Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/FF5213E8A81D11EFA74FFD31C4F9AE02.roa
File:                     FF5213E8A81D11EFA74FFD31C4F9AE02.roa (raw, json)
Hash identifier:          ls1HDtDX8ZrpUxCkm4TRRKjqrY+zASGFi8PHUEE3XHs=
Subject key identifier:   E5:49:DC:93:85:52:44:E9:06:34:D7:06:C6:3E:16:5C:3F:ED:2B:53
Certificate issuer:       /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial:       01CA
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/FF5213E8A81D11EFA74FFD31C4F9AE02.roa
Signing time:             Thu 16 Apr 2026 19:28:02 +0000
ROA not before:           Thu 16 Apr 2026 19:28:02 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     63121
IP address blocks:        2405:cbc0:4::/48 maxlen: 48
                          2405:cbc0:5::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
                          rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
        Validity
            Not Before: Apr 16 19:28:02 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69e13842-ab6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e6:35:5e:9f:1e:4c:99:7d:83:38:14:d5:6c:
                    f3:b1:97:f5:ab:f4:ec:68:0b:4c:18:b5:fb:b3:01:
                    13:a6:37:21:d1:7a:cd:f8:2a:f1:14:fd:d7:95:9a:
                    23:57:f5:18:44:da:74:83:a2:f7:f6:33:e7:46:37:
                    19:39:7d:e1:71:f7:23:39:01:59:64:a9:23:5e:51:
                    cf:95:35:17:97:37:2a:9c:40:cd:ec:9c:94:36:0e:
                    05:ea:7c:53:27:41:9b:87:6d:d5:25:9f:9c:a1:8f:
                    62:0f:65:a1:2c:04:52:89:9b:d2:ac:bb:f8:a3:b2:
                    62:ed:db:54:ed:b2:2d:79:07:4f:2a:07:dc:50:95:
                    1d:ab:49:fa:41:e5:11:8a:51:e2:71:5b:81:42:54:
                    e8:8d:d1:82:06:33:f4:9c:12:15:1a:c4:73:66:55:
                    6b:8e:cb:be:2c:9b:c8:77:16:3b:3f:51:4f:69:6d:
                    31:db:c6:a9:a6:9c:0c:35:99:11:08:d5:e1:fe:77:
                    50:8c:d4:d9:8a:12:04:ce:a3:8a:68:c7:73:70:56:
                    c0:ba:a8:0e:4e:f4:84:39:2a:4a:b8:9b:e4:fd:1e:
                    fa:48:0f:07:2c:ee:54:d3:6c:fe:3d:68:da:61:1b:
                    a0:bd:17:a4:66:bc:c8:b0:7b:73:b8:ea:aa:d2:75:
                    9b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:49:DC:93:85:52:44:E9:06:34:D7:06:C6:3E:16:5C:3F:ED:2B:53
            X509v3 Authority Key Identifier:
                keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/FF5213E8A81D11EFA74FFD31C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:cbc0:4::/47

    Signature Algorithm: sha256WithRSAEncryption
         0e:b0:4b:0e:93:e1:4a:a7:03:18:cb:22:be:54:ba:19:20:d9:
         65:bf:69:56:14:1a:34:58:1f:b1:2b:12:d4:cd:03:15:b1:43:
         09:b9:2e:b3:ac:22:b5:93:5b:8c:ac:ca:c4:a4:b1:5e:0f:f8:
         5d:6f:c5:7a:df:ca:9c:09:aa:2d:a3:bb:ec:30:61:5c:48:5e:
         66:a0:27:25:30:27:1c:41:41:9a:d9:71:0e:96:15:7c:62:b9:
         8e:55:20:10:8f:56:ac:c5:10:0e:82:26:a1:58:de:ac:1d:99:
         4b:d6:b2:25:d2:4c:de:d2:dd:a2:40:46:08:1e:bf:20:4e:1f:
         1e:63:ae:97:5a:0e:fa:bc:06:f8:37:66:b8:ef:b2:fc:32:2d:
         e1:96:91:08:7c:a2:d3:3d:5c:6a:c0:93:c3:c9:4a:6a:1e:0b:
         6b:99:be:fe:75:71:0d:7c:b9:79:e3:9e:61:52:ab:89:ab:08:
         15:ab:eb:1d:f6:4e:6c:cf:a6:f9:b7:88:58:9b:fb:b8:a7:3a:
         66:fa:6e:3e:46:44:1c:34:b0:86:15:6d:60:0e:3d:24:40:2b:
         f0:57:91:b0:a3:bb:cd:b3:d9:27:c9:05:35:b6:86:7e:6a:55:
         50:1f:1c:ec:09:7e:9c:ef:f2:1d:f9:13:20:20:76:ca:65:a9:
         54:62:b4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:45:54 2026 by rpki-client