Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/4F9AF642C51611F0BA6C053AC4F9AE02.roa
File:                     4F9AF642C51611F0BA6C053AC4F9AE02.roa (raw, json)
Hash identifier:          SBltuM012OqLYqnXdql69mBi1G/BqnKOStfJ8Z81tqY=
Subject key identifier:   8A:C5:A5:C5:C9:05:29:13:5B:EA:73:C2:A0:96:23:E1:3A:39:47:CB
Certificate issuer:       /CN=A91A5CC3/serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596
Certificate serial:       0256
Authority key identifier: DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/4F9AF642C51611F0BA6C053AC4F9AE02.roa
Signing time:             Mon 03 Aug 2026 03:51:51 +0000
ROA not before:           Mon 03 Aug 2026 03:51:51 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     151421
IP address blocks:        2001:df2:9cc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 18 Sep 2026 02:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 598 (0x256)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5CC3, serialNumber=DE55A369AED918698C2D63C32EF61BDBC5980596
        Validity
            Not Before: Aug  3 03:51:51 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a701057-1e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:d3:ea:ad:d8:92:25:79:a6:1f:50:76:e1:
                    c8:bb:15:56:86:58:9d:5c:1b:22:6f:08:03:12:33:
                    f2:57:cb:d9:81:5f:74:54:d9:8f:11:61:b5:6b:b8:
                    13:b5:56:82:f2:8b:52:bc:7b:19:85:22:0e:77:3c:
                    0e:65:21:39:91:71:f3:34:56:15:a6:92:4d:47:9b:
                    5a:9b:5a:b5:e8:2c:19:eb:c6:48:23:f8:39:c6:b2:
                    44:91:35:51:40:5f:4b:d2:a3:e6:c1:e1:57:42:b6:
                    90:14:fb:c0:03:1f:42:aa:d1:34:be:3b:d4:ad:c2:
                    21:e3:cf:ac:3e:cd:7c:d8:64:dd:67:67:c7:7e:12:
                    fa:e0:01:63:1d:d8:50:37:bd:35:9b:2c:b8:a6:93:
                    7e:b7:9f:4f:7b:38:0b:6b:54:ac:e4:20:79:e0:24:
                    2e:85:6e:1c:61:80:00:df:54:f7:d7:4b:22:91:fd:
                    ec:76:41:66:09:3e:5c:13:6a:07:66:d9:f3:bd:bd:
                    85:41:b8:19:48:a1:2d:60:fd:63:ab:39:b4:c8:1f:
                    2a:9d:5c:20:00:91:f6:28:19:99:12:2d:14:80:75:
                    e5:27:2f:21:65:6c:71:9b:bd:8d:70:55:8e:60:7d:
                    85:d2:57:67:4a:7e:27:ef:12:98:23:91:de:63:cc:
                    82:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C5:A5:C5:C9:05:29:13:5B:EA:73:C2:A0:96:23:E1:3A:39:47:CB
            X509v3 Authority Key Identifier:
                keyid:DE:55:A3:69:AE:D9:18:69:8C:2D:63:C3:2E:F6:1B:DB:C5:98:05:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/3lWjaa7ZGGmMLWPDLvYb28WYBZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3lWjaa7ZGGmMLWPDLvYb28WYBZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5CC3/6416D83814C011EE96EA5421C4F9AE02/4F9AF642C51611F0BA6C053AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:9cc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:b7:8a:18:40:32:e2:5a:d4:32:73:a3:4f:6d:ed:aa:e4:2f:
         92:f4:c0:23:72:4b:55:55:c2:aa:1a:f5:7b:4f:fd:39:f7:cd:
         88:e9:14:e8:65:22:96:6a:1b:1e:da:10:9f:45:89:0e:f8:f1:
         90:fd:65:50:4a:80:cb:54:73:9e:63:a5:9d:07:d8:c6:64:65:
         e1:06:12:d0:cf:57:81:2a:ef:1c:7d:7f:86:07:bc:d3:c6:3e:
         2c:37:f6:98:bf:ec:c0:67:c5:47:ae:b4:84:f0:af:f8:38:c8:
         00:b8:65:cf:a2:46:24:a0:c0:40:f3:8b:d0:ae:5d:6f:38:5f:
         e5:ad:c3:28:71:8c:cd:e7:04:17:aa:7b:a1:73:ce:66:3e:a9:
         b3:c4:ad:3f:6a:87:bf:f2:b5:c5:d4:5a:8e:a5:6d:49:86:50:
         99:48:74:1f:63:ee:69:9a:10:ac:7b:83:41:f3:3a:8e:b3:60:
         24:79:79:ad:6e:d9:ba:ac:6e:51:d1:8d:a2:8e:fb:7c:84:44:
         04:08:fc:cf:d3:c7:1d:1d:bc:92:80:45:4c:28:39:6b:98:56:
         4f:cc:c5:bb:41:e0:da:07:70:73:9a:cc:96:3d:9c:15:d1:0d:
         9c:82:21:19:25:fe:c7:d7:2c:67:58:aa:e4:67:04:3d:b6:57:
         79:0d:22:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 07:06:40 2026 by rpki-client