Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/A242BED45E1511EFBBFB911EC4F9AE02.roa
File:                     A242BED45E1511EFBBFB911EC4F9AE02.roa (raw, json)
Hash identifier:          m94ejFy3KdwSThtWwkwsF3c7v325vWdrkv6tpZwcmRw=
Subject key identifier:   0B:15:51:83:0B:19:99:7F:9B:BE:C1:56:4C:3C:B0:16:55:D5:F8:1B
Certificate issuer:       /CN=A91B673B/serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
Certificate serial:       018C
Authority key identifier: 15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/A242BED45E1511EFBBFB911EC4F9AE02.roa
Signing time:             Mon 07 Sep 2026 04:55:39 +0000
ROA not before:           Mon 07 Sep 2026 04:55:39 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     153166
IP address blocks:        2001:df4:1040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl
                          rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 02 Oct 2026 04:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B673B, serialNumber=15CF50DB52B0F12F1A6E3B39633D482E09CFE35C
        Validity
            Not Before: Sep  7 04:55:39 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a9e43cb-cae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b8:0e:8f:06:84:ed:cb:b5:27:4e:6b:27:84:
                    e4:6e:04:c6:96:68:5b:2c:92:ee:46:f0:48:bd:67:
                    fe:5b:50:5b:ee:7d:5b:65:9b:25:8a:f9:d1:9b:8c:
                    ec:4b:87:c5:27:83:3c:52:40:fd:aa:4e:b1:14:f7:
                    2e:64:56:42:8d:76:35:36:2b:7c:13:e3:fd:ad:64:
                    91:2d:4b:b8:55:be:b0:83:80:69:e5:ca:92:09:45:
                    ed:12:ca:0d:5a:34:d5:35:fb:cf:50:ba:a3:4f:56:
                    e5:98:f9:2a:b7:ad:fb:a2:eb:6b:06:07:19:21:60:
                    a4:f1:01:c0:24:3a:8f:fc:73:01:bb:da:bb:17:9b:
                    a7:07:11:df:7d:d5:40:68:fe:17:e8:8c:3d:37:2c:
                    22:7b:76:72:d3:f9:32:f0:72:08:73:4b:22:7b:dd:
                    39:d1:71:9f:bf:ae:92:5c:02:dc:a6:db:35:dc:76:
                    0b:ba:70:33:7a:9b:0f:1c:b6:a8:0b:6d:00:2b:2f:
                    a3:6d:74:5b:31:00:91:d8:1c:b6:d1:70:9d:a3:1c:
                    d5:63:69:2f:97:d2:50:a9:a9:64:00:ad:51:59:e1:
                    55:a0:57:40:2c:55:b5:32:f1:fd:e4:b6:62:a3:bf:
                    09:7c:94:3d:70:17:19:9a:b2:82:f6:68:4a:2e:4d:
                    e7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:15:51:83:0B:19:99:7F:9B:BE:C1:56:4C:3C:B0:16:55:D5:F8:1B
            X509v3 Authority Key Identifier:
                keyid:15:CF:50:DB:52:B0:F1:2F:1A:6E:3B:39:63:3D:48:2E:09:CF:E3:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fc9Q21Kw8S8abjs5Yz1ILgnP41w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B673B/812F21365DFE11EF8C7E817BC4F9AE02/A242BED45E1511EFBBFB911EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:1040::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:5f:e6:d7:f5:7d:96:13:56:7d:04:5c:2e:95:45:09:3d:ed:
         34:81:7b:7d:ab:21:db:1d:58:18:8f:18:2d:ce:df:7b:6d:ad:
         86:96:88:4a:fe:de:f0:8e:8e:94:5e:df:8f:86:db:9a:6c:c0:
         8f:5d:cb:2d:e4:d8:a4:1f:d3:54:de:de:45:66:d9:22:44:3f:
         6f:2a:84:aa:3b:8c:69:51:fd:37:3c:15:99:0b:de:47:be:32:
         df:6c:33:32:b3:88:f8:8d:d4:43:ad:1e:ea:b5:e6:f5:f2:66:
         3f:cc:79:af:30:ef:87:d8:37:8c:a2:19:a9:a0:e1:8a:0b:7c:
         f8:aa:ea:51:dc:b5:50:14:7a:ae:ff:17:e2:c8:78:af:9c:d2:
         b9:95:91:ef:c7:d5:9c:fd:64:f2:e6:40:42:00:22:c8:3e:d7:
         77:05:6a:71:08:fa:3f:15:57:f5:5e:dd:66:f2:3f:06:49:63:
         d7:1e:a5:0c:a1:54:47:58:93:5b:61:ad:ec:70:ea:01:93:b1:
         4f:2e:6c:3e:93:97:f4:e4:33:d9:21:6b:d7:5d:15:49:0c:ef:
         c7:87:4e:77:f0:99:54:b4:e1:f0:3a:87:b4:51:c6:d6:7f:67:
         ec:d5:54:57:88:1c:35:64:74:bb:6f:6d:4e:2f:93:56:b3:59:
         1e:a8:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:46:45 2026 by rpki-client