Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9112F94/E110B1306ACE11F1AE31ADFE6A47A888/BA19D91E6AEA11F186CCA84C7247A888.roa
File:                     BA19D91E6AEA11F186CCA84C7247A888.roa (raw, json)
Hash identifier:          c3tBD/T8YJtpX6kUCes46Ys/G5EyBPhj3wlKjMv0CKQ=
Subject key identifier:   EA:EF:1C:80:95:64:E5:B4:55:F9:39:AF:09:25:28:96:C7:3C:EF:D0
Certificate issuer:       /CN=A9112F94/serialNumber=BFB592CBF54D04718CD65D2126AFEDFCB79122A1
Certificate serial:       05
Authority key identifier: BF:B5:92:CB:F5:4D:04:71:8C:D6:5D:21:26:AF:ED:FC:B7:91:22:A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7WSy_VNBHGM1l0hJq_t_LeRIqE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9112F94/E110B1306ACE11F1AE31ADFE6A47A888/BA19D91E6AEA11F186CCA84C7247A888.roa
Signing time:             Thu 18 Jun 2026 07:53:00 +0000
ROA not before:           Thu 18 Jun 2026 07:53:00 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     154720
IP address blocks:        2001:df7:2240::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9112F94/E110B1306ACE11F1AE31ADFE6A47A888/v7WSy_VNBHGM1l0hJq_t_LeRIqE.crl
                          rsync://rpki.apnic.net/member_repository/A9112F94/E110B1306ACE11F1AE31ADFE6A47A888/v7WSy_VNBHGM1l0hJq_t_LeRIqE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7WSy_VNBHGM1l0hJq_t_LeRIqE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9112F94, serialNumber=BFB592CBF54D04718CD65D2126AFEDFCB79122A1
        Validity
            Not Before: Jun 18 07:53:00 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a33a3dc-15bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:01:1d:a7:b7:60:41:07:1e:1f:ee:44:13:2a:
                    82:9b:9a:79:19:91:39:a4:9a:66:61:ff:89:90:59:
                    a5:f5:5f:31:88:25:54:9a:7a:c0:db:5a:31:15:63:
                    34:c9:4e:36:4b:85:1c:55:03:85:d3:89:4e:cb:c0:
                    84:c4:c6:f7:4d:96:2e:89:26:9b:98:e0:53:19:b3:
                    33:b6:7e:a9:0f:c4:e3:c1:e2:6d:36:e5:41:00:cb:
                    d9:4a:b3:3c:df:5f:dc:e3:67:0f:7c:29:19:56:e2:
                    f1:92:ec:d6:18:37:c3:0a:94:f7:a8:a0:ae:9b:12:
                    4e:5d:38:7f:c5:be:92:4d:5b:88:c7:ee:9c:da:a2:
                    70:0a:09:a8:0b:20:b6:15:10:b1:fb:17:ed:c2:83:
                    44:19:b5:1b:ec:f3:6c:6a:d5:4b:a2:86:f3:4d:dc:
                    c7:8d:ad:e5:e0:63:c0:55:38:53:a8:f0:4a:fa:f7:
                    09:c8:48:9f:fa:d9:19:80:5d:6a:41:72:a4:6d:3f:
                    d2:d5:fb:fa:7a:d7:c4:68:55:a9:93:2c:cb:11:80:
                    87:e4:49:a8:88:d4:c0:d3:9b:02:da:a2:44:51:22:
                    58:89:fa:c2:f6:8c:cb:17:88:8b:d0:54:cf:e9:bf:
                    c9:ed:be:6e:8b:eb:d3:29:44:9b:f9:8e:b7:6e:17:
                    78:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EF:1C:80:95:64:E5:B4:55:F9:39:AF:09:25:28:96:C7:3C:EF:D0
            X509v3 Authority Key Identifier:
                keyid:BF:B5:92:CB:F5:4D:04:71:8C:D6:5D:21:26:AF:ED:FC:B7:91:22:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9112F94/E110B1306ACE11F1AE31ADFE6A47A888/v7WSy_VNBHGM1l0hJq_t_LeRIqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7WSy_VNBHGM1l0hJq_t_LeRIqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112F94/E110B1306ACE11F1AE31ADFE6A47A888/BA19D91E6AEA11F186CCA84C7247A888.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:2240::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:2c:02:d7:96:65:dd:11:21:81:93:8c:4b:f2:ff:5c:b1:57:
         0a:7f:b0:d5:ef:2e:1d:1b:c0:0e:26:16:2e:bc:00:a0:d0:89:
         31:52:99:73:9e:0b:c6:63:c9:0e:2d:08:0a:84:bb:42:84:8b:
         1b:4e:84:72:06:bf:57:70:dc:42:fe:de:7b:2f:66:43:e2:7a:
         b9:2e:d9:55:af:16:6b:78:9f:11:75:40:98:6a:40:ff:fb:fa:
         d5:78:08:68:5d:69:0c:2f:81:27:26:ad:8f:44:fa:9f:ca:e9:
         8e:89:58:fd:58:71:e5:e4:dc:98:e3:61:aa:a7:63:22:57:57:
         d6:d0:1c:86:ed:fa:fc:c4:d3:1e:98:cc:dd:3a:93:00:82:4f:
         b4:cb:c9:61:19:34:fe:92:ed:c5:0f:4b:a3:38:b1:23:a2:0a:
         5f:33:47:eb:4e:f4:8a:4b:ac:45:86:ad:a3:d2:4b:1b:f4:0a:
         3c:10:52:ed:66:d7:ae:2e:94:f0:25:31:e4:d4:72:3b:71:97:
         24:11:f3:b6:24:a9:fd:e4:c3:2c:1e:a2:d1:5b:34:9a:30:20:
         e0:b4:cf:ab:11:46:5d:ec:4e:ea:61:e8:ec:2e:2e:f2:0f:7f:
         a1:41:f9:ff:df:78:86:20:e0:10:c9:18:67:3d:64:29:e3:2a:
         f8:53:ba:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 06:08:39 2026 by rpki-client