Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/CBD704945F5F11EFB99ABA76C4F9AE02.roa
File:                     CBD704945F5F11EFB99ABA76C4F9AE02.roa (raw, json)
Hash identifier:          +qoTLB4KGdOq7tBr+CT5TB+FxY8uAOKgWCjbTm8+jho=
Subject key identifier:   D1:4A:4E:33:98:41:E5:5C:E4:13:CE:22:42:8F:D2:A3:D1:E5:C8:76
Certificate issuer:       /CN=A9153A6E/serialNumber=D006610EBD682978457DF8ADA291100133910192
Certificate serial:       0F6F
Authority key identifier: D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/CBD704945F5F11EFB99ABA76C4F9AE02.roa
Signing time:             Fri 14 Aug 2026 17:34:56 +0000
ROA not before:           Fri 14 Aug 2026 17:34:56 +0000
ROA not after:            Sun 31 Oct 2027 00:00:00 +0000
asID:                     45275
IP address blocks:        240c::/48 maxlen: 48
                          240c:6::/48 maxlen: 48
                          240c:6:1::/48 maxlen: 48
                          240c:6:3::/48 maxlen: 48
                          240c:f::/48 maxlen: 48
                          240c:f:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl
                          rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 17:45:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3951 (0xf6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153A6E, serialNumber=D006610EBD682978457DF8ADA291100133910192
        Validity
            Not Before: Aug 14 17:34:56 2026 GMT
            Not After : Oct 31 00:00:00 2027 GMT
        Subject: CN=6a7f51c0-2965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f9:5a:96:c8:dc:92:50:f2:ec:e4:8e:e4:98:
                    e1:95:1e:14:e7:3f:ce:97:47:cb:b1:70:72:3b:ec:
                    a5:61:b1:fe:c6:43:4c:98:4f:67:23:d5:cb:1f:0d:
                    e0:c6:2f:3f:a6:17:ec:6d:42:72:31:22:7b:9a:bf:
                    14:49:19:16:8e:e8:79:24:c5:86:93:e6:55:96:5e:
                    86:99:a7:e2:d4:1e:b4:1d:33:79:1b:ca:01:33:8e:
                    54:ff:26:ef:26:1b:ce:21:99:7a:f4:6a:8a:c9:14:
                    d3:e8:14:ed:fd:a1:98:79:b7:b3:d5:03:9c:eb:c4:
                    ce:08:58:f9:ed:c4:4d:55:ba:80:7b:04:2d:ab:18:
                    3e:9d:d7:dd:d4:c4:cf:64:65:45:40:60:3d:f3:bb:
                    2a:3d:d8:ee:f0:76:58:ba:33:a9:b2:5b:7b:a2:60:
                    b2:c8:6f:8f:05:e4:d6:db:3c:f1:4b:e0:8c:5b:7b:
                    ed:54:cb:99:10:e3:1f:a6:24:48:d2:39:8c:08:ef:
                    49:a7:df:6f:74:a4:8a:35:4c:55:fd:b4:ec:46:1c:
                    84:d6:27:9a:be:01:60:56:d6:ad:ab:a0:4c:d9:d6:
                    60:f7:7f:86:f1:2a:3f:31:a1:26:e5:ad:50:35:f6:
                    48:81:51:9d:60:6a:08:d8:1a:45:e1:e2:e3:91:f9:
                    fc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4A:4E:33:98:41:E5:5C:E4:13:CE:22:42:8F:D2:A3:D1:E5:C8:76
            X509v3 Authority Key Identifier:
                keyid:D0:06:61:0E:BD:68:29:78:45:7D:F8:AD:A2:91:10:01:33:91:01:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/0AZhDr1oKXhFffitopEQATORAZI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0AZhDr1oKXhFffitopEQATORAZI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153A6E/79ECE83898BD11E9AC99E74EC4F9AE02/CBD704945F5F11EFB99ABA76C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  240c::/48
                  240c:6::/47
                  240c:6:3::/48
                  240c:f::/47

    Signature Algorithm: sha256WithRSAEncryption
         da:a0:0a:4d:6e:06:44:51:8f:a6:c2:04:57:4f:bc:a7:cd:16:
         59:44:35:79:d2:08:1f:35:fa:09:b3:f5:52:66:af:61:0b:93:
         34:7d:0a:2f:5a:93:3d:68:a5:9c:b3:a2:a9:65:50:c4:e1:87:
         7e:52:c7:b9:34:57:74:ab:54:ce:8f:10:92:c7:f1:5c:0e:64:
         d5:db:0e:5d:5f:65:72:f3:44:03:0c:0f:cf:a1:53:d7:12:65:
         2a:4c:18:55:b9:87:b0:a7:e6:e1:7c:ae:84:3d:55:0e:8a:86:
         28:27:82:d1:fe:dd:70:5c:0f:15:4d:69:39:a6:f1:1c:0e:1a:
         ab:f0:78:8f:ca:5d:78:db:9b:31:94:f2:71:d3:7c:99:c1:ca:
         04:0a:24:cc:cc:97:ef:47:f4:0d:b6:a4:70:d9:9c:fa:ca:9a:
         ef:b9:59:6c:a2:6d:76:9e:2f:3f:9a:6e:a0:c8:20:83:41:59:
         1a:5a:06:91:b3:13:0a:90:e2:bd:9f:15:c3:01:94:9c:41:e1:
         7c:c5:23:6c:3d:d4:83:d4:f4:21:b7:86:91:14:3e:10:40:7d:
         30:09:b3:fc:34:0c:41:28:8a:90:9c:31:20:d9:f5:d8:4a:3e:
         c7:ba:3f:1f:57:5c:57:13:4f:12:66:bd:76:c1:b6:d1:28:0f:
         bb:84:45:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 17:56:34 2026 by rpki-client