Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/8610B9DCF33F11EEB412F210C4F9AE02.roa
File:                     8610B9DCF33F11EEB412F210C4F9AE02.roa (raw, json)
Hash identifier:          +qCBgSwgU8M+3DqJXTVNThr1zCfTVO4cctLLYlIo8ns=
Subject key identifier:   94:79:CD:4D:15:A3:1F:7F:BB:3B:6F:1D:10:47:9E:A0:CA:E2:45:DB
Certificate issuer:       /CN=A91C1A4E/serialNumber=A921635C7493F21CD26093D5903510802F4E3586
Certificate serial:       0C1B
Authority key identifier: A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/8610B9DCF33F11EEB412F210C4F9AE02.roa
Signing time:             Tue 31 Mar 2026 19:24:03 +0000
ROA not before:           Tue 31 Mar 2026 19:24:03 +0000
ROA not after:            Sat 01 Aug 2026 00:00:00 +0000
asID:                     138585
IP address blocks:        2404:53c0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl
                          rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 18:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3099 (0xc1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1A4E, serialNumber=A921635C7493F21CD26093D5903510802F4E3586
        Validity
            Not Before: Mar 31 19:24:03 2026 GMT
            Not After : Aug  1 00:00:00 2026 GMT
        Subject: CN=69cc1f53-dd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:13:f3:a4:95:cb:88:ce:59:ec:49:88:aa:15:
                    09:94:e1:80:de:25:07:6b:37:cf:6c:6f:64:00:ef:
                    60:e6:ba:8e:37:90:9d:b4:14:8d:da:b9:fe:11:5d:
                    9a:ab:24:d2:a5:12:98:52:c9:c8:f6:4d:07:2a:59:
                    e5:d5:ae:eb:12:3c:30:f7:b2:2e:8e:e9:a8:30:c5:
                    ac:fd:1a:43:11:64:4e:43:80:ad:2d:91:3a:2a:6d:
                    13:ee:a2:b2:43:6b:d7:86:fc:e7:45:cc:bb:fd:33:
                    72:f2:73:7b:9d:68:df:7f:61:5b:c6:88:d8:b0:04:
                    07:86:93:0d:ea:96:20:3d:26:62:69:9b:e3:e0:34:
                    8c:0c:37:e7:0d:72:c1:38:98:57:44:31:86:ec:4b:
                    14:72:df:8a:5f:51:4e:85:be:0a:9c:02:41:2f:70:
                    a7:ad:01:c7:e7:26:4a:1d:94:fe:5d:be:5a:10:c7:
                    5b:97:c9:fb:83:6f:fe:e6:4d:25:97:88:4f:81:ea:
                    80:28:36:cd:33:a7:bb:7b:ad:1c:ab:71:bc:97:24:
                    ab:2a:77:cf:e6:4f:db:d8:17:52:ce:74:43:d6:9a:
                    e9:05:44:47:e8:e8:d2:82:45:6f:dc:fb:e5:68:6d:
                    5f:87:4b:47:13:03:16:08:3d:83:5a:b8:3c:60:d2:
                    c2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:79:CD:4D:15:A3:1F:7F:BB:3B:6F:1D:10:47:9E:A0:CA:E2:45:DB
            X509v3 Authority Key Identifier:
                keyid:A9:21:63:5C:74:93:F2:1C:D2:60:93:D5:90:35:10:80:2F:4E:35:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/qSFjXHST8hzSYJPVkDUQgC9ONYY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qSFjXHST8hzSYJPVkDUQgC9ONYY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A4E/A49B4D7437C611EA9D96AE51C4F9AE02/8610B9DCF33F11EEB412F210C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:53c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         d2:52:50:a8:09:e7:c3:35:ac:96:9d:be:fe:1d:b0:5f:03:d1:
         bb:be:67:a1:33:5c:55:6b:98:df:ac:c2:6d:f0:d7:0a:3e:94:
         c6:67:20:f8:3a:5d:f9:b3:4b:81:1b:73:9f:66:27:f6:fd:05:
         df:be:4f:82:a1:f0:ef:3f:ca:d3:ec:35:16:2f:2a:0d:fe:20:
         e5:91:a4:01:40:5c:12:32:71:9a:db:31:6a:60:91:bb:4c:8a:
         4d:20:06:6f:7e:e4:da:d2:fb:64:13:73:a9:64:e5:be:1e:d8:
         e0:f0:67:5d:4c:c8:fd:d5:37:49:a7:50:2f:d8:bb:47:67:39:
         2c:f5:7a:af:b1:5f:eb:f8:52:44:0c:14:66:8b:43:a4:8c:af:
         0e:fb:41:37:c8:ab:21:f7:d4:6f:93:74:98:ef:c2:9f:0f:b9:
         e5:30:19:bf:a5:62:e9:d5:7a:bf:76:6f:c2:b9:64:42:e2:f6:
         38:5c:97:83:c8:a2:30:78:f5:e4:4a:4b:f2:28:9d:8d:c6:09:
         13:35:43:c0:9d:4c:6a:48:4e:c3:3a:98:23:0b:54:6b:5a:fb:
         3e:f9:2b:06:72:7e:46:f2:c2:5b:20:89:e1:c3:7a:e2:18:d1:
         16:a2:f6:34:b9:21:98:da:11:73:36:7d:be:62:e1:74:df:a2:
         d8:75:33:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:55:28 2026 by rpki-client