Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C70783C0A3F711F0A8514578C4F9AE02.roa
File:                     C70783C0A3F711F0A8514578C4F9AE02.roa (raw, json)
Hash identifier:          JLEPkCEZg6in60IgYUC7L3Xo8b8tX3JfSfap2IzxtqU=
Subject key identifier:   9A:E1:9A:48:7E:01:FD:76:D5:4C:52:DF:28:05:70:84:C0:F0:C0:19
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6BD6
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C70783C0A3F711F0A8514578C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 23:31:00 +0000
ROA not before:           Wed 08 Oct 2025 03:35:04 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153743
IP address blocks:        2001:df5:4ac0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27606 (0x6bd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  8 03:35:04 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a61db4-20b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a2:1b:c2:4b:4e:1c:25:29:f7:60:5a:cd:76:
                    51:99:99:b6:e6:4c:28:8c:9f:a2:20:70:36:be:dc:
                    2a:f0:87:a9:f3:c1:61:06:71:b7:96:2b:2f:c5:6b:
                    cc:6a:61:dd:71:68:b9:da:72:5f:5e:17:8d:96:85:
                    5b:5f:3d:aa:8b:cf:72:4a:50:91:f8:c2:ea:61:d2:
                    49:10:71:50:cd:ae:b8:93:1d:37:37:ac:f5:cd:29:
                    57:a4:8c:42:b8:e1:87:71:f4:4a:f3:7b:b1:94:17:
                    5a:20:79:33:42:6b:af:0b:44:c4:f6:fa:02:5f:1d:
                    3e:19:f4:11:15:42:9d:39:08:e5:e0:b2:8b:53:02:
                    34:33:31:28:fe:6a:8d:1e:53:c4:90:1f:3d:1f:bb:
                    04:dc:f5:7d:dc:10:1f:5c:9a:d8:4a:4d:70:5f:68:
                    d8:cc:c3:c5:2f:f3:ec:cc:00:b0:0f:21:04:b1:0c:
                    51:5b:4b:87:8f:31:77:97:4e:20:94:70:eb:6f:5c:
                    d2:e4:79:29:d0:16:1b:ba:58:12:fa:50:ee:74:c8:
                    45:91:b9:aa:e1:43:33:15:c6:b7:cd:c9:ad:9c:5e:
                    3a:39:c5:15:95:40:0d:39:9c:e5:89:c9:be:6e:2a:
                    00:f4:50:2b:1d:48:53:24:9d:cb:b0:bd:b6:27:a9:
                    b9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E1:9A:48:7E:01:FD:76:D5:4C:52:DF:28:05:70:84:C0:F0:C0:19
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/C70783C0A3F711F0A8514578C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:4ac0::/48

    Signature Algorithm: sha256WithRSAEncryption
         1c:00:1c:a0:89:17:33:a6:1d:26:51:41:ae:1e:1a:4e:95:f0:
         42:96:f8:e0:30:23:62:2f:be:10:b1:df:d0:3c:0e:4f:a3:a6:
         4d:04:77:94:e1:a8:7f:16:ee:f8:25:df:39:3f:de:08:7e:55:
         f5:47:a9:38:07:ee:0e:b0:f3:70:ea:67:62:5e:cc:20:41:b1:
         d8:e7:50:95:95:2d:8c:c7:0e:ee:47:96:c8:e8:5b:2b:1b:76:
         30:5e:07:5e:a4:45:aa:8f:9c:fb:c4:c7:ff:8e:a9:cb:f9:06:
         4c:ea:2e:8e:c3:ac:87:19:6a:24:8a:bd:55:eb:73:fd:42:ec:
         41:9e:be:49:89:14:4b:e5:7d:b6:d8:07:37:8e:73:50:d6:2d:
         cf:c6:f6:cf:21:c1:2c:fb:48:d6:f4:52:2d:50:50:ad:a8:7c:
         e9:aa:5c:0f:7e:24:81:f5:2b:ff:27:8f:40:36:93:35:65:c9:
         55:fa:99:11:83:7a:02:4d:38:ea:ab:96:19:fa:09:cb:58:96:
         14:92:90:24:a3:1d:b6:c3:ea:2d:54:48:95:67:b8:0d:23:ab:
         ea:07:27:08:c3:53:6f:e0:7b:67:70:5a:68:c9:61:89:6f:c5:
         f0:17:97:21:c3:71:ce:05:2b:ad:c7:bf:27:50:3d:35:23:e6:
         6a:ee:13:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 22:47:44 2026 by rpki-client