Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/F9CB1E5ABF7111EE806CB182C4F9AE02.roa
File:                     F9CB1E5ABF7111EE806CB182C4F9AE02.roa (raw, json)
Hash identifier:          Qt9iDMNj4N3ReIVZuI3czqq9ixUtCUuaWxevQugerDE=
Subject key identifier:   EE:20:B2:AA:C7:DA:8F:B2:FD:3A:09:9A:B5:E2:8F:DE:15:52:52:E5
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       02C5
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/F9CB1E5ABF7111EE806CB182C4F9AE02.roa
Signing time:             Fri 31 Jul 2026 03:51:43 +0000
ROA not before:           Fri 31 Jul 2026 03:51:43 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     152184
IP address blocks:        2401:3fa0:110::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
                          rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Aug 2026 02:27:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 709 (0x2c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
        Validity
            Not Before: Jul 31 03:51:43 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a6c1bcf-a174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a8:75:a8:ec:1d:e5:c1:5a:49:9a:90:f2:8a:
                    e5:41:5a:4e:86:e2:94:65:64:19:4c:46:4e:0e:c1:
                    16:ed:bf:3d:f1:df:ed:b9:3b:45:20:5b:70:c1:91:
                    dd:ed:f9:48:0d:ab:8d:29:e9:20:65:73:c2:a8:5a:
                    e0:f2:b8:c2:c6:e4:96:9d:54:48:2b:0a:70:bd:94:
                    bc:f6:24:9f:4a:56:13:88:29:cd:aa:6d:7a:5a:e2:
                    e2:a4:93:f4:7f:47:b7:a5:42:77:5e:67:8e:7c:2a:
                    e7:8a:f4:ff:fe:fe:c1:a7:48:f1:0c:73:68:c5:8f:
                    4c:08:6e:87:e2:9a:04:af:ae:e4:0b:3b:85:4f:12:
                    5c:66:86:14:8f:9d:94:b8:03:68:f7:90:5a:5c:b6:
                    0c:c0:b6:70:7d:9d:f3:a4:24:43:0b:ec:66:ca:df:
                    67:e1:17:2c:9f:1b:4f:c2:a8:50:42:e4:ce:89:f3:
                    82:ee:f3:3b:be:b9:57:d0:fc:cf:8b:9b:54:da:38:
                    f9:51:79:8c:48:26:3e:5e:fc:1c:71:ef:cb:0b:14:
                    9c:b3:98:d9:8c:54:b5:b0:9f:71:31:f2:36:66:ab:
                    45:ac:86:94:da:d9:98:7b:4d:d0:fc:c8:86:85:f0:
                    64:91:39:71:70:ef:61:45:fd:8c:b3:86:db:40:34:
                    5b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:20:B2:AA:C7:DA:8F:B2:FD:3A:09:9A:B5:E2:8F:DE:15:52:52:E5
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/F9CB1E5ABF7111EE806CB182C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:3fa0:110::/44

    Signature Algorithm: sha256WithRSAEncryption
         60:55:af:39:e3:36:73:5b:89:46:76:db:c7:ea:8a:a6:10:6d:
         44:8a:ee:0d:d1:17:bd:c2:81:35:f8:8e:c5:38:62:83:4d:67:
         b7:01:a9:b0:a1:76:af:42:8e:e4:d6:3b:d5:9f:fd:43:0b:e5:
         a0:ae:1e:8e:2f:f4:68:88:61:9d:d0:6b:e7:e8:44:14:16:45:
         83:58:e9:82:e4:a1:66:d8:96:3a:0d:3b:33:0c:51:13:30:e7:
         ce:9e:92:25:12:be:8d:75:13:66:3e:01:70:5f:e5:7c:37:ff:
         df:0c:d8:15:58:9d:f4:e2:a2:ee:96:c9:0d:08:97:95:f5:7d:
         33:5d:1d:16:ec:72:88:9d:14:24:bb:32:91:8a:1a:cf:49:f1:
         1f:ce:26:76:8c:7c:f0:a4:fb:f3:20:92:cf:3c:5b:68:02:ec:
         5e:db:f2:1a:6c:f9:95:a1:0c:ef:96:cb:84:c8:95:ae:8c:38:
         81:aa:62:77:34:d6:f7:38:57:35:5a:69:db:c5:f5:c5:a7:97:
         e0:e1:06:f8:68:a3:f4:53:44:b7:70:d1:74:82:2b:27:48:36:
         b2:18:e3:54:4a:6c:07:18:c0:3f:08:30:67:df:0a:83:a2:6a:
         13:e3:a2:2e:2c:07:41:3e:c1:41:30:cf:5c:ec:2b:c4:f1:f8:
         0b:5a:52:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 19:55:35 2026 by rpki-client