Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/96A61404AAA911EBA223275EC4F9AE02.roa
File:                     96A61404AAA911EBA223275EC4F9AE02.roa (raw, json)
Hash identifier:          hBwoDV/CCJPQe7cod3XDY6bHhDs32TYcfQFL1mgeELo=
Subject key identifier:   29:88:B2:B1:ED:AF:5E:1A:D0:9B:EF:DF:54:5F:22:E3:4B:A0:86:9E
Certificate issuer:       /CN=A914845D/serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
Certificate serial:       0717
Authority key identifier: AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/96A61404AAA911EBA223275EC4F9AE02.roa
Signing time:             Tue 28 Jul 2026 22:45:06 +0000
ROA not before:           Tue 28 Jul 2026 22:45:06 +0000
ROA not after:            Sat 28 Nov 2026 00:00:00 +0000
asID:                     141704
IP address blocks:        2001:df5:ee80::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl
                          rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 22:22:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1815 (0x717)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914845D, serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91
        Validity
            Not Before: Jul 28 22:45:06 2026 GMT
            Not After : Nov 28 00:00:00 2026 GMT
        Subject: CN=6a6930f1-bce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:51:d5:8b:3b:a1:cb:72:22:cf:84:00:6c:0c:
                    a6:72:03:9f:93:cb:48:01:ae:4a:d4:e9:8e:9d:ce:
                    b0:e2:87:a5:77:cd:dc:48:59:d9:19:ea:0d:ed:5c:
                    53:ef:8f:30:ab:05:46:35:fc:55:98:46:cc:ba:42:
                    ad:6f:09:4a:48:47:f4:b3:2f:85:78:f3:87:fc:da:
                    06:3f:d1:b4:3b:79:36:14:88:ef:97:3f:50:db:1a:
                    cb:2c:87:55:34:2f:e8:96:37:e2:7b:2c:3f:ff:b0:
                    ec:ed:ac:23:47:23:7d:be:b6:1f:d0:46:7f:6b:33:
                    d8:cb:f8:d2:93:11:ed:ed:ac:8a:cc:de:ab:84:33:
                    fd:81:e7:8b:d9:89:a4:90:07:0c:ea:da:03:d0:c6:
                    ca:54:01:f0:af:f3:81:cd:75:4d:e3:fb:a2:5f:ba:
                    3f:b5:0c:e8:f0:3b:d5:87:85:c5:fb:f8:d2:4a:83:
                    75:1c:43:75:10:41:2c:e3:79:d5:22:17:6f:23:a6:
                    da:52:8f:40:5d:70:72:bc:18:61:dd:a7:e7:e4:69:
                    89:43:7f:de:06:13:fa:c0:93:e0:ba:0c:37:2a:60:
                    96:87:b9:d0:a5:5c:a2:ae:98:f2:86:59:b4:89:e6:
                    8b:cd:ad:a4:71:8c:e2:d7:28:1b:c5:cf:7f:71:c8:
                    a7:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:88:B2:B1:ED:AF:5E:1A:D0:9B:EF:DF:54:5F:22:E3:4B:A0:86:9E
            X509v3 Authority Key Identifier:
                keyid:AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/96A61404AAA911EBA223275EC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:ee80::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:02:e2:ea:bc:0a:e5:f4:c9:4e:3d:72:3f:71:f1:4b:ac:fd:
         7c:a8:af:5d:75:b2:71:7d:cd:05:39:78:35:6b:ff:60:c5:05:
         18:ae:a6:83:59:f4:d2:7e:1c:e6:a3:bc:55:be:d4:11:96:4f:
         a1:de:98:87:99:2b:55:ec:b0:e8:dd:11:39:b0:78:1b:84:d5:
         a0:ef:77:ee:dd:29:16:14:4d:ac:d8:51:cc:ef:80:73:84:6d:
         34:0b:d8:db:22:69:1c:b8:b4:4e:fe:c5:fa:77:f8:23:0c:51:
         b1:9a:0c:78:71:45:28:72:d7:59:4b:72:39:6e:bf:05:70:16:
         cf:38:65:de:51:e1:6d:e6:86:ce:8a:44:bf:f8:cd:34:94:25:
         1d:56:2b:18:eb:a5:01:3e:7c:0c:b8:f5:30:b5:be:1d:4b:f0:
         58:0e:7f:00:d9:dc:0b:43:b4:4e:e8:54:b7:c2:ea:94:4a:d0:
         35:73:85:3c:e6:2a:c0:1e:47:35:a9:89:32:6e:cd:81:33:c2:
         75:4c:f3:e1:c8:38:04:54:08:21:2d:3b:aa:75:7e:ce:9a:57:
         a7:47:de:32:c9:40:ef:de:a1:41:1f:03:a4:e3:75:50:55:e0:
         55:99:07:e0:6f:f7:3d:4c:8f:77:ae:9d:7c:d2:bd:27:84:f1:
         5d:b5:4d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:07 2026 by rpki-client