Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/654E27420CA311F0A866C650C4F9AE02.roa
File:                     654E27420CA311F0A866C650C4F9AE02.roa (raw, json)
Hash identifier:          bycVgkYzPPbBgP8wgig/oYIPYmXdNAtWqQrWGOOUFe0=
Subject key identifier:   EA:F3:51:91:B4:70:2D:FA:68:6E:74:E8:E2:04:C4:7C:F8:DA:B0:04
Certificate issuer:       /CN=A91364F5/serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
Certificate serial:       0189
Authority key identifier: CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/654E27420CA311F0A866C650C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 13:20:07 +0000
ROA not before:           Tue 01 Apr 2025 05:31:05 +0000
ROA not after:            Thu 28 May 2026 00:00:00 +0000
asID:                     152606
IP address blocks:        2001:df5:4bc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl
                          rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:49:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 393 (0x189)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91364F5, serialNumber=CCB8E08F9990A75531E936ADB06DBACAA731B552
        Validity
            Not Before: Apr  1 05:31:05 2025 GMT
            Not After : May 28 00:00:00 2026 GMT
        Subject: CN=69a58e87-7496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6e:4b:86:92:0b:6d:49:d8:95:a1:8a:d1:1e:
                    0d:87:df:c6:b8:43:b1:2d:a1:9c:a0:39:22:fa:b2:
                    e4:9a:46:8e:d5:90:db:2f:1d:59:fa:4d:a9:58:e5:
                    3e:50:3d:36:37:ed:ac:da:1a:59:47:66:af:35:ab:
                    9e:21:e3:d6:56:fd:59:91:24:72:7d:e2:05:e2:54:
                    3f:6e:ab:3c:f8:d4:57:02:ee:d2:14:36:52:ef:e0:
                    86:97:d3:7b:1d:a0:2c:92:a4:b0:8d:83:63:26:b3:
                    5b:61:7d:ee:7f:3e:90:88:99:aa:87:89:34:d1:9e:
                    63:25:8f:ba:03:e7:a6:b3:ba:43:0e:c7:1a:70:7a:
                    e1:ad:fd:f0:97:22:fc:d1:9e:13:de:a4:66:8c:23:
                    9e:ee:c5:68:13:69:a3:30:a8:c7:08:96:c4:1f:a2:
                    7d:77:50:75:f8:fb:51:18:ae:9d:05:69:66:40:b8:
                    1e:3f:ab:97:67:2a:bb:f9:26:2e:d6:62:03:48:d7:
                    bf:3b:d3:c1:46:ee:5c:14:ab:04:02:8e:33:a1:73:
                    4d:40:4c:5e:42:98:99:6d:6d:01:63:81:03:24:a0:
                    0c:14:80:fe:a2:3e:b1:63:f5:62:33:1e:17:a7:7b:
                    a4:cf:56:40:8a:2f:64:c6:f5:60:1d:db:61:ab:59:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F3:51:91:B4:70:2D:FA:68:6E:74:E8:E2:04:C4:7C:F8:DA:B0:04
            X509v3 Authority Key Identifier:
                keyid:CC:B8:E0:8F:99:90:A7:55:31:E9:36:AD:B0:6D:BA:CA:A7:31:B5:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/zLjgj5mQp1Ux6TatsG26yqcxtVI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zLjgj5mQp1Ux6TatsG26yqcxtVI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91364F5/3A3A210ED9E211EE9BAE372EC4F9AE02/654E27420CA311F0A866C650C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:4bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:fc:81:bb:87:80:2c:96:e4:6d:1a:09:b0:52:3a:b4:da:e5:
         63:5d:a2:0b:d8:32:97:1c:ef:74:e3:a9:01:65:18:99:fc:19:
         36:01:af:e6:7f:64:7c:f6:54:f0:20:08:a2:0f:c0:68:69:3f:
         13:4b:bb:93:32:28:6c:0c:c5:90:96:91:dd:97:27:5f:e6:21:
         7b:69:bc:3d:d2:66:c4:39:25:f2:da:8b:65:b2:63:fd:78:5d:
         4a:23:bd:44:ea:bd:20:2c:a0:9e:6b:4f:71:5e:c9:d2:5a:06:
         d4:af:a7:25:d5:dc:cc:3c:8d:8e:85:80:b7:a9:5e:fc:d8:cf:
         15:7b:c2:1b:2e:93:bd:ba:ca:b7:e4:56:a7:60:ad:8b:b7:b7:
         50:81:9a:df:b4:c7:bf:d0:15:a6:d5:4e:07:dc:79:26:73:6d:
         ef:0b:98:b7:60:6e:68:83:e6:47:3c:1f:64:34:ea:0a:92:03:
         eb:8b:35:99:44:6a:98:40:fb:a0:3e:63:0e:b1:68:c6:80:da:
         a2:13:ad:26:0b:ec:69:42:71:25:bd:8b:38:87:76:81:a0:c6:
         d2:b2:d3:b4:a8:93:ea:91:3e:3d:cc:02:88:f9:73:73:75:cf:
         83:8e:c1:35:74:b7:b6:ed:32:86:9b:d8:10:98:04:e5:04:91:
         8e:e4:aa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:53:51 2026 by rpki-client