Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/A41A30BE866011F191F4B56496A30FBC.roa
File:                     A41A30BE866011F191F4B56496A30FBC.roa (raw, json)
Hash identifier:          AJVM8QB8v9wW9C2GIwYSkWw279MNg5CiJGgU0E7i/bE=
Subject key identifier:   E3:CB:14:C4:89:43:FC:DD:5E:AF:8C:55:16:23:39:03:7B:7D:F0:08
Certificate issuer:       /CN=A91DCF4D/serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86
Certificate serial:       03
Authority key identifier: A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/A41A30BE866011F191F4B56496A30FBC.roa
Signing time:             Thu 23 Jul 2026 06:35:06 +0000
ROA not before:           Thu 23 Jul 2026 06:35:05 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     9723
IP address blocks:        2001:df7:3540::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl
                          rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 11:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCF4D, serialNumber=A8420E0E206EB4E90C58728DD43F750DCFC3CC86
        Validity
            Not Before: Jul 23 06:35:05 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a61b619-0f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:22:11:41:51:76:5c:37:44:2e:a0:8f:7c:01:
                    53:f6:7b:3d:7a:f7:eb:15:cf:0c:b9:d0:8c:23:72:
                    1d:2a:9f:16:55:1b:61:69:41:e3:13:97:93:83:a1:
                    0e:07:49:92:36:b0:c1:85:4a:64:4d:b5:4c:8b:b3:
                    68:dd:29:fe:f6:f8:fa:85:76:a5:b9:b2:ce:eb:f9:
                    80:d2:4b:e5:80:ca:d3:54:41:0a:30:f6:45:2d:bc:
                    14:6c:c7:5d:bb:ae:90:ea:8e:1f:ea:55:93:67:9d:
                    46:26:32:33:8d:57:11:d4:bb:7b:f6:9e:6d:ac:ba:
                    35:cc:6e:0f:20:ce:c0:9b:0d:89:02:01:34:5d:58:
                    f5:87:d4:48:64:9b:7d:46:fc:2e:5b:b6:29:ef:6a:
                    b1:48:42:de:ac:bd:0a:41:2f:59:d2:fd:02:39:8b:
                    9b:c8:0e:d2:d5:63:0c:e4:af:1f:42:48:b4:97:64:
                    cd:26:ea:ec:89:13:0c:cd:0d:cc:ab:74:99:b6:49:
                    48:81:63:7c:4a:cc:a1:94:68:47:18:cd:91:3e:97:
                    f1:71:d6:2d:9d:50:08:58:7c:ed:b0:89:2c:19:a4:
                    0e:ee:93:4c:d2:b2:fd:b1:e5:53:ae:05:e0:93:99:
                    f7:4b:5e:ba:74:fd:65:58:ea:39:df:e0:12:98:d8:
                    f7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:CB:14:C4:89:43:FC:DD:5E:AF:8C:55:16:23:39:03:7B:7D:F0:08
            X509v3 Authority Key Identifier:
                keyid:A8:42:0E:0E:20:6E:B4:E9:0C:58:72:8D:D4:3F:75:0D:CF:C3:CC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/qEIODiButOkMWHKN1D91Dc_DzIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qEIODiButOkMWHKN1D91Dc_DzIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCF4D/DB90E480849D11F19203B0BB88A30FBC/A41A30BE866011F191F4B56496A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:3540::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:4f:50:ec:cc:a2:54:ab:18:dc:cf:00:58:97:f0:81:e3:54:
         13:c7:1a:81:72:26:b2:29:f5:c8:d4:0f:fc:ce:c4:ae:fc:d1:
         00:af:0f:40:40:45:11:a3:f5:56:3b:cc:f8:16:96:47:95:7d:
         2b:36:38:64:08:57:51:8f:97:76:24:a1:15:9d:c1:16:5f:ce:
         5f:43:16:2e:0e:15:57:ef:82:9d:19:e5:5e:19:69:df:11:72:
         5d:e0:cf:47:7a:4f:3f:0e:1b:18:35:0c:00:3f:46:1f:4e:56:
         27:9f:d1:54:a9:8e:45:01:b7:70:b7:aa:e0:95:4b:5f:9f:f1:
         3b:04:78:95:20:dc:63:fa:99:1f:29:5a:cb:a2:04:d8:36:30:
         20:87:6e:6a:e0:9d:22:84:d9:11:0d:ee:bb:ad:0b:e4:ee:f5:
         66:5f:5a:51:fb:45:3e:03:b0:6b:97:37:81:81:45:1f:dd:ce:
         9a:a2:f3:f2:f3:d4:92:7f:22:37:f9:d8:3b:00:9d:bc:fe:06:
         46:ed:71:c7:77:9a:81:bf:80:67:16:52:64:67:b2:05:95:43:
         48:22:14:f1:45:40:00:7e:10:04:17:67:57:59:b6:76:28:25:
         5c:80:71:48:34:b9:4d:89:c3:22:8c:1c:75:3d:51:ab:06:99:
         4d:4e:dc:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:33:51 2026 by rpki-client