Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/961A19E4BC4411EF95825C2FC4F9AE02.roa
File:                     961A19E4BC4411EF95825C2FC4F9AE02.roa (raw, json)
Hash identifier:          RLErHy3UFnFzgEJjWtTBOSGQ0x/rBeir5a1EnPLIxn4=
Subject key identifier:   3F:C1:A0:FC:5D:83:A2:E0:6D:1B:10:5A:73:6D:2E:C6:F3:9C:BB:F1
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6EBF
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/961A19E4BC4411EF95825C2FC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:33:05 +0000
ROA not before:           Fri 02 Oct 2026 15:33:05 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153435
IP address blocks:        2001:df4:b1c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28351 (0x6ebf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:33:05 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfceb1-24a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:41:2d:72:5a:48:af:14:6b:f9:e0:8c:87:41:
                    3d:7e:12:3b:da:0f:24:89:12:04:25:10:c6:06:52:
                    62:a7:89:a5:7d:28:9d:37:59:ca:45:44:08:6c:00:
                    df:9b:e4:6b:ba:ed:d9:e1:0f:9f:7a:f1:da:27:26:
                    af:67:18:cb:0b:2d:6c:de:53:f0:4e:58:20:fb:2a:
                    eb:75:80:53:fa:50:1d:1e:03:e7:69:63:fe:42:24:
                    54:96:16:a1:f6:0b:60:7c:e3:b7:66:eb:ec:e0:4e:
                    1a:c2:00:fb:0f:22:a3:1f:76:76:31:dd:f4:6a:96:
                    79:a6:e8:d0:2f:23:b3:90:49:13:69:d8:ec:ea:3e:
                    90:03:66:bf:4e:48:1a:4b:a8:73:d8:15:84:dc:a3:
                    05:6b:5b:c3:ec:76:46:ab:41:a0:53:d9:40:9a:a1:
                    98:f5:0c:91:9b:05:a5:06:10:76:a5:62:f0:87:36:
                    0b:a4:18:8b:cb:69:67:11:48:92:2c:13:3e:59:a2:
                    39:27:04:cb:4f:e2:47:0f:52:06:f4:c6:31:cd:fc:
                    2b:58:82:4b:74:44:92:60:13:3c:fa:dd:05:17:76:
                    5f:e6:06:00:21:39:3c:75:9b:1d:9b:54:1a:3d:82:
                    a9:87:7f:5d:f4:cc:2c:fd:48:75:12:67:a5:8d:fe:
                    db:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:C1:A0:FC:5D:83:A2:E0:6D:1B:10:5A:73:6D:2E:C6:F3:9C:BB:F1
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/961A19E4BC4411EF95825C2FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:b1c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:0d:c3:30:0e:a8:04:c3:f4:08:85:0a:58:ab:e2:ba:3d:83:
         41:bf:03:a9:5d:25:c8:74:bd:8d:d9:8f:45:c0:0c:77:f6:58:
         cc:f9:73:35:31:2b:96:eb:6f:20:de:5a:64:a2:4d:33:e5:fc:
         c5:f6:c3:2f:bb:0b:9d:e8:3e:e4:ff:c8:58:da:7f:1e:7e:9a:
         2a:17:27:d1:09:ab:6e:49:20:18:0e:39:80:d2:dc:76:d3:b3:
         b1:d3:9c:ce:5e:e2:e0:36:77:43:25:2e:c8:3b:99:d6:68:b0:
         bf:8f:b9:33:ab:58:49:88:89:69:d7:fd:71:b2:10:25:ee:57:
         e6:d9:9f:17:fb:8d:36:ed:ce:1d:e6:50:81:a5:7c:db:2a:cd:
         79:99:42:0e:26:f2:38:3b:ab:16:2b:21:ea:22:f3:ae:21:e2:
         77:78:41:2a:8d:d1:c8:71:8f:32:de:78:d8:ab:31:f4:73:1a:
         49:b8:ae:fd:b0:0c:78:a4:24:22:2c:b0:62:3d:73:22:1c:c2:
         98:1e:32:8e:92:55:47:9e:d4:bc:a0:78:f1:b0:91:d1:a4:f0:
         a9:a7:ff:e2:ff:34:93:b5:35:34:4e:30:f7:a6:9d:8d:4a:aa:
         32:d1:d4:3a:5d:c0:d7:fe:b5:95:ae:52:80:bb:0d:8f:e5:2d:
         a7:7a:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:51:41 2026 by rpki-client