Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/9035F5F07A4A11F1B8163F0086A30FBC.roa
File:                     9035F5F07A4A11F1B8163F0086A30FBC.roa (raw, json)
Hash identifier:          VI2u04S0VNmMAD0r4a1hC7wJPi7mvZdC/n4RJ1VCcT4=
Subject key identifier:   0B:7E:3B:6B:F3:FE:13:04:DB:DB:64:35:66:5B:C3:C5:8D:FE:1A:B1
Certificate issuer:       /CN=A91EB564/serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1
Certificate serial:       04
Authority key identifier: 6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/9035F5F07A4A11F1B8163F0086A30FBC.roa
Signing time:             Tue 07 Jul 2026 21:26:49 +0000
ROA not before:           Tue 07 Jul 2026 21:26:49 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     153509
IP address blocks:        2001:df6:b740::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl
                          rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 11:04:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EB564, serialNumber=6D9480CF3284D002B591F5E21DB112097FCE70B1
        Validity
            Not Before: Jul  7 21:26:49 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a4d6f19-a0e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dc:e2:73:80:79:f2:fa:a5:f9:8e:b0:dc:2b:
                    41:af:dc:d8:c5:38:5e:97:ee:c1:24:83:a2:15:12:
                    d4:dd:21:3a:33:46:4c:d5:52:c8:4f:e5:0d:90:27:
                    5f:29:df:1d:ef:8f:93:eb:ab:14:2b:2d:68:2d:91:
                    5b:be:db:0e:85:76:f9:be:f5:6c:49:1d:7e:61:0a:
                    75:24:37:6c:51:bc:cc:22:11:8d:6b:7a:e9:a7:ed:
                    5e:3d:0d:ac:e3:f7:28:b7:b2:d9:d3:16:d7:48:17:
                    d0:52:5b:8b:62:58:5c:86:1d:2e:2a:b8:4d:c3:a5:
                    41:79:14:87:ed:fc:86:5a:68:a4:17:cb:1e:f3:df:
                    2e:60:11:01:fb:26:8e:1a:48:06:a3:9e:15:f2:39:
                    58:30:26:78:3f:68:ed:b5:05:3f:6c:37:31:9d:6d:
                    ff:35:3d:03:42:f3:42:72:69:07:7b:57:ff:6c:ca:
                    d3:42:9c:1a:29:58:5f:88:5a:31:ca:61:fc:7e:a8:
                    91:18:81:34:ae:cd:2a:c4:44:59:06:49:10:7f:51:
                    2d:c2:37:35:47:c4:2b:cd:80:0b:1e:d2:24:8a:7c:
                    16:fb:92:6d:6e:51:ab:be:82:6a:72:22:9b:79:87:
                    dc:3d:66:ce:9c:27:c1:bb:7f:86:29:80:51:c3:57:
                    ae:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:7E:3B:6B:F3:FE:13:04:DB:DB:64:35:66:5B:C3:C5:8D:FE:1A:B1
            X509v3 Authority Key Identifier:
                keyid:6D:94:80:CF:32:84:D0:02:B5:91:F5:E2:1D:B1:12:09:7F:CE:70:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/bZSAzzKE0AK1kfXiHbESCX_OcLE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bZSAzzKE0AK1kfXiHbESCX_OcLE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB564/A875D00A7A4911F197FB326885A30FBC/9035F5F07A4A11F1B8163F0086A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:b740::/48

    Signature Algorithm: sha256WithRSAEncryption
         ba:75:ee:37:ff:1f:a2:42:f2:2d:3a:1c:e4:f2:18:b0:79:32:
         05:96:b0:8b:cf:a9:a9:68:8b:51:49:3c:ed:19:bb:ff:1f:2a:
         01:a5:3a:38:f6:59:47:4d:7a:7e:e3:84:5c:59:d3:82:86:30:
         be:0a:fe:7d:15:15:16:71:d7:d5:0e:0a:fb:7c:de:88:fa:12:
         f5:5f:71:6d:66:26:42:4c:e7:13:f2:82:11:9d:b2:31:70:f5:
         5c:4a:b8:76:32:e6:86:5f:16:51:ca:c0:dc:ca:2b:e8:0f:53:
         27:e9:0c:5b:48:c1:4a:f4:f8:3d:91:08:3b:ce:c0:ad:d1:cf:
         a3:3e:be:6b:c3:1b:0e:ab:13:eb:fc:12:45:23:b3:0f:b2:f0:
         39:4e:69:91:92:df:4c:f2:1c:ed:01:56:67:a2:ef:43:7a:99:
         5d:eb:9f:01:9a:01:16:ca:84:d3:fb:03:f0:da:90:dd:2b:95:
         e7:62:41:dc:d2:52:d0:2d:d6:82:96:3f:3e:90:5f:5e:b1:d9:
         89:26:17:ba:b0:2e:f8:4b:0b:a1:59:77:f6:db:ae:a4:c0:3d:
         87:ac:3b:d5:11:e2:84:1b:6b:bb:89:f7:e3:d5:a6:62:2d:bd:
         8e:18:c6:77:76:10:39:3a:7b:54:59:9c:2d:60:d5:0d:7a:06:
         d7:1a:dd:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:56:46 2026 by rpki-client