Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/A39294F2B31911F1AD8137FA6511F970.roa
File:                     A39294F2B31911F1AD8137FA6511F970.roa (raw, json)
Hash identifier:          Zma4t38tztu49pqbn5EJV9Y/LliEvIBeR5nXDKoUMC8=
Subject key identifier:   B0:78:32:D3:4F:F8:59:2D:DF:7C:8E:C7:F4:BD:00:B8:7A:4D:EA:90
Certificate issuer:       /CN=A91B4E1D/serialNumber=DDDC7102AD92D9D81A60C43A4F6B42934D511BA2
Certificate serial:       03
Authority key identifier: DD:DC:71:02:AD:92:D9:D8:1A:60:C4:3A:4F:6B:42:93:4D:51:1B:A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/A39294F2B31911F1AD8137FA6511F970.roa
Signing time:             Fri 18 Sep 2026 04:30:13 +0000
ROA not before:           Fri 18 Sep 2026 04:30:13 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     154796
IP address blocks:        2001:df7:5040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl
                          rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 09:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4E1D, serialNumber=DDDC7102AD92D9D81A60C43A4F6B42934D511BA2
        Validity
            Not Before: Sep 18 04:30:13 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6aacbe54-0efa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:3c:84:6c:55:f2:7a:d9:bb:f6:b7:b2:3d:3a:
                    cd:39:77:23:86:41:31:1c:51:8c:d4:59:9d:ce:f6:
                    ed:48:ca:1e:ac:00:de:f5:5c:5e:f9:7d:32:fb:9d:
                    97:34:29:3b:e9:3d:0d:a3:70:80:6b:5e:31:c2:85:
                    4f:6d:41:2c:aa:a8:b5:df:01:4a:6d:3e:af:24:57:
                    4d:cc:3b:32:4f:5a:be:c2:98:ba:42:0e:ca:68:1d:
                    69:f6:91:77:d7:5b:4f:f8:98:85:e4:27:0b:80:c8:
                    8e:6a:fe:c5:06:ee:fd:25:44:22:61:d8:ea:d2:df:
                    2b:c3:4e:13:df:ad:bc:67:9d:21:97:b0:19:96:60:
                    fe:f5:7e:41:86:f7:f8:6b:25:7a:28:d9:38:a4:e5:
                    d2:17:a7:17:54:03:22:ba:7c:94:df:8e:9e:6a:60:
                    c0:92:91:27:b2:fd:55:b6:10:e3:fa:9b:aa:20:a4:
                    6b:6f:30:99:74:c7:ce:b7:27:8f:a9:d0:1b:5f:91:
                    4b:bf:cd:5f:9d:e1:8b:c8:cd:e5:52:18:22:4f:bd:
                    14:cf:59:de:a7:36:fb:17:c1:79:b1:80:69:08:b4:
                    fb:d0:0d:0e:8d:6c:be:1c:f9:14:16:c8:3b:f7:e8:
                    4d:9f:42:6d:92:f7:45:11:24:91:02:09:0d:10:71:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:78:32:D3:4F:F8:59:2D:DF:7C:8E:C7:F4:BD:00:B8:7A:4D:EA:90
            X509v3 Authority Key Identifier:
                keyid:DD:DC:71:02:AD:92:D9:D8:1A:60:C4:3A:4F:6B:42:93:4D:51:1B:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/3dxxAq2S2dgaYMQ6T2tCk01RG6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3dxxAq2S2dgaYMQ6T2tCk01RG6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E1D/7F860CE8B21E11F187A6F6EF5811F970/A39294F2B31911F1AD8137FA6511F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:5040::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:f1:40:ba:65:13:3a:d4:b4:4a:aa:e6:cd:e3:a0:55:d1:67:
         b0:88:37:06:b8:bb:3d:1d:d8:74:ca:ff:82:38:41:ba:83:cc:
         31:36:4a:01:24:5a:20:f8:10:2f:f1:bb:42:09:5a:ad:ad:fc:
         bb:fd:b5:28:b9:8b:e5:3e:22:80:c2:8b:19:f8:33:49:b8:81:
         4c:00:91:d5:d6:45:0f:90:af:13:fe:7e:d9:b9:e7:0d:45:c8:
         e3:82:d7:16:62:ca:25:d8:43:bd:1a:6a:94:94:f1:2d:03:9b:
         63:a9:ec:72:ed:9c:e1:63:f7:68:f3:39:b2:d8:56:c5:bd:cf:
         cf:ea:d6:f9:e2:7a:ad:9d:78:df:5b:44:9d:90:15:56:91:97:
         a3:14:1c:ee:e4:71:3b:51:52:d7:50:83:7f:71:60:ca:ff:30:
         ea:18:aa:41:3d:fe:63:60:53:fe:05:1a:c3:3f:4d:c3:7c:da:
         ba:7c:17:c1:f9:cd:4e:e1:1b:89:47:f3:b1:0c:c0:e3:87:a7:
         e2:68:79:b5:56:1a:91:a3:87:57:be:9b:6c:b9:87:65:f8:71:
         ae:56:c7:96:d1:5a:80:8c:cb:df:4d:a4:60:d6:55:71:07:b6:
         cf:b3:45:f8:c4:f4:9c:40:6c:23:81:29:d9:4f:88:a5:6f:b2:
         12:d4:af:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:46:05 2026 by rpki-client