Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/21D4377C8C4511F19227BDCF5411F970.roa
File:                     21D4377C8C4511F19227BDCF5411F970.roa (raw, json)
Hash identifier:          Q5nqflo0XdbDKgMTEhv81FckTDKKK7RQBGI9jc5A/cI=
Subject key identifier:   B6:69:22:26:28:6B:D5:6A:19:8F:EA:3C:56:8D:89:CF:F7:89:51:F3
Certificate issuer:       /CN=A912B666/serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
Certificate serial:       8E
Authority key identifier: 35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/21D4377C8C4511F19227BDCF5411F970.roa
Signing time:             Thu 30 Jul 2026 18:33:17 +0000
ROA not before:           Thu 30 Jul 2026 18:33:17 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     17644
IP address blocks:        2001:df6:5941::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl
                          rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Sep 2026 07:25:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 142 (0x8e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B666, serialNumber=3508197A10FEA46A718463314FEBA93944B6248B
        Validity
            Not Before: Jul 30 18:33:17 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a6b98ed-c658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:aa:51:04:01:23:d6:c2:3a:93:89:41:c6:80:
                    ae:d1:6d:61:63:6d:94:c0:95:03:a6:18:c6:97:34:
                    65:8a:a9:e0:b6:62:01:06:58:51:f1:0a:66:91:f8:
                    5a:5c:70:41:f9:2d:2f:15:5e:eb:a3:66:3c:03:a3:
                    1b:d6:2b:a6:d5:22:68:98:c5:b1:bb:3a:8b:be:c7:
                    64:aa:ed:3f:9f:1e:ff:ba:fb:00:e0:62:da:ed:fd:
                    8f:15:eb:5b:89:55:11:ad:85:4e:d6:fe:5a:af:d7:
                    01:c7:d7:0b:ae:84:71:6c:1e:8e:27:8d:18:4f:3b:
                    16:60:45:1b:17:c8:04:7e:c4:90:5d:a3:0e:26:a6:
                    e6:66:4d:44:88:99:11:34:db:16:de:ec:ee:7e:e2:
                    22:d8:82:89:c7:c0:1b:7f:0b:99:e9:03:6d:c9:1f:
                    e9:0d:1f:91:70:fe:79:b6:42:53:3f:90:21:0b:7c:
                    36:cf:f5:01:b9:5d:7b:ac:3c:20:a9:43:28:80:7b:
                    4b:2d:b8:34:3b:92:30:98:be:f9:4e:1d:1c:d4:97:
                    2d:bf:b6:ec:2a:5e:c4:fb:58:e3:36:69:bb:47:a2:
                    97:63:00:75:21:f6:e0:ce:ed:10:55:54:6b:73:7e:
                    59:5d:4c:fa:25:e9:c8:51:f7:9e:74:8a:b1:8d:96:
                    be:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:69:22:26:28:6B:D5:6A:19:8F:EA:3C:56:8D:89:CF:F7:89:51:F3
            X509v3 Authority Key Identifier:
                keyid:35:08:19:7A:10:FE:A4:6A:71:84:63:31:4F:EB:A9:39:44:B6:24:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/NQgZehD-pGpxhGMxT-upOUS2JIs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NQgZehD-pGpxhGMxT-upOUS2JIs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B666/99361A7CC92911F0B238F281C4F9AE02/21D4377C8C4511F19227BDCF5411F970.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:5941::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:15:aa:5d:84:a0:b7:bc:f7:de:09:a8:02:ad:e7:e8:97:a3:
         48:ca:db:0e:6e:d7:e8:0f:47:58:6c:38:f4:1e:3c:a4:17:58:
         72:3b:b9:78:56:35:85:c3:8b:a8:ea:e7:62:95:fb:10:65:6c:
         b2:5d:9e:92:01:91:7e:f1:6b:a2:94:80:ea:1d:03:19:1c:ee:
         89:38:9e:31:f8:98:b2:02:4f:81:7a:e6:92:ea:e5:39:58:49:
         c3:31:d7:0e:a7:f5:ea:d0:63:9c:75:b7:ed:f0:6b:b2:ad:4f:
         1e:17:6b:1a:47:57:67:cc:18:bb:56:73:fb:c6:f8:d5:b1:d6:
         3c:ea:bc:a6:d3:cb:78:28:11:9a:cf:33:aa:28:28:b8:58:46:
         2e:c0:f5:bb:3f:fe:08:2e:58:af:89:c7:3e:8e:1f:b7:99:f6:
         af:49:db:83:a1:ea:c9:c6:92:3f:56:89:b5:65:dc:07:5d:36:
         c2:5c:bc:e5:82:17:5d:e0:1c:b1:9b:be:48:af:8e:31:5e:29:
         35:db:ca:b4:2c:0d:7e:e0:da:75:1a:4a:b6:07:49:25:ee:05:
         50:3c:89:83:81:f5:35:c8:51:94:b7:45:5e:73:20:20:48:c0:
         2b:40:ff:53:4c:e6:6a:ea:6c:f3:ea:de:2d:f1:e9:d6:5e:20:
         80:25:6c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:25:59 2026 by rpki-client