Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/EBFF5BE4DB8211F1963B3AC22C66CEF9.roa
File:                     EBFF5BE4DB8211F1963B3AC22C66CEF9.roa (raw, json)
Hash identifier:          zzMC7dRG6HeO/nOXKqtWHQUHov4s+IlxYf9vnmFyoCY=
Subject key identifier:   69:F5:8E:2C:36:BC:BE:F3:EE:37:D1:0F:EB:CB:A2:F5:F2:ED:52:E3
Certificate issuer:       /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Certificate serial:       A4
Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/EBFF5BE4DB8211F1963B3AC22C66CEF9.roa
Signing time:             Sun 08 Nov 2026 14:44:38 +0000
ROA not before:           Sun 08 Nov 2026 14:44:38 +0000
ROA not after:            Wed 31 Mar 2027 00:00:00 +0000
asID:                     142551
IP address blocks:        2001:df6:81c0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 20 Nov 2026 07:27:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
        Validity
            Not Before: Nov  8 14:44:38 2026 GMT
            Not After : Mar 31 00:00:00 2027 GMT
        Subject: CN=6af08ad6-6528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:7b:a9:24:63:f9:e4:85:0c:3a:ee:d1:03:
                    6f:89:84:91:d0:b5:98:61:13:58:0e:00:90:b5:85:
                    e1:cf:0b:67:88:7b:59:9d:fa:6b:1c:ce:56:74:69:
                    6e:6d:a3:1c:ad:d1:51:99:72:d6:74:fd:d5:20:e2:
                    4c:3a:98:0b:93:c4:d8:07:62:f0:ae:52:fc:e6:53:
                    2a:f0:16:b5:50:90:83:01:79:a1:ac:70:54:da:84:
                    2d:f9:09:de:ee:96:09:08:a5:cc:2e:53:f2:ab:bf:
                    72:b2:9d:df:b0:ef:19:18:5d:e9:8d:93:98:80:a0:
                    df:8a:cb:e8:d0:cd:cb:26:45:c9:d2:af:14:c9:a8:
                    ac:17:d4:00:7c:ee:0b:07:61:35:ee:62:d5:0d:79:
                    d4:0a:8d:15:6f:64:9b:a5:a3:9a:93:5d:1e:83:ad:
                    77:c5:be:45:4e:0a:b6:ef:11:e2:01:4c:2f:ff:03:
                    ea:a0:af:aa:61:52:cf:b5:a7:07:05:29:3a:ac:a4:
                    53:d0:f1:8b:e3:31:d3:2f:85:2f:6b:61:4f:32:4a:
                    88:cb:39:ac:a7:d7:5e:d4:42:ef:8f:2b:c4:60:b9:
                    56:ba:77:d8:ee:55:f7:21:36:0a:3e:ac:4a:f0:96:
                    33:a6:01:cc:fc:1a:43:d5:c3:50:6d:4e:f1:d1:40:
                    6f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:F5:8E:2C:36:BC:BE:F3:EE:37:D1:0F:EB:CB:A2:F5:F2:ED:52:E3
            X509v3 Authority Key Identifier:
                keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/EBFF5BE4DB8211F1963B3AC22C66CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:81c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:4f:e1:c9:c7:2d:d4:9c:33:12:a0:08:c3:25:0c:c8:ce:52:
         9d:28:04:f6:a0:9a:35:02:50:86:57:70:c3:9b:8f:1d:15:d5:
         e6:93:82:33:51:5c:65:cb:fe:3e:cc:b1:df:10:da:80:14:e3:
         d2:a4:66:3f:f2:6f:fd:62:41:33:7c:43:29:c7:3b:bd:35:b6:
         7a:f3:04:f3:24:01:64:01:8c:74:8f:93:67:c8:12:b2:20:62:
         98:06:d4:df:c7:c1:0c:ff:6e:04:06:50:8a:0b:8b:a8:e0:91:
         da:16:37:16:6a:1e:58:d5:6a:19:bc:ba:b7:32:97:4f:73:31:
         0d:b5:22:88:dc:00:44:9f:43:83:ae:72:87:36:ac:e0:64:ce:
         8e:a8:04:41:59:18:6d:40:bb:0d:a6:54:dd:d9:26:53:da:ee:
         f8:d9:27:d6:59:a9:e2:fa:f6:d9:a1:83:07:99:20:06:26:40:
         02:33:5e:51:12:3b:ac:24:34:8e:5f:44:41:f8:14:c9:fd:e9:
         6f:ef:02:ec:05:cb:48:ee:28:e4:92:68:e6:7e:e0:26:02:e0:
         c7:9f:7a:f8:74:fa:02:be:13:79:72:bf:69:54:59:97:83:9c:
         4b:cc:41:44:b8:a3:b3:c7:98:5d:1b:f0:3a:34:ee:fc:db:c1:
         81:ee:2c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:23:22 2026 by rpki-client