Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/636B090C609A11EDAAF70C26C4F9AE02.roa
File:                     636B090C609A11EDAAF70C26C4F9AE02.roa (raw, json)
Hash identifier:          G+lt/1Mwh8N7G8KWZS1xUI3dDM2zaitfuprZkeWdjHk=
Subject key identifier:   C5:A2:26:BE:29:6E:9A:BB:40:C3:E2:47:E8:E3:90:DD:CE:1B:FC:83
Certificate issuer:       /CN=A91EF547/serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
Certificate serial:       043F
Authority key identifier: A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/636B090C609A11EDAAF70C26C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 15:49:30 +0000
ROA not before:           Thu 20 Nov 2025 23:15:58 +0000
ROA not after:            Wed 30 Dec 2026 00:00:00 +0000
asID:                     147067
IP address blocks:        2001:df7:b180::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl
                          rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087 (0x43f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF547, serialNumber=A683632546F1A10784BC1A4FF6FA0BBE6CEC2D4E
        Validity
            Not Before: Nov 20 23:15:58 2025 GMT
            Not After : Dec 30 00:00:00 2026 GMT
        Subject: CN=69a4600a-e3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:26:44:6b:b3:7f:18:84:a4:ab:89:48:15:43:
                    ee:91:3e:76:97:68:b3:c7:04:2c:91:fc:dc:18:0a:
                    49:0d:b1:c6:8b:d2:24:ad:32:b4:13:e3:f3:7c:28:
                    39:c7:70:e1:96:b8:8a:9c:28:46:ce:52:29:04:9c:
                    58:7f:30:c2:c1:ba:a0:c6:eb:ba:8c:c5:14:ab:96:
                    bd:b5:39:eb:e0:ab:98:68:04:df:c9:2a:c5:9d:27:
                    43:66:59:bc:e5:fd:d0:91:92:f6:a6:60:09:02:e6:
                    7d:01:10:76:78:da:fc:9c:74:13:21:8b:51:db:69:
                    a1:b9:d2:ef:d6:d6:c2:3c:c7:30:6f:5c:ba:b3:8f:
                    72:8e:8f:09:83:49:df:eb:c6:e2:c8:3e:fd:22:a4:
                    40:cd:0b:01:c8:33:63:6a:e9:84:92:a5:0f:78:60:
                    95:63:05:75:db:b0:80:27:b9:2f:fe:52:e1:1c:26:
                    dd:40:11:46:6e:e9:f6:0d:fa:0c:a3:df:3f:65:a3:
                    d3:bf:1e:5a:d4:ab:dd:53:a8:89:93:58:61:3f:90:
                    62:5f:5d:7d:83:25:c8:2e:05:91:99:3f:ea:6f:c9:
                    0a:d4:05:29:92:ca:8f:f4:ac:0b:02:96:39:c9:55:
                    f3:8d:47:5c:a6:71:d5:a9:95:bb:d9:10:c0:fc:dd:
                    41:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:A2:26:BE:29:6E:9A:BB:40:C3:E2:47:E8:E3:90:DD:CE:1B:FC:83
            X509v3 Authority Key Identifier:
                keyid:A6:83:63:25:46:F1:A1:07:84:BC:1A:4F:F6:FA:0B:BE:6C:EC:2D:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/poNjJUbxoQeEvBpP9voLvmzsLU4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/poNjJUbxoQeEvBpP9voLvmzsLU4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF547/626E109498C711EC86A00949C4F9AE02/636B090C609A11EDAAF70C26C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:b180::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:63:66:88:51:66:8c:37:85:27:ab:ff:6b:e3:41:4b:a0:72:
         a6:71:71:6e:65:db:b9:24:1a:67:22:77:f7:ce:c5:28:32:55:
         97:05:99:e5:9b:57:9e:70:2c:ef:0a:2d:f0:d9:5c:ff:9e:c1:
         6c:df:a0:6b:77:55:3c:92:f5:aa:77:77:a7:eb:37:c6:a3:44:
         de:be:17:b4:99:75:5c:5f:95:52:b9:b1:60:8e:f5:9c:71:49:
         9a:45:af:83:4e:e5:ed:4b:b0:45:98:e9:dd:37:ca:4f:e1:6c:
         89:c9:31:b5:3c:a2:41:fc:e6:65:71:eb:95:00:d8:98:e0:73:
         02:ac:f4:74:a4:d3:da:fb:9a:da:14:ad:2e:6f:b6:2f:2c:e1:
         f8:00:ac:31:87:60:72:c2:30:85:f3:b3:6d:da:32:21:3d:5c:
         ac:3a:38:75:79:eb:84:ed:ab:4b:46:46:47:83:75:cc:1b:a4:
         bd:5f:7e:b8:34:c0:8a:26:d1:79:08:e6:5f:af:10:d5:e2:69:
         b8:4f:4c:e1:06:b8:f5:df:c3:f6:5f:90:3c:2b:1a:e2:09:2b:
         4c:29:1d:92:bb:10:28:d2:90:e6:11:fa:50:d9:02:42:64:2b:
         6a:c7:9a:cb:af:45:a9:d4:cb:a4:c6:ab:67:a2:49:70:0d:0b:
         6b:61:e1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:09:40 2026 by rpki-client