Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/6CFCC5EC8F4D11F1B986D3494611F970.roa
File:                     6CFCC5EC8F4D11F1B986D3494611F970.roa (raw, json)
Hash identifier:          DIzsgSR5GwxTp5MHAgczXy9dfk2cq7Ie4lXeoFdLBeg=
Subject key identifier:   54:4B:43:FB:42:86:F9:0D:1A:7C:6F:E7:78:0A:04:7D:66:BA:59:87
Certificate issuer:       /CN=A91F9353/serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
Certificate serial:       01F1
Authority key identifier: AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/6CFCC5EC8F4D11F1B986D3494611F970.roa
Signing time:             Mon 03 Aug 2026 15:10:13 +0000
ROA not before:           Mon 03 Aug 2026 15:10:13 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     152698
IP address blocks:        2001:df3:ad40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl
                          rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 03:56:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 497 (0x1f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F9353, serialNumber=ACD047D0D88E2657E12CF91301C160F1D3CD2F33
        Validity
            Not Before: Aug  3 15:10:13 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a70af55-fc05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:25:c5:87:5d:da:77:cc:1d:49:15:c2:56:75:
                    53:5b:c6:4c:f8:cf:c9:0f:00:87:57:82:1e:51:b1:
                    c8:6c:4c:7b:d9:d0:9a:1d:dd:2c:f2:df:cf:e1:21:
                    0c:e9:48:70:0a:3d:0f:c6:ef:a6:d8:16:4d:f8:73:
                    d6:8b:fa:fa:4c:e0:58:95:3d:06:d6:f7:9d:d7:86:
                    0e:35:59:6f:bf:27:f0:93:d1:bc:b0:1a:b3:94:4b:
                    9a:69:17:31:db:1a:a4:f6:ba:ae:62:1c:d6:f7:d8:
                    a9:37:db:a5:82:f1:bb:96:44:78:ae:81:be:e1:22:
                    d9:7d:c0:dd:fb:d7:d2:f4:2c:b4:05:05:ea:be:eb:
                    74:ef:c4:59:48:36:a4:07:c1:18:ed:30:21:28:1f:
                    f6:5d:0d:33:65:79:62:dc:22:e7:62:d8:e5:c3:06:
                    46:a4:0f:f7:b1:1d:80:b0:cc:e7:19:9f:d9:2c:d0:
                    a5:08:35:88:c5:57:10:4b:19:f7:b4:07:d4:01:cb:
                    f9:4e:44:9a:47:a2:2f:f5:2c:44:0f:0e:92:4b:9e:
                    74:f1:0d:4b:09:58:3c:3e:71:7a:40:54:70:c9:a4:
                    71:62:de:5d:15:5a:18:13:8f:8f:9e:dc:4c:a6:a7:
                    d3:83:25:1c:d9:aa:e2:53:04:cf:bd:d3:75:a5:8d:
                    3c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:4B:43:FB:42:86:F9:0D:1A:7C:6F:E7:78:0A:04:7D:66:BA:59:87
            X509v3 Authority Key Identifier:
                keyid:AC:D0:47:D0:D8:8E:26:57:E1:2C:F9:13:01:C1:60:F1:D3:CD:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/rNBH0NiOJlfhLPkTAcFg8dPNLzM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rNBH0NiOJlfhLPkTAcFg8dPNLzM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9353/0875E64805C611EF89620A26C4F9AE02/6CFCC5EC8F4D11F1B986D3494611F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:ad40::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:de:fb:50:f4:65:66:02:6c:ba:cc:d6:3c:0b:6c:d6:94:dd:
         85:7e:34:b9:0c:f2:0a:8e:dd:cd:32:6f:09:6c:41:cd:b0:3e:
         28:bd:b9:45:28:40:4f:c9:25:3c:92:c1:25:75:d5:7c:7b:44:
         f4:fa:c5:a9:49:3b:9f:30:a3:91:bd:72:92:ac:09:ad:cf:2d:
         e8:d1:b7:17:80:d7:bc:49:ea:c4:7a:5a:b2:dd:75:10:5f:f3:
         73:2c:72:02:d0:9a:c4:27:d9:01:4b:27:fc:60:f4:ad:40:83:
         82:3e:48:96:af:47:9a:91:7b:d8:1f:4d:34:83:6d:f5:52:6f:
         f3:2c:a3:9f:5d:3e:2b:9d:09:7b:24:43:df:df:ec:70:38:ec:
         77:a9:04:f0:f8:e2:8a:60:b8:80:13:8b:e6:cc:7e:72:cb:5f:
         31:65:70:48:0f:3a:95:f8:38:b2:92:87:5a:5d:1d:b6:f2:fe:
         60:37:fe:c9:17:db:e3:d1:07:5c:bd:cb:6d:7b:b0:1a:ef:f9:
         d3:1b:26:88:3b:bd:0b:3a:41:fc:e7:d7:28:f3:e0:a0:32:e8:
         3b:5a:6a:7e:77:a4:9f:e2:42:66:7f:83:f3:6d:04:a8:e1:19:
         6b:ae:9f:ec:87:99:df:2c:c4:3b:77:5e:7e:00:ee:3d:f7:2f:
         da:32:f8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:10:13 2026 by rpki-client