Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/A2348A2E8EBD11F0848C250FC4F9AE02.roa
File:                     A2348A2E8EBD11F0848C250FC4F9AE02.roa (raw, json)
Hash identifier:          xHFtOp89Ew/EV+F26Z5Y9h5o64nJkFT6TAlApTvBCPU=
Subject key identifier:   89:9D:91:87:A1:A7:F7:DB:F6:23:D5:D4:31:68:1E:88:86:01:E0:5D
Certificate issuer:       /CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
Certificate serial:       020E
Authority key identifier: EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/A2348A2E8EBD11F0848C250FC4F9AE02.roa
Signing time:             Wed 19 Aug 2026 03:53:01 +0000
ROA not before:           Wed 19 Aug 2026 03:53:01 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     134474
IP address blocks:        2001:df2:9440:efff::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl
                          rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 10 Sep 2026 03:15:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912C0DE, serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996
        Validity
            Not Before: Aug 19 03:53:01 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a85289d-393d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:3c:fd:74:7c:af:6b:bf:89:5f:07:4b:b3:
                    28:9d:68:95:64:be:bc:34:cb:ab:ce:01:a5:e3:3b:
                    f4:62:2d:91:40:a9:93:e0:c5:8a:d8:77:b4:16:79:
                    df:b3:d3:17:90:be:9b:fa:16:d2:54:64:1b:c2:3d:
                    da:ee:a9:d6:08:fa:45:eb:4b:40:ca:55:7a:ff:c1:
                    24:cf:1a:3f:5d:3a:a8:78:52:f1:53:72:93:e0:e0:
                    b9:bf:10:b4:85:bc:fc:07:71:e3:fd:e0:f7:d9:dd:
                    4c:33:d1:45:8f:a7:9f:92:a3:75:5e:02:3d:36:24:
                    fc:7f:6a:46:39:8a:de:45:e5:ae:d1:2b:f1:a2:4d:
                    6e:26:19:92:24:93:03:fc:47:c9:00:14:79:73:0e:
                    e9:b5:2e:85:9f:4f:f1:a3:66:7d:1e:45:a5:0e:81:
                    f7:04:0d:fa:15:3b:ae:91:41:74:0a:58:b2:db:ef:
                    21:a9:a9:68:c1:84:0b:17:f4:5a:70:18:81:7e:63:
                    2a:27:f4:59:a9:eb:b7:09:1a:84:6a:85:38:4f:1d:
                    d9:4d:ff:18:29:4a:a1:67:c4:03:73:9e:d1:d9:b2:
                    27:92:f2:4e:7a:15:d8:05:f1:c4:7a:06:00:9e:4c:
                    d2:dc:9a:1e:27:37:e9:75:69:ef:0b:e6:a9:fd:1f:
                    73:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:9D:91:87:A1:A7:F7:DB:F6:23:D5:D4:31:68:1E:88:86:01:E0:5D
            X509v3 Authority Key Identifier:
                keyid:EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/A2348A2E8EBD11F0848C250FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:9440:efff::/64

    Signature Algorithm: sha256WithRSAEncryption
         bd:c5:34:b0:d2:c8:3f:89:55:03:48:bb:aa:72:45:57:1b:d2:
         31:2a:55:f2:d9:58:79:85:c2:82:14:41:27:e0:6d:52:8d:86:
         9a:72:98:8d:59:7d:81:9d:aa:f8:80:09:1c:53:32:94:92:f1:
         d8:54:15:62:85:27:2d:02:a7:fa:31:87:35:09:4a:35:0c:c1:
         17:68:eb:7d:2e:66:c9:30:55:f6:4e:4f:fb:cf:97:19:56:b4:
         a1:9f:f1:34:58:4e:92:7d:ef:56:23:98:ac:89:8f:b7:a7:55:
         d4:f9:e2:b1:68:bb:fc:28:0b:7b:88:e4:9e:dd:b8:95:11:7d:
         65:b3:7a:e9:bf:f6:38:28:54:8a:2e:c1:af:68:ee:13:6b:f8:
         89:b7:50:37:1b:09:42:4f:fc:7a:7a:a1:14:7c:20:ad:e9:b8:
         31:8d:85:30:11:17:21:53:55:fa:8f:ab:e4:04:19:38:72:ad:
         71:89:34:02:6e:5e:ec:4c:c9:5b:85:98:93:0a:74:7d:83:61:
         7e:85:e4:72:fc:8c:62:e3:4f:ca:ca:b7:3c:58:f8:8b:cf:0f:
         f4:3d:e4:18:44:72:e3:8b:d3:e1:a1:90:d6:7e:ed:fb:85:68:
         9a:3e:d0:9c:67:8a:8f:ab:37:16:88:38:90:63:b1:53:c5:0a:
         10:0f:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:46:56 2026 by rpki-client