Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/683E73BA664A11F183E2ACC07047A888.roa
File:                     683E73BA664A11F183E2ACC07047A888.roa (raw, json)
Hash identifier:          zzbifsuUJU8SyQGKEOYnqcaJexnydnzq2UEdFbkQNUI=
Subject key identifier:   4D:81:07:C3:08:6A:C6:6D:4D:24:CB:80:E9:07:3C:87:47:7F:78:8A
Certificate issuer:       /CN=A91CB86D/serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
Certificate serial:       01BA
Authority key identifier: 25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/683E73BA664A11F183E2ACC07047A888.roa
Signing time:             Fri 12 Jun 2026 10:35:19 +0000
ROA not before:           Fri 12 Jun 2026 10:35:19 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     214266
IP address blocks:        2400:b8c1::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl
                          rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 10:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB86D, serialNumber=256B5D1790D24C4D6C972064E91C6AF00BD68E32
        Validity
            Not Before: Jun 12 10:35:19 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6a2be0e7-9bee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c6:8f:48:4c:d1:57:d3:78:20:a0:46:64:0c:
                    79:b6:8e:75:ec:15:bb:22:b3:53:65:52:2f:7e:49:
                    d1:0d:0d:e8:46:e9:91:ad:27:2e:e5:e2:33:75:8b:
                    3c:bf:8a:ed:35:10:7e:65:c6:1e:9e:b5:aa:46:4c:
                    67:bf:d0:3c:e5:62:26:67:e3:64:49:cc:ee:1c:e7:
                    62:c2:b7:27:22:2f:49:b5:e0:77:6c:b1:0e:97:6c:
                    d4:3a:be:a3:0c:ab:6b:f4:02:3b:bd:d8:72:98:63:
                    9c:5a:8c:bd:21:94:9e:f0:ce:91:ea:a6:e2:de:46:
                    7c:cc:4c:09:9a:cd:27:90:74:55:a3:8b:c5:31:07:
                    48:76:89:36:24:b6:fd:a2:91:ef:fa:0a:32:1a:e6:
                    82:c1:0d:29:f8:d4:0d:d4:e3:8e:7a:53:45:76:56:
                    84:54:7a:b2:a7:7e:20:17:17:67:bc:8d:b8:67:90:
                    07:57:07:f6:e7:f2:a3:87:14:59:57:01:9f:02:55:
                    36:23:76:c7:ba:99:c6:d0:6b:3d:14:c9:b0:e7:9b:
                    6f:c5:bd:6f:27:57:13:d7:1c:d0:9c:03:c4:fd:24:
                    95:74:c7:3a:75:16:5a:e1:78:15:90:cb:16:f6:59:
                    47:84:e1:45:af:c9:df:3c:24:82:08:bf:10:ab:df:
                    a6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:81:07:C3:08:6A:C6:6D:4D:24:CB:80:E9:07:3C:87:47:7F:78:8A
            X509v3 Authority Key Identifier:
                keyid:25:6B:5D:17:90:D2:4C:4D:6C:97:20:64:E9:1C:6A:F0:0B:D6:8E:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/JWtdF5DSTE1slyBk6Rxq8AvWjjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JWtdF5DSTE1slyBk6Rxq8AvWjjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB86D/6F05820EE53E11EEA38F0877C4F9AE02/683E73BA664A11F183E2ACC07047A888.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:b8c1::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:43:49:f7:1e:3f:c3:de:8c:12:43:51:32:32:99:ad:46:53:
         00:23:a1:42:c7:72:be:7e:a8:da:55:31:f6:0a:d0:68:ba:67:
         3a:3a:12:ad:16:83:81:14:3b:8f:90:5a:59:6e:9e:6d:94:71:
         2e:01:59:a4:08:b4:60:c7:8a:15:19:e8:7e:5e:b7:ce:c5:5a:
         74:91:dd:57:f1:87:16:80:b0:18:a0:c8:7f:d7:68:11:b2:95:
         5d:f1:5d:39:49:4e:b7:c3:cc:79:3e:64:1d:ed:b8:95:fe:fc:
         35:59:2f:94:53:8a:07:fa:d6:5d:03:f4:35:9c:95:9f:e6:6e:
         92:5e:7c:38:2b:16:c3:db:fe:f3:fe:16:ae:64:11:8a:5a:40:
         c0:89:ac:74:b8:94:a7:4d:68:7e:31:0c:cf:34:7d:ef:ea:d9:
         83:44:17:a2:b7:a1:a8:59:98:c8:9c:7d:a7:b2:17:1c:16:b0:
         54:1d:3c:e8:aa:77:cd:c2:b9:78:37:90:da:a8:87:08:2f:e3:
         4b:9f:65:55:a6:e6:ec:cb:d1:b0:7f:16:00:58:32:d6:24:14:
         ff:17:4d:bf:b6:a5:30:fb:58:e5:29:9e:f7:91:04:61:40:d0:
         7d:6a:26:ae:0d:d0:60:21:89:5e:db:96:12:5f:00:7e:c8:ac:
         34:89:06:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:31 2026 by rpki-client