Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/F1CD29047C8011F19A00D38478A30FBC.roa
File:                     F1CD29047C8011F19A00D38478A30FBC.roa (raw, json)
Hash identifier:          hC97lom9DKTata6nuBTwWb1tpOUqOikEDUgwzjzb3oA=
Subject key identifier:   82:A0:FE:B4:8B:A9:FA:77:3D:AB:C5:68:F5:EB:3D:D9:C2:66:F6:B3
Certificate issuer:       /CN=A91B1018/serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
Certificate serial:       04D8
Authority key identifier: AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/F1CD29047C8011F19A00D38478A30FBC.roa
Signing time:             Fri 10 Jul 2026 17:01:08 +0000
ROA not before:           Fri 10 Jul 2026 17:01:08 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     147003
IP address blocks:        2400:5a60:fe2a::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl
                          rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1240 (0x4d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B1018, serialNumber=AFD0955A7DD7F9B0EC2A44A11D937207C2754A63
        Validity
            Not Before: Jul 10 17:01:08 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a512554-1f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:f9:74:6b:31:65:02:49:1a:45:2e:46:01:
                    e0:a8:10:e4:7e:72:5a:bb:84:5e:81:08:7d:e1:51:
                    9a:02:81:5d:46:b8:de:85:e6:3a:f4:f6:ad:16:ce:
                    74:4f:65:a4:6a:27:d0:67:c0:99:d0:4e:06:f8:fc:
                    d4:ae:48:87:70:1c:55:90:71:dd:f8:96:42:9a:83:
                    97:e0:e7:6b:a3:cc:29:77:03:ab:40:89:49:3b:7c:
                    7e:07:48:95:f4:6c:4a:9c:3b:c5:67:ea:05:b2:be:
                    84:e1:1f:b2:d8:a9:e5:31:82:d2:86:ac:4b:57:f5:
                    cf:83:9c:4e:1e:1d:44:d9:6d:23:9c:06:3f:e3:49:
                    26:73:b0:c1:88:91:af:61:55:c5:1d:a6:5c:aa:e1:
                    9e:72:c9:e9:06:d7:6d:3b:e4:fd:c0:b5:3f:ac:25:
                    78:f1:76:7d:c8:c0:b8:35:d5:4c:76:3b:fc:4d:a6:
                    8e:e7:fb:bd:f1:75:e7:e9:cf:cb:82:79:14:db:e7:
                    6d:cb:0e:ea:59:8e:39:31:bb:fb:02:66:23:bf:ca:
                    94:02:69:9e:fa:1d:89:b1:90:ec:fc:43:bc:b3:fe:
                    a7:3b:7c:eb:d0:ea:96:77:27:79:65:81:a6:fb:88:
                    17:e3:94:13:0b:ec:cc:39:e4:72:a4:5d:54:9e:66:
                    1e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:A0:FE:B4:8B:A9:FA:77:3D:AB:C5:68:F5:EB:3D:D9:C2:66:F6:B3
            X509v3 Authority Key Identifier:
                keyid:AF:D0:95:5A:7D:D7:F9:B0:EC:2A:44:A1:1D:93:72:07:C2:75:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/r9CVWn3X-bDsKkShHZNyB8J1SmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r9CVWn3X-bDsKkShHZNyB8J1SmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/8836FA608D4C11EC988AE85DC4F9AE02/F1CD29047C8011F19A00D38478A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:5a60:fe2a::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:f8:e2:07:ff:0d:b1:33:47:da:42:2f:3b:4d:be:fd:e0:86:
         13:68:63:a7:3c:47:8a:6c:1d:21:8c:6d:26:4d:33:cd:86:c0:
         06:53:5e:d0:26:ee:0f:3d:d8:ca:ec:f6:bf:eb:ba:21:1e:75:
         ff:c9:dc:e3:ef:b0:a7:45:52:5e:96:1b:86:43:af:f6:74:48:
         0a:47:f0:9c:e7:06:54:3e:5a:4d:35:c0:3e:8d:06:ef:e3:d7:
         23:cd:45:3c:71:1d:10:48:b4:62:63:3e:d9:b3:3a:96:4c:e6:
         27:47:58:e7:df:bb:61:b0:69:e0:e9:93:e7:e5:09:b2:87:2e:
         6f:00:e2:3a:0a:97:05:29:8b:b0:4b:ff:bf:ef:ad:50:a1:d8:
         93:33:ae:2b:57:ef:0c:3e:a2:f6:69:56:b1:cc:2e:db:e4:41:
         26:3c:7e:46:88:88:34:c7:52:ad:92:dd:83:3d:b2:66:b9:b6:
         2b:7a:16:8f:05:f1:98:76:f2:96:30:bf:70:f1:df:64:a6:b2:
         89:92:07:b3:eb:7b:e8:ea:78:42:0b:11:00:d4:d1:28:1c:d1:
         2c:5c:1d:bd:11:43:ca:dc:df:de:16:6f:50:42:8b:3f:06:4e:
         db:b5:f2:32:3f:a7:fe:28:ed:8a:5d:95:c4:27:4c:b6:a1:92:
         9c:47:91:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:40 2026 by rpki-client