Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/C0C401905AE311EF90924C30C4F9AE02.roa
File:                     C0C401905AE311EF90924C30C4F9AE02.roa (raw, json)
Hash identifier:          pajsaklPf9gnqE7rNhlxP2QYoQHOLMvlb7QAvI9KQAk=
Subject key identifier:   F5:06:7F:AF:E1:FD:26:71:72:8C:77:65:75:79:64:D7:C1:3B:8C:D1
Certificate issuer:       /CN=A91ED596/serialNumber=7226080E7C65252343962866B3139F023872C402
Certificate serial:       0189
Authority key identifier: 72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/C0C401905AE311EF90924C30C4F9AE02.roa
Signing time:             Thu 27 Aug 2026 04:56:22 +0000
ROA not before:           Thu 27 Aug 2026 04:56:22 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     151663
IP address blocks:        2001:df4:2b40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl
                          rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 04 Oct 2026 04:50:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED596, serialNumber=7226080E7C65252343962866B3139F023872C402
        Validity
            Not Before: Aug 27 04:56:22 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8fc376-ae56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:0c:00:68:5f:c9:f1:fe:0b:0e:ff:26:2f:
                    9b:9f:e3:be:4d:0f:d1:cc:aa:ae:da:54:4c:a4:9d:
                    3e:7a:a5:21:fb:6c:ba:9a:aa:ea:24:b2:08:a8:47:
                    69:d7:63:93:2b:24:96:7a:ef:30:64:8b:ec:7f:ac:
                    9e:82:d1:55:8f:15:7e:5b:6a:94:8b:9d:e5:55:2a:
                    40:ae:97:54:cd:7a:3a:0e:0d:bb:83:25:2b:a9:4c:
                    f3:af:80:b0:4c:2e:81:9d:5c:91:c3:24:f9:6b:24:
                    2a:60:39:cf:60:ed:bd:bf:24:9d:73:1d:9f:56:2f:
                    d7:23:0a:6d:33:c5:a4:18:ba:b1:2a:42:c5:01:ec:
                    47:6d:cd:1c:d8:90:60:03:fa:6d:e0:0f:43:df:a7:
                    86:5e:83:9d:5d:53:3b:5c:d7:49:d7:2c:1f:99:44:
                    03:c4:e8:2d:9e:1a:e0:97:8b:5b:f6:8c:39:fa:ff:
                    d3:a7:7a:8f:92:be:5b:5b:b7:5d:34:6e:0f:76:20:
                    a6:2b:cd:fa:04:39:6a:4a:64:3d:92:03:5f:22:58:
                    28:d9:b3:ce:54:5d:a4:ad:9d:5d:47:1d:41:74:61:
                    81:9f:41:f8:d8:6e:16:cc:c1:0a:83:39:e6:bc:2d:
                    90:23:e1:6b:d5:dd:a5:97:2d:1d:70:a8:2f:5b:8a:
                    18:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:06:7F:AF:E1:FD:26:71:72:8C:77:65:75:79:64:D7:C1:3B:8C:D1
            X509v3 Authority Key Identifier:
                keyid:72:26:08:0E:7C:65:25:23:43:96:28:66:B3:13:9F:02:38:72:C4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/ciYIDnxlJSNDlihmsxOfAjhyxAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ciYIDnxlJSNDlihmsxOfAjhyxAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED596/0DE23E165AE311EF932C232FC4F9AE02/C0C401905AE311EF90924C30C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:2b40::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:1e:69:29:5e:3d:cd:3f:ad:f4:45:21:b9:cd:c9:fc:db:5a:
         5b:30:46:2b:8c:ae:9d:85:72:14:6f:af:fd:35:71:fc:1e:9b:
         dd:f6:60:69:15:8e:61:17:0d:ae:32:95:94:05:3e:09:ca:71:
         b0:15:83:cb:7e:1d:1c:28:1c:94:5e:97:52:ed:d1:0a:3b:67:
         57:9d:cd:de:c4:1b:f2:f1:a6:a5:3a:c7:d8:5b:b2:43:3e:67:
         de:45:c2:33:19:02:05:4b:41:1b:69:ef:47:40:e6:d3:e5:17:
         79:8f:3e:11:72:99:1e:5b:b3:37:f3:b0:92:ec:cc:9d:cd:bf:
         78:ed:19:3f:36:07:99:eb:55:a1:3f:90:e6:0e:18:ce:76:fe:
         c3:37:42:14:02:76:b8:3b:c3:b7:04:a3:60:6d:f7:61:84:7e:
         5a:ff:ea:a6:8c:5c:8d:4e:c7:a4:64:37:a4:3a:44:2e:3e:b9:
         82:aa:ce:8c:9d:e4:da:8d:50:38:45:ae:b4:14:30:45:f9:3b:
         14:22:45:9a:25:a7:1b:81:de:9f:04:fe:b8:47:0f:91:f5:50:
         a7:17:fd:16:d3:75:95:5b:fc:d0:d6:8e:f8:1c:02:e0:ff:8b:
         f1:b2:d9:fb:ce:4e:e3:aa:f1:d2:06:30:5e:e5:0b:fe:0b:3e:
         a7:9b:7d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:42:13 2026 by rpki-client