Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/061796780C2511F199949558073D8C67.roa
File:                     061796780C2511F199949558073D8C67.roa (raw, json)
Hash identifier:          uRUYqsJs7MeiZLExijJUIf3NwkYbLKnl/Zn236kifLY=
Subject key identifier:   1E:A2:BF:7B:F8:48:0D:C6:B0:72:E8:44:B4:75:DB:61:3C:A8:2C:13
Certificate issuer:       /CN=A913EFAB/serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
Certificate serial:       0640
Authority key identifier: 9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/061796780C2511F199949558073D8C67.roa
Signing time:             Mon 24 Aug 2026 23:43:59 +0000
ROA not before:           Mon 24 Aug 2026 23:43:59 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     133369
IP address blocks:        2402:41a0:6::/48 maxlen: 48
                          2402:41a0:7::/48 maxlen: 48
                          2402:41a0:8::/48 maxlen: 48
                          2402:41a0:9::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl
                          rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 22:45:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1600 (0x640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913EFAB, serialNumber=9F2BFD7D800CFA13E9048AE100B4851430126FD3
        Validity
            Not Before: Aug 24 23:43:59 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a8cd73e-fe5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:17:aa:ef:96:12:36:23:4a:76:31:41:1a:
                    8e:09:30:b1:71:99:07:21:83:45:18:8d:88:5a:6a:
                    d9:51:46:6c:1e:a0:33:84:5c:0c:08:db:9c:20:50:
                    1f:ec:82:3d:dc:81:79:81:d7:23:ab:74:23:38:e9:
                    52:ed:75:b4:4d:9d:61:d0:0a:ba:a3:4a:44:3f:dd:
                    04:51:8b:8a:0b:54:96:1a:4a:4d:65:2d:d5:7b:7f:
                    d6:d7:95:9c:57:2e:a1:f2:f2:68:cc:f2:2b:d2:99:
                    12:17:b0:b7:19:e1:07:c6:27:5e:8a:10:8b:60:20:
                    3a:8f:88:ea:0c:c5:d7:69:e1:46:40:37:49:e6:39:
                    0f:89:6a:07:14:c8:8b:bd:16:7e:0b:76:7b:4f:6a:
                    d7:ba:57:e4:a2:6f:15:ca:db:d3:80:f5:37:89:82:
                    59:1b:3e:7f:32:bf:79:c1:c8:4c:39:f6:ed:82:db:
                    95:dc:a7:2f:32:47:0f:70:bf:3f:e7:86:7e:0c:2d:
                    bd:7a:fe:0b:51:ee:9f:e4:79:2e:68:37:c0:f2:c1:
                    cc:10:9b:b1:a6:1f:b3:ba:84:ce:d7:ec:17:12:c6:
                    0e:77:f0:4d:5d:5c:18:fa:c1:9d:53:60:14:d7:d8:
                    d2:33:56:aa:50:b0:61:3e:42:a2:77:e8:df:c1:9c:
                    20:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A2:BF:7B:F8:48:0D:C6:B0:72:E8:44:B4:75:DB:61:3C:A8:2C:13
            X509v3 Authority Key Identifier:
                keyid:9F:2B:FD:7D:80:0C:FA:13:E9:04:8A:E1:00:B4:85:14:30:12:6F:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/nyv9fYAM-hPpBIrhALSFFDASb9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nyv9fYAM-hPpBIrhALSFFDASb9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913EFAB/E82D06FE057411ECA242C57FC4F9AE02/061796780C2511F199949558073D8C67.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:41a0:6::-2402:41a0:9:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         42:2c:64:4c:95:f8:07:8a:a8:19:13:bb:20:af:8f:6a:05:25:
         7e:6f:26:9c:72:86:49:11:76:77:5e:74:4e:e8:89:bc:73:cb:
         fc:3f:57:5a:99:22:17:f9:1a:06:85:51:ea:8e:ff:5e:04:ea:
         36:b7:d8:a5:78:64:24:a2:ee:6f:ac:84:75:ae:f0:51:ba:43:
         ea:be:fd:96:94:26:b0:68:76:ae:ce:30:ff:91:62:c8:d6:0e:
         70:2b:53:d2:4f:ad:f8:1f:46:b8:8f:c6:ae:e3:0a:b4:5d:1a:
         5f:70:93:64:51:03:81:aa:c3:eb:de:fa:dd:39:c2:a3:81:33:
         02:8d:80:aa:31:ee:bb:df:0e:8e:f8:ca:90:e9:75:d0:b7:51:
         df:d8:0f:2b:01:5d:70:0f:40:ef:31:20:b9:8b:c2:ec:15:2d:
         4e:62:12:88:16:05:56:73:12:e2:54:ae:d9:11:53:94:0a:ff:
         2e:29:50:c2:f7:87:05:9b:8a:fb:0e:51:55:e9:3a:76:c8:91:
         eb:36:ee:33:b2:ea:91:75:f3:36:ee:4b:88:c2:b9:2d:17:3e:
         3a:e3:bd:df:13:29:99:87:c1:68:e8:42:b8:80:59:9b:9b:f2:
         58:17:29:a4:b3:3c:7e:c6:d9:d1:c0:c8:28:b8:09:54:9b:34:
         c1:0e:38:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 18:37:15 2026 by rpki-client