Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/981FF46892AB11F1A333A10B5511F970.roa
File:                     981FF46892AB11F1A333A10B5511F970.roa (raw, json)
Hash identifier:          Do/lS6kWKqq9Tkqvs74KbgaQXctOq8lqX9YjBdlQv60=
Subject key identifier:   05:6C:41:ED:E0:60:B1:18:E3:51:57:41:14:C9:AB:78:3D:DF:EE:EE
Certificate issuer:       /CN=A91AC5BC/serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
Certificate serial:       47
Authority key identifier: F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/981FF46892AB11F1A333A10B5511F970.roa
Signing time:             Fri 07 Aug 2026 22:01:51 +0000
ROA not before:           Fri 07 Aug 2026 22:01:51 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     38283
IP address blocks:        206.109.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl
                          rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC5BC, serialNumber=F0CCF492065E93306D3BF3BEA3411AE4B687CF64
        Validity
            Not Before: Aug  7 22:01:51 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a7655cf-1006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a5:95:7d:1f:74:d4:cc:ce:41:3e:cd:be:0a:
                    74:2c:14:84:71:cf:e6:16:84:87:df:fb:10:a2:ab:
                    35:79:81:45:7d:a8:55:f5:b7:d0:9c:65:ba:e7:c9:
                    b8:c8:e2:8a:a5:e8:03:95:af:d5:56:79:14:26:84:
                    75:2c:91:51:35:fc:bf:41:18:cd:e1:51:65:aa:06:
                    3a:ad:31:5b:a5:e8:17:16:78:64:83:ed:eb:aa:3b:
                    6d:86:bc:45:10:8c:48:be:29:af:63:5a:15:e1:1e:
                    3c:29:08:1a:f1:be:77:f1:50:4d:be:f6:8d:6e:00:
                    fd:83:34:12:ed:fb:fc:71:1a:ee:d7:40:82:e9:cc:
                    8c:ff:cf:42:37:16:83:e1:bb:03:bb:ca:73:4c:eb:
                    d0:79:52:63:2b:59:4a:41:57:c8:9f:b0:a6:76:c9:
                    fa:36:ee:cc:e5:55:8d:78:e8:6a:42:88:dd:a1:39:
                    5a:82:f1:e2:27:b7:66:17:a6:b0:c7:0a:e0:cd:7f:
                    c7:6c:bc:21:0f:bc:a3:19:5c:2a:48:a5:5a:ae:33:
                    1f:73:59:88:32:5e:0d:80:0e:5a:c1:36:ce:38:ac:
                    aa:11:26:3b:43:ba:23:de:70:87:e5:39:67:2f:06:
                    dc:69:61:bf:ea:66:ca:39:eb:d0:fd:9e:b5:d4:3f:
                    ad:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6C:41:ED:E0:60:B1:18:E3:51:57:41:14:C9:AB:78:3D:DF:EE:EE
            X509v3 Authority Key Identifier:
                keyid:F0:CC:F4:92:06:5E:93:30:6D:3B:F3:BE:A3:41:1A:E4:B6:87:CF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8Mz0kgZekzBtO_O-o0Ea5LaHz2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC5BC/F3B8CF003EE311F1A53FD20BB2EE528E/981FF46892AB11F1A333A10B5511F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:59:d4:19:e9:50:aa:c4:68:6b:04:12:ab:a6:92:73:55:23:
         04:7f:c8:15:7c:dd:b5:4b:e2:f6:bb:05:39:36:68:60:45:f3:
         cc:17:37:52:03:0a:3d:d9:cf:59:a1:14:ee:42:97:3c:a0:0f:
         ff:8f:65:da:98:9b:e2:d0:c6:8f:c2:26:e0:8c:67:a1:3a:50:
         00:62:40:55:12:82:96:42:83:ca:7e:3a:c5:66:f4:a5:57:77:
         28:6b:4c:a4:36:47:97:f2:cf:6f:f7:7f:f3:50:12:cb:02:79:
         4b:43:53:67:6f:bd:9e:cc:af:2d:bc:61:6d:01:1f:a1:ce:6e:
         d8:8d:64:7c:d0:c6:40:45:9a:17:16:f1:6e:32:f6:ff:52:fc:
         04:3d:0d:92:a3:d1:7a:d6:37:62:4b:f2:97:b5:85:d7:8f:1c:
         fc:74:c6:e3:af:a5:20:35:4b:21:a8:a4:13:46:10:1c:0a:cc:
         28:0b:e9:77:21:1b:54:62:b1:69:a7:dc:a3:24:94:41:dd:58:
         3d:c3:ea:c5:c4:15:a3:df:60:92:78:f0:c5:73:97:71:34:1c:
         11:5d:19:4a:b7:af:cd:2d:8e:ec:7e:45:cd:7f:ec:11:ca:ba:
         4a:82:f0:d4:a6:46:f4:ac:66:f3:6d:2f:aa:3b:a9:06:97:0e:
         37:3f:00:85
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Aug 19 18:42:27 2026 by rpki-client