Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C12F4320609011F09ABA7A5BC4F9AE02.roa
File:                     C12F4320609011F09ABA7A5BC4F9AE02.roa (raw, json)
Hash identifier:          Ttx3YttwqvZJXlo9cNnsEE2FGOOVe38V1Bkxr8wGAUk=
Subject key identifier:   F2:2A:59:93:96:63:AB:7B:A7:0B:FA:4D:81:F3:83:51:EA:01:BB:99
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6EA8
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C12F4320609011F09ABA7A5BC4F9AE02.roa
Signing time:             Fri 02 Oct 2026 15:32:16 +0000
ROA not before:           Fri 02 Oct 2026 15:32:16 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     152978
IP address blocks:        2001:df4:2e40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 31 Oct 2026 14:33:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28328 (0x6ea8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:32:16 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfce80-5f6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:00:bb:39:d6:80:37:cd:a9:1f:b2:75:4a:c6:
                    a6:ea:b0:d8:6e:1b:12:71:53:ca:ef:4c:9c:8f:da:
                    22:03:c4:41:0e:91:62:42:08:d9:30:7f:cd:f5:31:
                    0e:9b:e4:b9:2e:9f:f8:c0:23:56:2e:df:a7:68:66:
                    20:60:8e:b3:18:6b:85:c9:51:a2:1f:fc:8e:7e:67:
                    08:80:b3:c0:ad:a9:97:2f:7c:6e:b0:60:6a:0b:71:
                    5b:f9:48:04:02:9b:d3:17:71:b9:b9:5c:05:56:fe:
                    24:18:9b:ff:ec:15:be:fb:80:0b:22:f4:73:d2:b1:
                    19:e5:06:ed:b9:42:45:8b:68:0e:31:af:7f:a6:87:
                    cb:95:59:7b:eb:f4:b2:76:c8:3e:7c:2a:bc:c4:fc:
                    14:e7:d7:8c:16:3d:37:06:0a:d3:86:7c:0e:d7:8e:
                    56:fa:21:ee:fc:f5:d3:37:d5:c0:db:de:bf:07:60:
                    5a:60:f4:e9:5a:97:0b:fc:33:4b:6b:52:7b:be:d9:
                    ca:d5:63:53:a9:c3:11:1f:19:5d:b7:aa:01:a0:a7:
                    36:06:5f:58:ef:b4:2c:3e:2e:c4:fc:be:94:8e:82:
                    7d:75:d9:bf:63:e2:c5:9a:fd:0b:d5:6e:5c:32:d5:
                    d2:12:6d:20:73:15:48:05:18:3b:4d:0a:c1:6d:e3:
                    23:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2A:59:93:96:63:AB:7B:A7:0B:FA:4D:81:F3:83:51:EA:01:BB:99
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C12F4320609011F09ABA7A5BC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:2e40::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:45:5d:59:6e:ca:67:ed:78:3d:e8:9e:60:56:ae:ed:91:c3:
         3c:05:5f:e8:86:ad:aa:27:35:8e:b0:ba:9b:86:3b:c3:51:64:
         66:8e:af:17:66:03:96:e9:4b:ff:42:06:41:21:c7:93:3a:fd:
         f3:78:56:c8:16:b0:e5:68:b1:9b:31:de:ce:5b:8a:95:6c:86:
         e6:fe:3d:b9:e8:a0:ab:d0:2b:a9:4a:33:2e:d8:1e:a2:27:17:
         7c:c9:71:b4:b1:ec:d0:ec:14:c6:aa:49:5d:b4:f1:2d:e0:33:
         ec:a1:6f:92:db:90:15:98:a8:23:0b:a1:86:4c:8e:56:78:af:
         dc:3c:6c:0b:db:e0:65:46:f0:e2:1a:74:b9:6c:88:96:c1:65:
         8a:1b:bc:80:26:bc:6d:9c:74:6d:b0:12:79:80:71:9e:5d:bd:
         3c:ec:8f:a8:56:a2:d7:e2:0b:84:14:f4:42:e9:e9:5b:41:51:
         c7:32:9f:54:ab:8f:81:8a:de:03:ed:3a:86:f8:df:5d:db:09:
         16:77:91:e0:b8:6d:e8:3a:c2:ce:b1:71:9f:97:4c:1d:b6:f3:
         86:f5:03:03:81:1d:bc:ae:9c:bc:48:65:a0:54:9e:2d:2d:bc:
         2a:be:68:bb:fd:24:f1:5c:e5:aa:7f:de:68:d4:1d:ca:73:aa:
         85:cb:d7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 09:05:21 2026 by rpki-client