Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/84B1619E8C4511F1A27F4BE95411F970.roa
File:                     84B1619E8C4511F1A27F4BE95411F970.roa (raw, json)
Hash identifier:          LCE4wuv/NAVwLN79rU8e9m63wNL34AoQs4Gj2EvZjig=
Subject key identifier:   68:82:6C:A6:D0:18:A4:E1:E7:63:9F:30:32:CA:D9:30:05:EE:4A:0E
Certificate issuer:       /CN=A911BDA9/serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
Certificate serial:       0186
Authority key identifier: B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/84B1619E8C4511F1A27F4BE95411F970.roa
Signing time:             Thu 30 Jul 2026 18:36:03 +0000
ROA not before:           Thu 30 Jul 2026 18:36:03 +0000
ROA not after:            Sat 31 Oct 2026 00:00:00 +0000
asID:                     17644
IP address blocks:        2001:df4:13c1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl
                          rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 04:23:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 390 (0x186)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911BDA9, serialNumber=B4E7E344ADCE36D84F1F3ABCCD14B24C1512BBAA
        Validity
            Not Before: Jul 30 18:36:03 2026 GMT
            Not After : Oct 31 00:00:00 2026 GMT
        Subject: CN=6a6b9993-7cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:14:1f:59:40:f8:ed:f9:04:88:f1:b2:63:5b:
                    a6:91:15:32:15:d9:9f:24:40:3f:6b:77:29:e7:8d:
                    de:f0:54:8c:ac:31:47:ac:98:90:14:d4:4b:27:3f:
                    d4:e0:c7:89:f6:5b:39:86:3f:18:f8:23:76:2a:23:
                    00:f7:12:17:31:e7:2b:18:ff:2e:ad:5a:b9:71:79:
                    a0:c7:8e:4d:d1:a0:c0:f6:c5:10:57:24:2c:de:ed:
                    f3:37:22:c2:cd:39:ae:f8:a2:15:0a:68:3f:b6:2e:
                    ae:cb:b1:be:d3:af:c4:48:f4:3c:07:ac:ee:50:20:
                    39:73:2a:4c:bc:bb:1d:b3:0c:c8:af:e0:40:e6:cd:
                    3c:e8:e6:07:a7:c2:09:ce:de:38:dc:98:37:35:41:
                    51:90:da:e6:26:61:0a:53:dd:4f:0b:26:71:7d:09:
                    3c:50:02:f7:68:e4:39:eb:67:4b:d2:37:f4:5c:de:
                    df:f3:62:e5:72:34:c8:f1:9b:25:21:e1:75:fb:6c:
                    3d:cc:15:62:b5:e1:f2:49:b4:c5:c2:90:b4:4b:ba:
                    ce:fa:ea:57:41:ac:51:f7:69:1b:3c:99:79:86:79:
                    11:d1:75:99:1c:49:1f:ce:91:f4:77:ed:2c:52:36:
                    60:f0:bb:11:d7:90:21:09:73:20:9c:b5:f7:6b:20:
                    a8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:82:6C:A6:D0:18:A4:E1:E7:63:9F:30:32:CA:D9:30:05:EE:4A:0E
            X509v3 Authority Key Identifier:
                keyid:B4:E7:E3:44:AD:CE:36:D8:4F:1F:3A:BC:CD:14:B2:4C:15:12:BB:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/tOfjRK3ONthPHzq8zRSyTBUSu6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tOfjRK3ONthPHzq8zRSyTBUSu6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/36A530F644BD11EFB73DB77BC4F9AE02/84B1619E8C4511F1A27F4BE95411F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df4:13c1::/48

    Signature Algorithm: sha256WithRSAEncryption
         bb:90:fc:55:f0:42:a1:f8:15:8b:d7:d8:a3:3b:49:8e:cc:b0:
         59:42:b7:32:b4:fc:56:c7:b1:45:63:8d:9b:2b:bb:24:b6:cf:
         6d:d6:ec:73:fe:b3:1f:87:90:df:aa:71:78:a3:32:21:9f:af:
         2c:9e:7d:c1:eb:e6:7e:ab:7b:21:0c:d4:66:b5:fe:1b:65:46:
         cd:7e:19:8c:c7:ee:6d:ee:6b:b2:97:10:eb:aa:8a:d8:d2:35:
         44:36:2b:19:d6:6b:51:55:81:04:63:d8:a5:21:e0:a5:ad:19:
         22:18:f5:3b:41:c3:9b:ac:9d:35:84:7a:7f:27:f6:77:f3:74:
         61:f6:49:f8:a6:fc:65:00:eb:0b:ef:ab:8d:0e:a4:61:13:25:
         e0:fb:4d:91:eb:84:c8:0f:8a:3b:89:b0:dc:6c:e8:01:0f:b7:
         48:af:d5:fd:9f:d7:55:60:b9:b7:e0:be:3e:92:da:1d:14:1f:
         21:63:35:a4:15:99:b7:af:17:8d:87:9b:b7:85:82:c9:39:55:
         94:36:d2:e3:63:a2:dd:e8:0c:c6:6f:51:c2:ad:86:85:c4:b6:
         5b:68:7e:92:35:cf:32:a2:42:7f:06:b2:2b:97:b5:45:97:28:
         e1:44:8a:c0:28:2d:3d:15:66:a4:df:26:c3:d7:41:a4:9f:50:
         26:f9:8a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:28:05 2026 by rpki-client