Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/48C2333271D011F18649332165A30FBC.roa
File:                     48C2333271D011F18649332165A30FBC.roa (raw, json)
Hash identifier:          LDP5Esly8VYRBXjaigIiSwQbm+Rq9+J2C6Fns5Nz1AU=
Subject key identifier:   37:47:EE:B1:DE:A8:60:E1:97:FF:4E:5F:20:4B:F9:DF:C1:C6:05:98
Certificate issuer:       /CN=A91F40E0/serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
Certificate serial:       D6
Authority key identifier: 89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/48C2333271D011F18649332165A30FBC.roa
Signing time:             Fri 07 Aug 2026 06:57:31 +0000
ROA not before:           Fri 07 Aug 2026 06:57:31 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     152698
IP address blocks:        2001:df5:f9c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl
                          rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 06:50:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F40E0, serialNumber=897077B71F2C5AEDDE6C1DD49547DCC9952CDABE
        Validity
            Not Before: Aug  7 06:57:31 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7581db-c9bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:d0:59:a7:59:84:22:02:05:da:6b:34:77:
                    d7:53:2e:92:fe:2c:59:75:be:d3:21:eb:0f:0b:ec:
                    52:dd:3e:81:53:a5:80:72:47:4e:1c:8d:d9:26:19:
                    88:ff:be:e1:19:30:3c:f8:8f:8f:de:e6:22:07:20:
                    73:07:dd:b3:08:a1:cd:a8:b0:8d:bd:a1:1f:ce:0f:
                    52:37:5a:b9:c4:96:c4:61:91:ea:b1:c5:15:f6:4a:
                    0f:41:21:d1:27:62:26:bf:ab:52:6b:2a:50:f2:f4:
                    d8:a5:7c:91:44:91:b9:11:3d:31:9e:34:46:63:20:
                    86:37:9f:60:bd:96:7d:b2:67:db:4b:89:69:e4:03:
                    2a:80:96:27:17:3e:1d:c3:e6:be:21:78:e3:3b:4a:
                    df:af:0f:a7:a1:09:15:30:03:44:69:f2:b8:2d:1e:
                    5d:ec:7f:76:00:26:ef:95:c2:18:cc:a5:e6:56:b7:
                    db:d4:72:13:c8:90:2f:06:41:66:ff:fc:98:8b:5f:
                    dd:e1:e8:c1:24:d2:59:ce:9e:1e:15:77:2c:28:a4:
                    c6:50:a8:7b:f6:2a:3d:9e:2a:34:05:97:c2:05:d3:
                    1d:44:ee:a2:c0:f7:30:ae:15:9f:2b:4e:f7:af:7f:
                    6d:2c:a2:6a:4e:7a:14:af:63:05:a6:05:95:d7:b0:
                    4b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:47:EE:B1:DE:A8:60:E1:97:FF:4E:5F:20:4B:F9:DF:C1:C6:05:98
            X509v3 Authority Key Identifier:
                keyid:89:70:77:B7:1F:2C:5A:ED:DE:6C:1D:D4:95:47:DC:C9:95:2C:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/iXB3tx8sWu3ebB3UlUfcyZUs2r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iXB3tx8sWu3ebB3UlUfcyZUs2r4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F40E0/3FBB5E047B5311F09B54845FC4F9AE02/48C2333271D011F18649332165A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f9c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         98:16:76:29:61:1d:d6:44:1f:81:0a:1b:d7:03:9f:5a:a6:03:
         92:25:ba:ad:e0:ae:fa:ff:56:37:f5:be:aa:60:40:18:9b:51:
         8b:5a:b2:7a:fa:55:ac:46:cb:7c:dc:d4:87:ed:50:07:32:88:
         c4:3c:11:c8:12:4c:ed:1b:cd:bc:da:08:40:9a:d1:42:bb:b8:
         2c:96:06:a7:75:f1:d3:01:e4:50:e2:c9:3e:93:c1:cb:25:34:
         e7:77:2d:16:1a:a9:b9:3a:57:45:40:7a:b5:20:71:16:23:82:
         11:4d:17:74:b5:55:ed:5b:fc:9d:b1:9f:3f:aa:11:40:f4:fd:
         24:85:c8:d0:1b:31:b8:39:ad:19:8c:7f:62:69:0d:88:a7:61:
         94:fd:c5:21:1c:a2:22:f8:2c:8c:cc:96:76:ce:4b:91:5b:70:
         51:9e:5b:0a:99:09:b7:55:65:2f:c2:f4:57:f1:07:31:0c:c1:
         da:b9:8a:b2:ad:f1:2f:3a:77:4f:e4:e5:e3:be:a2:8e:58:ab:
         2c:68:86:d0:ce:39:e8:82:89:3b:32:32:70:df:98:e5:78:e7:
         91:7c:30:0c:7c:0c:00:e9:d9:97:8c:4c:0a:64:d3:13:ad:7f:
         ad:04:81:98:f9:07:02:65:a2:8a:72:ca:cd:1d:23:a4:af:a2:
         c6:84:3c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 18:57:58 2026 by rpki-client