Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa
File:                     B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa (raw, json)
Hash identifier:          64GI0jvZyfRwaaUyqyoO9+bG/AmsXG/f9aCo9uCRhhE=
Subject key identifier:   60:38:62:FF:01:A7:34:62:25:AB:7B:0A:12:52:95:FD:00:E4:8C:95
Certificate issuer:       /CN=A91C022C/serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
Certificate serial:       FD
Authority key identifier: D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa
Signing time:             Fri 17 Apr 2026 06:41:09 +0000
ROA not before:           Fri 17 Apr 2026 06:41:09 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     153377
IP address blocks:        2001:df4:ec40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl
                          rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:41:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C022C, serialNumber=D796995A776759C4264317800287EBEEEFB4BA6A
        Validity
            Not Before: Apr 17 06:41:09 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69e1d605-e157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:48:cf:09:b6:76:56:f0:77:d8:bb:b3:9d:0e:
                    69:72:c8:22:71:c7:02:9f:cc:b3:b8:e0:5d:dd:8f:
                    4c:7e:12:bb:2f:6e:9e:83:09:31:bb:bf:56:44:bb:
                    f5:a6:b7:e0:cc:e6:85:6b:54:84:eb:ce:f9:57:e6:
                    d4:06:a8:ec:18:4c:c0:2f:81:60:f4:43:89:92:2e:
                    b1:af:f3:85:a0:56:2e:f1:34:b5:e7:f6:2b:3d:cd:
                    ff:a1:c2:17:38:02:17:20:b9:9f:cf:90:4f:02:26:
                    55:6e:53:8a:9e:cd:59:79:c0:d2:fa:2d:33:04:11:
                    a1:79:68:1c:d1:15:b9:fe:6a:28:44:50:db:fd:70:
                    b2:89:76:a3:19:48:7b:b7:9b:99:d1:64:1b:f0:cb:
                    0c:b4:4e:e9:9c:57:5b:b8:6b:05:d7:38:85:e7:52:
                    bd:77:a7:48:84:89:88:1e:40:45:bc:ce:46:85:e7:
                    5c:a2:c9:df:b7:8d:69:2f:58:a2:8f:b0:0a:71:22:
                    26:a9:e4:0b:75:12:a2:b6:0c:d5:48:ae:36:e2:90:
                    8b:ec:e8:e4:36:a8:28:ce:3e:11:d1:6c:ff:d9:51:
                    d8:ea:09:0f:05:9b:d2:f9:c2:88:ea:88:d5:38:65:
                    1f:98:db:b9:f3:c9:36:f6:a9:37:21:7d:30:9e:d2:
                    36:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:38:62:FF:01:A7:34:62:25:AB:7B:0A:12:52:95:FD:00:E4:8C:95
            X509v3 Authority Key Identifier:
                keyid:D7:96:99:5A:77:67:59:C4:26:43:17:80:02:87:EB:EE:EF:B4:BA:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/15aZWndnWcQmQxeAAofr7u-0umo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/15aZWndnWcQmQxeAAofr7u-0umo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C022C/BA0F2DF2D4B911EF9FA8E24FC4F9AE02/B6CFF1B2D5F911EFB9B1055CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:ec40::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:73:86:d1:13:e9:68:09:c2:dc:9a:5c:64:b3:91:07:05:b2:
         d3:8f:cb:44:3b:c1:25:34:e5:7c:dc:35:55:42:a4:f0:47:21:
         ac:15:94:8a:e3:ef:70:9f:3e:8d:64:e7:a7:96:28:a9:47:47:
         fe:08:1d:15:a4:53:54:2a:01:a5:76:b3:90:9c:2f:1c:3f:28:
         65:1f:dd:8f:45:b4:02:a0:6f:67:74:d8:64:25:16:8f:b9:f1:
         a7:de:62:1e:e6:8b:fc:e6:2b:d0:55:9f:a7:bf:91:a8:b8:49:
         13:01:11:06:fb:5e:34:5c:80:35:9a:71:f0:38:bf:ff:25:9b:
         ac:15:bf:b8:69:e0:bb:29:23:60:20:67:8a:7c:ba:4f:03:04:
         ba:be:4c:95:e3:60:bd:cd:be:7e:33:6e:d1:0e:b9:96:8f:e6:
         0a:2d:94:11:18:a6:06:7f:5c:95:3c:90:f2:b9:9c:20:a4:92:
         9d:d7:7c:c2:18:02:a4:d3:aa:85:c0:83:46:ae:6a:ea:53:06:
         e8:14:ca:25:4c:98:6c:0e:06:33:8a:33:02:87:e3:fa:07:1b:
         5a:18:2d:e7:71:b0:cc:64:2c:5b:bf:5c:f6:20:22:d9:c7:07:
         90:38:8f:72:56:dc:62:14:42:fd:0e:3a:9c:af:18:44:04:a9:
         31:8c:d7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:15:16 2026 by rpki-client