Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/05A966C652DB11EF990CB840C4F9AE02.roa
File:                     05A966C652DB11EF990CB840C4F9AE02.roa (raw, json)
Hash identifier:          0tnkTjmDTPCnBRHjTVAhUZJS+JDrQXtnaTDvs7rlqbw=
Subject key identifier:   00:A2:8B:E7:8B:6E:E4:3D:20:FC:BC:92:69:99:1D:6A:D0:FC:E3:38
Certificate issuer:       /CN=A91393BE/serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
Certificate serial:       017D
Authority key identifier: DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/05A966C652DB11EF990CB840C4F9AE02.roa
Signing time:             Mon 03 Aug 2026 05:55:16 +0000
ROA not before:           Mon 03 Aug 2026 05:55:16 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     132895
IP address blocks:        2401:5e80::/32 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl
                          rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:11:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91393BE, serialNumber=DA47278A77BBDFF2AD9F98A011A2A7A2E7CD60D8
        Validity
            Not Before: Aug  3 05:55:16 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a702d44-af13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:e0:fe:84:bd:c6:4f:1b:f2:9b:af:10:12:
                    5f:21:68:f9:cf:25:92:44:46:a7:62:5f:27:a5:4b:
                    7c:da:f2:b1:8b:06:6e:0e:98:2c:a3:2f:91:c4:43:
                    e4:e1:6b:61:6b:89:bf:a9:ba:79:52:d9:9d:ed:54:
                    83:39:8e:06:91:26:e3:67:b7:6f:5a:2a:a2:04:8e:
                    b3:d7:da:79:fe:e2:2d:fc:bf:44:74:d8:66:13:b9:
                    31:1e:56:dd:b1:e0:d1:89:78:cf:8e:dc:7f:16:42:
                    95:10:f8:ed:45:9f:b3:f0:80:49:48:d9:6e:d1:dd:
                    18:39:00:56:da:71:17:d9:f2:e2:2e:d0:ba:00:07:
                    55:a3:8e:c9:04:ff:c4:f6:ec:19:92:45:74:dd:40:
                    00:f7:c5:a4:5f:5f:eb:fb:94:4f:01:fa:0e:aa:95:
                    2c:92:9e:cc:07:3f:cc:f2:cb:35:34:dc:76:a8:77:
                    81:cd:85:66:85:e0:ea:77:dd:49:9c:60:3b:d5:54:
                    6e:02:f0:35:d8:95:87:35:f4:3c:89:22:8f:85:a5:
                    38:b3:ac:40:20:4b:2f:a5:1e:31:9d:4a:e4:55:48:
                    d2:6e:df:dd:b8:13:7a:0c:b1:aa:8f:6a:87:43:df:
                    93:ab:bf:13:53:52:66:1e:75:06:84:77:55:a8:9b:
                    3e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A2:8B:E7:8B:6E:E4:3D:20:FC:BC:92:69:99:1D:6A:D0:FC:E3:38
            X509v3 Authority Key Identifier:
                keyid:DA:47:27:8A:77:BB:DF:F2:AD:9F:98:A0:11:A2:A7:A2:E7:CD:60:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/2kcnine73_Ktn5igEaKnoufNYNg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2kcnine73_Ktn5igEaKnoufNYNg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91393BE/7741614C52D311EFBAEDDC1EC4F9AE02/05A966C652DB11EF990CB840C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:5e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         44:f2:46:67:c6:75:5e:ef:e4:a9:d3:12:4e:4c:41:a3:08:5a:
         ad:bf:a8:61:65:61:92:63:2a:00:5e:7e:66:78:61:51:02:23:
         e9:0b:3a:1c:1e:19:d5:a7:4f:d9:c8:45:4a:34:39:46:75:aa:
         7e:34:c4:c7:1f:5b:d8:ee:c2:2a:2c:bc:c9:a5:88:40:a8:1a:
         2d:fe:3d:85:8e:02:63:5b:8c:39:79:41:79:77:42:60:94:f9:
         bf:97:09:e9:5c:da:3d:9e:85:6d:08:90:48:1f:61:de:2d:8a:
         bd:5d:81:4e:0c:7e:90:12:0b:e6:cf:30:86:ef:3f:a7:97:64:
         c6:e2:8f:32:b6:41:cd:f6:99:82:79:1c:9f:9f:f4:c3:94:0d:
         14:8b:4d:ce:0e:83:fd:9d:45:22:fd:f9:9d:69:35:2c:2b:bf:
         14:b3:91:27:0d:fb:cc:f3:ac:e5:6f:02:24:e8:26:25:3d:27:
         04:35:fa:e3:4b:1d:d2:25:bd:bc:10:5e:b7:20:54:dd:26:f4:
         df:b6:38:08:c8:db:e9:d6:70:bc:03:37:e5:60:58:c6:b3:79:
         81:9b:54:27:76:35:0f:6e:19:d5:74:5b:45:f4:97:ce:64:00:
         7e:eb:56:01:e4:94:a2:27:31:6c:cf:d1:ff:82:28:14:8e:18:
         83:77:dc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 16:46:07 2026 by rpki-client