Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/A27297A85E7C11F1BE1DCCAC1A7AAC22.roa
File:                     A27297A85E7C11F1BE1DCCAC1A7AAC22.roa (raw, json)
Hash identifier:          kY8evhLvNqOxvi6zzC4UphXoibT3vvujN0fbVAHwYYs=
Subject key identifier:   AA:7F:B3:6C:92:22:1B:42:48:36:1E:2F:F1:6F:C0:4C:5E:E0:55:D8
Certificate issuer:       /CN=A91447E7/serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
Certificate serial:       036B
Authority key identifier: E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/A27297A85E7C11F1BE1DCCAC1A7AAC22.roa
Signing time:             Sat 11 Jul 2026 02:27:33 +0000
ROA not before:           Sat 11 Jul 2026 02:27:33 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     17626
IP address blocks:        2001:df0:c940::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl
                          rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Jul 2026 01:58:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 875 (0x36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91447E7, serialNumber=E77B87146805E2604B49EEF2B4A438CBD2A51424
        Validity
            Not Before: Jul 11 02:27:33 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a51aa15-75b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c2:c9:1c:f8:60:d3:5e:ca:40:75:ff:59:54:
                    07:7f:45:90:ec:e9:8c:3f:9d:7e:c5:89:94:6d:2b:
                    f7:41:7a:27:8a:e8:22:fa:c4:6b:cf:3f:91:6e:af:
                    70:2f:b5:c3:5c:41:11:8e:4e:98:25:b6:eb:5a:1e:
                    a1:c5:77:23:c4:84:7f:83:63:d4:c0:05:2d:f9:2a:
                    33:10:86:03:cd:bd:35:c3:c2:9b:d0:b6:08:9f:1f:
                    fb:72:7c:d8:77:2b:ef:b0:bd:3e:6e:ed:d7:fe:95:
                    c7:44:c0:ba:ef:d9:79:0e:32:33:df:6a:a6:34:73:
                    b0:ab:78:97:14:42:84:96:60:76:52:de:79:db:dc:
                    31:07:5e:d8:b8:43:4f:aa:21:6b:2f:ca:ba:88:23:
                    d9:f4:a7:79:43:3f:1a:bc:14:ba:23:8a:7a:cb:46:
                    ce:61:c5:8d:8a:4d:75:6d:90:55:cd:9b:bb:92:37:
                    08:71:7e:e2:53:a4:53:9d:4e:40:f2:fa:1e:31:05:
                    36:ea:91:fb:f5:69:fb:5b:09:d5:ca:5d:e0:19:5a:
                    6a:2d:93:f0:83:56:6b:7a:95:b2:64:fc:8a:92:ed:
                    8b:b8:39:e5:98:e3:01:7b:3c:e9:8b:ee:1c:78:3c:
                    ec:ab:b3:3c:a4:07:65:65:98:84:9c:1f:df:00:3c:
                    b0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7F:B3:6C:92:22:1B:42:48:36:1E:2F:F1:6F:C0:4C:5E:E0:55:D8
            X509v3 Authority Key Identifier:
                keyid:E7:7B:87:14:68:05:E2:60:4B:49:EE:F2:B4:A4:38:CB:D2:A5:14:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/53uHFGgF4mBLSe7ytKQ4y9KlFCQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91447E7/FE4469D2130111EDADCE5C7DC4F9AE02/A27297A85E7C11F1BE1DCCAC1A7AAC22.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:c940::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:ad:6e:a6:ff:70:35:9a:c3:52:9e:ed:0e:d8:f8:69:f6:5a:
         3e:cf:f8:22:2a:f4:3d:4e:6b:32:7e:2e:1a:41:71:51:5e:a2:
         3d:07:b3:aa:9b:34:48:4f:52:1e:a1:28:65:1d:de:3a:f0:fa:
         4c:84:8e:c7:33:08:6f:dc:a7:7a:fd:a1:7f:5a:9c:c1:6d:f4:
         16:9e:8f:52:75:0a:c6:ae:4f:61:88:07:a6:be:b4:4f:56:b7:
         cd:86:8a:cb:fa:bf:49:c2:69:5d:18:1b:de:8e:43:ef:46:b5:
         6b:fe:0c:f7:25:b2:4e:e1:50:42:b9:7e:e7:e0:b2:46:da:82:
         89:ad:53:4c:ac:58:00:45:e7:e6:1b:20:f3:f6:8e:0d:7a:6e:
         63:0a:00:2f:d4:a3:9b:54:3b:0d:e1:af:16:ce:49:b6:e2:7e:
         b0:7a:0d:bb:82:4f:cc:e2:c6:bf:6c:17:82:a4:48:f8:2b:b5:
         f1:83:aa:91:65:fc:61:46:40:cd:61:35:28:2a:69:b3:9f:3c:
         af:11:8c:02:1e:67:2f:06:52:ba:41:c7:21:64:3c:6d:7a:70:
         86:22:17:6f:00:35:1b:6f:33:0c:ef:b1:0f:d2:56:95:0d:b5:
         c2:63:ae:56:d9:d2:0b:48:b8:6a:97:37:9b:fc:20:3e:d0:cb:
         05:1f:b4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:10 2026 by rpki-client