Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/6E6485328C6211E9A888A528C4F9AE02.roa
File:                     6E6485328C6211E9A888A528C4F9AE02.roa (raw, json)
Hash identifier:          5i/UH503HWfNpIJgdTlhKUgyf9GU+TsIml7+DBFnaY4=
Subject key identifier:   F5:C5:31:50:8B:AE:16:D8:20:B4:8F:E8:52:77:FE:71:17:6F:77:A9
Certificate issuer:       /CN=A91D16A3/serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
Certificate serial:       11D8
Authority key identifier: 79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/6E6485328C6211E9A888A528C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 17:34:13 +0000
ROA not before:           Wed 02 Apr 2025 17:46:32 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     139216
IP address blocks:        2404:7ac0:607::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl
                          rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:36:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4568 (0x11d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D16A3, serialNumber=793766084EFC06250650F0FDC9DBC553C0CECA32
        Validity
            Not Before: Apr  2 17:46:32 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a47894-1423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:08:54:81:8b:aa:78:33:d7:db:40:8f:a1:
                    9c:b2:03:7e:3f:1e:01:64:c3:14:d8:2d:c5:f6:4d:
                    e2:40:87:bd:57:0b:f2:e5:30:83:1e:3c:de:05:da:
                    17:ba:e4:26:76:15:57:0a:80:b4:20:5a:bd:a9:6c:
                    86:1a:a9:92:a0:72:39:2f:bf:25:dd:f8:0f:3d:e0:
                    c0:99:a4:e4:25:3b:29:84:e1:29:81:57:01:69:e7:
                    b7:02:10:8d:62:59:92:e5:e4:09:90:2e:38:8c:61:
                    60:db:6b:a0:99:d5:24:31:b2:6f:e7:cb:4e:b7:cb:
                    38:b6:64:f8:fc:72:83:21:ac:f6:73:10:3f:cf:04:
                    b8:7e:fb:e6:80:87:37:9c:be:6d:58:a1:56:c0:a6:
                    ed:cb:22:50:55:50:cf:2c:32:62:ba:39:f4:ec:70:
                    0d:5c:8d:ee:e2:12:eb:52:0e:b8:81:07:42:d5:d1:
                    5c:77:18:ec:6d:33:50:15:80:ef:6a:6f:20:88:8a:
                    02:3d:93:7d:3d:56:d2:15:e4:bd:bb:b2:89:cd:d8:
                    90:24:b9:6d:da:69:4e:76:e0:26:af:d8:b7:23:18:
                    2a:36:bc:9e:33:01:12:e1:3e:c5:23:d7:20:fd:03:
                    ac:21:a6:02:26:58:35:af:5b:ca:a2:8a:e5:b7:28:
                    02:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C5:31:50:8B:AE:16:D8:20:B4:8F:E8:52:77:FE:71:17:6F:77:A9
            X509v3 Authority Key Identifier:
                keyid:79:37:66:08:4E:FC:06:25:06:50:F0:FD:C9:DB:C5:53:C0:CE:CA:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/eTdmCE78BiUGUPD9ydvFU8DOyjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eTdmCE78BiUGUPD9ydvFU8DOyjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D16A3/7727CE5C38C711E9A7B5C233C4F9AE02/6E6485328C6211E9A888A528C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:7ac0:607::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:14:e9:84:4f:f8:00:05:07:ca:5e:3d:63:f8:b2:11:e8:93:
         81:1b:48:e7:6e:ec:34:bb:7f:c2:7a:da:bb:43:bf:83:ac:b7:
         8c:56:8a:d3:70:8e:15:70:60:50:f6:14:ff:ff:38:24:33:a2:
         f7:d8:bb:ec:32:0e:2d:8a:fb:44:92:36:c0:52:d0:d3:df:2d:
         2a:38:7f:eb:c5:f4:b5:14:1e:19:e0:7f:03:b3:d8:0c:ef:2f:
         99:f8:4f:54:bf:5e:18:06:d1:cd:19:7a:a1:f0:ca:57:6e:b2:
         fb:69:50:ac:f6:4f:29:1c:e4:a0:8d:3b:41:2a:be:5c:55:97:
         3f:64:88:21:f6:ed:53:4f:e7:28:5e:e8:8b:13:16:13:0c:aa:
         de:68:7a:fc:2d:f1:5e:e7:00:26:7b:14:d1:1a:8d:f1:73:df:
         7f:14:fd:77:0f:e7:3e:09:34:cf:68:15:85:af:25:72:76:9b:
         1f:4e:9b:47:51:cf:fb:e4:72:67:b1:11:dc:fb:d8:dc:40:af:
         4e:19:56:fd:4b:87:c9:56:0e:d9:bb:a9:0b:2a:67:c0:a1:03:
         80:60:e8:fb:97:ca:d5:33:ad:7c:f6:44:8a:74:ec:8b:ac:7d:
         a5:2a:f7:68:63:29:0f:df:af:38:6f:24:25:74:21:be:22:0b:
         38:bc:10:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:34:16 2026 by rpki-client