Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6A7CCD6278F111F098F20460C4F9AE02.roa
File:                     6A7CCD6278F111F098F20460C4F9AE02.roa (raw, json)
Hash identifier:          1cCJNsAn756HRixzPyGj5TFqUgKFZmHZ4Ejl5zEoFJI=
Subject key identifier:   89:B8:D7:AC:B2:15:89:F3:0A:CC:CA:FE:BF:3D:63:C7:CD:17:E6:E9
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       382D
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6A7CCD6278F111F098F20460C4F9AE02.roa
Signing time:             Thu 08 Oct 2026 15:15:24 +0000
ROA not before:           Thu 08 Oct 2026 15:15:24 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     401838
IP address blocks:        175.29.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 27 Oct 2026 14:28:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14381 (0x382d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 15:15:24 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac7b38c-1df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:df:0c:cd:52:90:ed:1b:e0:1d:d8:a6:a7:
                    6b:4d:f2:9f:ad:24:f1:94:14:04:c3:2b:a7:6c:7c:
                    9f:c6:80:6a:ae:50:f0:78:7b:ec:03:04:93:e5:c0:
                    1a:5e:81:2c:4b:01:d3:cd:48:50:e5:e4:be:ed:8e:
                    ac:03:14:ee:ef:3e:d3:a1:30:83:24:ad:4d:8f:ec:
                    5d:f6:6b:e1:4d:2f:c4:76:87:72:b3:6c:c4:f3:e3:
                    6d:a6:d5:dc:1a:1d:56:e9:d6:81:05:fc:fe:db:01:
                    ee:23:96:c9:ae:49:b1:fd:a8:c5:19:98:4e:9c:44:
                    22:80:3b:4b:9a:12:97:73:82:53:5d:3c:9f:70:55:
                    04:3e:74:aa:d0:04:c2:3a:37:32:88:06:5f:2b:ca:
                    de:b3:6b:57:3c:6f:d8:c4:86:8e:b2:88:ab:c6:2d:
                    4b:a5:2a:cd:5f:4a:51:25:f0:5a:8a:39:c0:43:28:
                    de:d6:7d:e2:0d:08:08:5d:e6:a1:4e:c2:7d:ac:54:
                    98:6b:74:17:34:5f:17:26:10:77:51:0e:1f:07:c7:
                    fc:d1:83:2f:bd:cf:d8:83:7d:cd:1d:ba:99:70:9a:
                    f6:10:1b:eb:bb:81:00:95:f5:61:78:3a:83:85:7e:
                    4d:35:7c:14:cb:30:3b:d9:0d:ea:57:7c:33:2b:72:
                    23:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B8:D7:AC:B2:15:89:F3:0A:CC:CA:FE:BF:3D:63:C7:CD:17:E6:E9
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6A7CCD6278F111F098F20460C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:c6:73:19:f2:1d:ca:a5:b7:11:64:e4:c7:29:d5:3f:b3:c1:
         5f:86:82:c5:5f:bb:62:2a:32:ce:6c:1d:e4:34:9c:ec:39:22:
         e2:5e:7f:43:f3:67:a7:d9:59:e4:8c:ed:56:3c:b7:42:ba:9e:
         32:c0:36:dc:2d:4a:b7:c9:eb:1a:76:1f:fb:d3:63:a0:d5:86:
         1f:03:d8:61:7b:c9:a7:96:ef:dd:21:58:ae:ee:bf:5b:a6:68:
         ff:7b:9c:5e:95:31:1a:f5:7c:6d:3a:39:17:c5:9b:39:ea:90:
         b1:a0:94:a3:f5:33:a2:fc:0b:79:b7:ca:bf:b7:5d:98:a9:6d:
         4e:89:8f:6d:89:54:08:9d:76:09:7a:e3:f3:0e:2f:a4:62:c2:
         0d:5e:4d:d9:90:96:f5:09:30:46:35:8e:03:80:af:49:c8:0d:
         1e:fe:1d:a9:b5:d5:e1:48:df:1d:2d:b2:9a:01:3e:28:87:b0:
         93:f9:d5:bf:d4:1f:50:8d:5f:fb:a3:d4:b0:9b:f0:a8:21:7d:
         2a:89:1a:d5:ea:df:9a:f2:6f:c7:47:9e:8e:df:f2:2b:52:a1:
         9c:12:1d:9c:33:59:9f:19:b7:48:5b:d7:f9:57:18:e6:86:f1:
         54:e6:22:ff:21:f4:e6:b8:99:e5:68:37:f5:96:9b:09:83:00:
         ea:4e:de:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:51:23 2026 by rpki-client