Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/8533A604448D11F19D9C22A9A7833773.roa
File:                     8533A604448D11F19D9C22A9A7833773.roa (raw, json)
Hash identifier:          ud2XdvTOeMSMCgpchf7dcf0qY7ZIOdm72flkkkj9uWg=
Subject key identifier:   96:6F:0A:EC:56:37:8A:C5:25:E9:4F:2A:E8:41:99:82:D7:26:0F:52
Certificate issuer:       /CN=A91D1E2D/serialNumber=5EFE71B96126CF6DBEDFFB0E7B46E61186848C30
Certificate serial:       0F
Authority key identifier: 5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/8533A604448D11F19D9C22A9A7833773.roa
Signing time:             Thu 07 May 2026 22:21:07 +0000
ROA not before:           Thu 07 May 2026 22:21:07 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     154540
IP address blocks:        163.128.39.0/24 maxlen: 24
                          2001:df6:d040::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:19:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E2D, serialNumber=5EFE71B96126CF6DBEDFFB0E7B46E61186848C30
        Validity
            Not Before: May  7 22:21:07 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=69fd1053-8bc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:a8:04:24:6e:02:a7:b9:e9:25:30:8f:71:
                    20:21:1a:4f:6a:94:4a:8f:ec:5d:25:7c:5e:21:1b:
                    6d:2e:c0:5d:e2:8f:67:ac:3b:12:1b:4a:e5:a4:d7:
                    af:0a:44:55:63:3f:ea:93:9a:60:49:5d:53:f5:55:
                    7d:10:14:45:b9:46:f6:94:07:61:ab:0d:2e:62:40:
                    95:39:d5:29:86:58:c8:bc:02:00:3f:5c:56:38:a4:
                    70:3e:0d:dd:c1:5c:ec:89:6f:09:82:0e:30:e5:01:
                    5e:61:ef:35:81:f0:0f:ee:45:d0:17:9c:94:df:76:
                    38:6d:51:50:5e:a3:97:c3:68:c3:27:4a:4d:99:1d:
                    00:77:4f:3f:e9:8d:2b:e3:cf:79:1f:13:b5:83:39:
                    d7:c9:da:05:16:70:ec:a8:43:ed:28:9a:52:a3:0a:
                    19:3d:51:68:7c:0e:71:bf:90:45:fa:75:4b:4a:f1:
                    58:b7:11:6e:e4:35:1f:76:55:cc:df:e0:f4:c2:db:
                    b4:81:5e:d4:eb:b7:48:bf:78:69:cb:9a:88:b6:96:
                    79:e2:96:30:b0:02:41:8e:fa:89:5c:ca:c5:9e:71:
                    94:a0:21:3e:58:30:f1:5b:b7:98:57:c5:fe:87:e6:
                    e4:80:05:84:99:21:b6:f1:24:c2:ee:a1:51:25:72:
                    10:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6F:0A:EC:56:37:8A:C5:25:E9:4F:2A:E8:41:99:82:D7:26:0F:52
            X509v3 Authority Key Identifier:
                keyid:5E:FE:71:B9:61:26:CF:6D:BE:DF:FB:0E:7B:46:E6:11:86:84:8C:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/Xv5xuWEmz22-3_sOe0bmEYaEjDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Xv5xuWEmz22-3_sOe0bmEYaEjDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E2D/ABDF409E3E9611F1A8CF45B59C833773/8533A604448D11F19D9C22A9A7833773.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.128.39.0/24
                IPv6:
                  2001:df6:d040::/48

    Signature Algorithm: sha256WithRSAEncryption
         6d:d8:02:53:df:6c:bb:35:36:3a:a1:2d:be:85:ab:48:63:8d:
         38:08:b4:b5:7b:f0:f2:cc:3c:bd:36:09:89:6f:0d:d3:d6:5a:
         51:46:c6:8d:fa:34:de:ef:99:8c:a0:ed:2e:b6:a3:e0:17:84:
         3a:0f:32:ec:e1:84:c0:18:81:1d:63:cd:88:50:d1:26:05:d1:
         01:33:83:11:7f:6a:f2:c4:54:4d:2b:f7:28:35:2d:d7:b2:52:
         c0:0d:6b:67:ca:a9:e8:bb:17:52:9b:fb:17:75:fd:f1:84:ed:
         04:56:af:2e:b0:6c:e1:ed:03:d3:f3:d7:f4:44:fc:e2:0d:ba:
         88:43:a4:a3:a2:33:c9:b7:5f:e6:1a:08:68:f7:d8:e0:3f:fe:
         ee:c2:b3:d0:66:d1:9c:02:00:0d:7e:f4:09:c8:25:22:2b:08:
         2f:67:0f:a9:0c:b1:f8:40:2f:72:00:b0:17:8a:10:61:85:01:
         11:2a:dd:52:a0:4a:81:c8:41:71:09:15:45:71:8f:27:ec:96:
         da:45:e9:d0:7a:f5:00:4d:78:a7:69:ac:e9:f6:ff:db:2d:39:
         9a:ec:d4:af:6e:05:d8:69:e8:bb:48:de:5e:71:3d:51:d7:01:
         b7:ce:f0:98:78:3c:da:e9:68:56:cf:9e:45:94:03:50:3e:f2:
         1a:a2:da:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:10 2026 by rpki-client