Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/C6CD1F88A7F111F1B64CD5216211F970.roa
File:                     C6CD1F88A7F111F1B64CD5216211F970.roa (raw, json)
Hash identifier:          UaimprQYq0eQREUYcfKRisgfFqpSVoX92BDSH1JKOvk=
Subject key identifier:   35:A7:05:9C:D6:32:E7:C6:79:9A:5C:EC:88:8C:76:72:29:60:3C:C2
Certificate issuer:       /CN=A91F6697/serialNumber=EB58EC44157BFABD9B98250063AE47DCCAEABEE1
Certificate serial:       02
Authority key identifier: EB:58:EC:44:15:7B:FA:BD:9B:98:25:00:63:AE:47:DC:CA:EA:BE:E1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61jsRBV7-r2bmCUAY65H3MrqvuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/C6CD1F88A7F111F1B64CD5216211F970.roa
Signing time:             Thu 03 Sep 2026 23:47:09 +0000
ROA not before:           Thu 03 Sep 2026 23:47:09 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     139673
IP address blocks:        2001:df7:7240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.crl
                          rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61jsRBV7-r2bmCUAY65H3MrqvuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 28 Sep 2026 09:09:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6697, serialNumber=EB58EC44157BFABD9B98250063AE47DCCAEABEE1
        Validity
            Not Before: Sep  3 23:47:09 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=6a9a06fd-8e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:26:3d:95:13:25:db:c6:fd:fc:21:c3:75:6c:
                    24:29:16:b4:e0:db:06:b5:fe:db:68:af:87:b4:2d:
                    90:bb:db:a4:c4:8e:3b:d3:27:5d:a2:b5:07:93:d9:
                    6e:97:b4:8e:c3:ff:0f:6a:83:e5:a9:04:e7:3e:eb:
                    7f:86:39:9e:f0:9c:ac:44:32:f8:c9:4b:cd:3d:74:
                    a4:15:38:6f:86:9f:90:98:30:c1:49:8e:5b:62:73:
                    9c:de:7a:b0:c5:1c:32:ab:7f:65:52:bc:dc:32:87:
                    01:2f:ab:11:46:5f:a4:c4:1e:c0:ed:7a:03:3e:85:
                    33:15:36:a5:2a:1a:4a:ff:cf:c6:ad:ec:f9:9a:fb:
                    03:57:4e:04:3e:e4:47:6f:34:82:fb:68:e3:68:57:
                    8b:d4:18:18:4d:99:91:57:1a:3d:57:ee:60:09:78:
                    b1:84:93:4e:3a:20:7f:cc:6c:07:5a:f3:59:7f:7f:
                    ca:68:88:be:7f:d1:c9:74:d7:49:3c:00:66:d7:8f:
                    05:01:48:44:ea:a3:25:48:8d:36:0e:34:b7:97:da:
                    c5:01:55:f2:30:4f:a5:49:84:e0:48:75:72:8c:7a:
                    0e:4e:6d:98:1b:45:31:4e:7b:5e:7d:72:e8:19:b4:
                    b1:69:fe:1b:be:54:fb:c6:dc:3b:7c:16:be:3e:7f:
                    1a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A7:05:9C:D6:32:E7:C6:79:9A:5C:EC:88:8C:76:72:29:60:3C:C2
            X509v3 Authority Key Identifier:
                keyid:EB:58:EC:44:15:7B:FA:BD:9B:98:25:00:63:AE:47:DC:CA:EA:BE:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/61jsRBV7-r2bmCUAY65H3MrqvuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61jsRBV7-r2bmCUAY65H3MrqvuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6697/FB332016A7F011F1B7A18DD06111F970/C6CD1F88A7F111F1B64CD5216211F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:7240::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:22:7d:7a:6f:47:34:e3:fb:4a:aa:b4:fa:35:70:98:92:b7:
         a7:81:eb:19:10:c0:9d:35:7b:f8:06:61:14:43:a3:a2:1e:b8:
         91:1f:87:06:b9:ec:df:37:eb:f8:df:3c:ef:ca:ac:be:9b:37:
         81:82:97:39:43:22:38:42:e6:3e:cc:78:10:69:d2:1f:1a:01:
         64:34:31:cb:5d:23:16:7b:45:d8:c7:51:13:4c:8e:55:48:6d:
         06:4a:1d:34:53:d8:96:74:7c:5e:6d:25:2a:b2:b5:ad:90:6e:
         8e:4b:24:10:7f:19:e2:54:00:c3:68:5d:92:cf:69:99:d9:d6:
         cc:4a:aa:48:3e:2d:f0:29:2f:0a:2f:26:6c:bc:68:30:3a:c9:
         98:f6:88:a5:56:34:36:21:1c:b5:4e:02:3f:76:66:d3:85:d5:
         2a:8b:be:8e:41:3c:38:bc:5f:d2:8d:3e:ee:b5:c3:c3:ff:9a:
         ca:20:cf:c6:5c:15:87:ec:0e:49:8c:55:b8:1d:58:12:8a:fd:
         fb:42:94:85:70:4d:2b:d3:42:f9:0a:12:63:61:94:43:92:94:
         b2:1b:a0:3a:8d:61:cb:e9:32:06:3e:65:50:12:1c:15:9c:ac:
         80:0d:a8:8b:53:d7:e3:5d:33:5f:ca:50:dc:d5:4f:0f:4f:9a:
         75:db:c1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:32:47 2026 by rpki-client