Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/60F50042A99411F0A4CF2116C4F9AE02.roa
File:                     60F50042A99411F0A4CF2116C4F9AE02.roa (raw, json)
Hash identifier:          E1LMJ9mOfZjZ4jDPtBlQdeKYtT0/MoH4POXsIIJkVvY=
Subject key identifier:   80:C0:14:FD:6F:CC:92:70:C0:6F:07:8E:A0:83:54:54:71:96:90:4F
Certificate issuer:       /CN=A91CD0DE/serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1
Certificate serial:       48
Authority key identifier: A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/60F50042A99411F0A4CF2116C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 06:11:52 +0000
ROA not before:           Wed 15 Oct 2025 06:58:40 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     9484
IP address blocks:        2001:df6:32c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl
                          rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:43:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD0DE, serialNumber=A124D2D104F7724FBB8F0F266949E290548C01B1
        Validity
            Not Before: Oct 15 06:58:40 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a3d8a8-53e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:69:9a:31:da:9d:66:54:24:79:e7:78:75:37:
                    b1:5d:d6:6d:76:2e:57:36:4b:d5:ab:81:09:a4:3a:
                    2e:9e:1e:7a:51:72:a5:74:7d:69:43:c3:be:b3:e5:
                    82:4c:14:df:2a:88:2b:44:62:26:d0:01:13:92:2e:
                    4e:4d:cd:a8:ed:b7:70:d9:4b:d1:92:9e:ec:c8:40:
                    06:b2:23:0a:1b:62:8c:60:db:93:a8:f3:c6:c3:a4:
                    77:05:0a:a8:89:fd:ac:7e:b9:b3:2f:37:87:83:f3:
                    4f:b5:76:e8:16:82:66:69:c4:1b:e3:23:47:26:76:
                    7c:52:83:27:c1:c7:a3:cf:6a:5b:08:28:da:22:5f:
                    8a:ff:fc:9f:32:b1:50:ab:18:38:d2:9a:db:84:f5:
                    f5:cc:b4:49:77:ac:4a:75:03:2b:d4:3a:07:2a:e6:
                    c2:49:28:34:5b:54:82:fc:56:9c:b3:46:26:33:b6:
                    e0:a2:18:35:fd:22:db:d7:5b:b4:49:49:76:07:84:
                    52:ae:d8:c9:cc:7b:cd:3a:a1:96:2a:47:75:33:f5:
                    44:cf:29:4f:87:52:d3:5a:db:e2:72:8d:46:af:d3:
                    64:12:a2:8a:17:36:be:cd:ed:83:2f:0d:8c:3d:06:
                    1d:2d:a4:62:e9:f3:ab:c5:ba:aa:99:7f:6f:1b:70:
                    1f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:C0:14:FD:6F:CC:92:70:C0:6F:07:8E:A0:83:54:54:71:96:90:4F
            X509v3 Authority Key Identifier:
                keyid:A1:24:D2:D1:04:F7:72:4F:BB:8F:0F:26:69:49:E2:90:54:8C:01:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/oSTS0QT3ck-7jw8maUnikFSMAbE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oSTS0QT3ck-7jw8maUnikFSMAbE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD0DE/5B5F4516A98F11F0B1FA5066C4F9AE02/60F50042A99411F0A4CF2116C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:32c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:11:83:87:3a:f3:a5:70:23:36:88:ee:cf:c5:0d:68:51:68:
         52:96:a7:b5:10:ea:44:c9:4e:9e:de:e9:ff:09:85:8a:b5:91:
         b3:ed:c5:b9:96:e1:6f:31:14:74:c3:a7:f9:16:88:56:53:94:
         43:da:66:4b:f1:f6:22:2b:77:fc:8b:bc:76:60:9b:77:2e:db:
         3e:8a:da:a0:e0:39:72:75:2c:ca:46:48:96:ec:ab:e4:6d:dc:
         3c:52:21:c8:99:c4:d2:96:1e:ae:4f:43:ff:d9:06:fe:95:0f:
         bd:8b:9a:98:b8:52:dc:b4:41:5b:7a:fa:d6:1f:42:6b:f0:26:
         d8:20:5b:3c:43:ff:d2:90:d0:08:23:cc:40:ed:16:95:0d:98:
         50:0c:fa:a7:56:b5:3c:9d:5c:31:e2:7b:56:0e:2f:98:e1:1c:
         7a:8d:f6:fa:98:ce:dc:68:12:94:68:d2:03:65:d9:a2:84:9a:
         a8:86:bd:7a:c8:2c:87:50:bb:92:f7:ad:74:a9:39:8c:9e:f5:
         82:86:d6:39:50:a8:da:f6:2c:fd:45:fb:f6:ab:ba:12:b4:a2:
         5d:f8:6b:81:d9:22:4c:a2:48:da:b0:9f:de:1b:55:42:b0:84:
         d5:5a:c0:2d:4b:93:05:6a:fe:f7:56:24:02:31:e9:a9:a8:95:
         5e:b0:0d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:06 2026 by rpki-client