Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/BB5954CE241111F094390A32C4F9AE02.roa
File:                     BB5954CE241111F094390A32C4F9AE02.roa (raw, json)
Hash identifier:          ILuNQjwNhW0PKN+i94dgKZ8uTmGwmDnJT50xUUvXJAg=
Subject key identifier:   79:4B:86:AF:D4:2F:82:41:78:5E:CD:B7:C7:82:EC:BB:0A:67:1A:87
Certificate issuer:       /CN=A91C5D53/serialNumber=D62716F761F188D56FA117F9DC94BE414104A681
Certificate serial:       F6
Authority key identifier: D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/BB5954CE241111F094390A32C4F9AE02.roa
Signing time:             Mon 02 Mar 2026 15:06:50 +0000
ROA not before:           Thu 03 Jul 2025 07:11:43 +0000
ROA not after:            Wed 30 Sep 2026 00:00:00 +0000
asID:                     140704
IP address blocks:        2001:df4:18c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl
                          rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5D53, serialNumber=D62716F761F188D56FA117F9DC94BE414104A681
        Validity
            Not Before: Jul  3 07:11:43 2025 GMT
            Not After : Sep 30 00:00:00 2026 GMT
        Subject: CN=69a5a78a-f4e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:ec:86:0b:20:b8:b3:22:62:c1:4c:bc:2b:
                    b2:c7:b3:24:54:18:db:d1:1c:18:10:36:15:df:6e:
                    b1:ef:24:2c:79:d3:37:7f:7b:0c:5a:0d:04:85:c2:
                    0c:19:a6:17:2c:65:18:63:0c:4d:80:8b:a8:5d:ac:
                    b2:64:4d:68:1f:e9:7a:f8:2b:bb:da:7d:a0:63:88:
                    1d:27:31:09:8e:00:06:a4:be:da:b2:dd:44:51:f6:
                    56:0b:27:42:0d:59:e7:08:71:fe:b6:3b:86:6f:47:
                    3f:d6:11:02:3b:88:d7:e0:0b:48:c3:5d:96:98:06:
                    7f:10:7e:5e:d6:a9:67:81:5f:82:a8:51:b9:49:84:
                    71:cf:c9:06:6d:07:b0:76:98:4c:ea:c5:a7:e2:dd:
                    7e:0b:52:59:7a:82:f9:f2:a2:be:06:bb:a7:53:f5:
                    bb:90:62:40:67:7f:09:5d:b9:75:53:f9:0d:6b:cb:
                    c9:80:ef:e5:42:29:8e:0a:db:9b:ab:2b:c2:84:9b:
                    3c:f8:8b:30:46:e2:38:2f:32:15:d9:d4:50:b1:a5:
                    21:c5:ce:23:eb:e0:30:6f:e9:c9:31:84:63:f0:9d:
                    cd:68:46:a4:ae:e1:47:50:3f:0f:c8:8a:f1:7e:18:
                    94:d5:8b:6f:b4:fe:ff:11:ef:7a:ca:30:be:60:f7:
                    4f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4B:86:AF:D4:2F:82:41:78:5E:CD:B7:C7:82:EC:BB:0A:67:1A:87
            X509v3 Authority Key Identifier:
