Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/8BB9BA0A739411F195A6A0F072A30FBC.roa
File:                     8BB9BA0A739411F195A6A0F072A30FBC.roa (raw, json)
Hash identifier:          FzVInQGTXeLkU7QD7YhuspnWb0dDGRHG9zYuBhHsID4=
Subject key identifier:   D3:1E:1C:F1:22:14:A9:35:56:73:06:82:C7:6F:C1:2A:E7:59:E7:9A
Certificate issuer:       /CN=A91BDEEB/serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
Certificate serial:       014E
Authority key identifier: 6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/8BB9BA0A739411F195A6A0F072A30FBC.roa
Signing time:             Mon 29 Jun 2026 08:28:46 +0000
ROA not before:           Mon 29 Jun 2026 08:28:46 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153581
IP address blocks:        2001:df5:11c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl
                          rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 07:35:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 334 (0x14e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BDEEB, serialNumber=6B63A60E7D7F51D038728C6425906047016C9904
        Validity
            Not Before: Jun 29 08:28:46 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a422cbe-3f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:de:68:06:2b:5a:48:f5:02:b7:38:47:8e:
                    f6:2d:0c:cc:b3:b6:97:3e:ac:24:8f:28:ec:02:ff:
                    d4:7b:36:2c:ba:89:e4:3d:98:6e:6e:c2:39:b0:48:
                    2b:cb:3d:25:b3:ae:95:e2:9e:69:9e:cf:a5:8a:da:
                    4a:81:08:f6:bb:b5:4a:8a:53:b7:46:e6:40:a4:d8:
                    d6:a9:ad:00:4a:2a:20:21:e5:be:4f:fe:13:c8:d3:
                    90:5d:fc:64:0a:3e:28:b7:1c:35:87:8e:a7:33:5b:
                    c5:2f:90:5c:b6:2c:70:dd:7c:21:b2:07:64:4b:67:
                    13:54:27:4e:15:0c:72:96:39:cd:38:b4:44:16:b4:
                    f1:44:f6:17:c0:bb:93:eb:09:fb:ad:ae:ce:77:02:
                    e3:2b:2e:90:b0:6c:b1:e0:ec:c0:e3:85:05:e6:6a:
                    11:c4:cf:5b:c1:80:3c:c4:29:2d:67:d4:1e:70:10:
                    9a:34:b6:b0:09:27:1a:ee:1f:86:8e:a7:a4:c6:8b:
                    f3:e2:04:84:5b:bd:ec:67:66:d6:9d:6d:6c:78:a3:
                    d8:d2:b1:c9:86:15:0b:ed:48:b7:fe:83:8f:00:a5:
                    06:f1:10:bb:40:6d:e8:7b:7e:a2:37:f7:e3:ae:41:
                    32:1a:42:0e:e8:fb:a9:c5:1d:9e:31:4a:e7:44:69:
                    d8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:1E:1C:F1:22:14:A9:35:56:73:06:82:C7:6F:C1:2A:E7:59:E7:9A
            X509v3 Authority Key Identifier:
                keyid:6B:63:A6:0E:7D:7F:51:D0:38:72:8C:64:25:90:60:47:01:6C:99:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/a2OmDn1_UdA4coxkJZBgRwFsmQQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a2OmDn1_UdA4coxkJZBgRwFsmQQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDEEB/1EE7FA60E5F411EFABD39D7EC4F9AE02/8BB9BA0A739411F195A6A0F072A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:11c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:0f:a9:c6:65:92:de:dc:4a:79:83:9a:ad:6f:18:fb:28:6f:
         17:d8:ff:81:da:5e:a4:2f:57:70:c9:30:4e:9a:6c:92:59:bb:
         eb:b0:2f:f4:8e:f9:58:96:72:2f:d1:f7:bd:1b:bb:9b:00:33:
         f5:7e:6c:2b:d2:95:ae:a1:e3:84:2e:17:9a:27:fc:96:1c:51:
         6a:68:6d:6e:ba:28:f7:46:6d:ac:eb:43:86:94:03:2c:02:d9:
         6f:86:9a:05:3a:3e:ca:9d:af:da:a8:4f:5a:97:8c:67:34:0b:
         37:75:65:bd:f2:da:83:2c:aa:e4:18:a0:8b:8d:22:6c:bb:80:
         70:6e:88:b3:f7:f5:49:90:04:91:10:90:80:31:9a:72:75:a4:
         05:2f:ca:35:cc:18:40:a5:b7:d0:07:90:3f:1e:b5:55:2b:30:
         d4:84:7a:c1:fc:0b:22:56:9a:03:47:1d:8a:b9:36:2b:e0:85:
         6b:4c:61:7d:bd:9f:02:0e:02:34:61:b8:a5:b3:bb:3b:39:9a:
         1a:52:b9:4b:22:20:00:99:04:24:fa:f0:e4:f9:7a:dd:37:80:
         ce:c0:b0:38:18:cf:4d:63:ce:76:2f:7b:10:1e:2a:e0:07:cd:
         96:ca:93:9f:1e:fe:97:45:16:7e:8c:93:95:15:58:68:e5:3b:
         ef:44:19:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:19 2026 by rpki-client