4sVIEww2/y
U1GQd/1VhpInd+66EwhKJh5lOjm3/03lWaCaVGlNDwIaIsXPSEpW0l3zW798j1IU
/i7UYh/kfEd5aq2BQ9cxa/vJnTUuYGrApIIZ8XtwMlv0Fu1yWdxgLw12QRqJAyC5
KmBSXJLMQTGT1DhWsLzJhZIrbR3xGz0omfXqrC83J1f4UQAIBvetEjEFdHzjDHKo
ueFN
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:44:59 2026 by rpki-client