Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/4A1DDCFE745A11F19A94FBE371A30FBC.roa
File:                     4A1DDCFE745A11F19A94FBE371A30FBC.roa (raw, json)
Hash identifier:          wxDp7QQv0o/XYRhug2yQvsBtwLXyenDR4hEs1yuyn9s=
Subject key identifier:   AF:A8:61:6B:BF:8B:86:6C:F3:00:79:09:C0:BB:15:52:CA:D5:2D:B5
Certificate issuer:       /CN=A91A944A/serialNumber=D6915581CF53AC689938F72DA8BF35BDACEB381D
Certificate serial:       02
Authority key identifier: D6:91:55:81:CF:53:AC:68:99:38:F7:2D:A8:BF:35:BD:AC:EB:38:1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pFVgc9TrGiZOPctqL81vazrOB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/4A1DDCFE745A11F19A94FBE371A30FBC.roa
Signing time:             Tue 30 Jun 2026 08:04:16 +0000
ROA not before:           Tue 30 Jun 2026 08:04:16 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     150183
IP address blocks:        2001:df1:6001::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/1pFVgc9TrGiZOPctqL81vazrOB0.crl
                          rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/1pFVgc9TrGiZOPctqL81vazrOB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pFVgc9TrGiZOPctqL81vazrOB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Aug 2026 11:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A944A, serialNumber=D6915581CF53AC689938F72DA8BF35BDACEB381D
        Validity
            Not Before: Jun 30 08:04:16 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a437880-5477
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:7a:20:84:67:f1:39:72:6c:53:48:ee:66:ad:
                    58:f5:4e:f0:d8:c7:a9:bd:b8:b0:aa:4b:ca:3d:f2:
                    e3:3e:64:04:36:95:80:e8:f0:4a:f6:ee:da:0a:bb:
                    4d:8b:f2:83:65:63:ae:56:91:cb:85:91:38:3d:ec:
                    7f:97:9a:01:1d:36:92:a6:da:60:66:96:fa:c7:ec:
                    d7:bc:0f:e4:a1:ab:f0:c9:94:01:7a:ea:1c:ce:92:
                    be:f0:a3:dd:40:ac:54:a9:8e:10:e8:09:8b:97:9c:
                    39:a1:93:af:96:71:8a:99:f4:40:d9:63:92:5c:dd:
                    f5:f6:9c:39:72:3d:54:80:ac:7a:57:72:3b:f3:69:
                    80:8d:ee:ea:ca:c5:30:a8:93:43:4c:43:81:b3:de:
                    1e:49:50:b3:34:1a:bb:32:f2:2b:62:aa:f3:79:e1:
                    24:02:3e:92:d6:d3:0f:b2:3e:e1:d3:a5:97:ef:0d:
                    ea:23:b4:a1:74:f6:c4:7f:50:dc:1d:aa:3d:12:c9:
                    11:7a:97:ff:fb:61:2c:3f:40:a7:8a:6c:42:18:39:
                    77:21:fe:c0:20:9c:17:82:ac:fa:d5:88:2b:c1:a1:
                    ad:a6:00:e7:48:ca:7f:45:ed:2f:06:cd:2f:a8:22:
                    33:d2:c5:6d:67:e5:8c:35:13:c4:9d:42:18:39:d9:
                    1b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:A8:61:6B:BF:8B:86:6C:F3:00:79:09:C0:BB:15:52:CA:D5:2D:B5
            X509v3 Authority Key Identifier:
                keyid:D6:91:55:81:CF:53:AC:68:99:38:F7:2D:A8:BF:35:BD:AC:EB:38:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/1pFVgc9TrGiZOPctqL81vazrOB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1pFVgc9TrGiZOPctqL81vazrOB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A944A/C1B02FB6745911F1AD6BC85471A30FBC/4A1DDCFE745A11F19A94FBE371A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:6001::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:3d:6d:af:98:74:c1:60:fa:5b:a1:42:66:b1:94:9f:dd:00:
         36:97:e8:3a:81:20:7d:6c:b4:dd:41:9a:9e:a2:6d:3f:c8:6f:
         63:36:13:31:c8:11:0e:66:4c:b2:02:21:4b:54:4e:cf:8c:08:
         d2:f4:c2:26:11:25:9e:80:5e:ac:f2:f4:db:b6:f7:b7:d4:c2:
         20:1e:4f:d0:d1:7d:be:eb:02:25:91:da:2b:94:f2:db:69:39:
         83:68:b6:d3:12:7c:b9:3d:e8:b2:63:17:db:42:3f:89:6f:39:
         c2:3e:e1:f4:f2:d4:12:21:45:7f:ba:85:86:93:b7:a4:0e:ef:
         46:38:9a:c5:f7:8f:bb:d3:33:37:e4:9c:dd:81:92:81:ed:c1:
         bd:c5:3f:91:a2:7d:40:51:14:17:93:11:65:b6:3d:2a:41:d8:
         51:5a:f5:59:41:f3:05:4c:e5:02:47:be:39:eb:06:7e:49:ef:
         dd:e9:b8:5f:cb:98:a5:a5:5b:5a:65:4f:59:58:f2:7e:66:a7:
         07:1c:21:25:e0:8d:08:44:87:93:ed:26:15:be:3f:a1:ca:78:
         89:39:f4:ce:fb:ac:26:63:75:98:aa:92:c6:45:2d:64:38:f8:
         48:4d:ed:bb:9e:10:90:48:85:2e:90:d6:90:74:15:62:36:07:
         82:31:7c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:06:25 2026 by rpki-client