Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa
File:                     B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (raw, json)
Hash identifier:          +ylrl2Ff2ALO29C83H8N85jHc5S3xfeV4PSVjM+41fA=
Subject key identifier:   55:E7:21:9B:50:27:F6:AD:CB:3A:28:82:BB:58:89:C9:87:10:B9:FA
Certificate issuer:       /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Certificate serial:       F2
Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa
Signing time:             Fri 03 Apr 2026 06:40:40 +0000
ROA not before:           Fri 03 Apr 2026 06:40:40 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     153377
IP address blocks:        2001:df4:ec40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 242 (0xf2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
        Validity
            Not Before: Apr  3 06:40:40 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cf60e8-7720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:50:75:53:34:c7:e8:18:23:31:cc:87:15:b1:
                    05:87:2d:e0:ac:37:61:f5:65:4e:c1:79:02:52:3c:
                    2a:09:02:ac:16:a1:bd:c6:80:11:a5:3c:59:e3:0a:
                    12:7b:af:e1:75:4d:e2:e5:4a:5d:eb:52:39:b1:f0:
                    ba:39:b9:5e:6c:5d:1d:ed:c5:40:15:91:9b:24:ab:
                    d4:53:62:eb:20:a9:31:31:10:62:e8:3c:3c:f8:d9:
                    d5:aa:fc:7f:fd:04:ac:3c:1a:08:17:20:34:14:6a:
                    e5:0a:06:ed:9d:04:e5:c9:b2:0f:12:5a:5b:96:7b:
                    f6:d8:e1:9d:98:05:c8:57:c5:83:1d:ef:b9:82:a4:
                    03:bf:78:05:b2:6e:6a:5e:c1:6b:8c:fd:47:5d:39:
                    18:a1:36:a9:e4:e3:d9:d7:ac:20:9e:4c:ae:02:62:
                    4f:e0:06:af:d3:ff:0d:1a:84:d2:eb:20:7f:15:04:
                    cc:ec:1f:25:cd:74:e1:f1:82:85:5e:28:66:f0:56:
                    d4:b5:2d:b9:88:ae:a5:5f:4a:cc:33:55:1d:9b:c4:
                    46:a7:26:9d:30:67:e9:5b:96:96:f4:76:09:1a:f7:
                    e8:f6:5c:de:20:5f:88:30:cb:b7:fd:50:24:58:de:
                    37:b7:ad:08:5d:41:eb:bd:3d:19:b0:02:d1:52:7e:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E7:21:9B:50:27:F6:AD:CB:3A:28:82:BB:58:89:C9:87:10:B9:FA
            X509v3 Authority Key Identifier:
                keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:ec40::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:9c:82:d0:e0:e2:a0:95:1d:2f:90:06:d8:97:87:4b:b2:ac:
         b3:a0:8d:b6:7a:d2:0f:af:a7:ee:6a:dd:96:c3:ec:72:c6:df:
         b7:cb:2c:8b:29:30:61:bb:e1:9b:44:b1:58:7a:de:e1:79:23:
         11:cc:5a:71:73:45:0b:23:d2:ac:5d:0f:54:f2:b9:92:c0:df:
         39:cd:65:9e:de:20:e7:de:e5:30:60:9a:60:ae:5d:76:75:ed:
         44:90:26:16:e4:51:27:50:9b:69:1a:f7:fe:ba:d4:1c:de:5a:
         e4:d9:2e:c8:ff:af:e1:c9:b2:0c:33:20:7a:c3:f5:09:12:03:
         54:d6:54:ef:bd:da:b6:f9:40:f3:05:7f:6e:a0:b6:66:d4:75:
         4e:8a:22:f3:b6:dd:17:59:bf:f5:e4:e2:fe:5d:73:e1:c8:39:
         44:9d:ab:1d:65:8a:98:2b:89:5e:b2:c0:c7:53:f2:4e:d5:d6:
         8c:37:40:06:b3:15:73:9f:39:46:24:aa:cd:a8:85:28:72:e4:
         a4:1b:ac:a2:d0:b2:e9:d6:6c:6d:e8:9d:da:c2:41:fa:03:30:
         15:b2:20:78:41:26:40:ac:c9:9b:96:df:72:0f:36:ec:34:73:
         df:3e:ea:24:1b:6f:db:f2:fd:15:f5:0f:dd:10:07:b6:d8:4a:
         f3:21:4e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 13:55:10 2026 by rpki-client