Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/56ACADFE47C011F1B54DF0A9AE833773.roa
File:                     56ACADFE47C011F1B54DF0A9AE833773.roa (raw, json)
Hash identifier:          vxjWyQ9R73CYTlS7zLuzmK55YQslMUO/l+FMKzf2+xM=
Subject key identifier:   AC:8C:60:98:6F:86:F7:EF:28:86:03:6E:7E:9D:BD:E3:AF:86:5E:AF
Certificate issuer:       /CN=A91DF195/serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
Certificate serial:       87
Authority key identifier: 61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/56ACADFE47C011F1B54DF0A9AE833773.roa
Signing time:             Mon 04 May 2026 13:51:24 +0000
ROA not before:           Mon 04 May 2026 13:51:24 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     4826
IP address blocks:        2001:df5:f042::/47 maxlen: 47
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl
                          rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:51:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DF195, serialNumber=615775A4DE23E46A8B57C8F7B9C9E1E886E5D8D5
        Validity
            Not Before: May  4 13:51:24 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=69f8a45c-a0a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:99:a3:50:4f:7a:50:18:a2:6c:b2:bd:b6:
                    4e:aa:02:2d:cb:1c:2a:a8:1b:0d:a2:ce:5e:dd:5a:
                    4d:ba:82:b1:91:72:4e:99:0c:b6:fb:24:23:d9:6d:
                    1a:13:02:3a:8c:b9:2e:9a:0e:fd:2c:e8:38:b7:70:
                    d0:b0:01:9a:10:d4:44:13:73:e0:fb:e1:b9:68:d0:
                    cf:88:24:a9:46:dc:26:57:00:1a:aa:94:91:f3:a7:
                    9e:cf:77:77:84:36:13:4f:13:35:cb:ff:03:03:50:
                    0d:98:7d:87:94:d9:e6:41:98:3d:55:77:84:b9:af:
                    80:b9:c6:a4:18:fa:3e:29:0c:5a:f3:fc:47:60:06:
                    13:12:17:38:f4:c1:ea:d2:8c:7f:9f:9d:36:2b:b5:
                    bb:59:a0:1a:e9:c2:f7:59:98:e9:67:5e:94:d8:59:
                    3e:1f:76:82:81:9d:a0:c6:5d:fc:61:39:b0:62:f0:
                    97:22:9b:9e:43:48:8a:15:be:a8:98:ef:b3:b8:81:
                    0f:c3:6b:59:67:29:47:ef:07:17:92:9e:50:43:08:
                    2a:02:c0:65:d5:00:54:4b:1d:c0:6a:17:81:43:29:
                    60:ec:32:57:ad:61:78:d4:00:31:a2:8f:3c:6f:d3:
                    cc:06:b5:83:3e:96:71:c0:66:8e:72:08:80:80:45:
                    a0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8C:60:98:6F:86:F7:EF:28:86:03:6E:7E:9D:BD:E3:AF:86:5E:AF
            X509v3 Authority Key Identifier:
                keyid:61:57:75:A4:DE:23:E4:6A:8B:57:C8:F7:B9:C9:E1:E8:86:E5:D8:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YVd1pN4j5GqLV8j3ucnh6Ibl2NU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF195/74C18F70938A11F0BBD62385C4F9AE02/56ACADFE47C011F1B54DF0A9AE833773.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f042::/47

    Signature Algorithm: sha256WithRSAEncryption
         50:17:cb:cc:43:85:7a:d0:10:5e:b5:02:1a:1d:ae:22:99:0c:
         28:9b:20:73:c9:6a:f2:ed:01:8e:82:b0:61:6c:b0:42:8e:27:
         42:e8:8b:62:a8:00:22:70:25:9b:9d:a1:5c:77:d0:3d:cd:22:
         12:21:cc:4f:88:38:de:18:b5:a7:b5:b6:eb:2e:f5:6e:b5:3f:
         46:6c:2c:18:25:67:e4:78:49:5c:ac:90:8e:57:de:f1:0b:54:
         37:55:b5:c9:8a:f8:50:78:f8:a9:85:23:22:f1:ab:19:9c:de:
         c6:68:7a:c2:f4:d2:df:79:21:85:b4:a9:32:5a:a9:53:c7:84:
         f8:60:33:ba:34:ae:80:d6:f4:fa:c3:59:d7:fc:8c:55:19:3b:
         65:81:f4:ff:8d:eb:5e:2a:62:ed:06:ea:14:60:09:69:37:1f:
         06:94:9b:53:b8:f9:39:09:c8:57:fd:8a:0e:9b:40:9e:5d:3c:
         a2:64:19:71:a8:40:e8:e6:7f:30:f6:2f:24:4e:aa:a5:2b:14:
         7b:ea:3e:79:6a:08:0a:d5:ec:13:70:2b:e2:2a:f9:c6:32:ea:
         09:3d:cd:ac:af:ee:ed:a0:86:96:4d:a5:88:92:c8:99:83:04:
         9c:1b:0a:f7:36:37:58:62:7a:70:6d:d1:cc:7f:8b:eb:ff:ca:
         8e:af:c0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:36:56 2026 by rpki-client