Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA0AE43CF6D811EE99425F2EC4F9AE02.roa
File:                     BA0AE43CF6D811EE99425F2EC4F9AE02.roa (raw, json)
Hash identifier:          jyfnj7KUMZJarPiyOQeVoIaop2Oan1LaPrhPjV15h4Q=
Subject key identifier:   6F:9B:A2:EC:1A:64:4E:81:BA:9F:9D:84:3F:F9:BA:6A:1B:EC:72:A1
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6E90
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA0AE43CF6D811EE99425F2EC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:31:25 +0000
ROA not before:           Fri 02 Oct 2026 15:31:25 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     151903
IP address blocks:        2001:df3:63c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28304 (0x6e90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:31:25 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfce4d-dea8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:f9:bc:5f:64:86:9c:5f:70:e4:66:0a:5f:
                    3c:ea:7f:0e:23:8b:68:fd:4d:06:a2:9c:3e:46:d1:
                    df:5b:6a:a2:6a:84:35:4f:1b:8f:83:42:5f:61:25:
                    4b:0b:ca:ac:e2:5e:e9:d7:0e:bc:cc:8d:a4:d5:ee:
                    77:29:1b:ca:db:bc:66:db:62:46:9f:ad:ec:01:85:
                    18:c8:96:7f:77:19:03:8f:0c:3a:6b:50:5b:5e:38:
                    af:fb:47:71:61:9a:ee:46:bf:82:8c:72:e5:f1:da:
                    22:41:6e:f7:b7:35:1d:39:95:59:57:8d:6f:ca:4e:
                    8c:17:7c:67:2a:92:be:9f:5b:2f:12:7f:5a:26:89:
                    95:bc:54:39:70:e0:1c:02:ad:49:af:4d:2a:e0:e8:
                    77:b1:3d:f7:fb:da:83:53:00:77:df:0a:41:d5:cd:
                    5e:8d:33:0a:c2:55:70:97:4e:84:37:a0:51:8f:76:
                    32:94:55:e8:e0:a9:23:86:f7:fc:f9:d3:ec:a3:db:
                    07:44:b5:d1:6a:df:71:fe:80:71:ad:e0:21:9a:69:
                    46:82:c5:a2:ec:50:01:9f:89:d1:37:3a:62:fd:e0:
                    ac:94:62:0a:db:03:40:bb:e1:83:e6:18:6d:6e:ad:
                    06:4e:65:e7:d1:b5:49:15:f5:2c:cc:a0:67:d4:c3:
                    57:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9B:A2:EC:1A:64:4E:81:BA:9F:9D:84:3F:F9:BA:6A:1B:EC:72:A1
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/BA0AE43CF6D811EE99425F2EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:63c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a6:09:25:49:46:f4:15:f5:79:fa:13:cc:9f:72:ee:cd:37:00:
         cb:d7:b9:d7:bf:5c:58:23:2b:95:eb:27:12:26:e4:ad:ea:e1:
         c6:5f:c8:46:3c:ca:e2:e8:c5:80:3c:45:64:90:fd:36:51:65:
         e7:10:50:35:9d:0c:34:8c:a7:18:6f:da:38:cc:95:5a:bb:4b:
         be:a7:c3:e1:17:fa:a7:30:28:a4:f9:b8:d8:c2:f4:94:81:f1:
         49:17:0f:a7:14:ef:09:86:f0:16:a1:3c:01:47:00:70:99:d0:
         f5:98:9f:b9:ac:29:c0:a3:6b:31:91:48:d5:01:8f:55:cb:2b:
         e5:8d:ab:51:f3:29:65:4a:19:5e:30:35:3f:87:53:8b:7d:0e:
         f3:9c:a8:d3:5e:89:30:ac:73:c0:0c:87:4d:4e:ba:81:5f:c5:
         f9:bd:20:0b:b3:95:4c:94:d5:75:08:80:a7:4b:c8:b4:a3:6b:
         08:c1:65:6b:37:c4:04:30:f9:2d:00:ec:49:e0:cf:7e:bd:2c:
         74:b3:a8:a5:4c:97:70:18:bd:d3:38:fe:93:49:75:eb:33:48:
         04:f9:76:a6:bd:fe:d8:36:e6:4a:dd:46:5d:b3:1e:ef:7d:f7:
         de:60:01:6d:c8:2d:e3:bf:24:a5:b5:b1:bf:a8:09:3a:f3:7c:
         48:69:0a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 12:19:48 2026 by rpki-client