Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/539136C6F0E511F09202A4D23F6F56BC.roa
File:                     539136C6F0E511F09202A4D23F6F56BC.roa (raw, json)
Hash identifier:          bv8hAii8IBBcjQIwrMf8GUZWf/VgsIf/dqtlfRtbnHg=
Subject key identifier:   C6:0C:6D:03:6F:B2:52:B9:46:DB:C0:5D:8E:F5:FC:33:1B:50:86:B5
Certificate issuer:       /CN=A91A68C0/serialNumber=EB1253D12C38FAB47EEDF25B6A641E03C2866F98
Certificate serial:       9F
Authority key identifier: EB:12:53:D1:2C:38:FA:B4:7E:ED:F2:5B:6A:64:1E:03:C2:86:6F:98
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/539136C6F0E511F09202A4D23F6F56BC.roa
Signing time:             Thu 05 Nov 2026 08:54:23 +0000
ROA not before:           Thu 05 Nov 2026 08:54:23 +0000
ROA not after:            Wed 01 Mar 2028 00:00:00 +0000
asID:                     147028
IP address blocks:        2001:df6:47c0::/48 maxlen: 49
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.crl
                          rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 22 Nov 2026 07:31:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A68C0, serialNumber=EB1253D12C38FAB47EEDF25B6A641E03C2866F98
        Validity
            Not Before: Nov  5 08:54:23 2026 GMT
            Not After : Mar  1 00:00:00 2028 GMT
        Subject: CN=6aec443f-3370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:5c:69:c6:5d:be:1b:31:52:8c:df:b1:9c:
                    24:43:57:d0:47:9e:50:94:95:11:a4:57:5d:ad:05:
                    f0:c3:f6:15:e2:a9:63:5c:e0:2f:ed:ea:e4:d1:7c:
                    1f:b8:a7:55:86:fd:33:8e:95:20:81:a9:55:bb:84:
                    d9:33:fc:27:a0:bb:83:75:c6:b6:f7:d4:b7:12:0f:
                    2e:9a:6c:6a:50:bf:c6:65:b2:a8:1a:13:46:b2:b4:
                    21:f3:7e:c8:e3:73:85:0a:da:ee:ce:89:7f:66:48:
                    f1:4c:82:67:99:1f:61:0f:ff:c5:70:01:1a:8d:7c:
                    be:a5:b7:b7:d9:5c:3c:2b:7b:5f:6d:fb:40:8c:3c:
                    75:18:0b:dd:f3:88:38:d0:f4:ea:63:16:cc:b5:66:
                    b8:cb:0d:02:61:41:09:5c:dd:6a:50:02:6e:26:9a:
                    13:8f:30:0e:18:d2:e2:a2:79:96:af:e9:fb:f1:78:
                    7c:40:42:c6:c2:df:b5:43:4f:f0:d6:e2:d6:60:54:
                    66:3e:fd:c9:ed:3d:06:64:d1:d0:dc:a7:06:e5:c1:
                    99:52:27:28:75:71:d5:d9:c9:f2:87:79:e4:60:b8:
                    86:8a:73:c8:d7:90:76:b3:77:d7:3f:a2:22:c0:86:
                    ed:07:1f:97:1b:88:3a:1f:60:22:0a:a5:85:1b:5f:
                    82:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0C:6D:03:6F:B2:52:B9:46:DB:C0:5D:8E:F5:FC:33:1B:50:86:B5
            X509v3 Authority Key Identifier:
                keyid:EB:12:53:D1:2C:38:FA:B4:7E:ED:F2:5B:6A:64:1E:03:C2:86:6F:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/6xJT0Sw4-rR-7fJbamQeA8KGb5g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6xJT0Sw4-rR-7fJbamQeA8KGb5g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A68C0/733A3762F0D511F08429E12B3B6F56BC/539136C6F0E511F09202A4D23F6F56BC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:47c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:03:bc:51:fe:ff:b3:00:e8:74:2d:ea:4f:a0:95:71:04:1e:
         88:cf:6f:78:b3:6d:b1:71:20:3e:13:3d:8b:84:88:01:c3:b3:
         36:e2:8c:ff:22:be:18:ed:0f:46:6b:55:17:c4:c8:e4:45:9b:
         40:21:9f:f8:ef:46:f2:8f:7a:cc:89:00:8c:c4:ad:a0:11:34:
         61:a9:68:d2:87:f0:29:95:e2:62:f1:40:bd:10:e2:3d:c9:9b:
         5e:b9:1b:c3:b3:e6:b6:52:6f:78:e9:20:ef:20:47:f9:d2:3b:
         e1:b5:fe:72:ef:e5:59:b0:c1:fd:c4:6e:5d:ff:a0:f7:ca:5f:
         e5:7a:66:85:dd:36:ef:c7:0c:21:ac:3d:7f:39:26:42:65:7f:
         e6:f5:b2:8e:55:d2:49:d8:f4:80:f2:4b:17:19:e9:40:f0:45:
         4d:81:e6:ed:29:01:b0:53:04:20:7e:c8:50:43:75:8d:b7:6e:
         9d:c4:5f:82:0a:9b:f2:79:68:fc:9a:be:e3:60:18:d6:76:3c:
         2a:05:3d:f9:3d:aa:d1:df:30:17:53:cd:56:3f:7e:0c:5a:68:
         07:24:0d:ce:49:e0:2d:63:07:f6:fb:cc:5c:59:6c:96:c1:11:
         f7:73:8b:68:57:2e:bd:0e:2e:ce:cb:c9:d6:70:b7:3f:57:15:
         c8:f0:2b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:19:42 2026 by rpki-client