Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/6360524E03D311F0A6C64177C4F9AE02.roa
File:                     6360524E03D311F0A6C64177C4F9AE02.roa (raw, json)
Hash identifier:          HcqMW++sZJHjGMxO2JSw3bS/+sZh101Hrd0Zjhq70t8=
Subject key identifier:   69:56:DE:87:4A:74:48:01:B2:72:E4:6C:0E:8E:96:1E:26:72:46:A6
Certificate issuer:       /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial:       01C8
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/6360524E03D311F0A6C64177C4F9AE02.roa
Signing time:             Thu 16 Apr 2026 19:27:56 +0000
ROA not before:           Thu 16 Apr 2026 19:27:56 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     14007
IP address blocks:        2405:cbc0::/32 maxlen: 32
                          2405:cbc0:2000::/35 maxlen: 35
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
                          rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
        Validity
            Not Before: Apr 16 19:27:56 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69e1383c-b565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:be:2f:77:e8:2f:05:64:7c:12:0a:4b:ca:d8:
                    7f:34:9b:6c:ff:bb:08:aa:d2:d8:51:78:0b:aa:f6:
                    51:89:59:36:f0:c3:e3:f3:a1:99:e2:0c:79:0e:83:
                    82:ae:0e:e7:5f:f4:27:b8:83:7d:0e:7d:c4:6f:e2:
                    a5:8d:c3:28:3b:e5:60:5d:e2:59:b8:b6:d0:8d:41:
                    29:5b:d8:9f:68:df:ad:91:df:fb:6d:00:27:f5:55:
                    cd:71:ef:fa:66:09:ae:a7:3e:2c:72:95:ca:81:19:
                    5b:45:fc:a0:61:40:ad:79:69:fa:41:cf:d3:5c:ca:
                    db:f6:05:6a:cd:3c:0a:63:27:fa:d3:08:fa:ff:1f:
                    17:1b:9d:66:15:93:1b:89:39:ba:ad:1f:cf:53:37:
                    c4:86:95:93:e7:ec:8d:87:f1:14:5d:c3:55:c8:3f:
                    6e:a8:82:d2:01:7f:6d:7b:6c:e0:88:1c:b8:3c:fd:
                    b8:57:05:33:d7:c4:c5:cf:a3:52:55:a6:88:7f:f6:
                    fc:aa:4d:e3:54:24:8a:98:5b:85:23:f5:0a:1b:e1:
                    ba:b8:5a:15:f1:88:16:1e:d8:bc:b1:a1:f7:c1:82:
                    59:6f:31:05:40:cd:eb:bf:c9:a3:46:b9:29:ca:41:
                    0c:20:68:0b:75:c5:c1:28:94:8f:ad:73:b1:0d:29:
                    10:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:56:DE:87:4A:74:48:01:B2:72:E4:6C:0E:8E:96:1E:26:72:46:A6
            X509v3 Authority Key Identifier:
                keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/6360524E03D311F0A6C64177C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:cbc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:60:6d:7c:f2:15:48:02:3d:0d:de:2d:1b:18:0a:25:92:f7:
         68:ae:84:f3:68:e8:a6:09:48:b5:c1:58:34:36:1f:88:a8:86:
         21:8f:51:cf:9e:69:fd:9d:09:a0:30:59:4e:77:dd:95:71:55:
         20:f2:47:d6:f7:7a:72:76:fa:aa:bb:94:0b:12:f4:ae:a8:0e:
         da:e4:50:07:a7:fa:de:d0:ff:af:55:20:bc:36:31:1d:53:a4:
         8a:d2:30:55:ea:8c:2e:4f:f8:14:24:78:c9:6a:42:6d:ea:25:
         61:4a:69:74:07:43:96:21:67:eb:54:88:e5:07:7b:07:60:8d:
         8e:4b:f5:5a:a5:d9:ce:b3:d7:49:1f:86:c3:bf:3e:7f:8a:41:
         09:1b:f3:e4:3a:65:8e:ae:b2:b4:f8:ae:cf:cf:99:f8:b9:c0:
         0b:49:ef:8a:0c:00:25:79:1c:68:53:9e:a9:bd:1d:c8:bd:12:
         38:58:ad:97:a9:0c:cf:c0:de:d8:ae:f9:a7:1f:54:60:b2:61:
         4b:85:43:15:4f:f3:74:ea:58:31:17:25:1a:f4:01:4a:93:35:
         03:16:ce:9d:e5:ce:12:9f:9c:ba:7d:bd:4e:c1:ce:d2:44:e2:
         70:7f:92:d4:91:a7:40:06:d7:b6:71:9a:97:2f:d7:db:c3:b1:
         6e:9d:66:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:02:28 2026 by rpki-client