Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ADF40E7C608F11F0856BA159C4F9AE02.roa
File:                     ADF40E7C608F11F0856BA159C4F9AE02.roa (raw, json)
Hash identifier:          wl5/aIpyHSrEpE6BzanKhA4ZZaDfWfAT1y8XqXBzk6c=
Subject key identifier:   AB:5C:0E:E7:92:00:FC:17:19:F2:01:5B:E5:35:C2:4F:90:6E:C5:BC
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6BF0
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ADF40E7C608F11F0856BA159C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:31:31 +0000
ROA not before:           Thu 28 Aug 2025 14:56:42 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     154042
IP address blocks:        2001:df5:d740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27632 (0x6bf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:42 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61dd3-eabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:56:87:c8:82:d0:ac:77:d2:70:92:59:bd:b4:
                    86:f2:bc:1e:25:79:0f:a9:f6:8b:0e:9b:26:17:a9:
                    34:72:e8:e0:4e:2a:45:78:74:46:38:c8:be:18:f2:
                    b6:40:71:15:a3:c3:f3:09:72:9a:8d:93:24:c6:21:
                    01:db:9f:91:87:dc:1f:77:09:60:fe:e8:6a:7a:a4:
                    59:2c:c3:39:70:9b:84:35:55:97:a5:46:4b:ae:24:
                    46:60:61:91:4a:d0:44:66:a6:6e:a1:28:08:d9:4a:
                    25:ed:2a:06:bc:06:67:d7:75:2d:ee:99:ac:b5:1c:
                    3b:26:0e:0d:c4:cd:0d:40:7a:6a:04:97:53:e5:39:
                    18:4c:a0:ea:e1:55:99:77:ad:6b:8c:fe:32:f6:b4:
                    e3:04:42:e3:50:d1:51:4c:33:08:0d:17:e8:96:7f:
                    b5:5c:c8:e3:8f:06:0e:b2:b7:23:c7:86:ab:7f:f9:
                    0a:f4:ff:1e:88:1a:e2:a8:f5:3e:11:c9:d4:7d:eb:
                    99:c7:f7:2e:da:f7:82:7c:ef:e9:31:28:79:5a:26:
                    ae:07:cf:c7:cc:d2:e7:6a:90:42:64:12:1a:bf:4e:
                    09:ee:93:ea:af:93:7f:fa:04:28:bd:73:22:27:2e:
                    b0:a2:07:7e:03:c4:90:0d:45:80:5e:03:b7:87:d4:
                    5c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:5C:0E:E7:92:00:FC:17:19:F2:01:5B:E5:35:C2:4F:90:6E:C5:BC
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ADF40E7C608F11F0856BA159C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:d740::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:4a:25:5f:c5:50:60:f7:e6:66:90:9f:6f:fb:da:6b:fd:bb:
         82:5e:ae:26:88:43:89:d5:7b:4f:e8:9a:1e:74:ae:85:b4:6b:
         c6:76:45:f6:59:df:87:81:bb:ad:81:d0:11:99:a0:ed:df:be:
         cf:67:ab:75:32:0f:c5:ac:62:10:a4:69:3e:bf:71:9f:98:48:
         07:5f:5e:7d:08:60:67:17:93:4c:ee:ef:52:0b:59:7b:24:35:
         c4:4f:5f:a5:2d:0e:ea:20:1d:73:5b:a0:16:c6:88:18:02:37:
         f5:51:6e:5a:e2:97:ae:ab:6f:3e:c4:67:29:1f:f9:04:1f:72:
         a6:98:48:95:93:f7:54:af:fd:9f:f7:dd:3f:b2:74:df:43:c9:
         7b:0e:54:8e:4f:cf:ae:61:06:cc:32:64:1c:8f:7c:8c:6f:18:
         2d:b8:22:96:a1:65:0e:7e:9f:24:7b:0b:40:68:89:bb:6e:6c:
         a7:d4:20:f8:61:64:fb:3a:1f:9f:04:23:9b:2f:8e:90:cd:00:
         f1:a7:fa:8c:c0:f4:d5:ef:08:7b:d5:73:e3:80:30:e2:6b:84:
         f9:c6:37:62:4d:f3:26:54:eb:cc:7d:64:21:18:83:82:78:ff:
         0d:d4:a3:a2:4a:9f:6e:59:61:2e:e4:e8:da:83:3b:6d:18:8a:
         32:4e:61:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:49:20 2026 by rpki-client