Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/51AEB7D2836811F1A730906667A30FBC.roa
File:                     51AEB7D2836811F1A730906667A30FBC.roa (raw, json)
Hash identifier:          OqhaAJ3ECSKv9M44757UyMlEksc22ddZ45TQ4k8QygY=
Subject key identifier:   3F:CD:E9:23:63:A4:CB:8D:D7:F3:67:29:F4:89:89:9D:19:D4:57:7B
Certificate issuer:       /CN=A91CDBF5/serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8
Certificate serial:       0122
Authority key identifier: C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/51AEB7D2836811F1A730906667A30FBC.roa
Signing time:             Sun 19 Jul 2026 11:52:30 +0000
ROA not before:           Sun 19 Jul 2026 11:52:30 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     131266
IP address blocks:        2402:67e0::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl
                          rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 07:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDBF5, serialNumber=C429095CB2B977B067191193B43B9B2F5E19CAE8
        Validity
            Not Before: Jul 19 11:52:30 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a5cba7d-1a37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:fb:2a:b5:c1:89:37:17:b2:1b:f6:4d:14:
                    54:f1:05:4a:18:5a:23:a6:93:a9:49:c8:b6:56:b4:
                    73:dd:06:f2:63:c2:ad:c5:3f:58:c2:57:12:aa:a6:
                    f0:72:81:78:2f:89:6d:b5:c4:25:80:93:4f:01:eb:
                    9a:66:cc:9e:74:d3:6c:f4:9e:33:09:1f:17:85:50:
                    9e:de:60:f7:d1:3c:31:53:00:be:d1:53:05:86:ec:
                    1a:0a:fa:89:7f:3e:e4:38:f0:2f:9d:ff:6a:a9:75:
                    c4:3e:21:06:46:4d:b0:2e:8c:2e:0d:53:8f:13:c0:
                    b4:05:16:4a:7e:e3:60:92:9a:6a:23:cc:b8:d0:57:
                    b2:f9:ff:d9:3e:f6:d8:af:97:2c:99:11:61:cd:f4:
                    f4:60:d1:cd:97:c7:81:2d:e5:3f:df:17:1b:06:e0:
                    03:e3:ff:79:32:6d:3e:f5:e5:78:bd:2e:5d:96:19:
                    13:74:55:a3:8b:5e:af:11:2e:ac:c1:5a:36:56:76:
                    e4:dc:c0:fb:2d:c2:35:e7:b4:77:ec:1d:ff:01:35:
                    8a:9a:4d:1b:47:95:de:8e:3d:bb:97:47:fb:58:57:
                    e1:4e:dd:67:8d:9d:09:26:e8:03:02:59:a3:f7:1e:
                    9e:1b:8a:f5:35:76:87:55:fe:3d:d7:2e:99:e6:65:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:CD:E9:23:63:A4:CB:8D:D7:F3:67:29:F4:89:89:9D:19:D4:57:7B
            X509v3 Authority Key Identifier:
                keyid:C4:29:09:5C:B2:B9:77:B0:67:19:11:93:B4:3B:9B:2F:5E:19:CA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/xCkJXLK5d7BnGRGTtDubL14Zyug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xCkJXLK5d7BnGRGTtDubL14Zyug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDBF5/6659F51ECB5111EF90400D17C4F9AE02/51AEB7D2836811F1A730906667A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:67e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:de:72:20:25:ff:11:1e:da:f0:f1:25:06:9a:5a:eb:c7:db:
         f0:e4:7e:4f:0e:42:99:f0:02:88:38:a5:6f:3d:f2:e2:ca:05:
         1c:ca:b1:91:09:2d:a6:9a:07:98:f8:36:03:6c:77:46:87:e1:
         d1:93:48:32:57:94:05:92:31:98:89:ee:ab:86:2b:5f:9e:15:
         87:c3:5f:4a:07:fb:aa:af:1b:7c:51:fc:76:5c:c0:3c:76:39:
         2a:bb:46:50:07:ea:9e:3a:e3:d7:0e:8a:b3:5e:86:72:9b:c8:
         e5:0a:a3:dd:41:8c:b7:00:ef:6f:7c:c8:b6:02:f0:94:0a:96:
         92:fe:5b:56:5c:5a:ca:ab:40:50:5d:64:20:a6:9e:0c:9b:3e:
         89:3c:93:37:67:e4:df:05:7f:2f:a7:7d:3a:21:ea:ad:62:ee:
         7c:86:19:8e:6c:3a:c6:d9:6f:19:37:48:8b:f7:1e:9a:d0:e0:
         2d:9c:c3:83:6c:38:30:60:fa:1c:a7:88:57:74:6b:73:a1:0f:
         67:64:b4:46:0c:d2:a4:6d:ea:eb:2c:2c:51:20:4e:ca:b1:14:
         7e:16:cc:c7:94:42:c7:e7:4d:4f:a5:cd:69:64:fa:bf:15:06:
         16:a0:86:b4:4f:d1:a2:ed:e5:bb:32:4b:30:3a:e7:ac:fe:9d:
         c1:91:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:32:31 2026 by rpki-client