                keyid:D6:27:16:F7:61:F1:88:D5:6F:A1:17:F9:DC:94:BE:41:41:04:A6:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/1icW92HxiNVvoRf53JS-QUEEpoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1icW92HxiNVvoRf53JS-QUEEpoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5D53/05FFC00EAC8411EF8214972BC4F9AE02/BB5954CE241111F094390A32C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:18c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:a4:f4:e1:8c:7f:26:64:b2:22:89:dc:0d:97:64:06:ff:10:
         11:74:53:cb:45:2e:19:08:19:82:9d:f7:d7:f0:c5:0a:cd:8d:
         47:be:74:84:c8:64:20:80:29:db:c3:c4:65:3a:68:61:0c:37:
         86:3f:e9:0f:05:51:7f:68:a5:4b:ef:b7:db:81:32:2b:4b:43:
         e0:e9:9f:a3:fc:81:04:cd:a6:9b:ea:93:95:c5:bd:12:a7:ce:
         02:9e:ef:cc:8b:f2:12:9a:54:49:13:9d:9b:ef:1b:5f:6d:ce:
         88:42:8d:88:74:a9:27:c4:e3:51:65:3b:b0:5d:65:8a:3b:4b:
         ab:75:49:94:04:87:28:03:2a:1b:01:79:4a:80:29:ad:2f:3e:
         30:94:15:03:c5:bf:c1:48:7b:5d:0b:36:54:12:f7:ac:c0:bb:
         11:14:38:d0:4a:87:46:22:a7:e9:ed:e8:12:d8:e1:2e:e2:e4:
         1a:de:96:f1:ef:93:f2:ec:e7:53:a8:e4:55:ee:49:2e:a6:ba:
         a2:b6:6c:83:f0:51:19:c3:be:28:90:e0:02:39:f7:43:4a:e8:
         a0:41:92:a5:e8:d8:08:fb:87:26:46:90:04:22:67:d8:13:75:
         9d:3a:ad:16:fc:f5:c8:cb:ca:a3:c4:2a:30:ba:10:9a:2e:03:
         88:72:10:a5
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzVENTMxMTAvBgNVBAUTKEQ2MjcxNkY3NjFGMTg4RDU2RkExMTdGOURDOTRCRTQx
NDEwNEE2ODEwHhcNMjUwNzAzMDcxMTQzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWE1YTc4YS1mNGU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApFPshgsguLMiYsFMvCuyx7MkVBjb0RwYEDYV326x7yQsedM3f3sMWg0EhcIM
GaYXLGUYYwxNgIuoXayyZE1oH+l6+Cu72n2gY4gdJzEJjgAGpL7ast1EUfZWCydC
DVnnCHH+tjuGb0c/1hECO4jX4AtIw12WmAZ/EH5e1qlngV+CqFG5SYRxz8kGbQew
dphM6sWn4t1+C1JZeoL58qK+BrunU/W7kGJAZ38JXbl1U/kNa8vJgO/lQimOCtub
qyvChJs8+IswRuI4LzIV2dRQsaUhxc4j6+Awb+nJMYRj8J3NaEakruFHUD8PyIrx
fhiU1YtvtP7/Ee96yjC+YPdPzQIDAQABo4ICYzCCAl8wHQYDVR0OBBYEFHlLhq/U
L4JBeF7Nt8eC7LsKZxqHMB8GA1UdIwQYMBaAFNYnFvdh8YjVb6EX+dyUvkFBBKaB
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUQ1My8wNUZGQzAwRUFD
ODQxMUVGODIxNDk3MkJDNEY5QUUwMi8xaWNXOTJIeGlOVnZvUmY1M0pTLVFVRUVw
b0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFpY1c5Mkh4aU5Wdm9SZjUzSlMtUVVFRXBvRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QzVENTMvMDVGRkMwMEVBQzg0MTFFRjgyMTQ5NzJCQzRGOUFFMDIvQkI1OTU0Q0Uy
NDExMTFGMDk0MzkwQTMyQzRGOUFFMDIucm9hMCIGCCsGAQUFBwEHAQH/BBMwETAP
BAIAAjAJAwcAIAEN9BjAMA0GCSqGSIb3DQEBCwUAA4IBAQA9pPThjH8mZLIiidwN
l2QG/xARdFPLRS4ZCBmCnffX8MUKzY1HvnSEyGQggCnbw8RlOmhhDDeGP+kPBVF/
aKVL77fbgTIrS0Pg6Z+j/IEEzaab6pOVxb0Sp84Cnu/Mi/ISmlRJE52b7xtfbc6I
Qo2IdKknxONRZTuwXWWKO0urdUmUBIcoAyobAXlKgCmtLz4wlBUDxb/BSHtdCzZU
EveswLsRFDjQSodGIqfp7egS2OEu4uQa3pbx75Py7OdTqORV7kkuprqitmyD8FEZ
w74okOACOfdDSuigQZKl6NgI+4cmRpAEImfYE3WdOq0W/PXIy8qjxCowuhCaLgOI
chCl
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:15:18 2026 by rpki-client