Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/FBE1E73689E311EF9021CE0CC4F9AE02.roa
File:                     FBE1E73689E311EF9021CE0CC4F9AE02.roa (raw, json)
Hash identifier:          igM78oSfeB942BNkl42YqKy+vOSBmm/qF44KEq3SfEc=
Subject key identifier:   47:5D:09:72:BF:96:36:FD:34:A0:AC:3A:0D:76:10:BA:7D:72:CE:63
Certificate issuer:       /CN=A91F147C/serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
Certificate serial:       03B3
Authority key identifier: ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/FBE1E73689E311EF9021CE0CC4F9AE02.roa
Signing time:             Wed 05 Aug 2026 01:49:58 +0000
ROA not before:           Wed 05 Aug 2026 01:49:58 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     135602
IP address blocks:        2001:df3:200::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl
                          rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 16 Sep 2026 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 947 (0x3b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F147C, serialNumber=EDA385D45723B1E1DF2973F62B5D23A2FBFD2686
        Validity
            Not Before: Aug  5 01:49:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a7296c5-ad1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:2e:ac:15:28:71:6b:71:57:95:4d:49:bd:
                    1f:09:ab:58:76:ce:53:70:91:25:71:5a:87:d4:b5:
                    2b:2b:b7:b4:16:a9:57:b5:82:2b:66:4e:23:ad:ae:
                    76:fa:27:08:a7:2c:a2:15:d2:61:8a:be:7d:43:64:
                    2d:e8:54:dc:41:e0:63:17:f0:17:48:df:db:08:da:
                    f7:54:21:27:9b:c2:4a:48:fd:67:4a:e3:fa:cb:0e:
                    c8:30:cd:3c:51:ba:4e:73:39:02:98:6c:d6:ff:a2:
                    14:17:c3:2e:03:0e:7f:c7:74:2b:8d:ed:66:79:2a:
                    8c:17:72:e6:ec:f9:a3:89:8c:b6:b4:6a:d8:e6:71:
                    06:fe:98:07:2b:d5:49:b1:3e:97:36:3f:d2:f9:21:
                    08:75:be:08:29:19:7b:ae:02:e9:90:ef:09:9f:5e:
                    34:ce:d4:9b:52:5f:dd:2c:1f:45:63:8e:a8:da:1c:
                    c8:31:70:93:7a:83:34:aa:2c:9a:53:ea:21:bf:82:
                    6e:12:03:42:f5:f1:d9:08:9b:d2:29:10:84:83:fc:
                    82:89:fd:3e:7c:a7:b8:17:3f:37:f1:7b:87:14:7e:
                    17:77:dd:12:95:61:a4:f3:83:89:18:63:3d:fd:5b:
                    c6:5c:4d:b0:91:41:14:52:22:ce:52:c8:6c:e1:25:
                    aa:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5D:09:72:BF:96:36:FD:34:A0:AC:3A:0D:76:10:BA:7D:72:CE:63
            X509v3 Authority Key Identifier:
                keyid:ED:A3:85:D4:57:23:B1:E1:DF:29:73:F6:2B:5D:23:A2:FB:FD:26:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/7aOF1FcjseHfKXP2K10jovv9JoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7aOF1FcjseHfKXP2K10jovv9JoY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F147C/7E0F587201E911EDAF8BDE30C4F9AE02/FBE1E73689E311EF9021CE0CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:20:da:d8:7f:6f:d3:26:f9:b1:e3:61:83:d0:c0:4c:07:9d:
         18:cb:7a:c1:88:68:12:32:68:63:99:af:ca:b1:23:8b:8d:1f:
         3b:16:4b:4b:d4:95:c7:37:c8:26:5a:57:87:4b:b4:ff:f7:a1:
         c9:2c:3a:f6:b0:31:f3:3a:31:e9:42:d4:d2:ea:84:28:e0:4d:
         cc:c2:be:46:b5:7d:f6:e3:f5:8b:d8:fc:64:c1:92:62:6b:51:
         bd:c9:5c:7e:2e:3a:03:34:ab:f2:58:37:ab:cb:7d:ed:9c:41:
         44:8b:e1:55:9b:b7:be:d8:d9:f0:95:54:87:27:b6:d6:ce:95:
         4a:da:1f:00:0d:dd:33:fa:b1:96:b4:66:a2:b7:18:c6:d4:bc:
         3e:5f:ba:17:36:96:a4:67:68:f1:9e:3e:55:3b:6a:aa:01:49:
         cc:c3:b9:a7:56:d5:96:19:1b:6e:22:d5:f2:56:79:e9:d3:98:
         17:7f:0f:d2:79:ff:07:3e:f9:2d:f6:88:e5:75:5e:29:ad:11:
         08:9e:61:0e:7a:62:9d:4f:71:37:28:d2:34:4d:7e:44:0a:03:
         85:cb:2b:83:d6:27:b2:47:6e:01:91:e2:c3:62:ad:e6:ea:f6:
         2b:84:9d:63:cd:ad:c4:8f:12:d0:5c:a2:4e:78:f1:f0:a9:c7:
         15:b3:21:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:07:59 2026 by rpki-client