Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/C19CD0D273CE11F18A0A8E6E86A30FBC.roa
File:                     C19CD0D273CE11F18A0A8E6E86A30FBC.roa (raw, json)
Hash identifier:          TyifwyRH2gwoNGS3cDGiNTSYF0ll70y1X64BGJ83VbE=
Subject key identifier:   B8:27:14:71:17:A1:86:97:7D:CA:33:D7:07:2F:6F:AA:02:C3:F4:59
Certificate issuer:       /CN=A91AD34B/serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
Certificate serial:       014A
Authority key identifier: 64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/C19CD0D273CE11F18A0A8E6E86A30FBC.roa
Signing time:             Mon 29 Jun 2026 15:25:27 +0000
ROA not before:           Mon 29 Jun 2026 15:25:27 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     149287
IP address blocks:        2001:df5:6c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl
                          rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 07:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD34B, serialNumber=64CB6EA7D7D0E51F4D42B2D6847274ABB0736598
        Validity
            Not Before: Jun 29 15:25:27 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a428e67-7a63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:41:ef:3e:70:1d:46:60:63:24:80:6c:c1:a3:
                    c7:6d:8e:26:7d:dd:03:06:1b:e9:18:b6:a4:d3:0b:
                    aa:e4:c2:54:74:16:94:54:66:01:ad:d3:36:75:de:
                    39:89:ec:7b:c3:8b:d6:63:5a:76:fc:2b:1b:e5:d3:
                    58:7b:67:ea:58:39:fb:22:f4:df:56:af:3d:70:95:
                    b0:1a:96:34:37:06:76:08:c1:ce:fe:47:2c:4b:32:
                    79:cb:e7:b7:05:de:ce:6f:92:10:78:4f:e4:a3:ae:
                    aa:ff:4d:48:1d:7c:6f:74:ec:a6:56:4b:8d:9a:3a:
                    a9:91:2e:8e:fa:b6:07:3b:64:aa:0e:c3:89:ed:72:
                    35:99:db:fa:b9:9a:63:fe:e2:38:27:69:16:66:ca:
                    19:56:dd:4d:be:f1:27:e3:4d:f4:5d:40:00:ad:5a:
                    5b:f3:17:15:da:4a:e8:87:93:d1:5f:da:e2:93:41:
                    d7:25:5a:02:ec:78:8c:d2:c8:ae:9c:66:22:e1:59:
                    2d:7f:e7:fc:33:df:d1:c1:2a:bd:81:68:ba:80:e9:
                    2f:c3:d2:f4:bb:da:41:3c:80:4e:b0:e4:75:d5:5d:
                    39:24:4a:1c:3f:90:4f:3a:45:dc:24:c2:7d:13:2f:
                    07:55:bf:1f:f4:57:c2:3d:1e:8a:36:7f:e9:9f:35:
                    9a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:27:14:71:17:A1:86:97:7D:CA:33:D7:07:2F:6F:AA:02:C3:F4:59
            X509v3 Authority Key Identifier:
                keyid:64:CB:6E:A7:D7:D0:E5:1F:4D:42:B2:D6:84:72:74:AB:B0:73:65:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMtup9fQ5R9NQrLWhHJ0q7BzZZg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD34B/B3DB51D2DF3511EFA58D653BC4F9AE02/C19CD0D273CE11F18A0A8E6E86A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:6c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         05:25:ca:79:32:fb:ce:10:36:a1:59:37:4c:66:56:77:92:46:
         16:fe:a8:18:06:56:0c:68:6d:f0:d6:c0:da:8b:e7:ae:5b:41:
         58:bd:bc:21:90:90:2a:84:c2:b4:ad:bd:49:e6:a8:cf:3a:d1:
         cd:1c:f7:b4:7b:fc:04:16:39:cf:bb:45:c1:70:d6:e5:19:05:
         74:fc:b6:6c:fe:c5:56:ec:7b:fe:b0:61:4c:eb:a7:1a:9c:1b:
         3f:fa:b0:f0:7b:ea:00:33:ed:82:ba:ca:5d:e8:0f:c2:c7:17:
         fa:58:5c:18:02:e2:1f:54:06:8f:13:fb:1f:2c:96:55:8b:86:
         19:a2:3a:75:58:d0:64:a1:d3:da:8b:56:88:c4:df:62:21:1a:
         3b:ce:0a:7e:37:8a:d0:df:e4:c6:8b:92:e1:21:b7:3b:d3:86:
         ad:56:2d:e4:42:89:7e:c4:39:d9:65:f6:e3:8d:29:c6:36:71:
         81:28:5b:ff:f6:90:09:3b:68:c7:16:60:0a:50:6d:08:b6:ad:
         21:b2:c8:75:86:b0:24:4a:b9:21:0e:c1:83:7b:f2:02:4d:46:
         0c:43:d7:2d:db:f9:b1:e5:77:5d:fb:40:a6:28:f3:a6:c6:36:
         15:6c:67:72:e2:59:49:14:41:67:1d:32:42:52:6e:4a:9f:40:
         fa:c9:ca:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 07:13:16 2026 by rpki-client