Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/16261DCC85D411F1B888CCFF69A30FBC.roa
File:                     16261DCC85D411F1B888CCFF69A30FBC.roa (raw, json)
Hash identifier:          KhZuvpiH1QtAzasVJFC3Nq++oQgjiVWH6Qo6hINf7iE=
Subject key identifier:   6B:95:EA:D6:8D:74:9C:BE:F9:36:8D:D8:57:78:73:89:34:65:66:4A
Certificate issuer:       /CN=A91A9E90/serialNumber=336DD4F145FBD7A9106AEF1F06D91707D250B77A
Certificate serial:       0A
Authority key identifier: 33:6D:D4:F1:45:FB:D7:A9:10:6A:EF:1F:06:D9:17:07:D2:50:B7:7A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/16261DCC85D411F1B888CCFF69A30FBC.roa
Signing time:             Wed 22 Jul 2026 13:48:58 +0000
ROA not before:           Wed 22 Jul 2026 13:48:58 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     154689
IP address blocks:        2402:5f60::/48 maxlen: 48
                          2402:5f60:1::/48 maxlen: 48
                          2402:5f60:2::/48 maxlen: 48
                          2402:5f60:3::/48 maxlen: 48
                          2402:5f60:4::/48 maxlen: 48
                          2402:5f60:5::/48 maxlen: 48
                          2402:5f60:6::/48 maxlen: 48
                          2402:5f60:7::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E90, serialNumber=336DD4F145FBD7A9106AEF1F06D91707D250B77A
        Validity
            Not Before: Jul 22 13:48:58 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a60ca49-f578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:ac:4d:d5:eb:d4:6a:19:d1:44:1a:3f:3c:
                    2c:16:c6:5e:7b:fe:dc:09:85:75:49:ea:b4:ca:6a:
                    a3:55:46:fe:c9:46:07:53:dd:c3:e1:b0:20:bc:c7:
                    de:60:a5:d3:da:e1:34:6a:0d:5d:26:df:6f:cc:a2:
                    e9:5f:5b:dd:f6:53:48:7e:bc:b8:aa:30:13:de:ad:
                    78:99:b4:8b:30:5b:a8:7f:ff:15:50:e2:3e:15:22:
                    39:0a:08:97:cf:8d:68:12:28:57:4b:2e:99:53:2d:
                    c3:d4:2a:79:31:b0:0c:39:30:c7:03:f4:77:f9:89:
                    1e:f1:9b:7a:28:57:50:10:d6:d0:2e:82:f0:99:c2:
                    7f:a8:e8:50:01:aa:d1:dc:80:0f:31:cd:0f:7a:08:
                    93:80:3e:57:1e:62:c6:fd:0f:82:24:0c:60:77:81:
                    b3:e0:2d:6b:02:c9:06:56:43:cd:1c:c3:e0:f8:53:
                    72:e3:9c:c3:9d:3f:fb:ed:6f:c1:58:f8:a3:fa:99:
                    64:6d:19:f6:65:61:d9:eb:e3:fa:09:62:fc:72:8b:
                    18:57:67:2f:ff:fa:4e:8d:c9:a3:4c:14:4e:c5:3c:
                    76:04:90:a3:1a:92:bd:d6:5d:82:cf:be:df:b8:84:
                    25:f3:bd:d2:d2:92:aa:2c:7d:89:0d:49:4d:d7:e7:
                    08:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:95:EA:D6:8D:74:9C:BE:F9:36:8D:D8:57:78:73:89:34:65:66:4A
            X509v3 Authority Key Identifier:
                keyid:33:6D:D4:F1:45:FB:D7:A9:10:6A:EF:1F:06:D9:17:07:D2:50:B7:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/M23U8UX716kQau8fBtkXB9JQt3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M23U8UX716kQau8fBtkXB9JQt3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5EE6307C79AB11F18143ADB294A30FBC/16261DCC85D411F1B888CCFF69A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:5f60::/45

    Signature Algorithm: sha256WithRSAEncryption
         8a:25:d4:c8:99:0f:d2:84:1e:9c:c5:42:b3:46:96:17:6f:2e:
         87:be:9d:57:90:f7:7c:a0:9b:a5:d7:e8:2a:aa:56:53:a1:52:
         c1:f5:ec:91:61:10:c3:0e:1b:5b:1f:ab:7f:e4:cd:47:ca:bf:
         16:0d:ad:64:49:bf:07:a6:63:74:7b:65:28:69:b4:cd:d2:19:
         9e:1f:95:35:3c:99:57:26:84:e5:96:1d:4c:6f:d7:bb:bf:af:
         78:5d:3c:69:b3:38:08:95:85:3a:5e:76:a0:94:ae:fe:1b:11:
         f7:24:1d:61:15:49:72:ef:15:1a:8b:cd:41:d8:e3:2c:9a:54:
         6b:af:29:49:6e:bc:73:9e:14:ac:1c:33:1d:b2:37:11:b3:aa:
         ee:b2:4b:ed:70:10:5f:05:b6:3c:68:e7:c9:d5:fa:f9:e5:73:
         67:86:30:1c:c5:77:84:58:a0:88:d0:37:65:e7:92:e1:89:4f:
         52:cd:bf:12:86:ee:bb:17:a7:4a:9e:e7:a1:f8:38:c0:e1:88:
         b4:f2:aa:77:5e:4b:dd:9a:05:b6:ee:b2:85:6a:0c:ed:73:58:
         85:94:7b:a9:21:0e:4e:f7:41:1f:36:92:e6:44:ad:a6:44:13:
         3a:63:c2:15:9b:3a:8d:0f:f2:49:06:12:76:41:c3:37:03:06:
         21:ee:a3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:06 2026 by rpki-client