Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/9D1CBEB65D8111F0A04DD550C4F9AE02.roa
File:                     9D1CBEB65D8111F0A04DD550C4F9AE02.roa (raw, json)
Hash identifier:          xYR/SYc7/uXieauINdZkifHH1K0sJh33XcTHArEcA5U=
Subject key identifier:   D0:6E:0E:49:3F:1F:4D:34:67:C3:6E:C3:DE:6C:EA:70:77:94:07:61
Certificate issuer:       /CN=A913B510/serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE
Certificate serial:       C3
Authority key identifier: 8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/9D1CBEB65D8111F0A04DD550C4F9AE02.roa
Signing time:             Wed 15 Jul 2026 08:34:21 +0000
ROA not before:           Wed 15 Jul 2026 08:34:21 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     149486
IP address blocks:        2401:b5e0:100::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl
                          rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 08:08:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 195 (0xc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913B510, serialNumber=8F0866680A02E4BA0EBE1E8F2258EE281CD43EFE
        Validity
            Not Before: Jul 15 08:34:21 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a57460d-8ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cb:28:98:f9:5d:93:ff:6e:24:d9:96:c8:ec:
                    d0:6e:43:1a:09:09:8c:2e:63:dc:22:68:54:92:77:
                    1b:d3:60:01:7d:a7:79:33:ae:89:d2:00:45:7f:b5:
                    58:f1:2c:3f:b1:ce:6d:d6:37:66:68:f5:04:b1:7b:
                    a3:5e:ba:58:d1:42:03:67:a9:f9:5e:ec:45:08:18:
                    80:16:9e:8e:e7:41:a4:87:01:a6:f2:55:ee:85:69:
                    17:c9:a4:c8:58:9c:4b:bf:fb:0a:f5:16:20:85:b0:
                    05:cd:9a:25:95:32:2e:93:b8:68:35:44:b9:0a:9c:
                    22:f2:87:f4:4e:47:18:88:11:89:13:ec:39:64:2f:
                    e9:ac:0e:89:84:bf:f7:c4:c6:3d:c6:b5:e1:24:6d:
                    5b:38:d1:d9:c9:ab:8b:e1:e8:d8:96:a7:88:1e:4f:
                    6e:dc:a7:53:1e:34:52:ef:0c:2c:92:c5:d4:f6:b1:
                    aa:b1:9e:3f:d4:92:e9:0f:59:9e:ab:9e:17:8b:a2:
                    bf:a9:7f:44:61:8e:97:05:d0:39:04:44:0c:21:49:
                    f0:4a:b5:13:bc:21:9c:7f:eb:38:df:96:0c:00:6d:
                    1e:9b:0c:a1:34:fe:4e:be:86:2a:59:dc:2a:39:f7:
                    65:bc:b8:21:8a:1b:d4:71:20:96:58:ea:4c:12:7e:
                    fa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6E:0E:49:3F:1F:4D:34:67:C3:6E:C3:DE:6C:EA:70:77:94:07:61
            X509v3 Authority Key Identifier:
                keyid:8F:08:66:68:0A:02:E4:BA:0E:BE:1E:8F:22:58:EE:28:1C:D4:3E:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/jwhmaAoC5LoOvh6PIljuKBzUPv4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jwhmaAoC5LoOvh6PIljuKBzUPv4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913B510/2206697A5D8111F091226E31C4F9AE02/9D1CBEB65D8111F0A04DD550C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:b5e0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:ed:66:8d:4d:75:fc:24:81:1d:fe:18:3b:60:df:a9:81:62:
         04:f9:af:d3:88:10:a6:93:f4:60:e0:9d:da:4e:74:c5:47:f9:
         e9:22:18:5f:75:b0:ac:3f:7e:3a:43:f0:82:6b:91:ed:55:3b:
         f8:a5:8d:3a:fd:ca:c3:f8:ad:59:8e:1f:68:39:23:a6:a1:e2:
         96:fe:ac:dc:05:64:7e:2d:5e:38:9e:fb:3a:86:d4:cc:57:de:
         63:91:cc:af:9e:e3:88:3e:fa:06:2a:7a:44:a9:d6:d7:2d:65:
         fe:7c:25:d4:58:c9:ea:63:9a:53:d7:b9:55:4b:72:f5:0a:8e:
         23:d9:44:6f:c6:0c:db:83:c4:d4:20:1e:9e:36:6b:c7:08:74:
         a3:b8:d2:c4:61:11:d0:63:d5:96:ee:6b:7d:7e:de:2e:75:e6:
         99:8a:55:a4:6c:3a:b5:e0:7c:0d:7c:bc:f9:d2:cd:39:99:1c:
         17:d7:e8:f1:d2:61:be:4a:cb:b9:25:75:31:ce:02:22:40:62:
         7a:f5:b6:ac:46:31:12:98:e1:4b:7f:af:35:e1:8b:97:e8:cf:
         cd:30:21:81:14:4e:62:4a:29:9a:8c:2c:2a:01:a4:9b:14:55:
         bf:20:97:92:27:be:3a:30:31:d0:4e:2d:50:f3:d8:7d:f8:d5:
         7c:6d:19:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 08:17:50 2026 by rpki-client