Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/D9D5455006AD11F1A15422A90B3D8C67.roa
File:                     D9D5455006AD11F1A15422A90B3D8C67.roa (raw, json)
Hash identifier:          dDJLmsT6mCgZl2ards1bhCoMOym6cbSGTZ2B9OcwQzE=
Subject key identifier:   B3:17:B7:7E:78:A0:A4:27:46:83:85:84:DF:2C:CE:F6:45:0E:EA:FD
Certificate issuer:       /CN=A91EA0F7/serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
Certificate serial:       0102
Authority key identifier: 82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/D9D5455006AD11F1A15422A90B3D8C67.roa
Signing time:             Sat 05 Sep 2026 06:56:59 +0000
ROA not before:           Sat 05 Sep 2026 06:56:59 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     154131
IP address blocks:        2001:df5:f640::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl
                          rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 30 Sep 2026 06:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA0F7, serialNumber=82CA104DC5F2AFF533FBF68CF298F40FBD481F04
        Validity
            Not Before: Sep  5 06:56:59 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6a9bbd3b-2048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e6:2f:fe:9f:f2:04:12:d9:d8:dd:06:e8:fa:
                    53:1a:e6:6b:33:df:96:ff:d2:e0:3a:cf:0f:36:49:
                    ba:52:63:61:af:02:44:bc:e9:6f:fe:f4:84:6f:2e:
                    b8:1a:e2:32:02:75:6b:af:d9:d0:a6:61:71:ef:68:
                    3a:18:2d:69:50:f4:7f:48:99:d1:42:64:d5:38:27:
                    b7:ff:b0:85:bc:c5:21:11:51:5a:6e:f0:f9:ad:d0:
                    4e:4f:9a:9c:16:b2:22:26:8b:15:d9:13:a6:6c:b7:
                    d6:7e:00:74:8f:d0:c4:26:ce:86:03:82:a0:5a:ec:
                    e1:27:7b:35:06:ea:f5:6f:72:22:2e:26:96:b7:87:
                    01:72:0c:a6:4e:67:a6:04:ca:9a:32:ee:90:a7:6e:
                    fa:92:45:f7:7b:fe:86:74:42:a5:f0:34:39:06:82:
                    f8:5a:17:f8:71:ef:07:74:d8:42:d5:b9:6a:3e:11:
                    d9:d8:ab:ec:ad:a2:04:66:a9:0b:d2:51:fc:d1:b0:
                    72:29:29:2d:9d:23:91:d9:d4:93:65:df:27:7a:fb:
                    3a:7a:59:76:6d:31:8b:9a:38:cd:7b:a0:c8:dd:5e:
                    42:14:91:54:62:28:e1:ee:70:96:19:53:35:a5:c0:
                    90:e1:7d:73:0f:ae:59:9a:45:c4:2f:d5:01:37:90:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:17:B7:7E:78:A0:A4:27:46:83:85:84:DF:2C:CE:F6:45:0E:EA:FD
            X509v3 Authority Key Identifier:
                keyid:82:CA:10:4D:C5:F2:AF:F5:33:FB:F6:8C:F2:98:F4:0F:BD:48:1F:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gsoQTcXyr_Uz-_aM8pj0D71IHwQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA0F7/0D8CC9D6766C11F09FCA192DC4F9AE02/D9D5455006AD11F1A15422A90B3D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:f640::/48

    Signature Algorithm: sha256WithRSAEncryption
         eb:39:55:d9:e8:72:85:99:f2:41:5f:9c:e3:66:4c:6e:e1:44:
         bd:1c:0c:4c:b2:17:3d:62:99:a7:6f:a7:a4:0f:50:8e:75:e8:
         34:72:84:69:3d:30:5a:42:19:eb:d1:0c:dd:3e:9f:07:98:5f:
         bc:e7:f1:28:e3:f2:70:29:8e:83:8a:92:8b:41:9b:59:5d:1e:
         d2:d0:e5:bf:57:fe:2d:d7:6b:64:b2:36:a6:32:0d:45:e2:35:
         a7:89:c5:6b:43:32:7e:47:93:56:e2:70:0a:3a:0c:24:d4:75:
         54:21:6a:cb:70:e3:a6:d2:1d:e2:53:4d:65:0f:23:3b:30:29:
         e3:66:ae:a4:a3:a6:98:b9:bc:63:53:51:4d:b1:1b:9e:9b:4c:
         48:06:0d:19:f2:e0:93:49:6a:45:e6:18:7a:ea:ad:d4:a1:a7:
         9a:5c:2d:2a:31:9d:e6:e9:18:d9:da:13:6d:90:00:76:93:e5:
         6b:64:fb:3d:e6:17:aa:c1:49:a8:0c:93:9b:d0:6e:fa:2f:af:
         77:9e:1b:1f:d8:4b:0c:bf:6b:4f:d0:65:a1:37:c1:f9:26:d1:
         dc:b6:39:2c:3e:ef:da:6e:fc:ec:22:82:91:42:35:64:b6:bb:
         7c:3c:80:c2:ed:4e:a3:a2:11:6f:67:9c:c0:9b:48:e0:03:87:
         2e:bb:06:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:37:06 2026 by rpki-client