Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/DB7F68169BC411F1A594B11D5711F970.roa
File:                     DB7F68169BC411F1A594B11D5711F970.roa (raw, json)
Hash identifier:          MzOblxL2EO6eoY/hF+w+6TErc2kgqiCc+Od6pRCAPt0=
Subject key identifier:   BC:44:9D:BF:FD:FF:10:17:80:6A:A1:FC:6B:6F:56:67:9F:06:F0:DF
Certificate issuer:       /CN=A9143DE2/serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA
Certificate serial:       0A7D
Authority key identifier: DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/DB7F68169BC411F1A594B11D5711F970.roa
Signing time:             Wed 19 Aug 2026 11:55:22 +0000
ROA not before:           Wed 19 Aug 2026 11:55:22 +0000
ROA not after:            Tue 02 Mar 2027 00:00:00 +0000
asID:                     134798
IP address blocks:        49.0.6.0/24 maxlen: 24
                          49.0.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl
                          rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 11:59:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2685 (0xa7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143DE2, serialNumber=DF6D002BBCABA250D2AE6B4454E3CBFD67D2C7EA
        Validity
            Not Before: Aug 19 11:55:22 2026 GMT
            Not After : Mar  2 00:00:00 2027 GMT
        Subject: CN=6a8599aa-0c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e2:58:73:cb:da:99:db:60:80:a6:dc:9f:cc:
                    8a:f8:7b:8e:cb:cd:26:3d:63:99:64:cb:a7:53:ce:
                    60:67:52:3d:2a:c6:fd:e3:a9:8d:46:39:a0:3e:8a:
                    f9:3f:70:dd:0a:02:a6:88:20:a7:46:83:c5:e5:87:
                    de:bd:9d:ae:e9:bd:da:dc:21:d6:f9:47:6b:de:09:
                    d0:b3:42:a8:1c:75:fa:eb:0f:bd:71:d7:4e:5f:f3:
                    2f:31:47:a3:3d:4c:81:6d:e6:be:b3:c8:fb:d9:b7:
                    e7:a5:59:b3:36:02:c2:c8:35:d7:96:44:f5:fa:71:
                    47:eb:24:f4:63:be:84:db:62:25:65:f3:2d:87:ee:
                    7f:0e:bf:b8:ac:4c:87:55:75:dc:c3:d7:7f:b6:66:
                    cf:9e:66:50:88:a0:14:42:96:93:ec:00:00:ca:21:
                    69:b1:f7:f7:59:72:91:c6:7c:fa:85:e9:25:f0:37:
                    42:f9:8c:4e:b1:ff:a1:51:11:c4:fa:71:f9:80:4c:
                    be:03:d7:1b:c8:86:f4:dd:81:43:a8:1d:01:13:9e:
                    92:1b:f1:97:b3:1c:8e:68:74:c6:33:d9:73:e6:23:
                    d9:8d:e3:2f:a9:8b:80:5d:2a:ca:4f:01:3e:16:30:
                    e4:17:dd:46:c1:a4:02:c0:5f:11:87:be:8f:34:f3:
                    0e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:44:9D:BF:FD:FF:10:17:80:6A:A1:FC:6B:6F:56:67:9F:06:F0:DF
            X509v3 Authority Key Identifier:
                keyid:DF:6D:00:2B:BC:AB:A2:50:D2:AE:6B:44:54:E3:CB:FD:67:D2:C7:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/320AK7yrolDSrmtEVOPL_WfSx-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/320AK7yrolDSrmtEVOPL_WfSx-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143DE2/D218DD528E9711EA8C2DE537C4F9AE02/DB7F68169BC411F1A594B11D5711F970.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.0.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3e:d0:21:c2:7f:14:1c:95:85:50:e8:98:f3:d9:8b:ca:40:8a:
         65:98:7b:d8:7a:ec:6a:5e:99:5c:51:e0:f1:d2:05:a0:68:3f:
         75:f3:4b:51:c9:41:1a:c5:99:0b:6d:4e:ac:92:88:50:7f:6b:
         a2:12:e9:f4:12:72:d6:5d:25:0e:ea:71:ae:6d:ce:8e:93:dd:
         5b:1d:37:5e:e6:05:3d:19:4d:75:9f:f5:79:4a:d9:a1:3a:79:
         52:73:ae:a8:03:f1:7b:cb:c2:b5:fe:25:bc:25:b0:15:65:99:
         4b:77:23:be:ba:7d:d4:02:8e:79:aa:95:dc:66:ef:e8:db:c8:
         cc:da:4f:51:8c:3a:9c:ab:ae:af:3c:1c:44:95:e1:5f:e0:5a:
         90:1a:52:17:6b:65:2b:dd:c8:b2:0a:2d:32:43:17:12:c7:89:
         5d:04:6a:aa:15:00:67:e1:0d:26:6a:55:0f:e8:ad:c7:50:b7:
         ab:aa:e6:98:07:32:f5:75:72:97:18:64:3d:2b:47:88:bd:d6:
         e2:8d:f4:e9:ed:d5:cf:c8:43:2c:0f:84:3e:70:cb:e0:a4:ea:
         dd:8d:bb:7c:bf:58:f6:ad:9f:ba:c1:15:20:c0:0e:48:1f:4a:
         a5:66:5f:1f:f1:a1:46:a0:fa:03:60:f4:ee:0d:97:17:95:2e:
         09:24:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 15:11:39 2026 by rpki-client