Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/630C73EE4F6411F1B5990A8BC5833773.roa
File:                     630C73EE4F6411F1B5990A8BC5833773.roa (raw, json)
Hash identifier:          5y1T/MnfTTehQtKSDvj0t1BF3XfA3EG4Z21e4iIacAE=
Subject key identifier:   A5:C4:ED:E0:F0:DB:9A:A2:0C:CA:26:EE:6C:59:AA:9D:38:C8:EB:F2
Certificate issuer:       /CN=A91BCA5B/serialNumber=BEA16BD3E47EE7EE329B6FCEA7CF1709A3997366
Certificate serial:       67
Authority key identifier: BE:A1:6B:D3:E4:7E:E7:EE:32:9B:6F:CE:A7:CF:17:09:A3:99:73:66
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqFr0-R-5-4ym2_Op88XCaOZc2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/630C73EE4F6411F1B5990A8BC5833773.roa
Signing time:             Thu 14 May 2026 07:13:20 +0000
ROA not before:           Thu 14 May 2026 07:13:20 +0000
ROA not after:            Tue 01 Dec 2026 00:00:00 +0000
asID:                     136765
IP address blocks:        2001:df6:39c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqFr0-R-5-4ym2_Op88XCaOZc2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 07:54:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCA5B, serialNumber=BEA16BD3E47EE7EE329B6FCEA7CF1709A3997366
        Validity
            Not Before: May 14 07:13:20 2026 GMT
            Not After : Dec  1 00:00:00 2026 GMT
        Subject: CN=6a057610-5436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:27:6c:94:7a:4c:ac:29:dd:dd:5a:7b:7a:9d:
                    d5:6f:98:3c:a8:7c:b1:fd:81:e0:65:79:12:bc:25:
                    6a:6e:87:9d:a9:3e:6f:1d:ad:e9:42:07:72:4e:92:
                    85:02:1a:04:4e:6a:61:d0:5e:83:df:4a:2e:48:1c:
                    92:cc:86:af:09:1c:a6:d8:5a:35:28:90:57:fa:95:
                    6c:ef:5f:3e:20:85:81:51:7b:0e:68:1b:82:70:d3:
                    b0:22:9f:cc:8f:3a:55:fe:2c:23:f9:c9:7e:49:22:
                    2c:66:d5:7a:75:b5:a3:a1:00:e9:38:e4:89:8c:e4:
                    ec:7c:14:f0:d7:22:68:de:42:4a:0d:b5:11:08:1f:
                    47:75:2a:b8:d1:70:5c:ad:fa:ee:df:a2:7a:da:12:
                    01:07:95:8f:2c:bb:dc:ed:96:15:43:5d:7c:fc:e1:
                    32:b8:7c:e3:59:42:b6:c1:42:76:87:ac:c0:6a:a5:
                    56:c7:36:48:63:2a:e9:65:ac:02:1e:e5:4f:e1:a0:
                    58:ec:fb:85:81:32:9f:08:e3:8a:2d:50:e7:0b:11:
                    8b:50:1a:ea:f8:3d:54:37:bf:8b:39:3a:91:66:9f:
                    5e:19:a1:f4:bf:62:55:18:08:c8:8b:3d:b8:e0:df:
                    ba:fa:9e:93:a1:b4:ca:31:b8:58:9e:14:c8:d9:ea:
                    e8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C4:ED:E0:F0:DB:9A:A2:0C:CA:26:EE:6C:59:AA:9D:38:C8:EB:F2
            X509v3 Authority Key Identifier:
                keyid:BE:A1:6B:D3:E4:7E:E7:EE:32:9B:6F:CE:A7:CF:17:09:A3:99:73:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/vqFr0-R-5-4ym2_Op88XCaOZc2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vqFr0-R-5-4ym2_Op88XCaOZc2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCA5B/DD0ACAC4C03A11F088D1462CC4F9AE02/630C73EE4F6411F1B5990A8BC5833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:39c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:8d:44:ea:ee:40:b4:bf:70:f3:df:74:b8:ab:be:e4:e8:70:
         50:8a:3b:e2:c2:62:1c:8e:f3:4d:1b:2e:6b:1f:e5:df:a2:9b:
         2f:08:e9:7c:30:80:82:aa:9b:0c:00:5d:f1:48:bc:d7:fe:0a:
         5c:69:23:1c:16:ec:73:48:95:82:18:41:5e:1b:ba:16:ea:4b:
         10:b9:34:9f:f1:9f:45:11:f1:47:f9:c8:eb:22:0d:95:9f:e8:
         9e:ff:9b:1a:94:91:7b:75:c5:fe:dc:be:3d:bf:fd:6c:80:5c:
         57:b6:77:be:3b:77:73:b1:f3:34:92:9f:45:e1:c3:c8:0c:7a:
         df:f9:ec:d5:56:fe:b4:c1:3c:a4:95:ae:f9:07:36:35:e3:33:
         5d:55:d5:f6:0f:83:2d:c7:6c:ee:85:e2:38:f2:b2:34:9c:6d:
         12:2e:75:4c:42:04:13:79:42:eb:d2:6f:80:d5:8d:b5:ba:fb:
         58:8b:b1:0c:7d:df:18:f8:20:0c:14:d4:6c:11:45:50:a6:4a:
         e5:a3:ec:17:71:f3:3f:7f:87:4e:e0:0f:d5:b2:5d:dc:3c:ae:
         5a:f8:d5:ad:1c:8f:36:30:dd:ab:63:86:41:20:d7:c4:be:49:
         00:04:5a:85:8f:c1:51:e9:d4:f0:98:af:f7:d8:ae:d2:8f:69:
         f4:7b:3e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:29:42 2026 by rpki-client