Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/F6668BF41FF311EFB0A97A82C4F9AE02.roa
File:                     F6668BF41FF311EFB0A97A82C4F9AE02.roa (raw, json)
Hash identifier:          SnIg7jkVKoNtfhOzS+GGzcDFetRrORpxHiWrxQCh8as=
Subject key identifier:   C8:1D:C2:62:06:43:9F:B2:BC:68:DE:1B:1C:B2:53:B3:D0:0B:E1:7A
Certificate issuer:       /CN=A91E57A9/serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63
Certificate serial:       0180
Authority key identifier: F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/F6668BF41FF311EFB0A97A82C4F9AE02.roa
Signing time:             Sun 07 Jun 2026 05:35:09 +0000
ROA not before:           Sun 07 Jun 2026 05:35:09 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     138327
IP address blocks:        2001:df3:de40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl
                          rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:34:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 384 (0x180)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E57A9, serialNumber=F7F06369399D9935F5FB59FD58571541A581CC63
        Validity
            Not Before: Jun  7 05:35:09 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a25030d-5843
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:3a:d6:7f:17:5c:35:d7:34:a8:e7:0b:58:f4:
                    aa:b7:d4:37:e9:eb:97:86:f9:ef:35:fe:0e:c0:e3:
                    a8:cb:86:20:3b:8a:ba:e0:48:41:2c:37:ea:15:40:
                    54:8e:e5:a6:3c:1a:91:b1:02:6a:5b:e4:c8:aa:13:
                    a1:eb:3a:4b:69:db:a9:3c:c0:fb:71:47:c1:93:a0:
                    0c:4a:8a:54:e9:d7:ce:13:8c:7c:c3:7b:46:3f:1e:
                    57:e9:fe:e1:1a:68:44:81:dc:ac:98:26:2c:af:0b:
                    38:9e:07:85:cf:1b:3d:e9:20:e8:33:c7:1d:af:60:
                    49:72:3b:e7:15:3d:92:c6:e1:50:44:5b:11:e3:a0:
                    3e:2c:0b:a4:e5:19:19:8c:e6:9e:55:8f:f0:03:03:
                    fb:73:ee:63:ff:f9:f1:38:f9:de:c3:12:73:56:26:
                    8c:f1:5c:66:18:2a:c0:47:4e:f5:93:a9:e3:cf:6b:
                    00:ac:f8:79:5a:67:7e:91:86:fa:d9:c5:48:29:8e:
                    4e:22:92:59:c6:28:fa:16:80:7f:48:ec:4d:13:32:
                    8a:3c:56:3c:8d:fa:ce:50:35:cf:38:24:f2:31:4a:
                    38:f2:14:f1:32:65:ed:47:34:e7:b9:d4:8b:41:36:
                    81:00:c5:63:cc:ef:be:55:47:10:73:58:fd:82:a3:
                    bf:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:1D:C2:62:06:43:9F:B2:BC:68:DE:1B:1C:B2:53:B3:D0:0B:E1:7A
            X509v3 Authority Key Identifier:
                keyid:F7:F0:63:69:39:9D:99:35:F5:FB:59:FD:58:57:15:41:A5:81:CC:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/9_BjaTmdmTX1-1n9WFcVQaWBzGM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9_BjaTmdmTX1-1n9WFcVQaWBzGM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57A9/862463481FF311EFA3FB2C81C4F9AE02/F6668BF41FF311EFB0A97A82C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:de40::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:bd:9d:9b:9d:bf:19:a9:93:b5:d5:b1:a9:34:c1:02:e4:d2:
         4c:43:c7:7e:fe:0e:52:ca:14:dd:2b:bc:42:32:02:b2:10:e3:
         af:f5:2e:4c:5b:e6:12:db:6d:d4:45:d0:21:86:65:90:42:0b:
         5a:60:f0:96:a6:e2:21:9c:ea:b9:ed:b6:69:78:74:9d:5e:53:
         bb:bf:1e:5f:a1:83:a9:04:30:7c:f9:59:33:a7:11:24:2d:7e:
         2e:58:77:6c:cc:c4:94:39:26:82:ef:79:c1:30:f1:7a:32:05:
         44:56:22:b3:bb:bd:f8:e1:d3:90:14:24:d8:9a:d3:7b:5b:86:
         fa:de:15:56:99:1d:d6:d0:5b:ee:4a:d8:9e:1a:c4:7f:15:f9:
         c2:88:e0:05:e3:01:56:83:ef:0e:53:b7:57:c9:26:b7:d3:2e:
         70:6b:b5:a7:b1:07:40:e6:7a:49:16:1f:23:50:d2:57:0a:cd:
         35:1a:ef:e4:c8:24:65:da:66:6b:2c:85:e8:1b:ac:4e:28:24:
         65:8a:70:74:f9:3f:4e:9c:83:3f:92:3c:ac:4f:23:8e:c1:20:
         27:a8:24:fb:b3:9b:4d:dc:c6:ee:79:04:cf:08:9e:58:90:b8:
         73:14:c9:ad:c9:08:4f:d1:c0:a9:f0:f2:89:5c:fc:09:00:b4:
         a4:46:76:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:54:26 2026 by rpki-client