Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/48A5FCA4A0A211EF81FA6876C4F9AE02.roa
File:                     48A5FCA4A0A211EF81FA6876C4F9AE02.roa (raw, json)
Hash identifier:          eZlsZmk8/ekeyqy6I3i3ZeeEd5v4ZHZyH6nwRwpqrDc=
Subject key identifier:   F4:95:21:C7:A3:88:35:F7:28:29:C9:36:F7:2E:7C:DF:2D:46:CE:09
Certificate issuer:       /CN=A91BA941/serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
Certificate serial:       014B
Authority key identifier: 73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/48A5FCA4A0A211EF81FA6876C4F9AE02.roa
Signing time:             Thu 23 Jul 2026 07:32:41 +0000
ROA not before:           Thu 23 Jul 2026 07:32:41 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     135426
IP address blocks:        2401:bd60::/32 maxlen: 32
                          2401:bd60:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl
                          rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:32:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA941, serialNumber=7317D777BDAA6333CD96A8104B94DE0FA4752113
        Validity
            Not Before: Jul 23 07:32:41 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a61c399-82d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:5b:ca:43:ff:a5:8c:c9:a7:cb:94:a4:12:a3:
                    a5:0c:2f:82:72:5a:69:be:e2:b9:a1:75:e4:c0:f9:
                    80:ca:89:ec:d5:01:16:9a:03:8f:f7:65:25:d2:86:
                    53:ed:04:53:54:5b:aa:87:f5:17:f8:96:43:f5:c6:
                    2c:e4:39:91:61:5d:f8:ec:de:5d:d9:a1:c9:f0:ef:
                    2c:cc:c1:92:5e:dd:78:38:1c:e5:84:f8:50:04:92:
                    b6:2c:4f:c1:fe:c9:0f:f2:62:c4:13:09:f5:49:df:
                    41:60:c5:a7:14:ca:20:7c:8f:7a:f3:8f:3a:44:fa:
                    3f:24:15:85:fb:15:50:52:4a:3e:23:a5:05:4b:48:
                    c5:d0:6a:a3:42:ad:69:77:cf:2a:69:38:39:75:8b:
                    d5:77:34:4a:11:1b:56:28:60:c6:be:cc:b4:9f:39:
                    d7:0f:8b:ef:93:30:50:a9:f5:46:7e:41:ee:58:ab:
                    c9:b0:71:f3:38:a8:c8:a9:e8:a7:ff:7e:30:87:c1:
                    5d:fd:fb:21:c7:14:bc:58:b8:0e:a2:71:81:57:b8:
                    7e:ba:4e:c0:3a:d3:1f:4d:77:30:0a:88:96:05:9a:
                    7e:a7:88:aa:4d:c3:1f:f6:6a:44:7a:e6:39:b4:c9:
                    ac:2b:09:13:b4:6b:55:81:54:f4:26:de:a2:07:f5:
                    39:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:95:21:C7:A3:88:35:F7:28:29:C9:36:F7:2E:7C:DF:2D:46:CE:09
            X509v3 Authority Key Identifier:
                keyid:73:17:D7:77:BD:AA:63:33:CD:96:A8:10:4B:94:DE:0F:A4:75:21:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/cxfXd72qYzPNlqgQS5TeD6R1IRM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxfXd72qYzPNlqgQS5TeD6R1IRM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA941/9B3D2548A0A011EF9052325FC4F9AE02/48A5FCA4A0A211EF81FA6876C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:bd60::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:57:c4:06:e5:12:19:27:c3:db:f6:a5:66:c0:cf:70:26:d7:
         56:68:81:76:5c:e4:54:77:4e:a4:ef:ef:5f:14:b1:9f:ed:d3:
         d4:57:be:5f:7b:d2:56:24:0e:5e:e6:7c:fb:bd:ae:88:9e:6d:
         dc:96:4a:3e:93:1d:b2:d3:d6:d5:30:cd:0e:2f:05:41:55:a1:
         99:13:ae:c3:54:cd:8b:84:d6:64:1c:16:64:ad:c3:9c:74:15:
         7e:af:a1:fb:45:ec:63:8f:3f:ac:8a:ae:a4:88:2b:85:37:04:
         ae:0c:b0:b6:1f:a9:67:a5:76:6a:00:66:06:0a:5f:8f:1a:f6:
         89:5b:58:f0:f3:99:63:d5:3a:57:8b:fd:e8:e6:e8:82:f5:54:
         80:b4:3d:24:55:0a:ec:83:1a:b9:03:6d:e0:78:12:71:35:de:
         7a:ee:a6:63:83:da:92:49:e5:f7:c9:0f:6d:bb:f9:e7:3a:cf:
         7d:ec:02:5d:a5:24:ce:06:70:0a:59:22:3d:bc:49:3e:29:59:
         2e:d2:86:76:9a:e8:31:d9:29:0a:59:de:53:e6:da:10:47:f6:
         4d:b5:5c:38:0c:b3:eb:89:5d:f1:4e:2c:ef:0f:70:5d:01:cc:
         f9:7e:9e:6f:9f:83:63:84:40:7a:e5:cd:76:6f:0c:8a:12:f8:
         f0:a9:86:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:30 2026 by rpki-client