Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/E879D5BC4B1911F08F30867AC4F9AE02.roa
File:                     E879D5BC4B1911F08F30867AC4F9AE02.roa (raw, json)
Hash identifier:          Cd2qwheOZx/HlbYVbXM4iYSdKyaPgmnCfgXwff08PA4=
Subject key identifier:   73:07:D5:E5:6A:D8:7D:75:3A:C5:09:06:AD:6F:9B:CE:94:DC:F3:15
Certificate issuer:       /CN=A91B8A86/serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
Certificate serial:       CD
Authority key identifier: 24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/E879D5BC4B1911F08F30867AC4F9AE02.roa
Signing time:             Wed 15 Jul 2026 08:33:58 +0000
ROA not before:           Wed 15 Jul 2026 08:33:58 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     133113
IP address blocks:        2001:df5:aa40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl
                          rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 08:31:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8A86, serialNumber=245FF45C28652BF7156585A3FD9A7974E5375D03
        Validity
            Not Before: Jul 15 08:33:58 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a5745f6-7fb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:ee:ab:3c:62:72:0d:06:ba:f5:2a:0c:b4:
                    82:5f:81:2f:6e:5a:70:49:ff:8d:9f:fd:4b:d4:e1:
                    e0:db:b6:8e:2f:f4:d7:af:a1:a8:dc:a1:c3:c6:4d:
                    d0:1b:0c:b3:86:3d:d6:02:bd:77:b5:fd:17:80:dd:
                    53:cc:92:94:5b:28:6b:12:0e:76:63:08:ad:a0:e9:
                    6d:0b:72:65:17:a9:03:a3:2b:d4:47:c4:5e:a3:f6:
                    b3:bf:c7:97:56:ef:71:76:79:3f:d7:48:42:2f:b5:
                    bb:d3:af:01:e7:a6:48:8c:bc:37:47:18:de:a7:55:
                    65:51:f7:cb:b7:ce:06:62:9b:75:3d:27:39:4f:e4:
                    30:26:91:16:c7:03:60:36:1c:27:e1:89:cc:4e:5a:
                    01:e3:11:8e:64:2c:85:b0:67:17:1f:96:62:dd:31:
                    7e:5e:aa:ec:c3:e0:f8:94:cf:d5:5e:48:a7:5f:59:
                    82:d3:60:19:60:e3:f1:d3:70:9f:94:2b:37:43:7f:
                    b6:cb:f0:ea:a5:31:c5:3b:d7:a9:75:dc:ec:71:e6:
                    60:06:91:f0:aa:91:b0:fd:4f:55:ad:46:7f:e6:95:
                    da:ad:71:1e:49:73:4c:76:02:ff:a8:c3:e9:f2:0a:
                    bd:c8:31:96:12:c5:c8:10:72:2f:f0:ba:c0:3b:8d:
                    98:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:07:D5:E5:6A:D8:7D:75:3A:C5:09:06:AD:6F:9B:CE:94:DC:F3:15
            X509v3 Authority Key Identifier:
                keyid:24:5F:F4:5C:28:65:2B:F7:15:65:85:A3:FD:9A:79:74:E5:37:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/JF_0XChlK_cVZYWj_Zp5dOU3XQM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JF_0XChlK_cVZYWj_Zp5dOU3XQM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/B63F31AE4B1511F0AC3AA248C4F9AE02/E879D5BC4B1911F08F30867AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:aa40::/48

    Signature Algorithm: sha256WithRSAEncryption
         e0:71:55:47:19:c3:60:e6:80:35:d1:78:8d:d5:a6:b1:80:5e:
         08:ce:7a:03:91:44:32:5a:fd:8a:74:15:cd:6c:44:1e:df:8b:
         04:f4:49:7b:d1:94:3d:aa:84:64:5e:1e:24:31:a4:92:db:80:
         40:6b:8c:7a:53:0b:95:38:bf:12:52:83:40:35:86:07:7e:ae:
         41:d8:aa:7c:36:00:65:ac:5a:b6:a0:3a:f4:c0:ae:a9:9c:63:
         8b:12:38:1b:11:1c:18:23:3e:19:ed:1a:03:72:37:1d:9f:3e:
         15:40:69:f3:f3:df:3c:e2:53:63:f9:70:05:ee:e5:7f:0e:a6:
         5c:8e:34:31:55:2c:f3:45:d1:8d:dd:52:27:06:48:2d:18:45:
         19:a6:d8:80:af:b3:a3:6f:0e:03:8a:ad:0b:1a:3d:10:e6:0d:
         4c:77:03:30:d6:71:f1:81:4a:40:6c:4d:96:fa:cc:cf:40:56:
         8b:91:bf:cf:f8:39:bf:3d:1e:b8:91:7c:fb:ca:4a:09:f2:10:
         9c:1e:6e:3b:73:48:7c:3e:8e:64:be:28:54:d8:1d:ab:7e:cf:
         7c:b6:3d:db:07:65:04:7a:24:68:ea:0f:43:46:8a:55:8e:af:
         ad:18:a3:7f:bd:a0:66:9d:be:60:a9:b9:c2:cc:3f:93:87:a3:
         09:40:d8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:02:32 2026 by rpki-client