Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/6CF3FF44901111EF922BFC29C4F9AE02.roa
File:                     6CF3FF44901111EF922BFC29C4F9AE02.roa (raw, json)
Hash identifier:          yG7D+192iHoB0CziG5M9FGKMr90aHDVhZCF/y4kzOug=
Subject key identifier:   BA:6E:62:78:17:37:95:A8:84:B6:B2:1E:86:ED:7C:C5:D2:03:C5:CA
Certificate issuer:       /CN=A91B1A3B/serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
Certificate serial:       0165
Authority key identifier: DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/6CF3FF44901111EF922BFC29C4F9AE02.roa
Signing time:             Thu 27 Aug 2026 04:57:24 +0000
ROA not before:           Thu 27 Aug 2026 04:57:24 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     150146
IP address blocks:        2001:df1:d40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl
                          rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 10 Oct 2026 05:31:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1A3B, serialNumber=DFC528CF0006E3414AFB7FE86D1FDEAF648B5C9D
        Validity
            Not Before: Aug 27 04:57:24 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8fc3b4-454e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:54:34:93:1e:a3:06:6d:3a:8c:d8:78:56:5d:
                    42:35:4d:a1:40:a2:f6:8a:91:60:92:42:99:f8:b1:
                    b1:3e:9e:cc:f5:7a:f0:3c:9e:2a:6c:40:fd:c4:f0:
                    50:b4:8d:87:14:92:59:59:33:5d:72:a9:fe:44:f5:
                    11:06:03:68:4f:8b:9f:3b:81:58:b2:86:f1:72:ca:
                    59:09:a3:f5:17:ae:1d:74:c0:5f:f7:4c:d5:48:9b:
                    76:cf:93:b6:38:c6:c3:12:db:eb:ac:2b:eb:ea:14:
                    bb:6a:31:c4:b5:c5:48:46:7c:c5:69:c3:ee:44:fb:
                    21:c9:c3:f1:74:80:34:50:92:21:28:a1:f6:25:e7:
                    7f:8e:77:34:cb:82:0d:20:d9:d5:af:2e:57:9d:70:
                    b5:9e:4d:79:b4:45:1c:a3:5f:64:40:46:46:0c:93:
                    be:ae:c6:72:51:fe:72:8d:c3:0a:c0:b7:e4:19:81:
                    88:55:e6:f3:3e:31:fe:17:78:76:58:9c:c8:0d:65:
                    11:4c:0a:e2:ef:b3:2e:f8:af:85:f0:9a:c6:08:65:
                    ac:82:4a:08:8d:ed:eb:34:68:50:72:f5:bf:06:e0:
                    d2:57:68:74:5c:92:cd:d2:c3:b6:f8:19:86:38:b1:
                    e5:cc:0f:9a:7e:fd:a3:44:d7:67:d2:8a:de:b2:53:
                    f8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:6E:62:78:17:37:95:A8:84:B6:B2:1E:86:ED:7C:C5:D2:03:C5:CA
            X509v3 Authority Key Identifier:
                keyid:DF:C5:28:CF:00:06:E3:41:4A:FB:7F:E8:6D:1F:DE:AF:64:8B:5C:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/38UozwAG40FK-3_obR_er2SLXJ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/38UozwAG40FK-3_obR_er2SLXJ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1A3B/227019DA901111EF9B85C96AC4F9AE02/6CF3FF44901111EF922BFC29C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:d40::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:cb:86:a8:be:e0:c0:2a:cd:dd:7b:a2:e2:8e:d9:d3:3f:ba:
         a5:63:8e:26:9d:55:29:aa:59:37:89:98:a8:db:4c:57:8b:31:
         5b:63:5d:8f:d9:ac:21:85:7a:de:74:24:92:83:3e:c0:c9:3f:
         23:60:b8:91:fa:76:01:38:45:bc:67:64:db:0e:85:3e:a6:2c:
         f2:6c:1a:9f:dd:1b:e9:9a:82:ed:21:3e:57:2e:37:85:ee:e4:
         81:6a:6a:31:7a:90:94:0d:ae:35:f5:cf:3d:dc:d9:43:04:40:
         00:1e:22:84:da:fd:c4:84:0b:4e:92:a7:a3:0d:d8:a9:f7:e2:
         2b:1b:c6:a3:5c:ad:00:2f:55:a8:22:50:59:a1:71:b1:22:8a:
         48:58:ca:cb:4c:88:ef:85:da:af:4d:ec:c6:a9:70:fa:8d:0c:
         7d:27:a0:7f:a6:ed:89:ab:89:20:98:9f:1f:25:8e:c7:18:e9:
         42:0a:14:cb:4b:bd:04:92:29:f2:ce:12:1e:e8:21:fe:90:50:
         de:60:5c:d1:8f:84:14:59:e3:46:f5:7b:e9:4a:11:41:09:5b:
         0d:eb:6a:f0:7d:fc:51:d3:7c:ac:2d:b7:2d:a3:52:68:52:da:
         42:dc:fa:e9:43:6a:cc:f1:46:a0:8f:c8:4d:fd:0e:c9:2f:f5:
         b8:53:88:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 13:36:17 2026 by rpki-client