Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/808D8B4AB40211F0AD5B7354C4F9AE02.roa
File:                     808D8B4AB40211F0AD5B7354C4F9AE02.roa (raw, json)
Hash identifier:          K1UTUb7anKdBiS5H6cyi3Qvilb7AAyufcdHnMSB1SCA=
Subject key identifier:   E0:CA:A6:E4:AD:E9:E8:E5:E7:10:58:5A:67:A8:C7:14:1B:04:86:C4
Certificate issuer:       /CN=A91A5BCD/serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
Certificate serial:       0AB4
Authority key identifier: 85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/808D8B4AB40211F0AD5B7354C4F9AE02.roa
Signing time:             Sun 10 May 2026 20:23:59 +0000
ROA not before:           Sun 10 May 2026 20:23:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     138471
IP address blocks:        2001:df3:5c80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl
                          rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:34:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2740 (0xab4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5BCD, serialNumber=859D184F41C34898B7298C991075CCCF51679AF1
        Validity
            Not Before: May 10 20:23:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=6a00e95f-9ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9e:a7:c4:4b:05:78:61:21:d1:8a:ca:cd:dd:
                    33:20:a5:22:f6:ca:32:a8:ee:ce:b7:53:44:96:32:
                    44:91:b2:2f:05:ca:f0:9d:1f:6b:46:0b:2f:de:1e:
                    b9:3c:d6:a5:1e:87:e4:e5:69:45:3b:63:f8:64:4f:
                    e4:83:8d:91:60:bf:95:ff:86:6b:8d:14:02:1a:b9:
                    18:cc:0d:82:03:f2:2e:39:06:58:0e:9f:7b:09:93:
                    2b:b0:21:05:3c:e8:61:9f:e3:aa:28:45:ed:e7:01:
                    06:99:b8:00:42:83:6a:a4:89:a5:9a:3b:b4:a9:96:
                    6d:88:44:ff:dd:fa:e5:8e:fb:3c:a1:2f:fc:fe:28:
                    98:ce:97:37:a1:c3:1f:fe:f5:cc:17:4c:95:b5:17:
                    0c:8e:7b:eb:5a:2d:4b:8c:66:65:b4:88:52:de:59:
                    36:24:2d:b2:40:b2:5a:b6:75:1e:44:5a:66:8e:98:
                    ac:3d:3d:78:a5:7e:e3:c7:f5:bd:ad:f5:65:a6:53:
                    b0:9d:28:29:75:77:1a:69:21:74:be:07:8f:57:f6:
                    73:30:20:ce:09:ae:b7:fa:53:32:c2:94:d2:ab:f9:
                    a7:48:03:5d:c5:5f:63:87:06:ad:fc:3e:13:80:44:
                    b3:62:a1:ff:fb:87:52:c8:81:e7:c0:0f:ba:f6:4d:
                    3e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:CA:A6:E4:AD:E9:E8:E5:E7:10:58:5A:67:A8:C7:14:1B:04:86:C4
            X509v3 Authority Key Identifier:
                keyid:85:9D:18:4F:41:C3:48:98:B7:29:8C:99:10:75:CC:CF:51:67:9A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hZ0YT0HDSJi3KYyZEHXMz1FnmvE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5BCD/61D0C4867A3A11EABF8B5826C4F9AE02/808D8B4AB40211F0AD5B7354C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:5c80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:21:3f:ed:bb:b2:69:d2:02:98:f6:d9:fa:a6:73:08:6d:4f:
         bd:cf:23:4a:e1:3d:f8:b2:c7:3e:ec:56:eb:a3:9a:d4:fe:ba:
         76:46:4e:ba:16:fc:f0:ef:37:6a:c0:cc:fb:a7:d3:7d:f4:19:
         e3:21:c0:82:7c:37:7c:d3:88:ef:3f:d0:f8:b6:56:c2:05:bb:
         4b:71:9a:b7:d7:2a:26:43:49:47:28:cf:21:6a:ae:12:0f:1d:
         6d:26:49:c1:d5:4d:5b:3f:ed:d7:17:e2:a6:1d:be:00:3e:38:
         49:ec:e7:e3:f6:ae:5a:49:75:20:e7:41:8e:ea:46:79:82:45:
         62:12:1e:76:08:75:8c:ff:71:d6:85:bf:cb:af:42:b9:f2:30:
         3a:1a:51:12:d3:b1:66:f5:48:13:9e:1d:6a:18:0d:6b:07:99:
         f1:68:a5:35:57:68:b7:fc:a5:70:4a:57:38:59:07:b7:86:97:
         ee:b6:d0:4b:74:24:4f:78:29:9d:32:d4:03:40:88:3f:c8:b9:
         f1:cd:63:b3:e7:1b:59:8f:b3:2e:2f:0e:ea:e4:00:26:fe:68:
         48:46:a0:12:a2:5d:fc:ad:8c:03:ac:88:38:74:4c:7d:1b:44:
         da:16:17:12:fe:6d:52:b9:03:25:da:57:a2:d5:72:d7:10:1d:
         08:eb:0c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:39:15 2026 by rpki-client