Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6DE12084243F11EDB6C9D62AC4F9AE02.roa
File:                     6DE12084243F11EDB6C9D62AC4F9AE02.roa (raw, json)
Hash identifier:          IteY9j0yM+v8YOfRDfO5Dx2lEmwzpCELmzyUfGgsDYc=
Subject key identifier:   A6:E1:03:0C:F2:99:B3:1E:41:11:BC:EC:C0:D7:BC:EB:F3:77:F9:FD
Certificate issuer:       /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
Certificate serial:       381E
Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6DE12084243F11EDB6C9D62AC4F9AE02.roa
Signing time:             Thu 08 Oct 2026 15:14:51 +0000
ROA not before:           Thu 08 Oct 2026 15:14:51 +0000
ROA not after:            Thu 30 Dec 2027 00:00:00 +0000
asID:                     16509
IP address blocks:        175.29.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl
                          rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 25 Oct 2026 14:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14366 (0x381e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257
        Validity
            Not Before: Oct  8 15:14:51 2026 GMT
            Not After : Dec 30 00:00:00 2027 GMT
        Subject: CN=6ac7b36b-a8e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e9:74:d5:42:63:21:c3:cf:34:cc:ac:53:c2:
                    61:f2:92:7b:85:31:64:44:10:8b:e9:da:f8:01:dc:
                    25:ff:31:6f:80:dd:89:a3:34:cf:64:9a:7d:6d:ed:
                    7c:5b:ef:2b:b4:bd:b1:8f:36:8d:33:31:57:b8:d4:
                    65:91:bc:a1:6e:30:5a:fb:8b:ce:d7:18:6e:75:2a:
                    c1:b5:33:4a:62:c9:16:58:3e:94:70:59:2d:6d:5b:
                    ac:f7:33:fa:d5:b5:5e:4c:8e:0e:b8:a4:29:bd:0c:
                    93:ce:9f:bd:f2:96:3f:a7:61:31:a4:f1:99:0d:6a:
                    72:a0:fb:b4:05:53:e4:39:ff:eb:da:87:26:4b:7d:
                    5b:14:58:e4:d7:b4:22:85:6e:3d:29:89:4d:f7:19:
                    21:ac:b5:4a:ce:1b:b2:0c:3f:c9:03:f5:63:46:b4:
                    98:41:3d:33:3f:ed:26:7f:31:65:fa:15:da:95:10:
                    6c:00:db:20:9a:c8:50:5f:73:fc:af:a3:98:6d:59:
                    6e:75:7f:ab:08:6e:91:d4:6a:40:1c:96:6d:61:81:
                    83:b3:06:95:96:89:e6:5b:26:16:f8:36:7a:00:c3:
                    f7:f2:6a:2b:73:2c:17:51:10:4d:81:ae:42:1a:cd:
                    9a:ff:55:3a:71:b0:77:d7:eb:96:cf:9f:11:33:c2:
                    50:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E1:03:0C:F2:99:B3:1E:41:11:BC:EC:C0:D7:BC:EB:F3:77:F9:FD
            X509v3 Authority Key Identifier:
                keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/6DE12084243F11EDB6C9D62AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.29.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         52:1f:c9:fc:87:8b:b8:de:40:90:47:32:df:b3:59:81:37:e1:
         72:c6:a5:10:6b:6d:95:a5:7e:38:ea:b1:87:19:4b:d3:5b:96:
         39:0a:5e:d8:44:5f:20:f7:c3:d4:13:1b:a0:df:bd:36:e6:aa:
         76:95:56:4f:70:ff:99:28:e8:a4:16:c3:cf:5a:f2:ed:72:80:
         f9:a1:cf:93:ad:b3:39:a9:86:c8:9f:6b:2c:61:50:6e:78:08:
         32:37:82:88:0c:9f:15:e9:30:f2:c0:10:87:bf:e9:40:3b:91:
         5a:4a:27:71:71:be:ae:ff:b7:14:35:c3:bb:27:97:19:8c:08:
         4d:99:ce:4a:d6:0e:d5:42:03:3a:4e:75:15:12:00:c2:fc:80:
         9c:a1:cd:99:a1:b6:02:2b:a9:cc:6d:85:df:ac:a9:94:bc:47:
         6e:08:3e:bb:a1:52:81:9c:55:5b:9a:aa:65:9a:7d:94:e2:0a:
         48:79:78:09:2f:5f:a7:09:10:76:b4:5c:f1:80:cf:ff:40:82:
         86:83:d6:dd:52:c2:a6:3f:89:58:82:f2:3e:47:aa:79:83:d4:
         d1:f7:7d:b1:cc:47:b6:91:f2:14:23:2e:e5:5c:d3:2d:5c:24:
         30:6c:4f:ab:66:92:b3:11:7b:1b:08:6c:53:41:6c:76:2b:83:
         8c:e0:3c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:46:52 2026 by rpki-client