Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F688FE388C5611E792848B4AC4F9AE02.roa
File:                     F688FE388C5611E792848B4AC4F9AE02.roa (raw, json)
Hash identifier:          t6f1Kosop/CbP7AwXXw0yAnoWx86X0b95L/+s+Yi+WE=
Subject key identifier:   39:66:A0:C1:A1:5D:6A:5E:A7:D1:E8:57:D3:AE:1C:19:0D:70:E3:14
Certificate issuer:       /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
Certificate serial:       28AB
Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F688FE388C5611E792848B4AC4F9AE02.roa
Signing time:             Tue 31 Mar 2026 16:20:18 +0000
ROA not before:           Tue 31 Mar 2026 16:20:18 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     46071
IP address blocks:        58.69.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl
                          rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:46:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10411 (0x28ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8
        Validity
            Not Before: Mar 31 16:20:18 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69cbf441-7f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b5:de:5e:69:ad:4c:d0:a3:09:ae:29:9d:42:
                    e3:2a:8f:08:af:c1:5b:14:99:b3:db:9a:3a:cc:51:
                    3f:8e:29:38:38:5c:63:24:37:2f:4e:88:c7:4c:c2:
                    63:41:77:0a:e7:26:5b:63:48:b6:3e:09:d8:07:53:
                    45:aa:f5:a7:76:a7:c4:13:56:e9:49:0d:0c:fc:8e:
                    01:c2:32:03:7b:16:7f:d6:83:aa:fb:75:df:8d:34:
                    5d:2f:5b:7c:7b:eb:e6:a3:a5:6a:de:14:69:1f:82:
                    d6:ae:ff:bd:ad:08:62:d6:f9:61:82:ab:8d:3b:f1:
                    6f:44:8b:27:a6:da:64:7b:dd:9e:d4:04:14:75:9a:
                    a2:2a:ee:6b:62:ca:7e:50:c1:18:95:ee:95:82:b0:
                    0f:73:85:63:e6:f1:c6:b7:a1:0b:5b:1e:c4:ae:bd:
                    8f:b8:14:88:48:c4:11:2d:73:38:53:2e:f6:89:9b:
                    f4:de:b7:18:67:62:2f:9a:b8:de:09:4d:28:5d:1a:
                    f3:a6:53:5c:ed:f1:9e:66:58:14:55:10:da:f6:33:
                    49:4e:52:04:d0:c1:9a:c6:e0:9f:a3:48:fd:be:71:
                    d5:01:f6:0a:f1:74:b0:ea:fc:5b:28:51:78:85:9f:
                    ac:eb:c2:5f:64:8c:c2:86:06:ee:96:90:ea:14:2e:
                    98:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:66:A0:C1:A1:5D:6A:5E:A7:D1:E8:57:D3:AE:1C:19:0D:70:E3:14
            X509v3 Authority Key Identifier:
                keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/F688FE388C5611E792848B4AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.69.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:31:bb:bf:dd:f6:bf:8c:10:0e:27:c1:39:52:fe:8c:f8:15:
         ce:03:47:ad:ef:ce:3a:c2:fe:c5:65:b2:c8:ba:ad:cb:fd:a0:
         9d:f4:66:28:c7:b3:aa:a2:c3:2d:e8:5f:4a:de:a9:7c:a7:92:
         aa:6b:60:a0:65:a0:91:e7:c7:ba:01:2f:ab:83:08:e7:1e:06:
         f8:f1:b6:a9:7a:4e:df:cc:dc:a4:1c:79:d6:d7:8c:77:7a:70:
         fa:4d:66:43:8e:7f:d5:69:09:2f:bb:ad:ce:c3:34:ac:93:02:
         d3:11:0a:8e:0f:97:d0:50:8d:b9:37:26:53:80:25:30:27:49:
         23:ba:91:7b:bf:ff:a8:8b:5f:9c:90:82:57:70:03:1c:a6:5d:
         36:d8:41:1a:7d:88:3a:f6:11:38:c3:90:14:d1:75:d1:16:8d:
         c5:01:00:26:b3:d3:56:7a:38:db:57:f2:10:9d:de:74:a8:92:
         b8:bd:9a:27:d2:6e:b6:d1:3f:5a:41:58:8d:00:af:ef:b1:f5:
         b4:d2:6d:50:1e:5a:c0:50:9e:ca:3c:bb:41:4f:0f:26:e2:46:
         45:2a:00:79:2f:cb:0d:6e:8d:d8:78:40:22:bf:7b:0d:bb:2d:
         04:c2:40:6f:34:22:97:60:c2:f6:86:f1:94:02:ba:81:12:5d:
         6c:e5:4c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:19:51 2026 by rpki-client