Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FB67D4D0963111F1827E67B36511F970.roa
File:                     FB67D4D0963111F1827E67B36511F970.roa (raw, json)
Hash identifier:          QgrI9hWrPg/mHejQhbV8Z86mdJtYMiX50pDPAELZ4Sg=
Subject key identifier:   74:13:3A:C2:E8:89:79:13:19:4B:C2:82:9E:24:73:3D:6C:A1:C3:20
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6EEC
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FB67D4D0963111F1827E67B36511F970.roa
Signing time:             Fri 02 Oct 2026 15:34:37 +0000
ROA not before:           Fri 02 Oct 2026 15:34:37 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154806
IP address blocks:        2001:df7:5340::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 30 Oct 2026 10:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28396 (0x6eec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Oct  2 15:34:37 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6abfcf0d-3950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2d:93:67:69:b7:79:97:f4:27:dc:28:1e:fe:
                    5d:5b:2e:06:dd:a8:c3:90:d9:40:e9:fc:6d:71:77:
                    65:2d:6c:0a:c5:54:31:b0:f9:a2:b2:78:21:62:7e:
                    27:e1:f8:aa:70:55:59:c8:8b:9a:0a:e4:8a:74:b0:
                    60:78:22:8b:5b:4d:64:31:0c:1f:00:38:78:90:b5:
                    a5:ee:79:5a:a6:ba:b7:ff:97:88:99:9b:41:86:77:
                    76:9b:ce:50:7e:c8:ab:55:05:b4:6f:2b:2f:2c:f3:
                    3d:b9:3f:31:62:0d:96:be:be:3a:f0:a2:1c:2b:74:
                    33:eb:65:cb:e7:c1:e7:ff:9c:ac:fe:35:2d:f0:53:
                    8f:36:f9:95:ee:c5:a5:3f:47:a5:37:56:02:96:cd:
                    5d:6e:29:96:bd:99:db:3e:ab:33:a4:9d:5d:d0:df:
                    52:72:7b:f3:13:e9:5f:4d:e4:f5:fe:56:18:d4:c1:
                    e8:56:2d:a7:84:dc:05:70:d8:91:a3:6f:5a:00:78:
                    82:73:76:99:18:cb:eb:2d:d3:04:cc:06:da:a8:25:
                    77:56:b1:98:8b:5b:cb:1c:4f:04:9a:d0:68:29:74:
                    f5:06:18:1a:e2:24:12:e4:45:88:fe:c6:ab:8c:2e:
                    b2:6a:56:95:a7:23:03:72:16:40:81:f2:d5:94:ba:
                    0d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:13:3A:C2:E8:89:79:13:19:4B:C2:82:9E:24:73:3D:6C:A1:C3:20
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FB67D4D0963111F1827E67B36511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:5340::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:00:75:39:f4:e1:bf:05:e3:4c:75:a7:55:55:dc:cb:49:c5:
         19:e6:be:da:cb:c2:18:49:28:88:e9:cb:f3:de:2e:1a:bd:13:
         fe:d0:fa:e4:88:38:64:6c:c2:39:79:e3:c6:34:4e:c2:af:0b:
         d3:04:80:b9:5e:eb:49:56:99:d9:3d:b5:a8:cd:d9:4a:51:b3:
         15:89:71:93:94:12:4d:0b:4d:c1:21:29:02:a0:bb:4e:9c:ff:
         34:db:7e:81:d1:45:32:6f:41:04:00:b0:26:6f:63:d1:be:89:
         9f:2b:7c:26:a4:9d:cf:83:52:58:68:34:54:90:f9:53:86:88:
         54:d9:4e:77:ef:5e:c2:31:87:fa:29:ce:a9:dd:0c:6f:a2:5e:
         37:34:89:43:d1:a9:42:e4:93:24:8d:0b:7f:b6:dc:23:24:92:
         4b:b9:78:9e:74:9a:d5:77:ad:59:fb:65:0c:0e:85:16:ff:5f:
         3e:62:97:5d:3d:f9:9c:30:5b:64:0e:36:d0:48:e2:ff:16:dd:
         55:ce:4b:0d:72:8c:bb:de:e4:8e:9b:d5:7b:0f:a9:5c:f9:0d:
         38:96:26:0d:2f:26:00:97:c0:3b:ce:ea:2c:b9:93:1a:a3:3a:
         09:1f:1e:76:7f:a0:ae:c5:da:71:7d:18:fd:9a:ae:ff:55:67:
         e8:cd:7e:ad
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICbuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3
NTZBQzZGMEEwHhcNMjYxMDAyMTUzNDM3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YWJmY2YwZC0zOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA0C2TZ2m3eZf0J9woHv5dWy4G3ajDkNlA6fxtcXdlLWwKxVQxsPmisnghYn4n
4fiqcFVZyIuaCuSKdLBgeCKLW01kMQwfADh4kLWl7nlaprq3/5eImZtBhnd2m85Q
fsirVQW0bysvLPM9uT8xYg2Wvr468KIcK3Qz62XL58Hn/5ys/jUt8FOPNvmV7sWl
P0elN1YCls1dbimWvZnbPqszpJ1d0N9ScnvzE+lfTeT1/lYY1MHoVi2nhNwFcNiR
o29aAHiCc3aZGMvrLdMEzAbaqCV3VrGYi1vLHE8EmtBoKXT1Bhga4iQS5EWI/sar
jC6yalaVpyMDchZAgfLVlLoNZwIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHQTOsLo
iXkTGUvCgp4kcz1socMgMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE
OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi
d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRkI2N0Q0RDA5
NjMxMTFGMTgyN0U2N0IzNjUxMUY5NzAucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN91NAMA0GCSqGSIb3DQEBCwUAA4IBAQBbAHU59OG/BeNMdadV
VdzLScUZ5r7ay8IYSSiI6cvz3i4avRP+0PrkiDhkbMI5eePGNE7CrwvTBIC5XutJ
VpnZPbWozdlKUbMViXGTlBJNC03BISkCoLtOnP80236B0UUyb0EEALAmb2PRvomf
K3wmpJ3Pg1JYaDRUkPlThohU2U53717CMYf6Kc6p3Qxvol43NIlD0alC5JMkjQt/
ttwjJJJLuXiedJrVd61Z+2UMDoUW/18+YpddPfmcMFtkDjbQSOL/Ft1VzksNcoy7
3uSOm9V7D6lc+Q04liYNLyYAl8A7zuosuZMaozoJHx52f6CuxdpxfRj9mq7/VWfo
zX6t
-----END CERTIFICATE-----
Generated at Sat Oct 24 15:43:15 2026 by rpki-client