Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/B88C85348C0411F196792E7B4011F970.roa
File:                     B88C85348C0411F196792E7B4011F970.roa (raw, json)
Hash identifier:          og2FsMI+6JRvqJvW9dRUgtuwJbUJvfXWEyBkZvtW874=
Subject key identifier:   4F:54:98:DF:31:14:B0:80:8F:1D:5D:CE:3A:CC:73:7C:8D:FC:5B:72
Certificate issuer:       /CN=A91EC167/serialNumber=369189ADA1995B020FAB86D77598C60C29747755
Certificate serial:       16
Authority key identifier: 36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/B88C85348C0411F196792E7B4011F970.roa
Signing time:             Thu 30 Jul 2026 10:52:13 +0000
ROA not before:           Thu 30 Jul 2026 10:52:13 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     154723
IP address blocks:        2001:df7:4a40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl
                          rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:38:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC167, serialNumber=369189ADA1995B020FAB86D77598C60C29747755
        Validity
            Not Before: Jul 30 10:52:13 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6b2cdd-5fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:16:64:71:0a:0f:b0:8f:6a:6e:ea:54:60:7e:
                    c2:51:7a:72:ee:52:63:e0:ca:cc:71:2e:3f:c7:be:
                    05:54:5b:22:e5:99:68:03:ac:42:61:a7:6b:cd:c0:
                    66:e3:63:c9:f6:68:72:20:84:ed:bc:8a:5c:2a:78:
                    0b:f5:6a:d0:e8:59:04:a7:cc:33:1b:66:db:8f:3a:
                    2a:83:00:bb:1a:a6:54:77:9f:f5:c0:3c:17:26:ae:
                    d9:c7:0d:f7:3b:aa:ae:79:f8:05:94:a4:62:16:f8:
                    30:f7:8b:64:aa:f4:07:3a:e5:a2:b3:dc:53:24:15:
                    f8:2a:95:01:ba:5b:ab:84:72:ed:a5:41:55:cc:b8:
                    ce:81:de:db:da:08:22:54:c5:96:4d:7e:99:b2:55:
                    c6:e6:ca:34:44:0e:4e:04:41:91:c2:b0:e1:f7:a2:
                    ba:6f:81:8c:32:bf:20:5e:78:cd:67:8b:10:80:8c:
                    d4:83:1e:ca:c0:8f:82:27:56:ab:db:90:b1:65:f7:
                    5b:81:66:e0:3a:67:5f:65:d9:f3:83:ac:0b:dc:ce:
                    ca:92:74:22:f3:37:df:9d:b7:bf:dd:c7:ee:6e:12:
                    50:a4:a9:7a:c6:a9:d4:be:5a:4e:52:01:cd:7c:8c:
                    6e:ff:4f:be:80:93:0e:5c:84:b3:98:f5:eb:7b:39:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:54:98:DF:31:14:B0:80:8F:1D:5D:CE:3A:CC:73:7C:8D:FC:5B:72
            X509v3 Authority Key Identifier:
                keyid:36:91:89:AD:A1:99:5B:02:0F:AB:86:D7:75:98:C6:0C:29:74:77:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/NpGJraGZWwIPq4bXdZjGDCl0d1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpGJraGZWwIPq4bXdZjGDCl0d1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC167/B2DF822A6F0E11F1968E7C4883A30FBC/B88C85348C0411F196792E7B4011F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:4a40::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:1e:f3:23:73:71:d4:da:32:65:35:df:2f:9d:64:81:ae:a7:
         40:4e:ea:78:50:5b:7f:78:00:57:9e:b0:2f:1e:c6:4d:90:c2:
         e4:00:00:8f:9b:5f:bb:ec:b6:52:ba:66:c8:82:c1:f0:a3:7b:
         6b:dd:40:e1:e9:a9:2e:51:c4:89:ac:c9:6b:e9:3a:f8:56:2e:
         a3:b4:ec:08:c3:e9:48:50:21:87:2b:27:d3:68:4e:5d:0a:3d:
         39:af:73:04:ff:4f:ce:49:91:dd:68:e8:f6:0a:5e:a1:f4:65:
         ea:15:d7:ac:04:b7:55:71:35:55:ec:ec:44:c7:95:fc:ee:8e:
         b2:88:5d:9c:88:f6:ba:09:d8:a4:b8:e6:e4:ac:2f:ee:de:5c:
         49:53:4d:28:c0:ae:a5:d5:66:d1:b0:28:02:ad:4a:c7:6d:e7:
         9d:93:0a:e4:4d:23:b7:e4:19:86:d3:d4:41:e5:b5:35:5a:c1:
         8a:b2:5f:2f:57:ef:df:cc:62:94:1c:54:39:1a:f8:dc:c7:b3:
         e0:f4:cc:3e:d3:af:b9:2f:d8:1d:9d:30:2b:44:45:4b:26:56:
         57:40:be:6c:01:d0:19:ad:e9:19:47:3a:87:26:e1:5f:5f:aa:
         fb:aa:19:7a:a1:48:b8:5c:4d:fb:c1:bd:9b:24:a5:37:5b:4d:
         81:c8:11:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 14:25:19 2026 by rpki-client