Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED91F9DA03DE11F0BF284950C4F9AE02.roa
File:                     ED91F9DA03DE11F0BF284950C4F9AE02.roa (raw, json)
Hash identifier:          uLQqztwEjs13oSDmjVcPoIzrVuGcL2xA+ld3CoLZQI0=
Subject key identifier:   36:C5:AB:3E:38:BE:EF:2C:86:BA:4E:F7:0B:22:51:78:86:0A:4D:43
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       5EBD
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED91F9DA03DE11F0BF284950C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 22:19:31 +0000
ROA not before:           Thu 28 Aug 2025 14:56:28 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     153499
IP address blocks:        2001:df4:d5c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:32:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24253 (0x5ebd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Aug 28 14:56:28 2025 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69a60cf3-a263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:27:a2:48:27:02:7b:ce:22:44:e5:7c:35:de:
                    8e:4f:c3:ae:8c:4f:5b:6f:f6:98:c2:0c:31:e1:07:
                    d8:42:05:b6:3e:5d:9e:de:27:e9:15:2b:2f:9f:81:
                    55:8f:8f:61:f3:d5:68:70:35:15:06:05:ca:a7:2f:
                    9f:3c:83:21:91:b1:04:8e:4a:06:93:c2:29:39:0c:
                    da:e0:18:db:86:d4:26:b7:f4:bb:e0:0b:1c:2b:e4:
                    1f:58:71:7c:7e:70:43:52:22:6b:ce:05:86:94:a2:
                    3a:6b:2d:fc:d5:93:2d:3f:7c:3d:a9:4c:12:ee:73:
                    21:2e:63:53:53:d2:5e:d8:67:00:eb:69:c5:c0:7e:
                    3b:65:1d:ab:da:85:39:09:10:43:fd:8c:d6:e9:b3:
                    b5:4e:4b:d9:d5:d9:af:18:1b:16:db:2f:31:be:38:
                    46:d2:0f:69:83:5b:c3:6e:ee:90:cd:52:6d:44:92:
                    57:bc:7a:45:82:00:96:4d:29:6f:92:4c:1f:ca:33:
                    cb:9e:16:23:53:47:c6:ee:5e:8f:9c:06:37:b8:d5:
                    04:42:8e:ff:fc:71:7b:29:6a:30:b8:f4:4e:37:c8:
                    d0:64:8d:77:7d:0f:b2:12:58:51:de:a0:c5:da:1d:
                    18:11:d7:12:ba:53:f4:7f:df:24:07:c7:08:92:a4:
                    36:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C5:AB:3E:38:BE:EF:2C:86:BA:4E:F7:0B:22:51:78:86:0A:4D:43
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/ED91F9DA03DE11F0BF284950C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:d5c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:d2:53:44:39:95:b6:59:6f:75:b7:9a:0d:ec:13:92:0f:06:
         7b:07:a8:ce:82:16:91:92:8c:bf:de:88:3b:05:f7:20:bb:d8:
         fb:96:62:7e:78:3d:ad:8e:e9:8b:ca:46:ca:d0:4a:71:62:19:
         14:9c:d3:87:3b:ac:be:cc:0f:00:25:e7:04:9e:ed:14:2b:e5:
         2e:e6:00:fc:a6:14:3d:2e:4c:05:0a:14:ef:7d:6d:6c:fc:02:
         f3:c6:d1:64:f3:5b:1c:c6:a3:f6:cc:85:b2:24:d9:09:aa:7c:
         d0:6b:3b:1e:1a:bd:87:0a:65:56:ee:ba:42:5a:2b:b1:eb:16:
         81:74:e6:2c:fe:12:18:d3:22:30:22:56:d3:aa:14:83:bd:50:
         46:b2:06:c4:36:91:cd:04:37:ba:df:98:15:a0:d6:6e:3f:52:
         3a:ed:0c:eb:8c:0a:c3:4b:b3:9e:9e:0c:ab:f1:25:56:c2:2d:
         b8:be:ce:32:1b:cc:5c:63:f9:7f:f7:3e:5e:22:9e:1e:a7:16:
         93:48:4c:ff:c0:fb:50:1c:f3:42:c4:c9:44:ab:ca:cc:09:71:
         40:b2:a1:76:18:d9:c9:65:ae:35:f1:6b:c5:7d:ab:9c:d8:37:
         2f:c3:57:a0:e7:e4:eb:fd:ca:32:18:89:ae:e4:5f:7e:6d:0a:
         25:ef:6a:6f
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICXr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjI4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE2MGNmMy1hMjYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuSeiSCcCe84iROV8Nd6OT8OujE9bb/aYwgwx4QfYQgW2Pl2e3ifpFSsvn4FV
j49h89VocDUVBgXKpy+fPIMhkbEEjkoGk8IpOQza4BjbhtQmt/S74AscK+QfWHF8
fnBDUiJrzgWGlKI6ay381ZMtP3w9qUwS7nMhLmNTU9Je2GcA62nFwH47ZR2r2oU5
CRBD/YzW6bO1TkvZ1dmvGBsW2y8xvjhG0g9pg1vDbu6QzVJtRJJXvHpFggCWTSlv
kkwfyjPLnhYjU0fG7l6PnAY3uNUEQo7//HF7KWowuPRON8jQZI13fQ+yElhR3qDF
2h0YEdcSulP0f98kB8cIkqQ2bQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFDbFqz44
vu8shrpO9wsiUXiGCk1DMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRUQ5MUY5REEw
M0RFMTFGMEJGMjg0OTUwQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9NXAMA0GCSqGSIb3DQEBCwUAA4IBAQA80lNEOZW2WW91t5oN
7BOSDwZ7B6jOghaRkoy/3og7Bfcgu9j7lmJ+eD2tjumLykbK0EpxYhkUnNOHO6y+
zA8AJecEnu0UK+Uu5gD8phQ9LkwFChTvfW1s/ALzxtFk81scxqP2zIWyJNkJqnzQ
azseGr2HCmVW7rpCWiux6xaBdOYs/hIY0yIwIlbTqhSDvVBGsgbENpHNBDe635gV
oNZuP1I67QzrjArDS7Oengyr8SVWwi24vs4yG8xcY/l/9z5eIp4epxaTSEz/wPtQ
HPNCxMlEq8rMCXFAsqF2GNnJZa418WvFfauc2Dcvw1eg5+Tr/coyGImu5F9+bQol
72pv
-----END CERTIFICATE-----
Generated at Sat Mar 7 22:43:03 2026 by rpki-client