Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8060AE3638A511F1981CA43DCB833773.roa
File:                     8060AE3638A511F1981CA43DCB833773.roa (raw, json)
Hash identifier:          x+V+oNzujj00XzJ+qim8ygF6GbAeOz6HE9KUVI89VgU=
Subject key identifier:   00:A3:39:A6:35:02:6C:6D:5D:D2:D1:14:8B:24:11:50:24:4C:19:9F
Certificate issuer:       /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
Certificate serial:       6C4E
Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8060AE3638A511F1981CA43DCB833773.roa
Signing time:             Wed 15 Apr 2026 08:31:31 +0000
ROA not before:           Wed 15 Apr 2026 08:31:31 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     151876
IP address blocks:        2401:53a0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl
                          rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27726 (0x6c4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A
        Validity
            Not Before: Apr 15 08:31:31 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=69df4ce3-07c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f4:cd:78:4c:dd:35:68:78:90:a6:96:dc:5a:
                    5a:3e:19:65:bb:55:c1:e2:fd:c5:eb:50:02:d7:67:
                    ec:f3:24:79:98:ba:bc:71:71:2e:c2:12:c3:26:04:
                    c4:d3:96:cd:10:a9:98:cc:69:28:a6:00:db:d9:68:
                    84:b0:50:41:5a:71:ea:a4:ce:0c:94:42:6c:46:32:
                    3c:90:92:be:44:02:fc:23:5f:2b:47:cd:2b:8c:bb:
                    bd:80:21:14:66:67:00:f3:2d:49:2f:a1:f9:e8:24:
                    8c:da:0f:4a:44:79:58:86:b5:3b:d2:cc:77:ee:35:
                    a5:8f:98:3a:7c:3c:89:9b:fb:d6:53:09:d7:a2:17:
                    96:9a:23:c0:c4:ff:33:7c:89:9e:06:84:e2:3b:f2:
                    16:18:9b:48:97:bd:80:99:8b:29:31:14:f9:d6:1e:
                    d7:f6:09:91:bd:25:96:9a:15:6b:aa:ef:95:ef:77:
                    26:70:db:0f:f3:8c:6f:a1:7e:9f:16:4a:73:6d:3d:
                    e6:c4:90:10:d7:21:5d:32:75:4d:92:1f:9a:9a:04:
                    83:63:0a:1b:5c:05:e2:ea:54:2e:4f:7a:f8:41:1e:
                    f3:85:17:fb:05:c4:02:41:5f:9d:66:49:1a:93:58:
                    b0:ff:ce:99:9d:fc:0b:df:c4:c5:c3:3d:e7:0a:d9:
                    d4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A3:39:A6:35:02:6C:6D:5D:D2:D1:14:8B:24:11:50:24:4C:19:9F
            X509v3 Authority Key Identifier:
                keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/8060AE3638A511F1981CA43DCB833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:53a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:04:40:a5:4d:44:24:1d:d9:8f:5d:86:77:9a:3a:39:64:fd:
         60:82:23:77:e7:55:db:19:b0:ab:5c:64:8e:0f:7a:c5:8a:ac:
         5a:2a:e3:67:0e:f6:c3:49:5b:d1:05:67:1a:88:37:cd:2c:69:
         7a:94:bd:28:44:4c:18:5b:10:b9:54:c9:6c:8f:93:ec:1f:d7:
         d2:77:08:c0:6a:c3:d3:48:18:22:16:84:f5:f0:1b:46:ae:2f:
         e3:34:e5:73:1f:bf:73:dc:88:18:13:b4:70:be:ff:78:e3:0b:
         44:29:95:e0:1f:d5:9d:23:8b:04:43:4b:d0:1f:11:a6:0b:d0:
         e6:44:5d:ce:a4:bc:c1:9c:82:a9:a3:eb:2b:02:01:fa:1b:0c:
         0a:b5:27:ea:cd:84:e5:5f:db:20:6a:cf:d2:ad:63:bc:d1:7c:
         cc:4e:bf:e8:79:b4:c1:48:24:6c:88:95:1c:28:f0:1e:ac:f5:
         4d:ca:27:cf:c6:0d:65:e2:72:0d:03:64:1f:ae:2f:59:40:85:
         e4:02:0a:3f:1e:d4:fb:4f:e6:8b:e1:d0:7a:55:87:63:17:9d:
         18:99:c8:a0:2c:5c:80:ea:b8:18:64:28:e3:9a:51:25:13:43:
         0f:43:68:f8:61:e4:8a:28:b5:f7:35:75:e2:f8:86:5d:8e:db:
         8c:90:b7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:19 2026 by rpki-client