Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/D734CCEA1E0A11EF87335F33C4F9AE02.roa
File:                     D734CCEA1E0A11EF87335F33C4F9AE02.roa (raw, json)
Hash identifier:          mD0truY139TasISWyGrYu2Hz7EW2kY2oOZUl6qnCEFQ=
Subject key identifier:   B9:B6:B3:70:AC:1E:B0:F4:B1:3B:B5:86:4B:41:C9:C6:05:E4:D1:03
Certificate issuer:       /CN=A91FE75F/serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
Certificate serial:       035C
Authority key identifier: 4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/D734CCEA1E0A11EF87335F33C4F9AE02.roa
Signing time:             Wed 06 May 2026 22:28:23 +0000
ROA not before:           Wed 06 May 2026 22:28:23 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     142000
IP address blocks:        2001:df6:3580::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl
                          rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:27:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 860 (0x35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE75F, serialNumber=4D14E1AF22F53B22F56DEF02EB72EA5DD6BE77E2
        Validity
            Not Before: May  6 22:28:23 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=69fbc087-a612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:d9:7d:79:6b:31:c9:05:a8:55:b2:f7:f9:
                    8e:7d:38:47:cd:27:6a:84:10:7f:a5:40:48:76:67:
                    a0:f3:6a:de:5b:f8:76:b5:0d:e3:be:b5:98:79:97:
                    14:c5:75:16:ac:7e:7b:19:e4:62:68:60:c7:97:67:
                    e1:ad:82:b5:c3:6b:c0:4c:81:25:ec:b6:ae:cb:59:
                    e1:b3:b3:ee:b4:25:b5:71:1d:d4:d8:ef:ed:27:ed:
                    a6:28:b1:50:9e:6a:99:ae:fc:9e:a3:53:5d:14:72:
                    ed:c9:5d:4f:35:9e:ea:f2:21:48:b7:3c:b3:2e:60:
                    b4:27:98:be:1f:fc:0f:10:8d:76:63:4a:73:eb:12:
                    e3:83:96:53:61:7f:64:60:7a:03:3d:62:1f:58:49:
                    74:63:17:7e:9a:d1:86:5b:fd:ca:4b:9f:44:f1:4d:
                    ac:6d:6e:d4:2d:77:0a:97:5f:ad:1e:a4:ed:de:27:
                    1c:dd:f2:6c:48:39:82:4e:8b:54:75:5e:59:6c:d7:
                    91:af:87:8b:a1:3d:06:83:9d:8e:70:d5:73:a2:f0:
                    ad:e6:93:42:a2:56:08:ed:79:d0:e5:e4:6d:c3:87:
                    be:33:14:9a:b8:53:5b:0f:27:d1:d6:69:f1:a2:8b:
                    89:53:26:ac:2b:26:b6:b9:d4:7a:4b:c9:1c:e4:25:
                    ea:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B6:B3:70:AC:1E:B0:F4:B1:3B:B5:86:4B:41:C9:C6:05:E4:D1:03
            X509v3 Authority Key Identifier:
                keyid:4D:14:E1:AF:22:F5:3B:22:F5:6D:EF:02:EB:72:EA:5D:D6:BE:77:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/TRThryL1OyL1be8C63LqXda-d-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TRThryL1OyL1be8C63LqXda-d-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE75F/AB9EB8CAA9F511EB8A492254C4F9AE02/D734CCEA1E0A11EF87335F33C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:3580::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:eb:62:fd:22:d6:dc:89:e3:2a:66:a5:48:ad:fd:6d:bc:46:
         e1:da:04:ee:a1:a2:f5:d1:02:74:a8:f8:84:53:73:ef:91:6a:
         ed:bf:d3:91:d8:62:e7:2b:46:e2:90:60:de:03:1c:1b:6c:67:
         bb:00:fe:dd:e8:46:64:ac:3d:cc:26:61:27:d7:7d:6f:dc:bf:
         0d:72:a2:82:8c:96:4d:9f:e6:8d:04:6d:20:fe:66:a5:93:a6:
         f0:ac:63:e0:76:e8:2e:f7:f9:c7:ba:36:5c:1d:20:8a:03:a3:
         b4:57:54:8e:60:53:2a:8a:1d:b3:6d:74:a7:c8:35:42:cd:3d:
         50:50:e7:cf:e8:19:3a:f7:ef:1a:1d:02:69:df:d2:2d:9e:3f:
         44:35:9c:d5:12:33:f1:94:25:63:a9:11:36:08:b0:44:d6:62:
         8f:f5:18:99:a0:e2:4d:19:dc:27:c2:92:68:f4:e6:2e:05:a6:
         a5:c4:b2:fd:03:70:eb:c7:10:39:dd:7b:75:36:6d:ea:7c:b2:
         c9:6e:df:20:6a:4a:e1:ca:c7:0b:41:0b:6d:b8:56:78:2e:f2:
         ef:6f:fc:c8:27:24:63:39:47:15:4a:ff:ec:f0:a7:ee:d0:5f:
         01:31:42:78:f9:55:be:bd:70:10:fe:50:f3:fe:6b:af:fe:8b:
         d5:b3:21:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:33:31 2026 by rpki-client