Route Origin Authorization

$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1C1E48F42C7511EF91005F2AC4F9AE02.roa
File:                     1C1E48F42C7511EF91005F2AC4F9AE02.roa (raw, json)
Hash identifier:          fLAof7EN40ztkzN10YcbHQELHkhYt0IIW6Znw2IZaqs=
Subject key identifier:   37:7A:6D:E9:B3:60:E7:D4:2D:8A:D3:34:23:85:FA:24:AF:56:AB:20
Certificate issuer:       /CN=A915A0CD/serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
Certificate serial:       110A
Authority key identifier: 38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1C1E48F42C7511EF91005F2AC4F9AE02.roa
Signing time:             Fri 28 Aug 2026 19:39:47 +0000
ROA not before:           Fri 28 Aug 2026 19:39:47 +0000
ROA not after:            Thu 30 Sep 2027 00:00:00 +0000
asID:                     149495
IP address blocks:        2403:7980:f000::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl
                          rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 17 Sep 2026 19:30:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4362 (0x110a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915A0CD, serialNumber=38193720821E07D6918E3A79FBE0823C6732E264
        Validity
            Not Before: Aug 28 19:39:47 2026 GMT
            Not After : Sep 30 00:00:00 2027 GMT
        Subject: CN=6a91e403-0696
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:f1:5f:78:8e:4f:a1:0b:fe:b1:f3:49:30:
                    6a:2b:66:4f:71:56:ad:ef:a3:ff:39:e9:b5:c9:ac:
                    10:f6:c6:c4:d1:5c:d0:9b:6b:f2:f5:d1:bb:c0:58:
                    c7:fa:e1:2e:b3:37:fd:f3:aa:46:b1:5e:ce:70:f2:
                    67:65:09:eb:06:b5:a8:b2:5d:65:c5:e6:f0:22:71:
                    5e:dd:66:7e:8d:b8:bd:e6:ac:16:8d:73:ae:06:b5:
                    1f:34:99:fc:27:c1:ed:44:c1:09:4e:8f:74:31:ef:
                    b7:1d:55:f5:00:cf:e1:e1:b6:a7:03:ad:8e:1e:35:
                    ae:ce:b8:76:c9:2c:e1:60:c0:cb:ca:d7:ee:ae:11:
                    3e:06:b1:ae:13:7c:02:d2:77:47:74:50:47:b4:1a:
                    b5:3a:3a:f3:5e:5c:c6:77:d1:5f:93:58:3a:7d:10:
                    ca:b3:da:ed:cd:46:7c:37:08:01:18:dd:f4:65:58:
                    4e:60:3a:ad:88:20:1b:9c:ec:df:61:63:f9:58:0c:
                    90:ff:9f:62:32:27:fd:b6:d5:09:21:75:27:c5:7a:
                    6c:9a:b7:71:b1:8e:43:9c:f9:56:ed:18:58:3c:59:
                    00:ca:cd:e1:4d:f3:4b:a9:65:67:ed:cf:99:53:7e:
                    51:99:1b:35:19:c8:2f:61:1a:82:47:40:f5:68:00:
                    4a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7A:6D:E9:B3:60:E7:D4:2D:8A:D3:34:23:85:FA:24:AF:56:AB:20
            X509v3 Authority Key Identifier:
                keyid:38:19:37:20:82:1E:07:D6:91:8E:3A:79:FB:E0:82:3C:67:32:E2:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/OBk3IIIeB9aRjjp5--CCPGcy4mQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OBk3IIIeB9aRjjp5--CCPGcy4mQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A0CD/46723F1E89EC11EA81C04F1EC4F9AE02/1C1E48F42C7511EF91005F2AC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7980:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         53:d0:cb:35:a6:b6:43:b0:61:5e:f0:3b:2e:70:a8:8b:95:9b:
         1a:92:85:55:98:b1:39:0e:5d:85:b1:c0:88:f9:f9:b7:7a:55:
         26:a9:2e:a7:55:68:1b:2e:11:de:79:c6:d1:f3:33:74:fb:70:
         b5:d2:1a:d9:c3:85:de:38:34:b4:45:db:0c:da:ec:84:bd:5c:
         8f:90:0e:07:be:e4:94:31:51:b8:14:91:c7:91:64:6b:c9:ae:
         71:6e:b9:b6:b4:19:b1:d0:ad:13:54:17:fc:f3:77:5b:4a:b2:
         bd:be:cb:c4:2c:dd:c3:12:0a:f8:5a:cd:8a:9a:f9:7c:36:8d:
         de:b2:57:ff:fc:ca:6c:bf:f1:cf:e5:fc:4a:4a:15:c7:19:cf:
         59:36:57:81:93:53:be:25:0a:68:89:c7:88:2e:ee:c5:f6:69:
         90:8f:3d:16:be:2c:41:69:ee:a5:d4:94:7c:c7:84:e8:1f:d2:
         59:91:fc:91:f9:55:24:9e:a4:91:cb:a6:08:a6:06:b1:b1:07:
         ac:59:29:ac:83:1e:2d:c8:07:c4:8d:a3:70:f5:c4:06:5c:58:
         61:3e:3c:61:9c:6f:cc:87:e7:07:fe:98:6e:2e:70:e5:cc:4f:
         d8:96:39:9b:72:57:7f:30:36:c3:4b:83:1b:af:43:c0:cf:a5:
         43:ac:12:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 08:37:58 2026 by rpki-client