Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/5069A4E034B311F0B93A6228C4F9AE02.roa
File:                     5069A4E034B311F0B93A6228C4F9AE02.roa (raw, json)
Hash identifier:          KKmlGMQL/Yj1Q6C2BYjNzgq/BcJTxhL/wy2LcPDVah8=
Subject key identifier:   29:30:68:45:D6:46:6D:5D:B6:62:83:59:B7:15:73:CC:91:D4:06:E8
Certificate issuer:       /CN=A91B391F/serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B
Certificate serial:       018C
Authority key identifier: 66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/5069A4E034B311F0B93A6228C4F9AE02.roa
Signing time:             Wed 05 Aug 2026 05:55:30 +0000
ROA not before:           Wed 05 Aug 2026 05:55:30 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153174
IP address blocks:        2001:df4:1440::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl
                          rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 18 Aug 2026 04:04:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B391F, serialNumber=66F6B844A9F809AE307B1B9CEE4BFD47C3C7771B
        Validity
            Not Before: Aug  5 05:55:30 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a72d052-6771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:d6:8a:8c:02:2d:2a:aa:7d:d7:ff:12:5f:
                    64:ab:a9:77:a5:23:f8:bb:41:b8:cf:62:52:69:fc:
                    81:08:b5:c4:2f:69:c7:74:49:17:b7:06:70:95:45:
                    fa:0a:e1:4e:45:8f:41:44:0c:96:69:ed:c1:bf:9f:
                    48:86:5a:e8:cf:30:42:b1:bc:40:ca:46:26:40:5a:
                    61:93:ee:88:ab:d2:f8:55:a1:97:e1:35:1c:e6:d0:
                    50:f7:38:3b:d3:cc:e8:db:9a:93:17:d6:57:02:b9:
                    78:07:37:61:7b:ff:d4:88:2b:48:f1:1d:48:fc:82:
                    c8:4e:a9:69:74:f2:f5:d6:6e:3b:ec:f4:2d:55:ac:
                    32:7f:b1:04:e4:07:90:56:5e:c6:23:37:34:8f:86:
                    fa:50:bc:aa:97:18:45:c0:dc:cb:55:f2:45:f0:e4:
                    c7:62:e5:c6:68:21:10:d6:a6:cb:28:4c:47:a0:03:
                    22:87:02:44:38:43:66:aa:e0:15:a0:83:07:34:1d:
                    2f:7c:4d:00:c3:23:be:98:7e:99:ef:08:ac:e0:76:
                    c4:3b:ba:e8:80:07:8d:b9:23:2a:67:88:aa:41:53:
                    9b:af:b5:5d:e3:34:88:9d:b5:64:dd:dc:f7:9f:0e:
                    2d:de:37:38:51:55:ba:74:e7:f1:20:37:01:b3:6d:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:30:68:45:D6:46:6D:5D:B6:62:83:59:B7:15:73:CC:91:D4:06:E8
            X509v3 Authority Key Identifier:
                keyid:66:F6:B8:44:A9:F8:09:AE:30:7B:1B:9C:EE:4B:FD:47:C3:C7:77:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/Zva4RKn4Ca4wexuc7kv9R8PHdxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Zva4RKn4Ca4wexuc7kv9R8PHdxs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B391F/58DB87F2457011EF9C8B8E71C4F9AE02/5069A4E034B311F0B93A6228C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:1440::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:2f:3e:c8:ca:54:82:d8:ef:6b:9f:c9:8d:6b:f5:71:34:cb:
         de:2a:83:9a:d2:05:c7:a3:2a:67:b2:f1:23:c8:6f:d5:57:8e:
         b0:50:ca:1c:f4:bd:18:71:ea:a7:2f:bb:02:13:6f:b5:f5:0b:
         4f:87:b8:5f:ff:df:b7:0e:16:69:7e:e0:e1:80:e8:a5:df:c1:
         86:e6:28:6b:d3:63:66:a0:06:8e:0a:9c:3e:09:d5:9d:16:a0:
         26:43:0f:29:ea:db:72:ae:77:92:4a:b9:92:27:1e:b2:3e:43:
         5e:7d:29:2e:2c:a2:56:89:2f:93:11:9a:31:ed:e9:7a:e8:28:
         6b:d4:8a:18:35:90:0d:6c:da:f4:58:5b:79:e7:9a:c1:aa:d5:
         58:1a:57:ef:3a:49:be:0b:7b:a4:2f:03:7a:3c:93:04:6e:3f:
         ee:5b:8b:da:d8:00:11:bf:43:6f:39:7e:90:38:b6:85:32:7c:
         f6:e3:c6:2b:21:3a:e9:df:f4:c9:95:46:b9:92:59:e1:97:19:
         f3:31:68:4e:28:86:74:da:05:35:c0:bc:64:32:e3:f5:60:bf:
         30:d7:ee:65:fd:4e:c7:01:35:1b:b1:e1:f7:d7:5a:ba:43:96:
         6f:8f:91:b1:bf:a1:15:11:b8:90:98:58:d9:50:fa:26:6c:3d:
         24:99:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 03:06:22 2026 by rpki-client