Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/53019A023C7B11F1B0CB2EC97EEE528E.roa
File:                     53019A023C7B11F1B0CB2EC97EEE528E.roa (raw, json)
Hash identifier:          M3iMcgHJGqo7ewXbliP4Rc0morYWpPz1VYKQET0JHNc=
Subject key identifier:   85:3E:B3:A9:03:A8:3D:17:36:8A:56:0E:0F:23:F1:06:6C:B0:CD:77
Certificate issuer:       /CN=A91D09BC/serialNumber=7D613FB72D19982A5A092964F48BC38090B0FD19
Certificate serial:       02
Authority key identifier: 7D:61:3F:B7:2D:19:98:2A:5A:09:29:64:F4:8B:C3:80:90:B0:FD:19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/53019A023C7B11F1B0CB2EC97EEE528E.roa
Signing time:             Mon 20 Apr 2026 05:39:40 +0000
ROA not before:           Mon 20 Apr 2026 05:39:40 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     138026
IP address blocks:        2001:df4:a3c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.crl
                          rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:59:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09BC, serialNumber=7D613FB72D19982A5A092964F48BC38090B0FD19
        Validity
            Not Before: Apr 20 05:39:40 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69e5bc1b-d916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:74:9b:5a:c9:41:ba:61:7e:82:87:a6:b7:be:
                    ef:4f:99:eb:1f:87:ec:3c:4a:6c:ac:31:bb:e2:57:
                    7d:01:51:c7:82:d4:7a:be:5e:4b:cd:86:c3:11:db:
                    5a:a6:9f:b5:01:3f:9a:92:d6:98:06:72:67:1c:8e:
                    5a:70:0c:22:07:da:b0:ea:d6:7c:7d:47:87:84:6c:
                    81:9f:e1:7a:84:ef:27:78:c7:0a:36:f5:06:38:9c:
                    0a:10:20:1f:00:f8:1e:9d:87:82:1c:ee:1b:f2:bd:
                    ad:8e:79:69:c4:eb:7a:86:34:81:e9:bf:d3:46:18:
                    ba:6d:3a:c5:2c:0b:69:b9:eb:bb:37:5f:45:11:7d:
                    24:13:6a:f9:cf:34:0d:03:b9:90:bf:53:c1:94:1b:
                    57:86:60:bd:a6:f7:f5:97:42:89:93:0a:ca:13:6d:
                    e9:26:f3:a8:b5:41:0b:d0:a0:71:d7:8e:16:42:d1:
                    c8:e3:a8:5c:78:f5:91:f5:f0:c9:8b:15:2e:f6:1b:
                    43:92:2d:30:b0:e6:79:3b:83:d1:47:0c:6a:ff:c8:
                    e8:22:2a:dc:69:16:44:b4:7e:25:8a:ad:15:a3:05:
                    3d:74:1d:2d:a4:49:2c:f7:17:db:82:12:9f:69:f1:
                    44:de:f4:81:0f:98:3e:c7:b1:32:9a:f1:c3:36:ca:
                    dc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:3E:B3:A9:03:A8:3D:17:36:8A:56:0E:0F:23:F1:06:6C:B0:CD:77
            X509v3 Authority Key Identifier:
                keyid:7D:61:3F:B7:2D:19:98:2A:5A:09:29:64:F4:8B:C3:80:90:B0:FD:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fWE_ty0ZmCpaCSlk9IvDgJCw_Rk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/53019A023C7B11F1B0CB2EC97EEE528E.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:a3c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a8:0d:59:41:4a:52:00:ba:3e:56:09:e6:be:fa:a0:53:ce:41:
         b8:76:a1:47:74:e1:80:8f:c4:ca:75:fc:45:4c:5a:41:fc:0d:
         97:07:87:3b:f8:c1:fd:df:da:df:e1:a0:b8:4f:64:14:39:8b:
         ac:52:d3:1c:90:6d:1f:f1:77:18:61:34:69:0e:1d:53:23:ee:
         c8:2b:65:5b:eb:63:67:32:37:29:bb:36:27:cb:46:2d:9a:86:
         a8:7f:0f:0a:dd:f4:99:17:b3:6e:1d:70:7d:de:dd:34:b6:57:
         77:3c:43:f3:5a:12:44:a8:d2:78:0c:85:85:b2:2e:e3:ec:5f:
         70:5b:9e:6c:1c:17:17:f6:59:06:16:0b:97:f7:2c:73:a9:1e:
         8b:20:97:8f:c1:72:5c:90:d3:5f:4b:65:f6:db:f1:86:64:47:
         de:8d:4c:5d:b7:a9:4e:d0:8d:11:02:6b:c9:d8:2e:03:c3:6c:
         97:0b:ba:8d:a6:92:26:df:7c:1b:4b:21:ce:e6:bf:6e:eb:09:
         f8:06:b4:a7:09:2d:41:97:62:b8:19:3b:f4:b5:12:4b:bc:a6:
         fd:58:82:d2:b0:03:5d:1a:7e:b3:f9:1d:91:43:7a:d2:64:2a:
         32:c9:de:ed:cb:31:b4:81:60:39:b4:91:50:a2:86:cc:d1:4f:
         94:d8:0e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:19:29 2026 by rpki-client