Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/D28B7DD450E411F081600061C4F9AE02.roa
File:                     D28B7DD450E411F081600061C4F9AE02.roa (raw, json)
Hash identifier:          oi0JC/Dg/qtN4Sq4ydksp3+2DNk0fSKtyYZSAHUSHgk=
Subject key identifier:   13:B0:B7:73:91:4F:66:9D:63:FE:E4:C1:EB:F2:D0:06:E3:53:72:DD
Certificate issuer:       /CN=A91B4053/serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
Certificate serial:       B8
Authority key identifier: D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/D28B7DD450E411F081600061C4F9AE02.roa
Signing time:             Fri 05 Jun 2026 07:40:29 +0000
ROA not before:           Fri 05 Jun 2026 07:40:29 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     153996
IP address blocks:        2001:df5:c8c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl
                          rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 09:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4053, serialNumber=D726E86F300B264A353C29673E07716F5454B5E2
        Validity
            Not Before: Jun  5 07:40:29 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a227d6d-6abd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b9:8d:5f:a4:ec:39:6a:54:9c:4d:ee:ae:54:
                    b4:21:11:8a:dc:18:c2:69:91:b8:29:a9:b8:32:87:
                    8b:09:59:8e:00:c2:a1:26:ab:cc:3c:e8:50:42:fe:
                    10:04:a0:9e:f1:a6:83:b1:be:2b:20:ee:23:fc:15:
                    1a:1a:ca:24:54:a9:4d:49:8d:62:34:0e:dc:04:d1:
                    73:de:25:76:8c:bd:8f:ca:f6:f4:90:91:8f:61:0c:
                    f6:d6:59:59:4d:a2:d1:6b:e9:37:c2:5f:37:fe:41:
                    74:ef:93:15:86:69:ca:7b:d7:54:98:f5:1c:78:81:
                    1e:6c:bc:49:5f:30:a9:42:72:f0:f7:59:27:c8:b6:
                    a6:5f:df:39:b3:f7:aa:8a:d1:6b:95:9c:7d:6a:a0:
                    0d:3f:bc:2c:39:88:94:60:15:1e:7e:b6:43:f8:71:
                    31:d8:59:12:15:db:f1:de:2b:45:d5:1d:b1:7c:a4:
                    12:29:f5:f7:34:6c:9e:88:95:ab:be:3d:6c:05:2b:
                    1b:66:65:3b:29:3b:4d:ff:29:b3:2e:6f:e3:6a:1e:
                    c5:c0:67:c4:9c:5d:b3:80:69:4b:7b:cd:dd:e1:ec:
                    b0:15:06:e1:65:54:65:f7:3c:94:6c:3d:ce:93:b9:
                    2b:03:8e:c0:0c:7e:29:e0:7f:c0:2c:2e:10:60:fa:
                    12:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B0:B7:73:91:4F:66:9D:63:FE:E4:C1:EB:F2:D0:06:E3:53:72:DD
            X509v3 Authority Key Identifier:
                keyid:D7:26:E8:6F:30:0B:26:4A:35:3C:29:67:3E:07:71:6F:54:54:B5:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/1ybobzALJko1PClnPgdxb1RUteI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1ybobzALJko1PClnPgdxb1RUteI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4053/3EDB83FC50E111F091C4BB74C4F9AE02/D28B7DD450E411F081600061C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:c8c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:02:ca:28:08:be:d7:21:a5:de:1f:03:1e:4c:5f:30:ab:68:
         0d:1c:79:78:8d:e6:f8:b7:08:44:e7:a5:b8:74:65:51:c5:06:
         d8:2d:69:e9:2f:d8:60:12:fa:7e:3e:73:35:7e:ee:2e:a3:ef:
         d2:40:7c:be:fa:bc:d9:c2:e4:21:1f:a2:ed:36:43:af:f9:e6:
         4a:08:ad:d4:7d:1a:e9:06:f6:b7:bc:e5:65:86:c3:ee:e0:75:
         e3:9e:9c:7c:2a:08:67:ae:c3:90:10:20:94:32:26:56:ce:df:
         5a:a8:38:a3:46:0b:64:f9:62:31:35:9e:42:f0:d3:39:f2:f3:
         f1:c0:95:bf:9c:c4:63:24:94:0b:c8:b0:63:d9:a8:bc:0a:f2:
         24:6a:5a:8c:0d:f7:04:52:4a:e8:d1:eb:bd:da:51:88:e4:cf:
         3e:aa:0a:7e:e8:80:e4:c9:ab:6f:94:63:4a:27:9a:1f:e2:ad:
         20:8d:95:80:0e:61:70:7c:5b:43:51:44:da:6d:80:ff:f7:c4:
         0d:ca:45:60:7c:a2:92:af:53:79:97:1b:36:d1:ec:74:d2:5f:
         d7:09:9d:d2:80:64:c0:6d:90:16:6c:3f:b8:39:db:ec:c6:fc:
         18:99:59:2d:03:28:73:62:18:d6:2c:41:a9:3c:c3:68:e3:4b:
         cd:3f:52:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:56:34 2026 by rpki-client