Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/8159E83ACC1F11F1838D8EC4F965CEF9.roa
File:                     8159E83ACC1F11F1838D8EC4F965CEF9.roa (raw, json)
Hash identifier:          2hTubPtrgJJMd06KFdSit0jYklFumCbRHXosAnHQhx4=
Subject key identifier:   EA:03:8A:30:69:72:52:CE:40:51:98:36:A0:B3:5F:A5:80:4D:56:6E
Certificate issuer:       /CN=A912D0F9/serialNumber=EB7150A4CE922FAC29B328EE90CC3C30665D1C01
Certificate serial:       03
Authority key identifier: EB:71:50:A4:CE:92:2F:AC:29:B3:28:EE:90:CC:3C:30:66:5D:1C:01
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63FQpM6SL6wpsyjukMw8MGZdHAE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/8159E83ACC1F11F1838D8EC4F965CEF9.roa
Signing time:             Tue 20 Oct 2026 00:45:11 +0000
ROA not before:           Tue 20 Oct 2026 00:45:11 +0000
ROA not after:            Wed 01 Dec 2027 00:00:00 +0000
asID:                     38880
IP address blocks:        2402:fa00:be00::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.crl
                          rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63FQpM6SL6wpsyjukMw8MGZdHAE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Nov 2026 09:37:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D0F9, serialNumber=EB7150A4CE922FAC29B328EE90CC3C30665D1C01
        Validity
            Not Before: Oct 20 00:45:11 2026 GMT
            Not After : Dec  1 00:00:00 2027 GMT
        Subject: CN=6ad6b997-59da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ec:d5:37:a5:ba:11:0e:c4:b8:ae:95:fa:a4:
                    1d:84:fa:cd:e2:14:a8:4f:d5:66:14:de:8c:b1:9b:
                    c3:e0:32:a8:87:90:7a:16:74:36:cc:ca:99:74:cd:
                    4d:6e:6b:be:bd:9c:ff:38:ae:14:1d:ed:65:50:38:
                    16:01:b4:17:c9:6c:a5:c6:a7:b1:f6:51:45:e6:dd:
                    dc:ad:b7:d4:e2:52:a3:31:09:f6:be:07:16:af:f1:
                    0b:dc:77:ea:10:39:71:6b:7e:49:ec:7b:cc:db:3a:
                    87:4c:4c:02:79:08:92:b6:bb:cf:f2:ee:41:11:12:
                    6a:a7:36:d9:7f:9e:d0:b0:9a:c6:41:e4:61:be:02:
                    bc:32:06:f9:cd:f4:0d:2d:05:b6:ae:c4:30:09:5d:
                    50:ee:65:78:d1:bd:2a:08:e8:04:8c:7d:c7:1b:19:
                    8a:86:83:b9:1c:d1:da:95:16:c3:7a:d4:7a:b8:55:
                    3a:c2:5a:7d:4e:5c:da:01:5b:73:96:8c:5d:af:08:
                    b5:15:5e:aa:fa:d5:1e:f5:b9:2c:4f:ce:28:39:b7:
                    44:55:1f:7c:a3:86:5b:a7:18:c9:47:5d:4a:7f:5b:
                    76:39:c0:52:15:bd:d4:71:11:67:4a:d0:e1:d3:73:
                    82:6e:8e:05:f2:b0:2e:7e:d4:93:81:9b:4d:ff:dd:
                    8d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:03:8A:30:69:72:52:CE:40:51:98:36:A0:B3:5F:A5:80:4D:56:6E
            X509v3 Authority Key Identifier:
                keyid:EB:71:50:A4:CE:92:2F:AC:29:B3:28:EE:90:CC:3C:30:66:5D:1C:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/63FQpM6SL6wpsyjukMw8MGZdHAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/63FQpM6SL6wpsyjukMw8MGZdHAE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D0F9/62D59450CC0F11F1A63CEB0FF565CEF9/8159E83ACC1F11F1838D8EC4F965CEF9.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:fa00:be00::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:18:56:2a:91:ec:de:6f:ff:7d:05:c3:5e:83:12:68:16:d3:
         e3:13:e1:f0:3f:7f:a5:60:70:b8:78:b3:89:b2:8f:6a:fd:41:
         58:7f:d9:f5:f8:e1:16:20:c4:75:02:3b:a3:21:52:cc:f0:a3:
         a7:4a:49:68:fe:14:c8:be:dd:0b:48:7e:ee:89:5d:6a:32:e2:
         dd:29:29:4c:c2:ca:e9:8e:e1:98:5d:a8:34:20:0f:59:7b:c0:
         e9:8d:81:5a:ff:3c:61:e1:ee:f2:58:74:87:66:29:96:0b:b4:
         42:02:64:49:6f:06:3e:c5:0a:87:45:ba:9b:1f:8b:87:a3:12:
         86:b9:d9:93:3d:d4:89:1e:6a:47:09:7b:7d:06:f7:7a:bb:3b:
         c7:41:0d:69:00:1e:45:58:35:71:e6:ce:a7:c0:5b:df:7d:d9:
         4e:ae:bd:f6:fc:e2:17:fc:90:7b:28:df:9b:d0:8d:18:d4:18:
         40:29:da:71:7b:ed:8b:e9:25:95:13:d3:87:10:86:14:e7:7e:
         d6:0a:e9:6e:cc:d9:83:a9:0f:83:21:c4:fa:ed:80:08:50:99:
         ff:39:ac:63:9a:0f:26:4a:53:f2:5c:c9:18:0e:66:2c:42:f1:
         ab:1a:64:61:79:f4:66:4d:64:d7:06:9c:7b:d6:84:0d:fc:89:
         a1:34:6a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:02:15 2026 by rpki-client