Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/65BB2B42C0E311EEBEF3D409C4F9AE02.roa
File:                     65BB2B42C0E311EEBEF3D409C4F9AE02.roa (raw, json)
Hash identifier:          /r9veCv4skAZXe+hydgErozrlduKgAkmtVc+oV2WYm4=
Subject key identifier:   13:B3:6E:97:A8:D2:71:F0:FC:30:27:3C:31:83:91:D8:86:7A:62:24
Certificate issuer:       /CN=A914A139/serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
Certificate serial:       0CDA
Authority key identifier: A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/65BB2B42C0E311EEBEF3D409C4F9AE02.roa
Signing time:             Wed 14 Oct 2026 19:36:02 +0000
ROA not before:           Wed 14 Oct 2026 19:36:02 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     138640
IP address blocks:        2401:79e0:8000::/34 maxlen: 38
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl
                          rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 04 Nov 2026 18:43:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3290 (0xcda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A139, serialNumber=A25ED8A1427AE93B24D30DCCDFA832538B5008AD
        Validity
            Not Before: Oct 14 19:36:02 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6acfd9a1-0193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:1c:60:56:19:94:46:3e:cb:8d:f5:d6:8b:
                    56:6f:3f:d7:c3:0d:47:18:9b:f3:e7:76:61:80:f3:
                    e4:15:40:a8:53:69:b1:bd:3e:eb:f2:a0:f4:0b:5b:
                    e4:31:07:13:70:fa:74:fd:33:ee:ec:3b:00:ce:ff:
                    f6:0c:63:89:08:1c:eb:42:fa:99:8b:4d:19:c2:06:
                    35:ee:7c:48:79:fa:ce:21:1f:f5:07:09:81:8f:f6:
                    92:48:6f:43:b6:58:7e:11:e6:ef:1d:43:f8:76:b8:
                    7e:2e:24:00:1c:f9:aa:ca:e7:fa:07:42:13:13:93:
                    16:27:8c:09:d3:15:a3:81:d7:81:73:50:f1:ea:d4:
                    aa:f3:f9:d6:c8:28:b1:ee:00:64:df:8c:90:fe:03:
                    e8:ad:90:b0:fe:d7:a4:94:73:1f:4b:be:d9:7c:09:
                    a4:8f:31:b1:78:b1:00:c7:39:c1:94:d2:4a:00:71:
                    17:01:38:76:b2:18:e8:4d:f3:97:d7:d0:bf:f4:75:
                    9a:38:2b:d7:ba:47:45:dc:6d:74:bc:86:04:35:12:
                    82:af:86:6b:1b:f0:f7:64:1a:72:b3:4e:64:83:db:
                    8f:a3:86:8f:dc:00:9a:e4:e8:f3:8c:43:0e:4f:6d:
                    1a:b6:83:1a:e6:d1:85:ed:d4:f7:8e:14:2b:57:55:
                    bb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B3:6E:97:A8:D2:71:F0:FC:30:27:3C:31:83:91:D8:86:7A:62:24
            X509v3 Authority Key Identifier:
                keyid:A2:5E:D8:A1:42:7A:E9:3B:24:D3:0D:CC:DF:A8:32:53:8B:50:08:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/ol7YoUJ66Tsk0w3M36gyU4tQCK0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ol7YoUJ66Tsk0w3M36gyU4tQCK0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A139/EBB9EC6024CA11EAAC2AE586C4F9AE02/65BB2B42C0E311EEBEF3D409C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2401:79e0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         25:64:00:fa:59:86:5e:89:93:40:bf:28:63:c9:1e:ce:52:21:
         a6:04:c0:c1:89:c4:0c:3f:97:6d:8c:49:05:5d:f8:40:b4:67:
         b8:37:f1:2f:d5:01:25:b9:14:2d:df:fd:2a:53:f9:0a:c0:ea:
         64:be:cc:36:af:52:3d:31:60:1f:3d:1c:5e:19:8a:ab:81:a8:
         e8:54:36:75:4a:82:14:61:2c:7a:95:a4:a0:3c:fd:a4:ed:35:
         54:37:1e:c2:57:bc:5c:d6:bc:4f:e1:0d:f1:23:6c:3b:a7:2c:
         ab:39:e8:04:c6:35:11:9a:fe:ae:5a:e8:f2:65:70:51:86:0c:
         0f:46:d3:6d:78:bd:26:3b:64:f7:e0:af:c1:c5:a6:76:8a:e8:
         73:64:df:cd:31:82:96:cc:d8:3b:a5:e4:ce:2b:4d:5f:48:07:
         75:8b:0f:9c:21:7e:d6:0e:77:3d:5f:61:2e:f3:0b:0e:b5:c1:
         46:d9:24:28:a2:5c:72:78:4e:cd:4e:7a:17:9d:4f:a8:78:5c:
         bf:6c:8b:16:4c:15:3d:95:87:63:75:c5:13:55:8a:55:1b:bc:
         b3:5d:de:0d:3c:f0:d8:1a:36:b8:01:31:21:37:ba:b0:fa:1d:
         6a:40:eb:11:37:8d:62:5f:09:a0:cd:5f:0b:52:ce:eb:48:f8:
         25:5d:c8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 19:43:11 2026 by rpki-client