Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/070DB3BAFB6D11EFA5E39678C4F9AE02.roa
File:                     070DB3BAFB6D11EFA5E39678C4F9AE02.roa (raw, json)
Hash identifier:          0YPbPYRmDBxvxeUZ+nCsDlhMinpUmdIW4GNWTG2+RDU=
Subject key identifier:   5E:D3:4B:9C:68:DC:7B:6F:66:0E:3C:FD:4F:EE:76:95:23:B6:13:CB
Certificate issuer:       /CN=A91EA80C/serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
Certificate serial:       F6
Authority key identifier: 31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/070DB3BAFB6D11EFA5E39678C4F9AE02.roa
Signing time:             Thu 07 May 2026 06:39:49 +0000
ROA not before:           Thu 07 May 2026 06:39:49 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     153663
IP address blocks:        2401:f460:7000::/36 maxlen: 44
                          2401:f460:b000::/36 maxlen: 44
                          2401:f460:f000::/36 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl
                          rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA80C, serialNumber=312440201B2EF74B7CAC6C31FB85F41E9C4686A0
        Validity
            Not Before: May  7 06:39:49 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fc33b4-dbd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:6b:d7:8f:39:4a:46:3e:4e:d4:61:a6:3f:
                    21:ba:92:c0:e6:2c:17:8f:5a:22:02:3b:09:73:fb:
                    2a:6b:2b:87:12:4b:0c:a6:1a:9f:af:b9:a9:d3:e1:
                    97:d0:53:24:ba:ae:90:92:5d:84:28:ab:1b:07:ec:
                    12:df:fd:1b:b3:19:4d:c4:77:a5:9e:78:6b:6e:45:
                    c9:cf:ab:37:00:0e:25:42:dc:ba:06:8c:4e:f6:2d:
                    51:1c:f7:4f:8e:ff:46:b2:37:10:bf:af:73:84:f1:
                    40:fd:38:21:cd:45:d8:1c:b7:b2:5c:37:1e:1e:59:
                    56:95:35:3d:8c:00:da:f6:f7:c1:95:e2:a4:d5:f3:
                    74:17:7d:34:1b:c0:b7:82:05:21:df:33:0c:94:6c:
                    27:d0:7c:ed:ce:16:1c:c4:1e:5b:d5:67:ff:ca:8e:
                    2f:64:b8:31:7a:dd:4c:3a:2d:3c:55:44:b8:5e:a0:
                    7c:fe:b2:30:8f:27:c1:4c:6c:b4:28:c4:5c:05:74:
                    37:0d:4f:0c:29:4b:81:f6:da:c3:38:a5:82:0f:e2:
                    f7:bc:4b:7d:c0:8e:80:f4:a9:8a:e5:c9:71:a7:1c:
                    df:06:26:95:e2:52:ed:5d:4c:eb:20:3a:bd:03:c0:
                    14:71:90:c8:cc:23:0e:90:b7:8e:56:ec:4a:be:07:
                    47:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D3:4B:9C:68:DC:7B:6F:66:0E:3C:FD:4F:EE:76:95:23:B6:13:CB
            X509v3 Authority Key Identifier:
                keyid:31:24:40:20:1B:2E:F7:4B:7C:AC:6C:31:FB:85:F4:1E:9C:46:86:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/MSRAIBsu90t8rGwx-4X0HpxGhqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSRAIBsu90t8rGwx-4X0HpxGhqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA80C/DE98EAF0FB6511EFA376E449C4F9AE02/070DB3BAFB6D11EFA5E39678C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:f460:7000::/36
                  2401:f460:b000::/36
                  2401:f460:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         96:0e:44:64:d2:4e:6e:9f:62:3c:12:fc:40:f0:05:a1:af:5b:
         df:a8:1f:1e:c6:7b:e3:b6:60:8c:07:f3:72:42:b8:bf:f7:78:
         38:60:36:94:b8:4a:7c:3c:5f:e6:2e:dd:0e:d4:56:f8:48:19:
         06:f9:3b:31:98:1b:e4:62:92:a6:f0:56:8f:88:b6:bd:a5:d8:
         81:1a:f9:92:a3:a0:b4:60:0d:5d:df:d2:e7:04:cc:7e:04:46:
         1f:27:0a:c3:9f:2f:c0:79:0c:37:97:b7:d7:23:db:d4:17:40:
         43:7e:44:5d:46:ab:1e:ab:d1:9b:06:63:5e:a9:f2:a3:e3:c4:
         c0:05:e5:d4:ac:5b:e5:00:94:47:11:51:5d:aa:b3:9f:4f:5a:
         39:6d:a9:df:21:16:f1:9d:60:ee:ad:c7:11:3f:8a:23:7e:43:
         d5:fd:95:71:00:72:3a:ce:54:00:98:f1:c2:1b:9c:81:e4:f9:
         4a:00:e2:57:ef:31:7e:b9:5e:62:e7:e0:e7:eb:8b:71:a7:8b:
         26:07:04:cc:be:9a:65:7e:d1:c6:c0:1b:eb:94:d1:06:f3:13:
         7a:1a:c5:52:a6:4d:62:87:f7:10:da:1e:c2:1a:ca:37:b2:a4:
         59:94:3b:88:a4:3b:27:03:af:56:1a:2c:3e:bd:e7:3e:c6:ea:
         fb:7e:ad:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:41 2026 by rpki-client