Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/FB405D86900E11EAA43BB21FC4F9AE02.roa
File:                     FB405D86900E11EAA43BB21FC4F9AE02.roa (raw, json)
Hash identifier:          qMpPh7x99PhZagH9wPyBkNioKW8FOSzLaiUjeJtK1aA=
Subject key identifier:   E7:B9:95:5E:D7:50:A4:27:D9:2B:27:7B:EA:DD:9F:4C:B9:EA:DB:55
Certificate issuer:       /CN=A914C33A/serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
Certificate serial:       2B98
Authority key identifier: 9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/FB405D86900E11EAA43BB21FC4F9AE02.roa
Signing time:             Sat 10 Oct 2026 16:22:15 +0000
ROA not before:           Sat 10 Oct 2026 16:22:15 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     135053
IP address blocks:        2406:e401::/32 maxlen: 56
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl
                          rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 15:33:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11160 (0x2b98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C33A, serialNumber=9C81471F18AAEECDF945A7C917FD8A8985D7C3AC
        Validity
            Not Before: Oct 10 16:22:15 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6aca6637-ad9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:b0:df:5f:9a:3f:3f:47:3c:aa:8e:0e:9d:
                    2e:ad:2f:f8:00:68:31:c5:4d:7c:82:69:1d:75:b9:
                    ad:fe:d9:a1:aa:0f:5c:c4:21:cf:e0:90:2d:93:28:
                    38:d8:91:c3:a1:d2:4d:58:e9:19:85:c8:29:de:48:
                    b7:b1:58:3e:9f:57:2f:07:47:fa:a2:83:36:d5:c0:
                    c3:d5:88:55:f9:f4:8a:46:b8:af:70:9e:54:6f:77:
                    da:9a:9b:cd:8b:73:a1:c7:44:cc:15:40:ae:75:47:
                    42:9b:1c:df:c9:c6:9b:60:c1:37:24:f8:e6:ac:d6:
                    3b:ed:35:0a:5c:00:c6:ec:19:eb:49:30:23:23:d1:
                    44:96:5a:41:79:2f:3d:fb:e2:84:e4:98:e8:f7:8d:
                    6d:7c:0a:ad:4f:1d:1c:a2:c8:99:03:a2:2b:e8:31:
                    eb:7d:3c:a2:a8:4f:62:6b:20:eb:9f:f5:31:0a:25:
                    62:be:f5:d8:7b:f4:fa:51:44:dc:06:ee:12:6f:02:
                    42:2a:45:52:26:70:08:83:e6:f5:68:19:e5:59:a7:
                    f2:fa:e8:2a:79:66:d9:84:88:2c:ed:38:e3:6c:e9:
                    89:5e:9b:01:71:11:71:26:a1:cc:6c:dd:89:c3:55:
                    5a:90:97:98:c0:0c:7f:e0:34:cc:90:3f:98:50:be:
                    7c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B9:95:5E:D7:50:A4:27:D9:2B:27:7B:EA:DD:9F:4C:B9:EA:DB:55
            X509v3 Authority Key Identifier:
                keyid:9C:81:47:1F:18:AA:EE:CD:F9:45:A7:C9:17:FD:8A:89:85:D7:C3:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/nIFHHxiq7s35RafJF_2KiYXXw6w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nIFHHxiq7s35RafJF_2KiYXXw6w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C33A/1D2BD03E2DDB11E49AF61530C4F9AE02/FB405D86900E11EAA43BB21FC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:e401::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:2c:90:cc:4a:28:c2:33:3c:08:2c:48:e7:51:fc:34:20:7f:
         54:06:04:c0:17:0d:39:be:31:cc:a4:f6:20:d7:e0:ee:a5:62:
         d4:7c:d7:16:cd:8f:d8:1e:b8:e9:f1:8a:54:50:0e:88:31:e5:
         06:97:e9:52:08:0c:3c:09:42:e7:7f:65:5f:15:e1:87:0b:61:
         c6:2c:39:6d:19:fa:0a:80:cf:7e:34:c4:ce:bb:2d:75:a9:1e:
         eb:fc:b7:cc:aa:7f:84:2a:7c:78:2c:10:d7:32:61:11:37:d6:
         8e:8d:a9:df:b5:56:70:b1:a4:6d:ce:4a:0c:67:0c:8f:b2:08:
         4b:a7:b0:bc:2b:17:81:b3:35:8f:e1:af:6e:a6:cb:90:de:53:
         4a:2e:bc:c1:b8:e6:eb:c1:d9:24:db:5e:81:c4:ca:61:a8:97:
         c1:35:e7:1a:ef:cc:42:47:b0:2e:04:66:5b:9e:7d:ea:0e:f3:
         1b:4b:ed:28:36:30:26:08:a4:40:04:6f:de:e0:41:42:98:8d:
         1e:90:ea:04:dc:c0:f7:22:bc:b6:f1:6b:77:cc:1f:10:cd:e8:
         72:11:d7:bd:1f:57:d1:33:a0:96:67:a3:67:9c:04:4a:7f:a6:
         fb:15:69:6b:82:75:99:e9:6d:29:10:e5:06:5e:4d:1b:d4:18:
         08:0f:aa:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 04:33:07 2026 by rpki-client