Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/781C64FAF58611ED89273159C4F9AE02.roa
File:                     781C64FAF58611ED89273159C4F9AE02.roa (raw, json)
Hash identifier:          +GXUy2iqy+S2cH6U3ubY1eizES4geu9nbh4cFQMFoIM=
Subject key identifier:   54:5E:13:C5:38:45:00:13:EB:81:4B:B5:34:19:86:2E:42:58:B7:59
Certificate issuer:       /CN=A91B7770/serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
Certificate serial:       0A52
Authority key identifier: 7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/781C64FAF58611ED89273159C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 20:40:56 +0000
ROA not before:           Fri 31 Jul 2026 20:40:56 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     140868
IP address blocks:        2001:df4:1781::/48 maxlen: 48
                          2406:7ec0::/33 maxlen: 41
                          2406:7ec0:1004::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl
                          rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Sep 2026 19:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2642 (0xa52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B7770, serialNumber=7D55469926D1F934F3AF29645EB6C10BB6069BC9
        Validity
            Not Before: Jul 31 20:40:56 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6d0858-cd7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:39:1a:94:a1:e5:5f:07:33:80:6a:8c:8d:d7:
                    9f:6f:63:85:f2:fb:1f:c7:1b:85:e0:40:da:7d:7a:
                    b8:e0:9c:06:14:46:cb:41:4b:6c:3a:b0:de:0c:3c:
                    b6:35:da:e9:c9:9d:c4:2a:a7:73:c9:2a:27:a2:15:
                    ff:aa:53:5f:6d:1c:15:11:71:99:5a:7f:8f:b1:a1:
                    9d:ff:69:a8:3e:d9:38:7f:da:3c:24:de:1d:5b:4d:
                    91:ec:fb:b0:23:ce:f6:e3:f4:a8:6a:99:a7:b9:8a:
                    a7:d4:84:82:de:d7:0f:0f:24:58:27:29:44:bf:a7:
                    ed:e9:8f:a9:a1:0a:60:08:1b:62:4d:0b:e2:fd:3d:
                    31:9f:f3:e4:fb:4a:4d:02:56:e9:2c:89:3c:0f:c8:
                    37:06:9c:58:15:77:69:10:45:d1:06:24:69:c8:ac:
                    f4:63:f7:c0:49:b5:8b:2d:63:49:32:72:cf:66:72:
                    52:a8:61:3c:b8:01:fc:7c:dc:b3:5d:d0:1b:6c:df:
                    22:3a:cc:bf:54:f2:da:2a:45:08:23:12:11:b7:06:
                    19:84:59:2d:ca:97:ee:94:99:e1:b4:04:ec:54:10:
                    33:64:c0:e5:f2:57:c6:5c:0f:37:f8:6d:a5:bc:8a:
                    40:83:0a:44:c5:20:81:cd:48:25:b6:92:07:51:05:
                    e7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5E:13:C5:38:45:00:13:EB:81:4B:B5:34:19:86:2E:42:58:B7:59
            X509v3 Authority Key Identifier:
                keyid:7D:55:46:99:26:D1:F9:34:F3:AF:29:64:5E:B6:C1:0B:B6:06:9B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/fVVGmSbR-TTzrylkXrbBC7YGm8k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fVVGmSbR-TTzrylkXrbBC7YGm8k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7770/E6810410C0AE11EAB95AB572C4F9AE02/781C64FAF58611ED89273159C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:1781::/48
