Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/38C33A60AF8811E98C7EFC2AC4F9AE02.roa
File:                     38C33A60AF8811E98C7EFC2AC4F9AE02.roa (raw, json)
Hash identifier:          NCFBiZHaehtvMaqnICMDowO1gPM+WtxjJGz37rHfZLQ=
Subject key identifier:   D9:35:35:CB:9E:19:6D:6D:4F:02:84:C8:3D:D0:72:37:FD:A0:49:C1
Certificate issuer:       /CN=A91402DC/serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
Certificate serial:       143C
Authority key identifier: C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/38C33A60AF8811E98C7EFC2AC4F9AE02.roa
Signing time:             Thu 06 Aug 2026 17:33:27 +0000
ROA not before:           Thu 06 Aug 2026 17:33:27 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     132253
IP address blocks:        2406:3000:53::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl
                          rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 17:03:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5180 (0x143c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402DC, serialNumber=C2B9F5F3C68C576727239B92A93B36297D1B1653
        Validity
            Not Before: Aug  6 17:33:27 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a74c567-4e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d9:2b:9a:0b:78:bf:2a:90:39:97:a7:61:31:
                    38:9d:87:16:8d:bf:e9:5a:b5:33:b6:08:97:65:48:
                    a7:6e:41:fe:77:3a:ee:a2:70:d0:3b:51:04:a5:a5:
                    30:1a:12:00:d8:b3:05:5d:24:0c:75:fc:b5:ec:ac:
                    c4:f0:20:45:61:70:85:c7:44:74:22:0d:99:cc:7c:
                    ec:ce:fd:53:f0:70:83:f0:54:c0:e0:1e:08:4a:b7:
                    f6:c9:0e:c4:ec:bf:e2:97:9d:1a:e9:23:76:d8:ae:
                    5f:d9:4f:67:7e:66:fe:15:92:73:be:c2:82:cc:14:
                    c5:41:18:a2:9e:f6:a7:99:ab:09:6c:28:b5:32:8a:
                    ec:c3:cf:01:04:02:af:f6:86:73:49:5b:b4:fa:56:
                    48:eb:7c:99:a8:09:42:de:50:75:0b:59:c9:b5:2f:
                    8d:fd:fa:b1:17:b4:8a:71:e4:07:79:20:96:b8:73:
                    36:80:44:d8:c6:cb:ae:c6:ac:f0:bb:fc:99:67:08:
                    b7:b0:aa:5d:b8:37:92:02:75:fd:61:77:a5:16:40:
                    fb:4f:48:38:3c:c2:76:3d:18:70:b6:93:7d:00:6f:
                    2c:24:bd:0e:32:f7:37:ed:5b:d7:a6:bf:d3:c4:e6:
                    65:c7:8d:6b:c6:cb:2e:37:87:c9:81:dc:c5:e2:18:
                    b1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:35:35:CB:9E:19:6D:6D:4F:02:84:C8:3D:D0:72:37:FD:A0:49:C1
            X509v3 Authority Key Identifier:
                keyid:C2:B9:F5:F3:C6:8C:57:67:27:23:9B:92:A9:3B:36:29:7D:1B:16:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/wrn188aMV2cnI5uSqTs2KX0bFlM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wrn188aMV2cnI5uSqTs2KX0bFlM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402DC/2D51AF42FD3E11E888C53944C4F9AE02/38C33A60AF8811E98C7EFC2AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:3000:53::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:9b:fb:55:f8:0d:2d:ec:cd:81:e2:60:ed:a6:a8:70:a8:d9:
         56:71:43:2c:4b:52:fe:14:af:d4:35:8f:3e:76:b1:46:5f:15:
         07:5f:36:03:d2:8d:92:92:aa:b5:84:d9:8e:d2:7a:86:49:72:
         5a:d8:92:45:5f:08:63:85:d8:3f:a9:59:04:cb:12:ea:f4:8d:
         58:bf:57:6f:b7:e6:4c:9d:bc:e3:10:2f:58:22:bc:1f:ca:f5:
         45:fb:b1:af:23:f1:b7:f8:f8:6b:cc:71:09:b3:e3:86:37:b5:
         14:4a:9f:24:b8:d0:4a:95:07:dc:5c:23:b3:8e:2d:a6:33:fd:
         a9:f1:7d:b9:f1:df:9f:eb:47:1e:f3:e9:84:3a:86:a2:45:46:
         26:3d:8a:0e:33:5f:8d:a4:c9:15:9a:6c:6c:8e:9c:28:5d:2b:
         23:54:a9:34:df:b0:fc:5a:53:2d:9e:e6:a1:41:16:a2:f3:00:
         3e:17:fe:a5:53:0c:ad:f0:1d:76:dc:61:39:23:ea:6a:62:eb:
         c3:be:01:bc:3e:19:8b:6d:b4:72:88:ee:f4:66:3c:5f:f7:51:
         a1:2a:79:af:54:43:24:60:14:12:6e:d0:d8:de:a5:31:2f:9e:
         41:b9:af:88:97:6a:96:aa:98:2e:1c:c1:6b:82:8a:92:dd:0b:
         28:3f:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 09:03:10 2026 by rpki-client