Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/466C47A676C311F18DD29C6A75A30FBC.roa
File:                     466C47A676C311F18DD29C6A75A30FBC.roa (raw, json)
Hash identifier:          IbQFMv8dtqRHqxsshZI7Pyeh8+hPBY+F1x7GgYmvaew=
Subject key identifier:   B5:94:CA:26:89:35:7F:92:77:13:9E:8A:0A:78:49:89:61:7A:16:7F
Certificate issuer:       /CN=A9142A75/serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
Certificate serial:       0113
Authority key identifier: BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/466C47A676C311F18DD29C6A75A30FBC.roa
Signing time:             Fri 03 Jul 2026 09:40:50 +0000
ROA not before:           Fri 03 Jul 2026 09:40:50 +0000
ROA not after:            Fri 28 May 2027 00:00:00 +0000
asID:                     149287
IP address blocks:        2001:df5:1dc0::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl
                          rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 Jul 2026 07:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142A75, serialNumber=BC70F374B728C7B711C24A6827F7477A42B22A4D
        Validity
            Not Before: Jul  3 09:40:50 2026 GMT
            Not After : May 28 00:00:00 2027 GMT
        Subject: CN=6a4783a2-b506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d7:74:bd:62:90:44:82:24:73:2e:41:df:da:
                    47:1a:a2:39:57:5d:99:78:65:77:9b:5e:a7:33:61:
                    c8:32:a7:ce:09:b1:12:46:1a:8a:1f:f9:8d:82:3d:
                    ec:28:3c:fd:73:ab:cb:ae:dc:7a:45:97:e9:05:ca:
                    6b:30:64:5a:5e:06:2d:3a:ca:54:87:c1:cd:41:5e:
                    47:43:4e:e1:f3:f3:60:b0:bd:25:89:06:a1:b7:26:
                    d4:d4:30:9f:04:53:f3:9f:18:77:96:4e:af:a8:d8:
                    f9:cd:67:0d:84:f9:6d:0f:6f:12:05:27:23:f2:a5:
                    29:87:bf:21:6d:ab:d4:16:66:31:ce:ff:64:b0:d8:
                    63:45:e6:f7:9c:18:8f:f4:93:14:ff:fa:84:16:37:
                    55:ab:f0:03:5f:4a:3f:c8:39:b3:ee:6c:9a:a0:1f:
                    90:7e:8a:9f:3d:e4:1a:25:c5:08:98:fc:df:41:bd:
                    ce:ce:ae:79:dc:77:cf:c7:54:37:89:3a:85:23:1a:
                    25:53:35:d7:40:d3:0b:76:b4:b7:26:26:26:74:78:
                    2f:9c:1a:62:8b:1a:ac:0f:a7:44:4b:c6:43:80:47:
                    60:71:42:72:36:64:85:81:45:d4:50:6d:b0:00:eb:
                    88:e3:f3:3e:ae:1f:e8:60:a9:16:13:26:3b:e5:5e:
                    c1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:94:CA:26:89:35:7F:92:77:13:9E:8A:0A:78:49:89:61:7A:16:7F
            X509v3 Authority Key Identifier:
                keyid:BC:70:F3:74:B7:28:C7:B7:11:C2:4A:68:27:F7:47:7A:42:B2:2A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/vHDzdLcox7cRwkpoJ_dHekKyKk0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vHDzdLcox7cRwkpoJ_dHekKyKk0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142A75/EF5CD6DAF53911EFB09FC83DC4F9AE02/466C47A676C311F18DD29C6A75A30FBC.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:1dc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:bc:98:0e:5d:ac:7f:f5:71:c2:7a:72:f5:db:2a:75:c4:12:
         7e:b4:44:de:76:56:31:46:de:6d:78:fd:c6:cb:6b:f2:a7:2d:
         64:87:28:28:6b:cf:e2:18:17:79:2c:0f:5f:e5:e8:4d:36:53:
         83:d4:5b:73:a5:0d:6f:e2:d3:e3:a3:23:11:da:ee:33:0a:16:
         39:29:fe:62:09:e6:9c:2c:43:95:7e:c3:53:b9:a3:de:0c:80:
         96:36:63:0c:07:29:10:34:76:55:37:16:62:94:d7:60:90:cd:
         e6:fd:1b:f8:08:00:0b:e2:89:87:63:9e:94:80:ba:3f:fa:e1:
         ba:76:54:19:10:80:96:20:86:e0:c0:90:ae:cc:23:db:c0:a8:
         dd:03:bc:a3:5e:a4:b0:e4:16:5c:96:ed:06:28:ab:5f:ac:79:
         59:b0:ba:b2:b2:29:c9:9e:82:51:1e:79:25:4e:ad:6f:3e:47:
         df:56:3e:e3:6a:ba:78:be:e0:0b:1f:62:ba:09:bf:9a:35:62:
         1a:cf:94:24:4b:e1:62:c1:cd:8a:51:22:a3:29:5c:d5:1b:2d:
         d6:5b:3a:85:f5:68:a0:1b:05:95:46:4e:51:2d:42:89:84:01:
         40:a8:a6:64:06:13:e9:93:03:7c:82:9f:10:a2:62:93:67:0b:
         e5:29:83:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 12 08:49:15 2026 by rpki-client