Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/BB5954CE241111F094390A32C4F9AE02.roa
File:                     BB5954CE241111F094390A32C4F9AE02.roa (raw, json)
Hash identifier:          ef4lv30v406PmcKm4a1LzWHrixGqc5q9ekgP0Wh8CuU=
Subject key identifier:   7F:76:BC:01:4E:F0:64:0F:A6:06:E6:5E:68:F0:F7:D6:EB:69:21:24
Certificate issuer:       /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681
Certificate serial:       0148
Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/BB5954CE241111F094390A32C4F9AE02.roa
Signing time:             Wed 05 Aug 2026 06:56:10 +0000
ROA not before:           Wed 05 Aug 2026 06:56:10 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     140704
IP address blocks:        2001:df4:18c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl
                          rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 11 Sep 2026 08:56:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 328 (0x148)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5D53, serialNumber=D62716F761F188D56FA117F9DC94BE414104A681
        Validity
            Not Before: Aug  5 06:56:10 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a72de8a-bdf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:8f:51:76:83:da:4c:20:2a:f8:60:71:4c:
                    ef:fa:6b:29:60:62:94:8a:b4:13:c6:18:f9:e6:07:
                    3a:ae:ce:2d:cd:64:7b:a0:20:4e:7a:1c:c5:e0:88:
                    59:61:c5:58:e0:e3:29:40:10:0d:63:36:22:f7:21:
                    8a:bf:32:fd:e1:ad:d5:87:74:3c:bf:1b:45:96:44:
                    7c:c6:14:e4:db:71:21:5f:8f:41:14:4e:d7:9e:76:
                    f3:f0:62:78:cc:4c:48:ea:95:e3:e2:fd:29:74:85:
                    c0:57:58:72:85:0b:0f:ff:ee:5f:7f:8f:62:e5:68:
                    17:3c:70:4f:42:dd:21:f0:43:99:0e:9d:eb:6a:bf:
                    04:a4:76:84:d2:f5:92:78:d8:c5:89:0d:78:ed:86:
                    01:40:5b:af:9e:8e:b7:f9:0a:c3:a2:e9:d6:f6:a5:
                    41:a5:13:db:8a:96:15:54:52:e3:25:38:a0:0c:b4:
                    73:03:a7:b1:f0:45:a4:ec:4f:e2:24:a2:e7:57:ad:
                    02:c3:cb:3c:10:b5:bc:70:30:18:75:1a:c2:cf:60:
                    f5:9f:71:d9:46:60:50:9c:76:97:fe:37:63:5f:57:
                    ce:b9:c5:65:0e:7a:0a:bc:c0:aa:e0:09:d5:84:19:
                    12:1c:c7:89:47:8a:d1:a5:5a:7f:25:0f:1c:f2:02:
                    00:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:76:BC:01:4E:F0:64:0F:A6:06:E6:5E:68:F0:F7:D6:EB:69:21:24
            X509v3 Authority Key Identifier:
                keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/BB5954CE241111F094390A32C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:18c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:94:94:d9:5e:8e:ba:fb:c1:4e:17:b9:35:4f:a1:32:59:19:
         c9:00:e5:08:fc:61:45:ec:8a:f4:08:a9:6b:b8:dc:56:7e:b9:
         af:94:69:53:04:89:e0:57:59:a7:d4:6d:b6:af:ae:40:f6:0c:
         54:99:24:1d:60:57:c7:08:dd:dc:ec:73:b5:0f:63:87:62:96:
         27:11:e7:99:dd:c2:80:9b:e7:54:19:73:5b:f9:81:b9:54:21:
         fb:cb:29:70:aa:93:17:7e:89:49:af:61:ec:e8:b0:a7:af:c3:
         56:1c:f8:28:b5:d0:89:a2:a2:bc:ab:b3:2b:fb:b0:f6:12:7d:
         5f:d3:5a:ce:b9:68:3a:ae:2a:e6:ce:22:74:26:ca:71:73:9a:
         e7:f7:58:19:20:d8:5b:b5:cf:51:86:4d:bb:9c:6d:0a:cd:06:
         4f:f4:4d:ab:f0:64:81:56:7d:98:38:61:aa:d6:b0:ca:dc:1e:
         eb:4a:7e:77:4f:8a:89:94:51:b0:bc:a8:54:8b:ce:8f:43:71:
         18:dd:38:65:a5:55:4b:d8:32:3a:4d:81:19:13:e0:38:2c:26:
         e3:50:0e:db:81:50:0c:b5:b1:39:9d:3d:1b:76:06:73:f1:df:
         32:c0:8d:63:83:54:3f:3e:a2:2d:48:c4:0d:1c:22:86:e0:67:
         24:dd:4c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:22:44 2026 by rpki-client