Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/6273B5964F6411F1B5990A8BC5833773.roa
File:                     6273B5964F6411F1B5990A8BC5833773.roa (raw, json)
Hash identifier:          y3V7Ac3VRTVKkf/zwxo2Yj3w4U6T8D7jfnzMbqhRIFA=
Subject key identifier:   95:B9:05:09:72:2B:EC:A9:D9:72:2C:C0:87:E0:3D:94:46:34:64:CF
Certificate issuer:       /CN=A91BCA5B/serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5
Certificate serial:       6A
Authority key identifier: 5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/6273B5964F6411F1B5990A8BC5833773.roa
Signing time:             Thu 14 May 2026 07:13:19 +0000
ROA not before:           Thu 14 May 2026 07:13:19 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     136765
IP address blocks:        138.252.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl
                          rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCA5B, serialNumber=5D4F412AE48010FE5487F018F171A9C6469D9AC5
        Validity
            Not Before: May 14 07:13:19 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a05760f-1377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7f:4a:f3:cc:dc:3e:6e:a5:62:a1:ca:98:c1:
                    7e:fb:76:76:e8:5c:78:51:9b:ee:1f:f2:f2:0e:32:
                    df:12:54:0c:a6:44:79:00:b6:87:51:49:c3:50:33:
                    be:a9:5b:2a:e5:ed:75:86:d7:f1:2d:2f:cf:7a:57:
                    f0:d7:53:58:c8:7f:aa:d5:d7:bc:90:8d:5e:2c:6e:
                    10:c4:d9:35:2e:22:ab:bd:8e:24:3a:39:f9:d5:17:
                    f6:5f:c0:7b:90:c4:21:68:40:c9:12:96:82:06:11:
                    af:18:cb:80:7f:b6:d9:c4:71:42:41:57:0f:12:93:
                    9b:2e:c2:d0:8f:53:3c:8b:58:23:21:81:0d:e6:5c:
                    10:5b:e3:30:b0:c1:a4:ec:3f:e1:8d:71:d6:df:74:
                    ad:8b:5f:af:d1:88:34:2d:a3:dc:f0:64:c5:19:6f:
                    4c:02:ed:16:dc:09:d1:d2:a4:7e:64:dc:47:cd:9d:
                    f3:fe:5a:ed:75:8b:1e:8d:81:93:96:eb:57:eb:4e:
                    3c:96:af:cc:2d:0f:01:d1:5b:62:9f:9d:22:4c:21:
                    2d:fb:4e:60:ed:80:f8:b8:15:af:ed:fe:bd:ae:e5:
                    5f:e1:3f:88:29:9f:bb:57:ca:8b:52:db:64:4d:c2:
                    a3:b6:65:16:09:2e:fe:bf:4d:6f:d4:a4:4b:91:87:
                    23:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B9:05:09:72:2B:EC:A9:D9:72:2C:C0:87:E0:3D:94:46:34:64:CF
            X509v3 Authority Key Identifier:
                keyid:5D:4F:41:2A:E4:80:10:FE:54:87:F0:18:F1:71:A9:C6:46:9D:9A:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/XU9BKuSAEP5Uh_AY8XGpxkadmsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XU9BKuSAEP5Uh_AY8XGpxkadmsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/D25D868EC03A11F088A3462CC4F9AE02/6273B5964F6411F1B5990A8BC5833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.252.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:7d:56:66:e3:69:c1:0b:7b:5b:ca:f9:d9:29:9c:e7:2b:df:
         5b:ed:5d:bb:34:c7:55:e1:4a:13:ef:7e:fd:a1:9b:d5:a9:e5:
         61:75:86:32:bb:30:89:ab:56:00:33:91:11:56:51:5a:cb:90:
         09:47:22:42:d6:5e:6e:73:e2:f7:dd:6b:cb:1c:2f:6a:1b:89:
         7a:04:bf:42:a9:b0:c5:00:19:cd:e8:33:0a:01:72:f1:be:1c:
         e9:e7:50:9f:b3:4f:19:7f:ab:75:02:f6:3d:97:e5:2d:82:62:
         ce:2a:4f:31:55:8d:92:ab:b5:e3:e3:3f:42:9e:f3:8d:92:a2:
         fe:e5:1f:8b:b0:06:ca:99:b6:63:a9:6d:2e:66:e9:39:09:fb:
         b8:ae:5f:ab:6f:32:81:63:37:1b:c2:3d:69:81:6f:6c:c7:f7:
         f0:a6:86:9e:05:13:e0:4e:ee:c8:62:28:7c:0b:46:16:b4:af:
         d4:21:d3:ae:cc:b7:bb:35:84:ff:c5:55:d2:b6:bf:32:6e:85:
         e6:4a:2f:db:a7:ab:fd:cb:4a:41:f3:b4:14:30:05:6b:84:8c:
         67:ae:ae:dd:eb:a7:40:15:b1:46:af:59:e1:cb:0e:7e:17:89:
         97:73:d2:46:82:00:24:fe:a6:09:89:e2:e7:44:d3:34:4e:c3:
         71:64:c1:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:29:20 2026 by rpki-client