                  2406:7ec0::/33

    Signature Algorithm: sha256WithRSAEncryption
         1f:85:37:e5:76:d3:22:4c:e4:cb:28:67:de:a1:c9:78:d3:a2:
         ee:6d:5f:a5:bd:61:b9:02:e9:43:3f:49:ee:74:5e:7e:6d:19:
         d0:b6:83:eb:04:69:9b:a6:bf:5b:fe:33:44:64:bc:df:76:c1:
         0d:70:a8:e6:22:ec:23:55:e9:2a:f6:28:7f:d9:05:8f:8c:a6:
         67:39:5a:b2:4f:76:e8:64:20:26:b3:1c:1b:8e:51:fe:51:fe:
         a9:d7:4b:01:e3:f4:2e:a8:90:c5:b3:a9:e7:64:e9:15:e4:e7:
         54:ce:36:27:31:9c:4a:a7:32:5d:85:d7:92:c2:f4:81:fd:79:
         eb:de:bb:3b:b8:fd:48:db:c0:0c:00:f7:6d:03:45:78:c2:ae:
         c3:ca:0c:ff:87:65:ad:59:ea:92:c6:6d:43:2c:b8:85:71:42:
         e2:90:dd:77:b7:55:86:36:88:46:13:3e:b5:73:ad:08:c3:c5:
         38:85:39:e9:9a:b7:1c:80:a9:5a:0b:2d:bd:1e:53:3b:03:4c:
         86:5f:98:eb:7b:72:27:76:ca:a3:05:6f:8c:3e:05:20:1b:78:
         b3:66:ee:4e:98:76:79:07:f7:9d:ec:78:2a:ad:70:ae:d9:2c:
         05:51:68:80:0b:f9:2b:83:90:10:da:9e:fe:76:06:80:05:00:
         f8:c9:99:c4
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgICClIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Qjc3NzAxMTAvBgNVBAUTKDdENTU0Njk5MjZEMUY5MzRGM0FGMjk2NDVFQjZDMTBC
QjYwNjlCQzkwHhcNMjYwNzMxMjA0MDU2WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTZkMDg1OC1jZDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAszkalKHlXwczgGqMjdefb2OF8vsfxxuF4EDafXq44JwGFEbLQUtsOrDeDDy2
NdrpyZ3EKqdzySonohX/qlNfbRwVEXGZWn+PsaGd/2moPtk4f9o8JN4dW02R7Puw
I8724/SoapmnuYqn1ISC3tcPDyRYJylEv6ft6Y+poQpgCBtiTQvi/T0xn/Pk+0pN
AlbpLIk8D8g3BpxYFXdpEEXRBiRpyKz0Y/fASbWLLWNJMnLPZnJSqGE8uAH8fNyz
XdAbbN8iOsy/VPLaKkUIIxIRtwYZhFktypfulJnhtATsVBAzZMDl8lfGXA83+G2l
vIpAgwpExSCBzUgltpIHUQXnFwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFFReE8U4
RQAT64FLtTQZhi5CWLdZMB8GA1UdIwQYMBaAFH1VRpkm0fk0868pZF62wQu2BpvJ
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzc3MC9FNjgxMDQxMEMw
QUUxMUVBQjk1QUI1NzJDNEY5QUUwMi9mVlZHbVNiUi1UVHpyeWxrWHJiQkM3WUdt
OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZWVkdtU2JSLVRUenJ5bGtYcmJCQzdZR204ay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
Qjc3NzAvRTY4MTA0MTBDMEFFMTFFQUI5NUFCNTcyQzRGOUFFMDIvNzgxQzY0RkFG
NTg2MTFFRDg5MjczMTU5QzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX
BAIAAjARAwcAIAEN9BeBAwYHJAZ+wAAwDQYJKoZIhvcNAQELBQADggEBAB+FN+V2
0yJM5MsoZ96hyXjTou5tX6W9YbkC6UM/Se50Xn5tGdC2g+sEaZumv1v+M0RkvN92
wQ1wqOYi7CNV6Sr2KH/ZBY+Mpmc5WrJPduhkICazHBuOUf5R/qnXSwHj9C6okMWz
qedk6RXk51TONicxnEqnMl2F15LC9IH9eeveuzu4/UjbwAwA920DRXjCrsPKDP+H
Za1Z6pLGbUMsuIVxQuKQ3Xe3VYY2iEYTPrVzrQjDxTiFOematxyAqVoLLb0eUzsD
TIZfmOt7cid2yqMFb4w+BSAbeLNm7k6YdnkH953seCqtcK7ZLAVRaIAL+SuDkBDa
nv52BoAFAPjJmcQ=
-----END CERTIFICATE-----
Generated at Thu Aug 27 04:04:04 2026 by rpki-client